@capgo/cli 7.114.0 → 7.115.0

package/dist/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@capgo/cli",
   "type": "module",
-  "version": "7.114.0",
+  "version": "7.115.0",
   "description": "A CLI to upload to capgo servers",
   "author": "Martin martin@capgo.app",
   "license": "Apache 2.0",
@@ -84,6 +84,7 @@
     "test:analytics": "bun test/test-analytics.mjs",
     "test:analytics-error-category": "bun test/test-analytics-error-category.mjs",
     "test:analytics-org-resolver": "bun test/test-analytics-org-resolver.mjs",
+    "test:supabase-perf": "bun test/test-supabase-perf.mjs",
     "test:mcp-analytics": "bun test/test-mcp-analytics.mjs",
     "test:app-created-source": "bun test/test-app-created-source.mjs",
     "test:doctor-analytics": "bun test/test-doctor-analytics.mjs",
@@ -104,7 +105,7 @@
     "test:macos-signing": "bun test/test-macos-signing.mjs",
     "test:apple-api-import-helpers": "bun test/test-apple-api-import-helpers.mjs",
     "test:manifest-path-encoding": "bun test/test-manifest-path-encoding.mjs",
-    "test": "bun run build && bun run test:version-detection:setup && bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:credentials && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:mcp-analytics && bun run test:app-created-source && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:build-platform-selection && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-app-conflict && bun run test:init-guardrails && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:version-detection && bun run test:platform-paths && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:apple-api-import-helpers && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:ai-render-markdown",
+    "test": "bun run build && bun run test:version-detection:setup && bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:credentials && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:mcp-analytics && bun run test:app-created-source && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:build-platform-selection && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-app-conflict && bun run test:init-guardrails && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:version-detection && bun run test:platform-paths && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:apple-api-import-helpers && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:ai-render-markdown",
     "test:build-platform-selection": "bun test/test-build-platform-selection.mjs",
     "test:ai-log-capture": "bun test/test-ai-log-capture.mjs",
     "test:ai-analyze-flow": "bun test/test-ai-analyze-flow.mjs",

package/dist/src/analytics/error-category.d.ts

@@ -1,6 +1,11 @@
-export type CliErrorCategory = 'network_error' | 'timeout' | 'unauthorized' | 'forbidden' | 'not_found' | 'payload_too_large' | 'validation_error' | 'server_error' | 'commander' | 'unknown';
+export type CliErrorCategory = 'network_error' | 'timeout' | 'unauthorized' | 'forbidden' | 'not_found' | 'payload_too_large' | 'rate_limited' | 'validation_error' | 'server_error' | 'commander' | 'unknown';
 /**
  * Maps an arbitrary thrown value to a closed enum so telemetry never leaks
  * error text, paths, or user input. Returns 'unknown' for anything unmatched.
  */
 export declare function categorizeCliError(error: unknown): CliErrorCategory;
+/**
+ * Maps a non-2xx HTTP status to the same closed enum, for Supabase responses
+ * where we have a status code but no thrown Error. Never leaks response bodies.
+ */
+export declare function categorizeHttpStatus(status: number): CliErrorCategory;

package/dist/src/analytics/supabase-perf.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Tags every Supabase call made inside `fn` with `source`.
+ *
+ * The Supabase JS query builder is a lazy thenable: it does not call `fetch`
+ * until `.then()` is invoked (i.e. when the caller `await`s it). If we only
+ * call `run(source, fn)` and return the builder, `.then()` fires *outside* the
+ * AsyncLocalStorage context and `getSupabaseSource()` returns `undefined`.
+ *
+ * To fix this, we wrap the result in `Promise.resolve()` inside the `run()`
+ * callback. This schedules the microtask (which calls `.then()` on the builder)
+ * while still inside the async context, so the source label propagates through
+ * to the actual fetch. For plain Promises and non-thenable values the behaviour
+ * is unchanged.
+ */
+export declare function withSupabaseSource<T>(source: string, fn: () => T): Promise<Awaited<T>>;
+export declare function getSupabaseSource(): string | undefined;
+export declare function enableSupabaseInstrumentation(): void;
+export declare function isSupabaseInstrumentationEnabled(): boolean;
+export interface SupabaseCallInfo {
+    url: string;
+    method: string;
+    status: number;
+    ok: boolean;
+    durationMs: number;
+    source?: string;
+    apikey?: string;
+    error?: unknown;
+}
+export type SupabaseCallRecorder = (info: SupabaseCallInfo) => void;
+export declare function setSupabaseCallRecorder(fn: SupabaseCallRecorder): void;
+/** A Supabase call slower than this is flagged `slow` regardless of status. */
+export declare const SLOW_THRESHOLD_MS = 5000;
+/**
+ * Parses a Supabase REST/RPC URL into a low-cardinality operation label.
+ * Query strings are discarded so filter values never leak and cardinality
+ * stays bounded. `/rest/v1/rpc/get_user_id` => `rpc:get_user_id`;
+ * `/rest/v1/apps?...` => `GET apps`.
+ */
+export declare function deriveSupabaseOperation(url: string, method: string): string;
+/**
+ * A `fetch` wrapper for supabase-js's `global.fetch`. Times the real request
+ * (which runs regardless), captures the active source label, and hands the
+ * result to the injected recorder. Returns the real Response / rethrows the
+ * real error so supabase-js behavior is never altered. Calls `globalThis.fetch`
+ * dynamically (not a captured ref) so it is testable and never self-recurses.
+ */
+export declare function createTimedFetch(): typeof fetch;

package/dist/src/analytics/track.d.ts

@@ -1,3 +1,4 @@
+import { withSupabaseSource } from './supabase-perf';
 type InvocationSource = 'cli' | 'mcp';
 export declare function setInvocationSource(source: InvocationSource): void;
 export declare function getInvocationSource(): InvocationSource;
@@ -65,4 +66,5 @@ type AnyAsyncFn = (...args: any[]) => Promise<any>;
  */
 export declare function withMcpToolTracking<H extends AnyAsyncFn>(toolName: string, handler: H): H;
 export declare function trackMcpServerStarted(hasApikey: boolean): void;
-export {};
+export { withSupabaseSource };
+export { enableSupabaseInstrumentation } from './supabase-perf';