@alwaysmeticulous/cli 2.326.0 → 2.327.0

package/dist/commands/onboard/setup-agent-integrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-agent-integrations.js","sources":["../../../src/commands/onboard/setup-agent-integrations.ts"],"sourceRoot":"","names":[],"mappings":";;;;;;;;AAAA,iDAA0C;AAC1C,2BAAmE;AACnE,2BAA4B;AAC5B,+BAAuC;AACvC,kDAA0B;AAC1B,+DAA0D;AAC1D,2CAA4C;AAC5C,iDAKwB;AAEX,QAAA,kBAAkB,GAAG,mCAAmC,CAAC;AAEtE;;;GAGG;AACU,QAAA,uBAAuB,GAAG,eAAe,CAAC;AAEvD,oEAAoE;AACvD,QAAA,eAAe,GAAG;IAC7B,KAAK;IACL,yBAAyB;IACzB,SAAS;IACT,GAAG;IACH,SAAS;IACT,aAAa;IACb,SAAS;IACT,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,IAAI;CACI,CAAC;AAEX,iFAAiF;AACpE,QAAA,uBAAuB,GAAG;IACrC,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,kBAAkB;IAClB,WAAW;IACX,kBAAkB;IAClB,oBAAoB;CACZ,CAAC;AAEJ,MAAM,sBAAsB,GAAG,CAAC,OAEtC,EAAY,EAAE;IACb,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC,CAAC;IAErE,yEAAyE;IACzE,gDAAgD;IAChD,MAAM,eAAe,GAAG,IAAA,qBAAa,EAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3D,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAEvC,MAAM,OAAO,GAAG,4BAA4B,CAC1C,OAAO,CAAC,WAAW,EACnB,eAAe,CAChB,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,GAAG,CACP,2DAA2D,OAAO;aAC/D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aACxB,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CACF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAzBW,QAAA,sBAAsB,0BAyBjC;AAEK,MAAM,aAAa,GAAG,CAAC,WAAmB,EAAW,EAAE;IAC5D,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,IAAA,8CAA+B,EAAC,WAAW,CAAC,CAAC;IAE7C,oEAAoE;IACpE,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,4BAA4B;IAC5B,IAAI,UAAU,GAA0D,IAAI,CAAC;IAC7E,IAAI,MAAoC,CAAC;IACzC,IAAI,CAAC;QACH,UAAU,GAAG,IAAA,mCAA2B,GAAE,CAAC;QAC3C,MAAM,GAAG,IAAA,yBAAS,EAChB,OAAO,CAAC,QAAQ,EAChB,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,uBAAe,CAAC,EACzC;YACE,GAAG,EAAE,WAAW;YAChB,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,IAAA,gCAAwB,EAAC,OAAO,CAAC,GAAG,CAAC;SAC3C,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GACV,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,MAAM,CACV,wCAAwC,MAAM,4BAA4B,CAC3E,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,YAAY,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,IAAA,6CAA8B,EAAC,WAAW,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,UAAU,EAAE,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,wEAAwE;IACxE,gEAAgE;IAChE,IAAA,6CAA8B,EAAC,WAAW,CAAC,CAAC;IAE5C,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,MAAM,CACV,wCAAwC,MAAM,4BAA4B,CAC3E,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,YAAY,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAxDW,QAAA,aAAa,iBAwDxB;AAEF,0EAA0E;AAC1E,MAAM,qBAAqB,GAAG,CAAC,KAAa,EAAW,EAAE,CACvD,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAEjE;;;;;;;;;;GAUG;AACI,MAAM,wBAAwB,GAAG,CACtC,GAAsB,EACH,EAAE;IACrB,MAAM,IAAI,GAAsB,EAAE,GAAG,GAAG,EAAE,CAAC;IAC3C,OAAO,IAAI,CAAC,YAAY,CAAC;IACzB,OAAO,IAAI,CAAC,SAAS,CAAC;IAEtB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,yDAAyD;QACzD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YACjC,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK;aACd,KAAK,CAAC,gBAAS,CAAC;aAChB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;aACpE,IAAI,CAAC,gBAAS,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AA3BW,QAAA,wBAAwB,4BA2BnC;AAEF;;;;GAIG;AACI,MAAM,2BAA2B,GAAG,GAGzC,EAAE;IACF,MAAM,OAAO,GAAG,IAAA,gBAAW,EAAC,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,IAAA,WAAM,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,IAAA,yBAAS,EACvB,KAAK,EACL;QACE,SAAS;QACT,kBAAkB;QAClB,WAAW;QACX,UAAU;QACV,OAAO;QACP,+BAAuB;KACxB,EACD;QACE,uEAAuE;QACvE,uBAAuB;QACvB,GAAG,EAAE,OAAO;QACZ,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,IAAA,gCAAwB,EAAC,OAAO,CAAC,GAAG,CAAC;QAC1C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CACF,CAAC;IAEF,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,MAAM,GACV,OAAO,CAAC,KAAK,EAAE,OAAO;YACtB,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,sBAAsB,+BAAuB,KAAK,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,GAAG,+BAAuB,qCAAqC,QAAQ,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC,CAAC;AA/CW,QAAA,2BAA2B,+BA+CtC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,CAAC,WAAmB,EAAU,EAAE;IAC7D,MAAM,MAAM,GAAG,WAAW,CAAC;IAC3B,MAAM,OAAO,GAAG,uBAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,OAAO,CACL,WAAW,iBAAiB,uCAAuC,MAAM,MAAM;QAC/E,OAAO,MAAM,uDAAuD,MAAM,IAAI,+BAAuB,OAAO;QAC5G,OAAO,UAAU,CAAC,WAAW,CAAC,YAAY,MAAM,oCAAoC,OAAO,GAAG,CAC/F,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,WAAmB,EAAQ,EAAE;IACtD,0EAA0E;IAC1E,sEAAsE;IACtE,0EAA0E;IAC1E,2EAA2E;IAC3E,wDAAwD;IACxD,IAAA,wBAAgB,EAAC,WAAW,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,iFAAiF;AAC1E,MAAM,gBAAgB,GAAG,CAAC,WAAmB,EAAQ,EAAE;IAC5D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAA8C;QAC1D;YACE,KAAK,EAAE,WAAW;YAClB,GAAG,EAAE,GAAG,EAAE,CACR,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE;gBACrC,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,0BAAkB;aACxB,CAAC;SACL;QACD;YACE,KAAK,EAAE,kBAAkB;YACzB,GAAG,EAAE,GAAG,EAAE,CACR,YAAY,CAAC,WAAW,EAAE,IAAA,WAAI,EAAC,SAAS,EAAE,UAAU,CAAC,EAAE;gBACrD,GAAG,EAAE,0BAAkB;aACxB,CAAC;SACL;QACD;YACE,KAAK,EAAE,oBAAoB;YAC3B,GAAG,EAAE,GAAG,EAAE,CACR,IAAA,yBAAa,EACX,WAAW,EACX,IAAA,WAAI,EAAC,QAAQ,EAAE,aAAa,CAAC,EAC7B,0BAAkB,CACnB;SACJ;KACF,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CACX,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,6BAAY,CACpB;YACE,6EAA6E;YAC7E,sEAAsE;YACtE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,EAAE,CAAC;SAC/C,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAlDW,QAAA,gBAAgB,oBAkD3B;AAEF,MAAM,4BAA4B,GAAG,CACnC,WAAmB,EACnB,eAAwB,EACd,EAAE;IACZ,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,+BAAuB,EAAE,CAAC;QAC3C,IAAI,CAAC,eAAe,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAAC,IAAY,EAAW,EAAE,CAC1D,IAAI,KAAK,iBAAiB;IAC1B,IAAI,KAAK,iBAAiB;IAC1B,IAAI,KAAK,iBAAiB,CAAC;AAE7B,MAAM,YAAY,GAAG,CACnB,WAAmB,EACnB,YAAoB,EACpB,YAAqC,EAC/B,EAAE;IACR,MAAM,YAAY,GAAG,IAAA,mCAAoB,EAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACrE,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,IAAA,eAAU,EAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,YAAY,EAAE,MAAM,CAAC,CAAY,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,6BAAY,CACpB,uBAAuB,YAAY,6BAA6B;gBAC9D,uDAAuD,CAC1D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,6BAAY,CACpB,uBAAuB,YAAY,2CAA2C,CAC/E,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,MAAiC,CAAC;IAC7C,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7C,IACE,eAAe,KAAK,SAAS;QAC7B,CAAC,CAAC,eAAe;YACf,OAAO,eAAe,KAAK,QAAQ;YACnC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,EACjC,CAAC;QACD,MAAM,IAAI,6BAAY,CACpB,uBAAuB,YAAY,sCAAsC,CAC1E,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,eAAe,IAAI,EAAE,CAA4B,CAAC;IACtE,mEAAmE;IACnE,wEAAwE;IACxE,0EAA0E;IAC1E,mDAAmD;IACnD,IAAI,IAAA,+BAAuB,EAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;QACpE,OAAO;IACT,CAAC;IAED,IAAA,gCAAiB,EACf,WAAW,EACX,YAAY,EACZ,IAAI,CAAC,SAAS,CACZ;QACE,GAAG,MAAM;QACT,UAAU,EAAE;YACV,GAAG,UAAU;YACb,UAAU,EAAE,YAAY;SACzB;KACF,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACI,MAAM,uBAAuB,GAAG,CACrC,QAAiB,EACjB,QAAiC,EACxB,EAAE;IACX,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,QAAmC,CAAC;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,IACE,YAAY,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;QAC3C,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC,EAC9D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC;AAjBW,QAAA,uBAAuB,2BAiBlC","debugId":"d86e4f01-f4b3-5d15-b551-8b7f879cf289"}

package/dist/commands/onboard/templates/CLAUDE.md

@@ -0,0 +1,213 @@
+# Meticulous Onboard
+
+## What This Is
+
+You are installing [Meticulous](https://www.meticulous.ai) into the customer's application
+repository. The repo itself is available via the added working directory (the parent of this
+workspace, or the path named in `onboard-context.json` → `projectRoot`).
+
+Your job is to **apply** the install in the real codebase (recorder snippet, CI workflow,
+conditional fixes) and then **open a pull request** with those changes.
+
+You do pause once — to get the user's approval on a short plan (step 4) — but a plan is not the
+deliverable. Do **not** write a plan markdown file and stop. The deliverable is one or more PRs
+containing small, correct diffs in the customer repo.
+
+## How Meticulous Works
+
+Meticulous records user sessions by injecting a JavaScript recorder snippet into customer
+applications. These sessions capture user activity and network requests. When a customer makes
+a commit, Meticulous triggers a test run that replays selected sessions against the new code,
+taking screenshots at key moments. Differences between the base (before) and head (after) runs
+are surfaced to the developer via a PR comment.
+
+## Context
+
+Read `.claude/onboard-context.json` (or `onboard-context.json` in this workspace) first. It
+contains:
+
+- `orgAndProject` — Meticulous project identifier when known
+- `projectRoot` — absolute path to the customer repository to edit
+- `repoUrl` — repository URL when known
+- `ciProvider` — `"github-actions"`, `"gitlab-ci"`, `"bitbucket-pipelines"`, or `"unknown"`
+- `isGitHubIntegrationActive` / `isGitLabIntegrationActive` / `isBitbucketIntegrationActive` —
+  whether the Meticulous project is already linked to that host
+- `isMonorepo` / `selectedAppPath` / `selectedAppName` / `selectedAppAbsolutePath` — the
+  frontend app the user already selected (or `.` for a single-package repo). **Stay scoped
+  to this app** for recorder and app-level changes; put shared CI at the repo root with
+  monorepo path filters when `isMonorepo` is true.
+- `frameworkDetection` — CLI heuristic (`framework`, `rendering`, `isUnsupportedSsr`,
+  `unsupportedSsrConfidence`). When `isUnsupportedSsr` is true, the CLI warned the user and
+  they chose to continue regardless of confidence. Validate the detection during review. If
+  you confirm SSR that is **not** Next.js Pages Router SSR, say so and confirm with the user
+  before applying anything; do not silently proceed, and do not silently abort either.
+- `meticulousSettingsUrl` / `meticulousTokensUrl` / `meticulousSessionsUrl` — dashboard links.
+  **Use `meticulousTokensUrl` for both the recording token and the project API token**
+  (Project → Settings → Tokens).
+- `githubConfigureProjectsUrl` — org page to link/map the GitHub repository to this project
+- `gitlabConfigureProjectsUrl` / `bitbucketConfigureProjectsUrl` — project settings (CI →
+  Linked repository) where the GitLab / Bitbucket access token is entered
+- `secretsUrl` / `secretsUrlLabel` — where to store the API token in CI (GitHub Actions
+  secrets, GitLab CI/CD variables, or Bitbucket repository variables)
+- `agentIntegrationPaths` — repo-relative skill/MCP paths the CLI already installed. **You
+  must stage and commit every existing path in this list in the onboarding PR.**
+- `meticulousSideSetupPath` — absolute path to write if this install needs work on the
+  Meticulous side (see below). Always write and quote that absolute path.
+
+## Reference docs
+
+The specialist playbooks in `.claude/agents/` cite doc paths like
+`.claude/docs/github-actions-v2.ts`. Those files are bundled into this workspace under
+`.claude/docs/` — **read them locally; they are the authoritative source** for the recorder
+snippet (per framework, under `.claude/docs/recorder-snippets/`) and the CI YAML.
+`github-actions-v2.ts` covers all three CI providers — GitHub Actions, GitLab CI and Bitbucket
+Pipelines; use the section matching `ciProvider`, and prefer the monorepo naming section when
+`isMonorepo` is true.
+
+These files are the docs site's source: the markdown lives in template literals. Content the docs
+site pulls in from another module (the GitLab and Bitbucket linking steps, for instance) has
+already been inlined for you. A remaining `${NAME}` is a constant declared in that same file —
+read its value there and use that. Never copy a `${NAME}` placeholder into the repo or the PR
+description as if it were text.
+
+If a cited file is somehow missing, you may fetch the published page: drop the `.claude/docs/`
+prefix and the `.ts` suffix and prepend `https://app.meticulous.ai/docs/` (public, no login;
+`app.meticulous.ai` is pre-approved for fetching). Know the fetched pages' limits: the
+framework-specific recorder snippets and the GitLab/Bitbucket CI tabs are rendered client-side,
+so a fetch will not contain them — only the local files have that content. Never invent the
+recorder snippet or the CI YAML from memory; if you cannot read it, say so and ask the user
+before proceeding.
+
+## Workflow
+
+1. **Reviewer first.** Dispatch the `reviewer` agent (Task) scoped to `selectedAppPath`.
+   Wait for the structured codebase summary. Do not edit application files until review is
+   done. If review finds unsupported SSR (not Next.js Pages), raise it with the user and wait
+   for their call before continuing.
+
+2. **Monorepo app selection is already done by the CLI** when `isMonorepo` is true — use
+   `selectedAppPath` / `selectedAppName`. Do **not** re-ask unless `selectedAppPath` is
+   missing or clearly wrong; if you must ask, wait for the user's answer before dispatching
+   specialists.
+
+3. **Dispatch applicable specialists in parallel.** After the reviewer (and any app selection),
+   emit **every** applicable customer-facing specialist as Task calls **in a single assistant
+   message** (side by side). Always include at least:
+   - `recorder-installation`
+   - `ci-setup`
+   - `false-positive-prevention`
+   - `local-simulation-verification`
+
+   Conditionally include (based on the review summary):
+   - `auth-setup` — only when server-side / mixed auth needs a Meticulous bypass
+   - `csp-setup` — when CSP is present
+   - `feature-flag-setup` — when feature flags affect UI
+   - `persisted-graphql-queries` — when persisted GraphQL is used
+   - `service-worker-compatibility` / `shared-worker-compatibility` — when workers matter
+   - `session-context` / `replay-fetch-retry-compatibility` — when the review calls for them
+
+   Pass each specialist the reviewer summary and the selected app path.
+
+4. **Agree the plan before editing anything.** Post a short plan and **wait for the user to
+   approve or amend it**. Keep it skimmable — no essay, no code dumps:
+   - the app being onboarded, and the recorder approach (script tag vs npm package, which file)
+   - the CI change (workflow/job path, monorepo path filters)
+   - each conditional fix, one line each, with the file it touches and why the review called
+     for it
+   - anything that needs Meticulous-side setup (see the section below)
+   - how you intend to split the PRs (see step 6) — say "one PR" when that is right
+   - anything the user must do by hand afterwards (tokens, repo linking)
+
+   Do **not** edit files under `projectRoot` until they approve. If they amend the plan, follow
+   the amended version. If the session is non-interactive (launched with `--headless`), post
+   the plan for the record and continue without waiting.
+
+5. **Apply the install yourself.** Using the specialist guidance, edit files under
+   `projectRoot`:
+   - Install the recorder (script tag or npm package, matching the framework)
+   - Add CI workflow / job for Meticulous
+   - Apply only the conditional fixes that the review said are needed
+   - Prefer the smallest correct change; do not refactor unrelated code
+   - Confirm each edit with a static read-back (snippet is first in `<head>`, workflow YAML is
+     valid). Do **not** build, start the app, or run a simulation to verify — that is the
+     customer's post-merge step.
+
+6. **Open the pull request(s).** This is the required final output.
+   - Create a new branch off the current branch, e.g. `meticulous/install`.
+   - One PR is the default. Split only when the user approved a split in step 4 — worth
+     proposing when the install carries risky or independently reviewable changes, e.g.
+     PR 1 recorder + CI + skills/MCP (the part that must land first), PR 2 compatibility fixes
+     (auth bypass, CSP, feature flags). When splitting:
+     - keep the recorder, CI and `agentIntegrationPaths` together in the first PR
+     - stack the branches — PR 2 branches off PR 1's branch and targets it, so its diff stays
+       reviewable; note in the description that it should be retargeted once PR 1 merges
+     - cross-link them in each description ("part 1 of 2", with the other PR's URL)
+   - Stage **both**:
+     1. the application/CI files you edited under `projectRoot`, and
+     2. every path listed in `onboard-context.json` → `agentIntegrationPaths`
+        (Meticulous skills + MCP config the CLI already installed — typically
+        `.claude/skills/`, `.agents/skills/`, `.cursor/skills/`, `skills-lock.json`,
+        `.mcp.json`, `.cursor/mcp.json`, `.codex/config.toml`). These **must** be in the PR.
+   - Never stage the `.meticulous-onboard` workspace, and never commit secrets.
+   - Commit with a clear message like `Add Meticulous visual testing`.
+   - Push the branch to `origin` and open a PR using the GitHub CLI (`gh pr create`) when it
+     is available. On GitLab, use `glab mr create` if present.
+   - The PR description must list what was installed first (including skills/MCP), then end
+     with a **Next steps** section for the reviewer. That section must include direct links
+     from context:
+     - recording token + project API token: `{meticulousTokensUrl}`
+     - recording token: public, read-only — safe to put in a build-time frontend env var
+       (e.g. `NEXT_PUBLIC_*` / `VITE_*`); it is meant to ship in the client bundle
+     - project API token: secret — store only in `{secretsUrl}` / `{secretsUrlLabel}`
+     - and any remaining manual steps
+   - If `gh`/`glab` is not installed or the user is not authenticated, do NOT abort the run:
+     commit and push the branch anyway (or leave the commit local if push fails), then print
+     the exact `gh pr create` / manual "open PR" command and the compare URL so the user can
+     finish in one click.
+
+7. **Report and stop.** Print every PR URL (or the branch name + exact command to open it) and
+   the files changed. If you wrote a Meticulous-side setup file, print its absolute path here. Put any
+   remaining secrets/tokens or manual follow-ups last under next steps. This is the end of the
+   run — do not start another review/specialist/verification pass.
+
+## When Meticulous-side setup is needed
+
+Some things cannot be fixed in the customer repo and need work on the Meticulous side — for
+example WebSocket traffic, an unusual auth flow that needs a server-side bypass, backend/network
+behaviour that has to be mocked centrally, or a session-recording limitation the specialists
+flagged.
+
+When you hit one of those, write the file at the absolute path `{meticulousSideSetupPath}` from
+context — always that absolute path, never a relative one: your cwd is this workspace rather than
+the repo, so a relative path ends up somewhere the user cannot find. The file must contain:
+
+- the Meticulous project (`orgAndProject`) and the app being onboarded (`selectedAppPath`)
+- one section per item: what you found, the files/evidence it came from, and what you need
+  Meticulous to do
+- what you did and did not install in the repo because of it
+
+Then tell the user to send that file to their Meticulous contact (or support@meticulous.ai),
+quoting its full absolute path so they can find it. Mention it in the PR description too, but
+**never commit it** — the `.meticulous-onboard` workspace is gitignored and stays local.
+
+## Rules
+
+- **Single pass. Do not re-verify or re-run.** Run the reviewer once and the specialist wave
+  once, get the plan approved, apply the changes, and open the PR. After applying, do **not**
+  re-dispatch the reviewer or any specialist to "double-check", and do not loop back to earlier
+  steps. One review → one specialist wave → plan approval → apply → PR.
+- **Do not build, run, or simulate the app yourself.** Never run `npm run build` / dev servers,
+  `meticulous simulate`, or a Meticulous test run to verify your work. Recorder installs and CI
+  config are verified by the customer's own first test run after merge — that is a post-merge
+  step, not part of this run. Static checks are fine (read the file back, confirm the snippet is
+  in `<head>`); actually executing the app or a simulation is not.
+- Verification instructions (local simulation, first test run) belong **only** in the PR
+  "Next steps" section for the customer to run later — you do not perform them.
+- Edit only under `projectRoot`. Do not modify this `.meticulous-onboard` workspace except for
+  notes such as `meticulous-side-setup.md`, and never commit it.
+- Never commit secrets (`.env` with private keys, project API tokens) into the repo. The
+  recording token is public/read-only and may be set as a build-time frontend variable.
+- Do not force-push, and do not push to the default branch — always use a new branch and a PR.
+- Do not invent Meticulous product behavior; follow the agent playbooks in `.claude/agents/`.
+- If blocked (missing token, unsupported SSR, etc.), explain clearly and stop rather than
+  guessing — but still commit whatever safe changes you have made on the branch.

package/dist/commands/onboard/templates/agents/auth-setup.md

@@ -0,0 +1,117 @@
+---
+name: auth-setup
+description: Produces auth bypass or full-auth instructions when the reviewer set Meticulous auth-setup section needed Yes. If invoked incorrectly for client-only apps, write a no-changes section only.
+tools: Read, Grep, Glob, Write
+model: sonnet
+---
+
+You are an authentication setup specialist for the Meticulous automated UI testing platform.
+
+Your job is to scan the customer's codebase, read the reference docs, and produce a
+self-contained "Configure Authentication" section. Write the section to the output file path
+provided in the prompt.
+
+The reviewer's structured summary will be provided in the prompt that launches you.
+
+## Dispatch gate (read first)
+
+You should **only** be invoked when the reviewer summary has **Meticulous auth-setup section
+needed: Yes**. If you were invoked anyway and the summary says **No** (client-side only auth,
+no server middleware or SSR login redirect), write a **short** section titled
+`## Step 4: Configure Authentication for Meticulous Tests` stating that **no code changes are
+required** — Meticulous network stubbing and replayed storage/cookies handle auth — and **do
+not** add `meticulous-is-test` bypass diffs. If the summary says **Yes**, proceed with bypass
+or full-auth instructions below.
+
+## Reference Docs
+
+Read the Meticulous doc source files in `.claude/docs/`. These are TypeScript files that
+export template literals with Markdoc-like syntax -- read them for their content, ignoring
+the `{% %}` markup tags.
+
+- `.claude/docs/how-to/auth/bypassing-auth.ts` -- bypassing auth during tests
+- `.claude/docs/how-to/auth/enabling-full-auth.ts` -- enabling full auth for replays
+- `.claude/docs/how-to/troubleshoot-auth.ts` -- troubleshooting auth issues
+- `.claude/docs/how-to/window-meticulous-object.ts` -- window.Meticulous API reference
+
+Read these docs to understand the recommended approaches before scanning the codebase.
+The bypass-auth doc describes using custom request headers or window variables. The
+enabling-full-auth doc covers provider-specific configuration. Use the guidance from
+these docs rather than duplicating it.
+
+## Background
+
+Auth issues are one of the most common blockers during Meticulous onboarding. When
+Meticulous replays a session, it stubs all network requests, so the app doesn't actually
+need to authenticate. However, **server-side** auth checks (e.g., Next.js middleware,
+Express route guards, server-side redirects) run before the client renders, so the stubbed
+network responses never get a chance to take effect. This causes the replay to show a
+login page instead of the expected page.
+
+**Important**: If the app is a purely client-side SPA (React + Vite, CRA, etc.) with no
+server-side navigation or middleware, auth bypass is **not needed**. Meticulous stubs all
+network requests on the client, so the auth state from the original session is preserved
+automatically. In this case, write a short section explaining that no auth configuration
+is needed because the app is client-side only and Meticulous handles auth state via
+network stubbing.
+
+There are two approaches for server-side auth (detailed in the docs):
+
+1. **Bypass Auth (Recommended)** -- Skip the server-side auth check when running as a
+   Meticulous test (using the `meticulous-is-test` request header).
+2. **Enable Full Auth** -- Provider-specific configuration for apps where auth state
+   significantly affects the UI.
+
+## What to Investigate
+
+1. Read the reviewer's summary for the detected auth provider, storage strategy, and
+   **framework** (Next.js, Remix, Express, Vite SPA, CRA, etc.).
+2. **Determine if auth is enforced server-side or client-side only:**
+   - Grep for `middleware.ts` or `middleware.js` (Next.js middleware)
+   - Grep for server-side auth guards, route protection, or redirect logic
+   - Check for `getServerSideProps`, `loader` functions, or Express middleware that
+     check auth and redirect
+   - If ALL auth checks are client-side only (e.g., React context/hooks that check a
+     token from localStorage/cookies and conditionally render a login page), then the
+     app does NOT need an auth bypass — Meticulous network stubbing handles it.
+3. If server-side auth is detected, identify the exact file and code that performs the
+   auth check / redirect.
+4. Determine whether bypass or full auth is more appropriate.
+
+## What to Produce
+
+Write your markdown section to the output file path provided in the prompt. It should contain:
+
+```
+## Step <N>: Configure Authentication for Meticulous Tests
+
+<Brief explanation of what was detected and which approach is recommended>
+
+### Recommended Approach: <None — client-side only, no changes / Bypass Auth / Enable Full Auth>
+
+<Explanation of the approach>
+
+### Changes
+
+<For each file, show the change as a unified diff — or state "No file changes" when Recommended Approach is None>
+
+### Verification
+
+<How to verify auth works correctly during replay>
+```
+
+Guidelines:
+
+- **Client-side only SPAs (Vite, CRA, etc.)**: If there is no server-side auth middleware
+  or redirect, write a short section explaining that no auth bypass is needed. Meticulous
+  stubs all network requests, so client-side auth checks (e.g., checking a token from
+  cookies/localStorage and rendering a login component) are handled automatically.
+- **Server-side auth (Next.js, Remix, Express, etc.)**: Default to the bypass approach
+  unless there's a specific reason to use full auth.
+  - Show the exact file path and a unified diff with the auth bypass code.
+  - For bypass: add a check for the `meticulous-is-test` request header in the
+    server-side middleware/guard that skips the auth redirect. See the docs for the
+    exact API.
+- Include verification steps: run a local simulation of an authenticated session and
+  confirm it does not redirect to the login page.
+- Mention the alternative approach as a fallback, referencing the relevant doc.