@ciandt-flow/flow-ai-obs 0.12.1-beta.43 → 0.12.1-beta.46
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.js +72 -72
- package/dist/setup.js +1 -1
- package/package.json +1 -1
package/dist/cli.js
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
'use strict';var Me=require('readline/promises'),_s=require('https'),O=require('fs'),wt=require('os'),$t=require('path'),child_process=require('child_process'),Ms=require('http'),util=require('util'),crypto=require('crypto');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}function _interopNamespace(e){if(e&&e.__esModule)return e;var n=Object.create(null);if(e){Object.keys(e).forEach(function(k){if(k!=='default'){var d=Object.getOwnPropertyDescriptor(e,k);Object.defineProperty(n,k,d.get?d:{enumerable:true,get:function(){return e[k]}});}})}n.default=e;return Object.freeze(n)}var Me__namespace=/*#__PURE__*/_interopNamespace(Me);var _s__default=/*#__PURE__*/_interopDefault(_s);var O__namespace=/*#__PURE__*/_interopNamespace(O);var wt__namespace=/*#__PURE__*/_interopNamespace(wt);var $t__namespace=/*#__PURE__*/_interopNamespace($t);var Ms__default=/*#__PURE__*/_interopDefault(Ms);var Fe=Object.defineProperty;var fs=Object.getOwnPropertyDescriptor;var ms=Object.getOwnPropertyNames;var gs=Object.prototype.hasOwnProperty;var Vt=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,r)=>(typeof require<"u"?require:e)[r]}):t)(function(t){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+t+'" is not supported')});var
|
|
3
|
-
`);}catch(o){throw r.close(),o}if(r.close(),e!==void 0)return e;throw new Error("Too many invalid attempts for yes/no prompt")}async function De(t,e){let r=Me__namespace.createInterface({input:process.stdin,output:process.stdout});try{let n=(await r.question(`${t}: `)).trim();if(e);return n}catch(n){throw n}finally{r.close();}}var Be=
|
|
2
|
+
'use strict';var Me=require('readline/promises'),_s=require('https'),O=require('fs'),wt=require('os'),$t=require('path'),child_process=require('child_process'),Ms=require('http'),util=require('util'),crypto=require('crypto');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}function _interopNamespace(e){if(e&&e.__esModule)return e;var n=Object.create(null);if(e){Object.keys(e).forEach(function(k){if(k!=='default'){var d=Object.getOwnPropertyDescriptor(e,k);Object.defineProperty(n,k,d.get?d:{enumerable:true,get:function(){return e[k]}});}})}n.default=e;return Object.freeze(n)}var Me__namespace=/*#__PURE__*/_interopNamespace(Me);var _s__default=/*#__PURE__*/_interopDefault(_s);var O__namespace=/*#__PURE__*/_interopNamespace(O);var wt__namespace=/*#__PURE__*/_interopNamespace(wt);var $t__namespace=/*#__PURE__*/_interopNamespace($t);var Ms__default=/*#__PURE__*/_interopDefault(Ms);var Fe=Object.defineProperty;var fs=Object.getOwnPropertyDescriptor;var ms=Object.getOwnPropertyNames;var gs=Object.prototype.hasOwnProperty;var Vt=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,r)=>(typeof require<"u"?require:e)[r]}):t)(function(t){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+t+'" is not supported')});var h=(t,e,r)=>()=>{if(r)throw r[0];try{return t&&(e=t(t=0)),e}catch(n){throw r=[n],n}};var Es=(t,e)=>()=>{try{return e||t((e={exports:{}}).exports,e),e.exports}catch(r){throw e=0,r}},D=(t,e)=>{for(var r in e)Fe(t,r,{get:e[r],enumerable:true});},hs=(t,e,r,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of ms(e))!gs.call(t,s)&&s!==r&&Fe(t,s,{get:()=>e[s],enumerable:!(n=fs(e,s))||n.enumerable});return t};var C=t=>hs(Fe({},"__esModule",{value:true}),t);var xe={};D(xe,{bold:()=>R,cyan:()=>U,dim:()=>g,green:()=>b,red:()=>I,yellow:()=>L});function vt(t,e){return ws?r=>`\x1B[${t}m${r}\x1B[${e}m`:r=>r}var ws,b,I,L,U,R,g,pt=h(()=>{"use strict";ws=!process.env.NO_COLOR&&process.stdout.isTTY;b=vt("32","39"),I=vt("31","39"),L=vt("33","39"),U=vt("36","39"),R=vt("1","22"),g=vt("2","22");});var Kt=Es((Ei,Ts)=>{Ts.exports={name:"@ciandt-flow/flow-ai-obs",version:"0.12.1-beta.46",description:"Claude Code hooks for Langfuse OTLP tracing \u2014 cross-platform",main:"dist/index.js",bin:{"flow-ai-obs":"dist/cli.js","flow-ai-obs-setup":"dist/setup.js"},scripts:{build:"tsup",test:"jest",typecheck:"tsc --noEmit",lint:"eslint src bin scripts",format:'prettier --write "src/**/*.ts" "bin/**/*.ts" "scripts/**/*.ts"',"format:check":'prettier --check "src/**/*.ts" "bin/**/*.ts" "scripts/**/*.ts"',"security-scan":"trufflehog filesystem src/ --fail --no-update --exclude-paths .trufflehogignore",postinstall:`node -e "require('fs').existsSync('dist/setup.js') && require('child_process').execFileSync(process.execPath, ['dist/setup.js'], {stdio:'inherit'})"`,prepublishOnly:"npm run security-scan && npm run build","release:npm":"changeset publish",changeset:"changeset","version-packages":"changeset version","install:hooks":"node dist/cli.js install","auth:login":"node dist/cli.js auth login","auth:logout":"node dist/cli.js auth logout","auth:status":"node dist/cli.js auth status",smoke:"bash scripts/smoke-test.sh","smoke:debug":"bash scripts/smoke-test.sh --debug","smoke:send":"bash scripts/smoke-test.sh --send --allow-http --debug",regression:"jest --config jest.regression.config.js --forceExit","regression:update":"UPDATE_GOLDEN=1 jest --config jest.regression.config.js --forceExit"},files:["dist/","README.md","LICENSE.md"],keywords:["claude-code","langfuse","observability","otlp","hooks","flow","ciandt"],author:"CI&T Flow Team",license:"SEE LICENSE IN LICENSE.md",private:!1,dependencies:{},optionalDependencies:{keytar:"7.9.0"},devDependencies:{"@changesets/changelog-github":"^0.6.0","@changesets/cli":"^2.30.0","@types/jest":"^30.0.0","@types/node":"^25.8.0",jest:"^30.4.2","ts-jest":"^29.4.9",tsup:"^8.5.1","eslint-config-prettier":"^10.1.5",prettier:"^3.5.3",typescript:"^6.0.3","typescript-eslint":"^8.33.0"},engines:{node:">=18.0.0"},overrides:{esbuild:"^0.28.1"},publishConfig:{registry:"https://registry.npmjs.org",access:"public"},repository:{type:"git",url:"git+https://github.com/CI-T-HyperX/flow-codeassistant-observability.git"}};});function Q(){return process.stdout.isTTY===true&&process.stdin.isTTY===true&&!process.argv.includes("--no-interactive")}async function Gt(t,e){let r=Me__namespace.createInterface({input:process.stdin,output:process.stdout}),s=`${t} ${e===true?"(Y/n)":e===false?"(y/N)":"(y/n)"}: `;for(let i=1;i<=3;i++)try{let o=(await r.question(s)).trim().toLowerCase();if(o===""&&e!==void 0)return r.close(),e;if(o==="y"||o==="yes")return r.close(),!0;if(o==="n"||o==="no")return r.close(),!1;i<3&&process.stdout.write(` Invalid input. Please answer "y" or "n".
|
|
3
|
+
`);}catch(o){throw r.close(),o}if(r.close(),e!==void 0)return e;throw new Error("Too many invalid attempts for yes/no prompt")}async function De(t,e){let r=Me__namespace.createInterface({input:process.stdin,output:process.stdout});try{let n=(await r.question(`${t}: `)).trim();if(e);return n}catch(n){throw n}finally{r.close();}}var Be=h(()=>{"use strict";});var bt={};D(bt,{checkForUpdate:()=>ks,checkForUpdateInteractive:()=>vs,fetchLatestVersionAsync:()=>$r,isNewer:()=>Rt,primeUpdateCache:()=>Rs,runUpdate:()=>Nr});function B(){return He||(He=Kt()),He}function Rt(t,e){let r=i=>{let o=String(i).replace(/^v/,"").match(/^(\d+)\.(\d+)\.(\d+)/);return o?[+o[1],+o[2],+o[3]]:null},n=r(t),s=r(e);return !n||!s?false:s[0]!==n[0]?s[0]>n[0]:s[1]!==n[1]?s[1]>n[1]:s[2]>n[2]}function Ye(){try{let t=JSON.parse(O__namespace.default.readFileSync(Pr,"utf8"));return typeof t.latestVersion!="string"||Date.now()-t.checkedAt>=As?null:t}catch{return null}}function Ve(t,e,r=Date.now()){try{O__namespace.default.writeFileSync(Pr,JSON.stringify({latestVersion:t,updatePriority:e??null,checkedAt:r}),{mode:384});}catch{}}function Ke(t){let e=B().name,r=_s__default.default.get(`https://registry.npmjs.org/${encodeURIComponent(e)}/latest`,{timeout:Os},n=>{if(n.statusCode!==200)return n.resume(),t(new Error(`HTTP ${n.statusCode}`));let s="";n.setEncoding("utf8"),n.on("data",i=>{s+=i;}),n.on("end",()=>{try{let i=JSON.parse(s);if(typeof i.version!="string")throw new Error("no version field");t(null,{version:i.version,updatePriority:typeof i.updatePriority=="string"?i.updatePriority:null});}catch(i){t(i);}});});r.on("error",t),r.on("timeout",()=>{r.destroy(new Error("timeout"));});}function We(t){let e=B().name,n=` Update available: ${B().version} \u2192 ${t}`,s=` Run: npm install -g ${e}`,i=Math.max(n.length,s.length)+2,o="\u2500".repeat(i);process.stderr.write(`
|
|
4
4
|
\u256D${o}\u256E
|
|
5
5
|
\u2502${n.padEnd(i)}\u2502
|
|
6
6
|
\u2502${s.padEnd(i)}\u2502
|
|
@@ -9,36 +9,36 @@
|
|
|
9
9
|
`);}function je(t){let e=B().name;process.stderr.write(`
|
|
10
10
|
[${e}] Critical update detected \u2014 auto-updating to ${t}...
|
|
11
11
|
|
|
12
|
-
`);let r=child_process.spawn("npm",["install","-g",`${e}@${t}`],{detached:true,stdio:"ignore",shell:process.platform==="win32",windowsHide:true});r.on("error",()=>{}),r.unref();}async function
|
|
12
|
+
`);let r=child_process.spawn("npm",["install","-g",`${e}@${t}`],{detached:true,stdio:"ignore",shell:process.platform==="win32",windowsHide:true});r.on("error",()=>{}),r.unref();}async function Ls(t,e=1e4){let r=Vt("readline"),n=B().name,i=` Update available: ${B().version} \u2192 ${t}`,o=` Run: npm install -g ${n}`,a=" Install now? [y/N]: ",c=Math.max(i.length,o.length,a.length-2)+2,d="\u2500".repeat(c);return process.stderr.write(`
|
|
13
13
|
\u256D${d}\u256E
|
|
14
14
|
\u2502${i.padEnd(c)}\u2502
|
|
15
15
|
\u2502${o.padEnd(c)}\u2502
|
|
16
16
|
\u2502${a.padEnd(c)}\u2502
|
|
17
17
|
\u2570${d}\u256F
|
|
18
|
-
`),new Promise(
|
|
19
|
-
`),
|
|
18
|
+
`),new Promise(E=>{let u=r.createInterface({input:process.stdin,output:void 0,terminal:false}),f=false;function T(S){f||(f=true,clearTimeout(_),u.close(),process.stderr.write(`
|
|
19
|
+
`),E(S));}let _=setTimeout(()=>T(false),e);u.once("line",S=>T(S.trim().toLowerCase()==="y")),u.once("close",()=>T(false));})}async function Nr(t){let e=B().name;return process.stderr.write(` Installing ${e}@${t}...
|
|
20
20
|
`),new Promise(r=>{let n=child_process.spawn("npm",["install","-g",`${e}@${t}`],{stdio:"inherit",shell:process.platform==="win32"}),s=false;function i(o,a){if(!s){if(s=true,o)process.stderr.write(` \u2713 Updated to ${t}. Please restart the command.
|
|
21
21
|
|
|
22
22
|
`);else {let c=a?` (${a})`:"";process.stderr.write(` \u2717 Update failed${c} \u2014 continuing with current version.
|
|
23
23
|
|
|
24
|
-
`);}r();}}n.on("close",(o,a)=>i(o===0,a??void 0)),n.on("error",o=>i(false,o.code));})}function $r(){return new Promise(t=>{Ke((e,r)=>t(e||!r?null:r));})}function
|
|
24
|
+
`);}r();}}n.on("close",(o,a)=>i(o===0,a??void 0)),n.on("error",o=>i(false,o.code));})}function $r(){return new Promise(t=>{Ke((e,r)=>t(e||!r?null:r));})}function ks(){try{let t=Ye();if(t){Rt(B().version,t.latestVersion)&&(t.updatePriority==="auto"?je(t.latestVersion):We(t.latestVersion));return}setImmediate(()=>{Ke((e,r)=>{e||!r||(Ve(r.version,r.updatePriority),Rt(B().version,r.version)&&(r.updatePriority==="auto"?je(r.version):We(r.version)));});});}catch{}}async function vs(t={}){try{let e=Ye();if(e){if(!Rt(B().version,e.latestVersion))return}else {let n=await $r();if(!n||(Ve(n.version,n.updatePriority),!Rt(B().version,n.version)))return;e={latestVersion:n.version,updatePriority:n.updatePriority,checkedAt:Date.now()};}if(e.updatePriority==="auto"){je(e.latestVersion);return}if(!Q()){We(e.latestVersion);return}await Ls(e.latestVersion,t.timeoutMs)&&await Nr(e.latestVersion);}catch{}}function Rs(){try{if(Ye())return;setImmediate(()=>{Ke((t,e)=>{t||!e||Rt(B().version,e.version)&&Ve(e.version,e.updatePriority,0);});});}catch{}}var He,Pr,As,Os,It=h(()=>{"use strict";Be();Pr=$t__namespace.default.join(wt__namespace.default.tmpdir(),"flow-obs-update-cache.json"),As=1440*60*1e3,Os=3e3;});var Cr={};D(Cr,{AUTH_ENGINE:()=>Ut,BUFFER:()=>H,CONFIG_DIR_NAME:()=>qt,CONFIG_FILE_NAME:()=>Xt,DEBUG_LOG_FILENAME:()=>Ge,ENV:()=>p,FEATURES:()=>Us,FLOW_URLS:()=>Is,HOOK_TIMEOUTS:()=>gt,INSTALLER:()=>zt,NATIVE_OTEL:()=>tt,OTLP:()=>Ee,STATE_FILE_PREFIX:()=>Ps,TRACE_LIMITS:()=>K,VALIDATION:()=>F,VAULT:()=>Jt,getFlowBaseUrl:()=>ft,getFlowUrls:()=>mt,getMetrics:()=>he});function ft(){let t=process.env.FLOW_BASE_URL;return t&&t.trim()?t.trim():bs}function mt(){let t=ft();return {AUTH_ENGINE:process.env.FLOW_AUTH_ENGINE_URL||`${t}/auth-engine-api/v2/api-key/token`,GATEWAY_TRACES:process.env.FLOW_GATEWAY_TRACES_URL||`${t}/flow-langfuse-gateway/v1/traces`,GATEWAY_HEALTH:process.env.FLOW_GATEWAY_HEALTH_URL||`${t}/flow-langfuse-gateway/v1/health`,OTEL_ENDPOINT:process.env.FLOW_OTEL_ENDPOINT_URL||`${t}/otel`}}function he(){let t=ft();return {API_URL:process.env.FLOW_METRICS_URL||`${t}/metrics-collector-api/log-event`,BOOSTER:"flow-ai-obs"}}var bs,Is,Jt,qt,Xt,Ee,tt,p,Us,Ut,zt,gt,H,F,Ge,K,Ps,k=h(()=>{"use strict";bs="https://flow.ciandt.com";Is=mt(),Jt={SERVICE:"flow-plugins-cli",ACCOUNT_CREDS:"credentials",ACCOUNT_TOKEN:"token-cache"},qt="FLOW-nodejs",Xt="config.json",Ee={SCOPE_NAME:"flow-ai-obs",SCOPE_VERSION:"0.1.0"},tt={CLAUDE_CODE_ENABLE_TELEMETRY:"1",OTEL_EXPORTER_OTLP_PROTOCOL:"http/json",OTEL_METRICS_EXPORTER:"otlp",OTEL_LOGS_EXPORTER:"otlp",OTEL_LOG_TOOL_DETAILS:"1",OTEL_LOG_USER_PROMPTS:"1"},p={FLOW_TELEMETRY:"FLOW_TELEMETRY",FLOW_TELEMETRY_GATEWAY:"FLOW_TELEMETRY_GATEWAY_URL",LANGFUSE_BASE_URL:"LANGFUSE_BASE_URL",LANGFUSE_PUBLIC_KEY:"LANGFUSE_PUBLIC_KEY",LANGFUSE_SECRET_KEY:"LANGFUSE_SECRET_KEY",ANTHROPIC_AUTH_TOKEN:"ANTHROPIC_AUTH_TOKEN",FLOW_OBS_DEBUG:"FLOW_TELEMETRY_DEBUG",FLOW_OBS_ALLOW_HTTP:"FLOW_TELEMETRY_ALLOW_HTTP",FLOW_OBS_USE_JSON_VAULT:"FLOW_TELEMETRY_USE_JSON_VAULT",BUFFER_TTL_DAYS:"FLOW_TELEMETRY_BUFFER_TTL_DAYS",BUFFER_MAX_FILES:"FLOW_TELEMETRY_BUFFER_MAX_FILES",FLOW_USER_EMAIL:"FLOW_USER_EMAIL",FLOW_API_KEY:"FLOW_API_KEY",OTEL_EXPORTER_OTLP_HEADERS:"OTEL_EXPORTER_OTLP_HEADERS",FLOW_BASE_URL:"FLOW_BASE_URL"},Us={KEYCHAIN_ENABLED:!1},Ut={REQUEST_TIMEOUT_MS:1e4,MAX_RETRY_ATTEMPTS:3,RETRY_DELAY_MS:1e3},zt={LOCK_STALE_MS:3e4,CONNECTIVITY_MAX_RETRY:3,CONNECTIVITY_RETRY_MS:2e3,CLI:"flow-ai-obs "},gt={UserPromptSubmit:30,PreToolUse:3,PostToolUse:10,Stop:15},H={FILE_PREFIX:"flow-obs-buffer-",DEFAULT_TTL_DAYS:4,MIN_TTL_DAYS:1,MAX_TTL_DAYS:30,DEFAULT_MAX_FILES:50,MIN_MAX_FILES:1,MAX_MAX_FILES:500,REPLAY_BATCH_SIZE:10},F={API_KEY_MAX_LENGTH:1024,API_KEY_PATTERN:/^[\x21-\x7E]+$/,EMAIL_MAX_LENGTH:254,EMAIL_HEADER_PATTERN:/^[\x21-\x7E]+$/},Ge="flow-ai-obs-debug.log",K={TOOL_INPUT:2e4,TOOL_OUTPUT:2e4,TRACE_OUTPUT:2e4,USER_INSTRUCTION:1e4,TRACE_INPUT:5e4,TOOL_BRIEF:60};Ps="flow-obs-";});function l(...t){if(process.env[p.FLOW_OBS_DEBUG]!=="1")return;let e=`[${new Date().toISOString()}] ${t.join(" ")}
|
|
25
25
|
`;try{O.writeFileSync(Fs,e,{flag:"a"});}catch(r){process.stderr.write(`[flow-obs debug ERROR] ${r.message}
|
|
26
|
-
`);}}var Fs,x=
|
|
26
|
+
`);}}var Fs,x=h(()=>{"use strict";k();Fs=$t.join(wt.tmpdir(),Ge);});function Bs(t){if(!Ds.test(t))throw new Error(`Invalid tenant value: "${t}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}function Hs(t,e){let r=e.length>400?e.slice(0,400)+"\u2026":e;l("toAuthError",`status=${t} body=${r}`);try{let n=JSON.parse(e);if(typeof n.error=="string"&&(l("toAuthError",`api_error_code=${n.error}`+(n.message?` api_message=${n.message}`:"")),Fr[n.error]))return new Et(Fr[n.error],t)}catch{}return t===401||t===403||t===500?new Et("Invalid credentials",t):t>=400&&t<500?new Et("Authentication request was rejected",t):new Error("Authentication service unavailable, please try again later")}function W(t){return new Promise((e,r)=>{try{Bs(t.tenant);}catch(d){return r(d)}let n=JSON.stringify({clientSecret:t.clientSecret}),s=new URL(mt().AUTH_ENGINE),i=s.protocol==="https:",o={hostname:s.hostname,port:s.port||(i?443:80),path:s.pathname+s.search,method:"POST",headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(n),FlowTenant:t.tenant}};l("getToken",`requesting token tenant=${t.tenant} host=${o.hostname} path=${o.path}`);let c=(i?_s__default.default:Ms__default.default).request(o,d=>{let E=[];d.on("data",u=>E.push(u)),d.on("end",()=>{let u=E.join("");if((d.statusCode??0)>=400)return r(Hs(d.statusCode??0,u));let f;try{f=JSON.parse(u);}catch{return r(new Error("Invalid response from auth engine"))}let T=f.expires_at??new Date(Date.now()+(f.expires_in??3600)*1e3).toISOString();if(!f.access_token)return r(new Error("Auth engine returned an empty access token. Check FLOW_BASE_URL and credentials."));e({accessToken:f.access_token,expiresAt:T});});});c.on("error",d=>r(new Error(`Network error: ${d.message}`))),c.setTimeout(Ut.REQUEST_TIMEOUT_MS,()=>{c.destroy(new Error("Request timeout"));}),c.write(n),c.end();})}var Et,Ds,Fr,ht=h(()=>{"use strict";k();x();Et=class extends Error{statusCode;constructor(e,r=0){super(e),this.name="AuthError",this.statusCode=r;}},Ds=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;Fr={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};});function xr(){return process.platform==="win32"?false:process.getuid?.()===0}function we(){if(xr())return process.stderr.write(`
|
|
27
27
|
`+I(` \u2717 flow-ai-obs is not supported in a sudo context.
|
|
28
28
|
|
|
29
29
|
`)+U(` npm install -g @ciandt-flow/flow-ai-obs
|
|
30
30
|
`)+`
|
|
31
|
-
`),1}var
|
|
31
|
+
`),1}var Te=h(()=>{"use strict";pt();});function Mr(){if(process.platform==="linux"&&process.getuid?.()===0&&process.env.SUDO_USER){let e=child_process.spawnSync("getent",["passwd",process.env.SUDO_USER],{encoding:"utf8",timeout:5e3}).stdout?.split(":")[5]?.trim();if(e)return {home:e,username:process.env.SUDO_USER}}return {home:wt__namespace.homedir(),username:process.env.SUDO_USER||process.env.USER||wt__namespace.userInfo().username}}function et(){if(process.env.WSL_DISTRO_NAME&&process.platform==="linux"){let t=process.env.USERPROFILE;if(!t){let r=child_process.spawnSync("cmd.exe",["/c","echo","%USERPROFILE%"],{encoding:"utf8",timeout:5e3}).stdout?.trim();r&&/^[A-Za-z]:\\/.test(r)&&(t=r);}if(t){let e=t.replace(/^([A-Za-z]):/,(r,n)=>`/mnt/${n.toLowerCase()}`).replace(/\\/g,"/");return $t__namespace.join(e,".claude","settings.json")}return $t__namespace.join(wt__namespace.homedir(),".claude","settings.json")}if(process.platform==="win32"){let t=process.env.USERPROFILE||wt__namespace.homedir();return $t__namespace.join(t,".claude","settings.json")}if(process.platform==="linux"&&process.getuid?.()===0&&process.env.SUDO_USER){let e=child_process.spawnSync("getent",["passwd",process.env.SUDO_USER],{encoding:"utf8",timeout:5e3}).stdout?.split(":")[5]?.trim();if(e)return $t__namespace.join(e,".claude","settings.json")}return $t__namespace.join(wt__namespace.homedir(),".claude","settings.json")}var qe=h(()=>{"use strict";Te();});function _e(){if(process.platform==="win32"){let r=process.env.APPDATA||$t__namespace.join(wt__namespace.homedir(),"AppData","Roaming");return $t__namespace.join(r,Dr,Br)}let t=Mr(),e=process.env.XDG_CONFIG_HOME||$t__namespace.join(t.home,".config");return $t__namespace.join(e,Dr,Br)}function Xe(){try{let t=O__namespace.readFileSync(et(),"utf8"),r=JSON.parse(t).env?.FLOW_BASE_URL;return typeof r=="string"&&r.trim()?r.trim():null}catch{return null}}var Dr,Br,ze=h(()=>{"use strict";qe();Dr="flow-ai-obs",Br="config.json";});function jr(t){try{let e=O__namespace.statSync(t);Date.now()-e.mtimeMs>Ws&&O__namespace.unlinkSync(t);}catch{}try{O__namespace.writeFileSync(t,String(process.pid),{flag:"wx"});}catch(e){throw e.code==="EEXIST"?new Error("Another install is already in progress. If this is stale, remove: "+t):e}}function Yr(t){try{O__namespace.unlinkSync(t);}catch{}}function js(t,e){let n=(Array.isArray(t)?t:[]).map(s=>{if(!Array.isArray(s?.hooks))return null;let i=s.hooks.filter(o=>!o.command?.startsWith?.("flow-ai-obs "));return i.length>0?{...s,hooks:i}:null}).filter(s=>s!=null);return [e,...n]}function Vr(t,e){let r=et(),n=r+".lock",s=[];O__namespace.mkdirSync($t__namespace.dirname(r),{recursive:true}),jr(n);try{if(O__namespace.existsSync(r)){O__namespace.copyFileSync(r,r+".bkp");try{O__namespace.chmodSync(r+".bkp",384);}catch{}}let i=_e();if(O__namespace.existsSync(i)){let _=i+".bkp";O__namespace.copyFileSync(i,_);try{O__namespace.chmodSync(_,384);}catch{}}let o={};try{o=JSON.parse(O__namespace.readFileSync(r,"utf8"));}catch{}let a=o.env&&typeof o.env=="object"?o.env:{};delete a.OTEL_EXPORTER_OTLP_HEADERS;let{getFlowUrls:c}=(k(),C(Cr)),d=c().OTEL_ENDPOINT,E={...tt,OTEL_EXPORTER_OTLP_ENDPOINT:t??d};o.env={...a,...E,...e??{}},o.otelHeadersHelper="flow-ai-obs otel-headers",(!o.hooks||typeof o.hooks!="object"||Array.isArray(o.hooks))&&(o.hooks={});let u=(_,S)=>({matcher:"",hooks:[{type:"command",command:`flow-ai-obs ${_}`,timeout:S}]}),f=["UserPromptSubmit","PreToolUse","PostToolUse","Stop"],T=o.hooks;for(let _ of f){let S=js(T[_],u(_,gt[_]));S.length>1&&s.push(_),T[_]=S;}O__namespace.writeFileSync(r,JSON.stringify(o,null,2)+`
|
|
32
32
|
`,{encoding:"utf8",mode:384});try{O__namespace.chmodSync(r,384);}catch{}}finally{Yr(n);}return {settingsPath:r,preserved:s}}function j(t){if(Qt===void 0)try{let r=O__namespace.readFileSync(et(),"utf8");Qt=JSON.parse(r).env??null;}catch{Qt=null;}if(!Qt)return null;let e=Qt[t];return typeof e=="string"?e:null}function Nt(t){let e=et(),r=e+".lock";O__namespace.mkdirSync($t__namespace.dirname(e),{recursive:true}),jr(r);try{let n={};try{n=JSON.parse(O__namespace.readFileSync(e,"utf8"));}catch{}(!n.env||typeof n.env!="object")&&(n.env={}),Object.assign(n.env,t),O__namespace.writeFileSync(e,JSON.stringify(n,null,2)+`
|
|
33
|
-
`,{encoding:"utf8",mode:384});try{O__namespace.chmodSync(e,384);}catch{}}finally{Yr(r);}}function
|
|
33
|
+
`,{encoding:"utf8",mode:384});try{O__namespace.chmodSync(e,384);}catch{}}finally{Yr(r);}}function te(t){let e=process.env[t];return e!==void 0?e!==""?e:void 0:j(t)??void 0}var Ws,Qt,rt=h(()=>{"use strict";k();ht();qe();ze();Ws=zt.LOCK_STALE_MS;});function ee(){let t=wt__namespace.default.homedir();if(process.platform==="darwin")return $t__namespace.default.join(t,"Library","Preferences",qt,Xt);if(process.platform==="win32"){let r=process.env.APPDATA??$t__namespace.default.join(t,"AppData","Roaming");return $t__namespace.default.join(r,qt,Xt)}let e=process.env.XDG_CONFIG_HOME??$t__namespace.default.join(t,".config");return $t__namespace.default.join(e,qt,Xt)}function tr(){try{let t=O__namespace.default.readFileSync(ee(),"utf8");return JSON.parse(t)}catch{return {}}}function Kr(t){let e=ee();O__namespace.default.mkdirSync($t__namespace.default.dirname(e),{recursive:true}),O__namespace.default.writeFileSync(e,JSON.stringify(t,null,2),{encoding:"utf8",mode:384});}var Qe,ne,Gr=h(()=>{"use strict";k();Qe={credentials:"credentials","token-cache":"tokenCache"};ne=class{static isAvailable(){return !0}static hasExistingData(){try{if(!O__namespace.default.existsSync(ee()))return !1;let e=JSON.parse(O__namespace.default.readFileSync(ee(),"utf8"));return !!(e&&e.credentials)}catch{return !1}}async getSecret(e,r){let n=tr(),s=Qe[r]??r,i=n[s];return i?typeof i=="string"?i:JSON.stringify(i):null}async setSecret(e,r,n){let s=tr(),i=Qe[r]??r;if(r==="token-cache")try{s[i]=JSON.parse(n);}catch{s[i]=n;}else s[i]=n;Kr(s);}async deleteSecret(e,r){let n=tr(),s=Qe[r]??r;return s in n?(delete n[s],Kr(n),!0):!1}getStoragePath(){return `config.json (unencrypted) \u2014 ${ee()}`}};});var Jr={};D(Jr,{MacOsKeyVaultProvider:()=>rr});var er,rr,qr=h(()=>{"use strict";er=util.promisify(child_process.execFile),rr=class{static async isAvailable(){try{return O.accessSync("/usr/bin/security",O.constants.X_OK),!0}catch{return !1}}async getSecret(e,r){try{let{stdout:n}=await er("security",["find-generic-password","-w","-a",r,"-s",e]);return n.trim()||null}catch{return null}}async setSecret(e,r,n){await er("security",["add-generic-password","-U","-a",r,"-s",e,"-w",n]);}async deleteSecret(e,r){try{return await er("security",["delete-generic-password","-a",r,"-s",e]),!0}catch{return !1}}getStoragePath(){return "macOS Keychain"}};});var zr={};D(zr,{LinuxKeyVaultProvider:()=>nr});var Xr,nr,Zr=h(()=>{"use strict";Xr=util.promisify(child_process.execFile),nr=class{static async isAvailable(){let e=["/usr/bin/secret-tool","/bin/secret-tool","/usr/local/bin/secret-tool"];for(let r of e)try{return O.accessSync(r,O.constants.X_OK),!0}catch{}return !1}async getSecret(e,r){try{let{stdout:n}=await Xr("secret-tool",["lookup","service",e,"account",r]);return n.trim()||null}catch{return null}}async setSecret(e,r,n){await new Promise((s,i)=>{let o=child_process.spawn("secret-tool",["store","--label",e,"service",e,"account",r]);o.on("error",i),o.on("close",a=>{a===0?s():i(new Error(`secret-tool exited with code ${a}`));}),o.stdin.write(n),o.stdin.end();});}async deleteSecret(e,r){try{return await Xr("secret-tool",["clear","service",e,"account",r]),!0}catch{return !1}}getStoragePath(){return "Linux Secret Service (libsecret)"}};});var Qr={};D(Qr,{WindowsKeyVaultProvider:()=>sr});var sr,tn=h(()=>{"use strict";sr=class{static async isAvailable(){try{return await Vt("keytar").getPassword("__flow_probe__","__flow_probe__"),!0}catch{return !1}}async getSecret(e,r){return Vt("keytar").getPassword(e,r)}async setSecret(e,r,n){await Vt("keytar").setPassword(e,r,n);}async deleteSecret(e,r){return Vt("keytar").deletePassword(e,r)}getStoragePath(){return "Windows Credential Manager"}};});async function en(){return process.env[p.FLOW_OBS_USE_JSON_VAULT]==="1"?new ne:await to()??new ne}async function to(){switch(process.platform){case "darwin":{let{MacOsKeyVaultProvider:t}=await Promise.resolve().then(()=>(qr(),Jr));return await t.isAvailable()?new t:null}case "linux":{let{LinuxKeyVaultProvider:t}=await Promise.resolve().then(()=>(Zr(),zr));return await t.isAvailable()?new t:null}case "win32":{let{WindowsKeyVaultProvider:t}=await Promise.resolve().then(()=>(tn(),Qr));return await t.isAvailable()?new t:null}default:return null}}var rn=h(()=>{"use strict";k();Gr();});var sn={};D(sn,{clearFlowCredentials:()=>ro,getConfigPath:()=>so,getEmailFromToken:()=>xt,getFlowCredentials:()=>nn,getTokenCache:()=>se,hasCredentials:()=>oo,isTokenValid:()=>no,saveFlowCredentials:()=>eo,saveTokenCache:()=>nt});function Ft(){return or||(or=en()),or}async function nn(){let e=await(await Ft()).getSecret(Ct,ir);if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function eo(t){if(!t.clientId||!t.clientSecret||!t.tenant)throw new Error("clientId, clientSecret and tenant are required");await(await Ft()).setSecret(Ct,ir,JSON.stringify(t));}async function ro(){let t=await Ft();await t.deleteSecret(Ct,ir),await t.deleteSecret(Ct,ar);}async function nt(t){await(await Ft()).setSecret(Ct,ar,JSON.stringify({accessToken:t.accessToken,expiresAt:t.expiresAt,lastAuthCheckAt:t.lastAuthCheckAt}));}async function se(){let e=await(await Ft()).getSecret(Ct,ar);if(!e)return null;try{let r=JSON.parse(e);return {accessToken:r.accessToken,expiresAt:r.expiresAt,lastAuthCheckAt:r.lastAuthCheckAt}}catch{return null}}async function no(){let t=await se();return t?new Date(t.expiresAt)>new Date:false}async function xt(){let t=await se();if(!t||!t.accessToken)return null;try{let e=t.accessToken.split(".");if(e.length<2)return null;let r=JSON.parse(Buffer.from(e[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8"));return r.email??r.preferred_username??r.upn??r.sub??null}catch{return null}}async function so(){let t=await Ft();if(typeof t.getStoragePath=="function")return t.getStoragePath();let e=process.platform;return e==="darwin"?"macOS Keychain":e==="win32"?"Windows Credential Manager":"Linux Secret Service (libsecret)"}async function oo(){let t=await nn();return !!(t&&t.clientId&&t.clientSecret&&t.tenant)}var Ct,ir,ar,or,Mt=h(()=>{"use strict";rn();k();Ct=Jt.SERVICE,ir=Jt.ACCOUNT_CREDS,ar=Jt.ACCOUNT_TOKEN,or=null;});function on(){return !!process.env[p.FLOW_USER_EMAIL]||!!j(p.FLOW_USER_EMAIL)}function cr(t){l("maybePersistUserEmail",`${t}: starting`);let e=t==="api-key"?`\u26A0\uFE0F flow-ai-obs: FLOW_USER_EMAIL is not set. Configure it with:
|
|
34
34
|
flow-ai-obs init --custom-email <EMAIL>
|
|
35
35
|
`:`\u26A0\uFE0F flow-ai-obs: FLOW_USER_EMAIL is not set and could not be derived from token.
|
|
36
36
|
Run: flow-ai-obs init
|
|
37
37
|
`;return xt().then(r=>{if(r){let n=r.split(/[\r\n]/)[0].replace(/[\x00-\x1F\x7F]/g,"").trim();if(!n)return;let s=n.indexOf("@"),i=n.slice(s+1);if(!(n.length<=254&&F.EMAIL_HEADER_PATTERN.test(n)&&(n.match(/@/g)??[]).length===1&&s>0&&s<n.length-1&&i.includes("."))){l("maybePersistUserEmail",`${t}: email from token failed basic validation \u2014 skipping persist`);return}try{Nt({[p.FLOW_USER_EMAIL]:n}),l("maybePersistUserEmail",`${t}: persisted FLOW_USER_EMAIL from OAuth token`);}catch(a){l("maybePersistUserEmail",`${t}: FLOW_USER_EMAIL write failed: ${a.message}`),process.stderr.write(`\u26A0\uFE0F flow-ai-obs: could not persist FLOW_USER_EMAIL to settings.json.
|
|
38
38
|
Run: flow-ai-obs init
|
|
39
|
-
`);}}else process.stderr.write(e);}).catch(r=>{l("maybePersistUserEmail",`${t}: getEmailFromToken failed: ${r.message}`);})}var an=
|
|
39
|
+
`);}}else process.stderr.write(e);}).catch(r=>{l("maybePersistUserEmail",`${t}: getEmailFromToken failed: ${r.message}`);})}var an=h(()=>{"use strict";Mt();rt();x();k();});function co(t){return ao.some(e=>e.test(t))}function lo(t){if(!t)return null;try{let e=t.split(".");if(e.length<2)return null;let r=JSON.parse(Buffer.from(e[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8"));return r.email||r.preferred_username||r.upn||r.sub||null}catch{return null}}function st(t){if(!t)return null;try{let e=t.split(".");if(e.length<2)return null;let r=JSON.parse(Buffer.from(e[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8")),{clientId:n,clientSecret:s,tenant:i}=r;return !n||!s||!i?null:{clientId:n,clientSecret:s,tenant:i}}catch{return null}}function cn(t){let e=Buffer.from(JSON.stringify({alg:"none",typ:"JWT"})).toString("base64url"),r=Buffer.from(JSON.stringify({clientId:t.clientId,clientSecret:t.clientSecret,tenant:t.tenant})).toString("base64url");return `${e}.${r}.`}function Tt(t){let e;try{e=new URL(t);}catch{throw new Error(`Invalid URL: ${t}`)}let r=process.env[p.FLOW_OBS_ALLOW_HTTP]==="true";if(!r&&e.protocol!=="https:")throw new Error(`URL must use HTTPS: ${t}`);if(e.username||e.password)throw new Error(`URL must not contain embedded credentials: ${t}`);if(!r&&co(e.hostname))throw new Error(`SSRF: private/loopback host not allowed: ${e.hostname}`);return t}async function ln(){let t=st(process.env[p.ANTHROPIC_AUTH_TOKEN]);return t?{user:await xt().catch(()=>null)??t.clientId,tenant:t.tenant}:{user:"",tenant:""}}function uo(t){let e=process.env[p.OTEL_EXPORTER_OTLP_HEADERS];if(!e)return null;let r=t.toLowerCase();for(let n of e.split(",")){let s=n.indexOf("=");if(!(s<=0)&&n.slice(0,s).trim().toLowerCase()===r){let i=n.slice(s+1),o=i.search(/[\r\n]/);return (o===-1?i:i.slice(0,o)).trim()||null}}return null}function Se(){let t=te(p.FLOW_USER_EMAIL);if(t!==void 0){let r=t.replace(/[\r\n]/g,"").trim();if(r)if(r.length>F.EMAIL_MAX_LENGTH)l("resolveUserEmail",`FLOW_USER_EMAIL exceeds ${F.EMAIL_MAX_LENGTH} chars \u2014 skipping`);else if(!F.EMAIL_HEADER_PATTERN.test(r))l("resolveUserEmail","FLOW_USER_EMAIL contains non-printable or control characters \u2014 skipping");else return l("resolveUserEmail","using FLOW_USER_EMAIL override: [REDACTED]"),r}let e=uo("x-flow-user");if(e){let r=e.replace(/[\r\n]/g,"").trim();if(r.length>F.EMAIL_MAX_LENGTH)l("resolveUserEmail",`x-flow-user from OTEL_EXPORTER_OTLP_HEADERS exceeds ${F.EMAIL_MAX_LENGTH} chars \u2014 skipping`);else if(!F.EMAIL_HEADER_PATTERN.test(r))l("resolveUserEmail","x-flow-user from OTEL_EXPORTER_OTLP_HEADERS is empty or contains non-printable characters \u2014 skipping");else return l("resolveUserEmail","using x-flow-user from OTEL_EXPORTER_OTLP_HEADERS: [REDACTED]"),r}try{let r=wt__namespace.default.userInfo().username||process.env.USERNAME||process.env.USER||"",n=r.lastIndexOf("\\");if(n!==-1&&(r=r.slice(n+1)),r=r.trim().replace(/[^a-zA-Z0-9._%+\-]/g,"").replace(/^\.+/,""),!r)return l("resolveUserEmail","Could not derive x-flow-user: username is empty. Run: flow-ai-obs init"),null;let s=`${r}@ciandt.com`;return l("resolveUserEmail","derived email: [REDACTED]"),s}catch(r){return l("resolveUserEmail",`Could not derive x-flow-user from OS username: ${r.message}. Run: flow-ai-obs init`),null}}function oe(){let t=process.env[p.FLOW_API_KEY];if(!t)return null;let e=t.replace(/[\r\n]/g,"").trim();return e?e.length>F.API_KEY_MAX_LENGTH?(l("resolveApiKey",`FLOW_API_KEY exceeds ${F.API_KEY_MAX_LENGTH} chars \u2014 rejected`),null):F.API_KEY_PATTERN.test(e)?e:(l("resolveApiKey","FLOW_API_KEY contains non-printable or control characters \u2014 rejected"),null):null}function po(){return new Date().toISOString().slice(0,10)}async function fo(t){let e=po(),r=await se();if(r?.lastAuthCheckAt!==e){l("getOrRefreshToken",`daily auth check (last: ${r?.lastAuthCheckAt??"never"})`);let i=Ut.MAX_RETRY_ATTEMPTS;for(let o=1;o<=i;o++)try{let a=await W(t);try{await nt({...a,lastAuthCheckAt:e});}catch(d){l("getOrRefreshToken",`saveTokenCache failed (non-fatal): ${d.message}`);}return l("getOrRefreshToken",`daily check passed (attempt ${o}), expires=${a.expiresAt}`),oe()?on()||await cr("api-key"):await cr("oauth"),a.accessToken}catch(a){if(a instanceof Et){if(a.statusCode!==500)throw l("getOrRefreshToken",`daily check auth error (${a.statusCode}) \u2014 propagating immediately`),a;if(o<i){l("getOrRefreshToken",`daily check 500 error (attempt ${o}/${i}) \u2014 retrying in 1s`),await new Promise(c=>setTimeout(c,Ut.RETRY_DELAY_MS));continue}throw l("getOrRefreshToken",`daily check failed after ${i} attempts \u2014 propagating`),a}l("getOrRefreshToken",`daily check network error \u2014 using cache: ${a.message}`);break}}let n=r!=null&&new Date(r.expiresAt)>new Date;if(l("getOrRefreshToken",`cacheValid=${n}`),n)return l("getOrRefreshToken",`using cached token, expires=${r.expiresAt}`),r.accessToken;l("getOrRefreshToken",`token expired \u2014 refreshing via auth-engine (tenant=${t.tenant} clientId=${t.clientId})`);let s=await W(t);try{await nt({...s,lastAuthCheckAt:e});}catch(i){l("getOrRefreshToken",`token cache save failed (non-fatal): ${i.message}`);}return l("getOrRefreshToken",`token refreshed, expires=${s.expiresAt}`),s.accessToken}function mo(t,e){let r=e&&e.accessToken?e.accessToken:"";return {endpoint:t.replace(/\/$/,"")+"/flow-langfuse-gateway/v1/traces",authHeader:`Bearer ${r}`}}function go(t,e,r){let n=Buffer.from(`${e}:${r}`).toString("base64");return {endpoint:t.replace(/\/$/,"")+"/api/public/otel/v1/traces",authHeader:`Basic ${n}`}}async function z(){let t=[],e=st(process.env[p.ANTHROPIC_AUTH_TOKEN]);l("resolveCredentials",e?"credentials resolved from ANTHROPIC_AUTH_TOKEN":"ANTHROPIC_AUTH_TOKEN absent or invalid"),e&&l("resolveCredentials",`clientId=${e.clientId}`,`tenant=${e.tenant}`);let r=e?e.tenant:"",n=process.env[p.FLOW_TELEMETRY]==="true",s=process.env[p.LANGFUSE_BASE_URL],i=process.env[p.LANGFUSE_PUBLIC_KEY],o=process.env[p.LANGFUSE_SECRET_KEY];if(n&&s&&i&&o){let u="",f=r;e&&(u=await xt().catch(()=>null)??e.clientId);let T={user:u??"",tenant:f??"",team:"",project:""};t.push({mode:"direct",...go(Tt(s),i,o),...T}),l("resolveCredentials","direct mode active",`user=${T.user}`,`tenant=${T.tenant}`);}if(!e){if(t.length===0){let u=[];return u.authError=false,u}return t}let a;try{a=await fo(e);}catch(u){if(l("resolveCredentials",`token refresh failed: ${u.message}`,`(tenant=${e.tenant} clientId=${e.clientId})`),t.length>0)return t.authError=true,t;let f=[];return f.authError=true,f}let d={user:lo(a)??e.clientId,tenant:r,team:"",project:""},E=process.env[p.FLOW_TELEMETRY_GATEWAY]??ft();return t.push({mode:"gateway",...mo(Tt(E),{accessToken:a}),...d}),t}var ao,G=h(()=>{"use strict";Mt();ht();k();x();an();rt();ao=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^0\.0\.0\.0$/,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i,/(?:^|\.)localtest\.me\.?$/i,/(?:^|\.)lvh\.me\.?$/i,/(?:^|\.)vcap\.me\.?$/i];});var dn={};D(dn,{clearLoggedOutMarker:()=>ur,isLoggedOut:()=>wo,markLoggedOut:()=>ho});function lr(){return $t__namespace.default.join(wt__namespace.default.homedir(),".claude","flow-obs",".logged-out")}function ho(){try{let t=lr();O__namespace.default.mkdirSync($t__namespace.default.dirname(t),{recursive:!0}),O__namespace.default.writeFileSync(t,"",{mode:384});}catch{}}function ur(){try{O__namespace.default.unlinkSync(lr());}catch{}}function wo(){try{return O__namespace.default.existsSync(lr())}catch{return false}}var dr=h(()=>{"use strict";});function pr(){let t=process.env.FLOW_BASE_URL;return t&&t.trim()?t.trim():j("FLOW_BASE_URL")}function To(){return j(p.ANTHROPIC_AUTH_TOKEN)??void 0}async function Ae(){let t=pr();if(!t)return {ok:false,baseUrl:"",user:"",tenant:"",notConfigured:true,error:"NOT_CONFIGURED"};try{let s=new URL(t);if(s.protocol!=="https:"&&s.protocol!=="http:")throw new Error}catch{return {ok:false,baseUrl:t,user:"",tenant:"",notConfigured:true,error:"NOT_CONFIGURED"}}let e=To(),r=st(e);if(!r)return {ok:false,baseUrl:t,user:"",tenant:"",error:"No credentials found"};let n=process.env.FLOW_BASE_URL;process.env.FLOW_BASE_URL=t;try{let s=await W({clientId:r.clientId,clientSecret:r.clientSecret,tenant:r.tenant});await nt({accessToken:s.accessToken,expiresAt:s.expiresAt});let i=r.clientId;try{let o=s.accessToken.split(".");if(o.length>=2){let a=JSON.parse(Buffer.from(o[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8"));i=a.email??a.preferred_username??a.upn??a.sub??i;}}catch{}return {ok:!0,baseUrl:t,user:i,tenant:r.tenant}}catch(s){return {ok:false,baseUrl:t,user:r.clientId,tenant:r.tenant,error:s.message}}finally{n===void 0?delete process.env.FLOW_BASE_URL:process.env.FLOW_BASE_URL=n;}}var fr=h(()=>{"use strict";Mt();G();rt();k();ht();});var ae={};D(ae,{promptRaw:()=>ie,runLogin:()=>yo});function J(t){return typeof t=="string"?t.replace(_o,""):t}function ie(t,e={}){return new Promise((r,n)=>{if(typeof process.stdin.setRawMode!="function"){n(new Error("NOT_A_TTY"));return}let{masked:s=false,defaultValue:i=""}=e;process.stdout.write(t+i);let o=i;function a(){try{process.stdin.setRawMode(!1);}catch{}}process.once("uncaughtException",a),process.once("unhandledRejection",a);let c=E=>{if(E===""){d(),n(new Error("SIGINT"));return}if(E==="\r"||E===`
|
|
40
40
|
`){d(),process.stdout.write(`
|
|
41
|
-
`),r(o);return}if(
|
|
41
|
+
`),r(o);return}if(E==="\x7F"){o.length>0&&(o=o.slice(0,-1),process.stdout.write("\b \b"));return}E.startsWith("\x1B")||(o+=E,process.stdout.write(s?"*".repeat(E.length):E));};function d(){process.stdin.setRawMode(false),process.stdin.removeListener("data",c),process.removeListener("uncaughtException",a),process.removeListener("unhandledRejection",a);}process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",c);})}async function Oe(t,e=false){let r=pr(),n=process.env.FLOW_BASE_URL;r&&(process.env.FLOW_BASE_URL=r);try{let{accessToken:s,expiresAt:i}=await W(t),o=cn(t);if(e)return {jwt:o,accessToken:s,expiresAt:i};Nt({[p.ANTHROPIC_AUTH_TOKEN]:o}),ur(),await nt({accessToken:s,expiresAt:i});}finally{n===void 0?delete process.env.FLOW_BASE_URL:process.env.FLOW_BASE_URL=n;}}async function So(t=false){try{let e=(await ie(U(" ? ")+"Client ID: ")).trim(),r=(await ie(U(" ? ")+"Client Secret: ",{masked:!0})).trim(),n=(await ie(U(" ? ")+"Tenant: ")).trim();if(!e||!r||!n)return process.stderr.write(I(` \u2717 All fields are required
|
|
42
42
|
`)),1;if(process.stdout.write(g(` Authenticating...
|
|
43
43
|
`)),t){let s=await Oe({clientId:e,clientSecret:r,tenant:n},!0);return process.stdout.write(`
|
|
44
44
|
${b("\u2713")} ${R("Authenticated")}
|
|
@@ -54,29 +54,29 @@
|
|
|
54
54
|
${I("\u2717")} ${R("Authentication failed:")}
|
|
55
55
|
${J(e.message)}
|
|
56
56
|
|
|
57
|
-
`),1}}async function yo(t={}){let e=
|
|
57
|
+
`),1}}async function yo(t={}){let e=we();if(e)return e;let{deferPersist:r=false,skipAuthCheck:n=false}=t;if(t.clientId&&t.clientSecret&&t.tenant)try{if(r){let i=await Oe({clientId:t.clientId,clientSecret:t.clientSecret,tenant:t.tenant},!0);return process.stdout.write(b(` \u2713 Authenticated. Tenant: ${J(t.tenant)}
|
|
58
58
|
|
|
59
59
|
`)),{code:0,result:i}}return await Oe({clientId:t.clientId,clientSecret:t.clientSecret,tenant:t.tenant}),process.stdout.write(b(` \u2713 Authenticated. Tenant: ${J(t.tenant)}
|
|
60
60
|
|
|
61
61
|
`)),0}catch(i){return process.stderr.write(I(` \u2717 Authentication failed: ${J(i.message)}
|
|
62
62
|
`)),1}let s=await Ae();if(!n){if(process.stdout.write(`
|
|
63
63
|
`),process.stdout.write(R(` Auth
|
|
64
|
-
`)),s.notConfigured)return process.stdout.write(` ${
|
|
64
|
+
`)),s.notConfigured)return process.stdout.write(` ${L("\u26A0")} Not configured
|
|
65
65
|
`),process.stdout.write(g(" Run `flow-ai-obs init` to set up the environment first.\n")),process.stdout.write(`
|
|
66
66
|
`),1;if(s.ok){process.stdout.write(` ${b("\u2713")} Authenticated
|
|
67
67
|
`),process.stdout.write(g(" URL: ")+J(s.baseUrl)+`
|
|
68
68
|
`),process.stdout.write(g(" Tenant: ")+J(s.tenant)+`
|
|
69
69
|
`),process.stdout.write(g(" User: ")+J(s.user)+`
|
|
70
70
|
`),process.stdout.write(`
|
|
71
|
-
`);let i;try{i=await
|
|
71
|
+
`);let i;try{i=await ie(U(" ? ")+"Re-authenticate? (y/N): ");}catch(o){if(o.message==="SIGINT")return process.stdout.write(`
|
|
72
72
|
`),130;if(o.message==="NOT_A_TTY")return process.stdout.write(b(` \u2713 Using existing credentials.
|
|
73
73
|
|
|
74
74
|
`)),0;throw o}if(i.trim().toLowerCase()!=="y")return process.stdout.write(b(` \u2713 Using existing credentials.
|
|
75
75
|
|
|
76
|
-
`)),0}else s.error==="No credentials found"?(process.stdout.write(` ${
|
|
76
|
+
`)),0}else s.error==="No credentials found"?(process.stdout.write(` ${L("\u26A0")} Not authenticated
|
|
77
77
|
`),process.stdout.write(g(` URL: ${s.baseUrl}
|
|
78
78
|
`)),process.stdout.write(`
|
|
79
|
-
`)):(process.stdout.write(` ${
|
|
79
|
+
`)):(process.stdout.write(` ${L("\u26A0")} Session not valid for current endpoint
|
|
80
80
|
`),process.stdout.write(g(" URL: ")+J(s.baseUrl)+`
|
|
81
81
|
`),process.stdout.write(g(" Tenant: ")+J(s.tenant)+`
|
|
82
82
|
`),process.stdout.write(g(" User: ")+g("(not authenticated)")+`
|
|
@@ -85,13 +85,13 @@
|
|
|
85
85
|
`),130;if(i.message==="NOT_A_TTY")return process.stderr.write(I(` \u2717 No TTY available for interactive login.
|
|
86
86
|
`)+` Pass --client-id, --client-secret and --tenant for non-interactive use.
|
|
87
87
|
|
|
88
|
-
`),1;throw i}}var _o,
|
|
88
|
+
`),1;throw i}}var _o,ce=h(()=>{"use strict";Mt();dr();ht();G();rt();k();pt();Te();fr();_o=/[\x00-\x08\x0B-\x1F\x7F]|\x1b\[[0-9;]*[a-zA-Z]/g;});var En={};D(En,{normalizeCustomUrl:()=>gn,runInit:()=>Lo,validateCustomUrl:()=>Er,validateEmail:()=>gr});function Le(t,e,r){process.stdout.write(R(U(`
|
|
89
89
|
[${t}/${e}] ${r}
|
|
90
|
-
`)));}function
|
|
91
|
-
`);}function
|
|
90
|
+
`)));}function ue(t){process.stdout.write(` ${b("\u2713")} ${t}
|
|
91
|
+
`);}function ke(t){process.stdout.write(` ${L("\u26A0")} ${t}
|
|
92
92
|
`);}function pn(t){process.stdout.write(` ${g(t)}
|
|
93
|
-
`);}function fn(){return !!j(p.ANTHROPIC_AUTH_TOKEN)}function Ao(){let t=Xe();if(!t)return null;Nt({FLOW_BASE_URL:t});try{let e=
|
|
94
|
-
`,{encoding:"utf8",mode:384});}catch{}return t}function gn(t){let e=t.trim().replace(/\\/g,"/");/^https?:\/\//i.test(e)||(e=`https://${e}`);try{let r=new URL(e);return `${r.protocol}//${r.host}`}catch{return e}}function
|
|
93
|
+
`);}function fn(){return !!j(p.ANTHROPIC_AUTH_TOKEN)}function Ao(){let t=Xe();if(!t)return null;Nt({FLOW_BASE_URL:t});try{let e=_e(),r={};try{r=JSON.parse(O__namespace.readFileSync(e,"utf8"));}catch{return t}delete r.baseUrl,Object.keys(r).length===0?O__namespace.unlinkSync(e):O__namespace.writeFileSync(e,JSON.stringify(r,null,2)+`
|
|
94
|
+
`,{encoding:"utf8",mode:384});}catch{}return t}function gn(t){let e=t.trim().replace(/\\/g,"/");/^https?:\/\//i.test(e)||(e=`https://${e}`);try{let r=new URL(e);return `${r.protocol}//${r.host}`}catch{return e}}function Er(t,e=false){if(e){let i=/^https?:\/\//i.test(t.trim())?t.trim().replace(/\\/g,"/"):`https://${t.trim().replace(/\\/g,"/")}`,o;try{o=new URL(i);}catch{throw new Error(`Invalid URL: ${t}`)}if(o.protocol!=="https:")throw new Error(`Custom URL must use HTTPS: ${t}`);if(o.pathname!=="/"&&o.pathname!=="")throw new Error(`Custom URL must be a base URL with no path beyond the root.
|
|
95
95
|
Received: ${t}
|
|
96
96
|
Expected: https://tenant.example.com`);if(o.search)throw new Error(`Custom URL must not contain query parameters.
|
|
97
97
|
Received: ${t}
|
|
@@ -99,14 +99,14 @@
|
|
|
99
99
|
Received: ${t}
|
|
100
100
|
Expected: https://tenant.example.com`);if(o.username||o.password)throw new Error(`Custom URL must not contain embedded credentials.
|
|
101
101
|
Received: ${t}
|
|
102
|
-
Expected: https://tenant.example.com`);if(!o.hostname.includes("."))throw new Error(`Invalid domain: ${o.hostname}. Expected format: tenant.example.com`);let a=`${o.protocol}//${o.host}`,c=process.env[p.FLOW_OBS_ALLOW_HTTP];try{delete process.env[p.FLOW_OBS_ALLOW_HTTP],Tt(a);}finally{c!==void 0&&(process.env[p.FLOW_OBS_ALLOW_HTTP]=c);}return a}let r=gn(t),n;try{n=new URL(r);}catch{throw new Error(`Invalid URL: ${t}`)}if(n.protocol!=="https:")throw new Error(`Custom URL must use HTTPS: ${t}`);if(!n.hostname.includes("."))throw new Error(`Invalid domain: ${n.hostname}. Expected format: tenant.example.com`);let s=process.env[p.FLOW_OBS_ALLOW_HTTP];try{delete process.env[p.FLOW_OBS_ALLOW_HTTP],Tt(r);}finally{s!==void 0&&(process.env[p.FLOW_OBS_ALLOW_HTTP]=s);}return r.replace(/\/$/,"")}async function mr(){for(let t=1;t<=3;t++)try{let e=await De(" Enter your Flow domain (e.g., tenant.ciandt.com)");return
|
|
102
|
+
Expected: https://tenant.example.com`);if(!o.hostname.includes("."))throw new Error(`Invalid domain: ${o.hostname}. Expected format: tenant.example.com`);let a=`${o.protocol}//${o.host}`,c=process.env[p.FLOW_OBS_ALLOW_HTTP];try{delete process.env[p.FLOW_OBS_ALLOW_HTTP],Tt(a);}finally{c!==void 0&&(process.env[p.FLOW_OBS_ALLOW_HTTP]=c);}return a}let r=gn(t),n;try{n=new URL(r);}catch{throw new Error(`Invalid URL: ${t}`)}if(n.protocol!=="https:")throw new Error(`Custom URL must use HTTPS: ${t}`);if(!n.hostname.includes("."))throw new Error(`Invalid domain: ${n.hostname}. Expected format: tenant.example.com`);let s=process.env[p.FLOW_OBS_ALLOW_HTTP];try{delete process.env[p.FLOW_OBS_ALLOW_HTTP],Tt(r);}finally{s!==void 0&&(process.env[p.FLOW_OBS_ALLOW_HTTP]=s);}return r.replace(/\/$/,"")}async function mr(){for(let t=1;t<=3;t++)try{let e=await De(" Enter your Flow domain (e.g., tenant.ciandt.com)");return Er(e)}catch(e){if(process.stderr.write(L(` \u2717 ${e.message}
|
|
103
103
|
|
|
104
104
|
`)),t===3)throw process.stderr.write(I(` Too many invalid attempts.
|
|
105
105
|
|
|
106
|
-
`)),new Error("Too many invalid URL attempts")}throw new Error("Too many invalid URL attempts")}function mn(t){return t.replace(/[\r\n]/g,"").trim()}function gr(t){if(t.length>254)return "Email must not exceed 254 characters";if(/\s/.test(t))return "Email must not contain spaces";if((t.match(/@/g)??[]).length!==1)return "Email must contain exactly one @";let e=t.indexOf("@");if(e<=0)return "Email must contain a local part before @";let r=t.slice(e+1);if(!r)return "Email must contain a domain after @";if(r.startsWith("."))return `Invalid email domain: ${r}`;if(/^\d{1,3}(\.\d{1,3}){3}$/.test(r))return "Email domain cannot be an IP address";try{let n=new URL(`https://${r}`);if(!n.hostname.includes("."))return "Email domain must contain at least one dot";if(n.pathname!=="/"||n.search||n.hash||n.port)return `Invalid email domain: ${r}`}catch(n){return l("validateEmail",`URL parse error for domain ${r}: ${n.message}`),`Invalid email domain: ${r}`}return null}async function Oo(t,e,r){let n=j(p.FLOW_USER_EMAIL),s=Se(),i=s??"(could not be derived)";if(!t||!Q()){if(r){let c=mn(r);if(!c)throw new Error("--custom-email: value is empty after normalization");let d=gr(c);if(d)throw new Error(`--custom-email: ${d}`);return
|
|
107
|
-
To set it: flow-ai-obs init --custom-email <you@company.com>`),null}r&&
|
|
106
|
+
`)),new Error("Too many invalid URL attempts")}throw new Error("Too many invalid URL attempts")}function mn(t){return t.replace(/[\r\n]/g,"").trim()}function gr(t){if(t.length>254)return "Email must not exceed 254 characters";if(/\s/.test(t))return "Email must not contain spaces";if((t.match(/@/g)??[]).length!==1)return "Email must contain exactly one @";let e=t.indexOf("@");if(e<=0)return "Email must contain a local part before @";let r=t.slice(e+1);if(!r)return "Email must contain a domain after @";if(r.startsWith("."))return `Invalid email domain: ${r}`;if(/^\d{1,3}(\.\d{1,3}){3}$/.test(r))return "Email domain cannot be an IP address";try{let n=new URL(`https://${r}`);if(!n.hostname.includes("."))return "Email domain must contain at least one dot";if(n.pathname!=="/"||n.search||n.hash||n.port)return `Invalid email domain: ${r}`}catch(n){return l("validateEmail",`URL parse error for domain ${r}: ${n.message}`),`Invalid email domain: ${r}`}return null}async function Oo(t,e,r){let n=j(p.FLOW_USER_EMAIL),s=Se(),i=s??"(could not be derived)";if(!t||!Q()){if(r){let c=mn(r);if(!c)throw new Error("--custom-email: value is empty after normalization");let d=gr(c);if(d)throw new Error(`--custom-email: ${d}`);return ue(`Email: ${R(c)}`),c}return n??s?ue(`Email: ${R(n??s)}`):ke(`Email not configured \u2014 telemetry will not include user identity.
|
|
107
|
+
To set it: flow-ai-obs init --custom-email <you@company.com>`),null}r&&ke("--custom-email is ignored in interactive mode. Use --no-interactive to apply it.");async function o(){for(let c=1;c<=3;c++){let d;try{d=await De(" Enter your corporate email (e.g., user@company.com)");}catch(f){throw process.stderr.write(I(` \u2717 Input error: ${f.message}
|
|
108
108
|
|
|
109
|
-
`)),f}let
|
|
109
|
+
`)),f}let E=mn(d),u=gr(E);if(!u)return E;process.stderr.write(L(` \u2717 ${u}
|
|
110
110
|
|
|
111
111
|
`));}throw process.stderr.write(I(` Too many invalid attempts.
|
|
112
112
|
|
|
@@ -118,9 +118,9 @@
|
|
|
118
118
|
|
|
119
119
|
`)),s):a():(process.stdout.write(b(` \u2713 Email: ${R(i)}
|
|
120
120
|
|
|
121
|
-
`)),s):(process.stdout.write(
|
|
121
|
+
`)),s):(process.stdout.write(L(`
|
|
122
122
|
\u26A0 Could not derive email from OS username.
|
|
123
|
-
`)),a())}function
|
|
123
|
+
`)),a())}function le(){let t=j(p.FLOW_BASE_URL);return t&&t.trim()?t.trim():null}async function Lo(t={}){let e=we();if(e)return e;let r=t.url,n=!!oe();!n&&process.env[p.FLOW_API_KEY]&&ke(`FLOW_API_KEY appears to be misconfigured \u2014 authentication with Flow is required.
|
|
124
124
|
To fix: unset FLOW_API_KEY && flow-ai-obs init`);let s=n?3:4;process.stdout.write(R(U(`
|
|
125
125
|
flow-ai-obs init
|
|
126
126
|
`))),process.stdout.write(g(` Configuring your development environment:
|
|
@@ -130,52 +130,52 @@
|
|
|
130
130
|
`)),n?process.stdout.write(g(` [3/${s}] Observability OpenTelemetry metrics, logs and trace hooks
|
|
131
131
|
`)):(process.stdout.write(g(` [3/${s}] Authentication Authenticate with Flow
|
|
132
132
|
`)),process.stdout.write(g(` [4/${s}] Observability OpenTelemetry metrics, logs and trace hooks
|
|
133
|
-
`))),
|
|
134
|
-
`)+
|
|
135
|
-
`)+
|
|
133
|
+
`))),Le(1,s,"Flow Environment Setup");let i=false;{let w=j(p.FLOW_BASE_URL);if(w&&(ke(`Base URL already configured (FLOW_BASE_URL=${w})`),!t.noInteractive&&Q()))try{let{promptRaw:v}=await Promise.resolve().then(()=>(ce(),ae));i=(await v(U(" ? ")+"Replace existing base URL configuration? [y/N]: ")).trim().toLowerCase()==="y",i||pn("Keeping existing base URL configuration.");}catch{}}if(process.env.WSL_DISTRO_NAME&&process.platform==="linux"&&process.stdout.write(L(` \u26A0 WSL detected. If your code assistant is installed on Windows, install flow-ai-obs
|
|
134
|
+
`)+L(" on Windows too: ")+U(`npm install -g @ciandt-flow/flow-ai-obs
|
|
135
|
+
`)+L(` Running a Windows code assistant + flow-ai-obs (WSL) is not a supported configuration.
|
|
136
136
|
|
|
137
|
-
`)),Ao(),!r&&!t.noInteractive&&Q()){let w=
|
|
137
|
+
`)),Ao(),!r&&!t.noInteractive&&Q()){let w=le();i?r=await mr():w?(process.stdout.write(`
|
|
138
138
|
Current base URL: ${R(w)}
|
|
139
139
|
`),await Gt(" Keep this URL?",true)||(r=await mr())):(process.stdout.write(`
|
|
140
|
-
`),await Gt(" Does your organization use a custom Flow URL?",false)?r=await mr():
|
|
141
|
-
`);}if(!r&&!t.noInteractive&&!Q()){let w=
|
|
140
|
+
`),await Gt(" Does your organization use a custom Flow URL?",false)?r=await mr():ue("Using default Flow Base URL: https://flow.ciandt.com")),process.stdout.write(`
|
|
141
|
+
`);}if(!r&&!t.noInteractive&&!Q()){let w=le();if(w)process.stdout.write(L(` \u26A0 Non-interactive environment detected.
|
|
142
142
|
`)+g(` Using URL: ${w}
|
|
143
143
|
|
|
144
144
|
`));else return process.stderr.write(` \u2717 No URL configured and no TTY available.
|
|
145
145
|
Run: flow-ai-obs init --custom-url <URL>
|
|
146
146
|
|
|
147
|
-
`),1}let o,a=false;if(r){let w;try{w=
|
|
147
|
+
`),1}let o,a=false;if(r){let w;try{w=Er(r,!0);}catch(q){return process.stderr.write(`
|
|
148
148
|
\u2717 Invalid --custom-url: ${q.message}
|
|
149
149
|
|
|
150
|
-
`),1}let v=
|
|
150
|
+
`),1}let v=le();o=w,a=!!v&&v!==w,a?process.stdout.write(L(` \u26A0 Base URL changed \u2014 re-authentication required.
|
|
151
151
|
`)+g(` Previous: ${v}
|
|
152
152
|
`)+g(` New: ${w}
|
|
153
153
|
|
|
154
154
|
`)):process.stdout.write(b(` \u2713 Base URL configured: ${w}
|
|
155
155
|
|
|
156
|
-
`));}else o=
|
|
156
|
+
`));}else o=le()??"https://flow.ciandt.com";let c={FLOW_BASE_URL:o,OTEL_EXPORTER_OTLP_ENDPOINT:`${o}/otel`};process.env.FLOW_BASE_URL=o,process.stdout.write(b(`
|
|
157
157
|
\u2713 Flow environment ready.
|
|
158
158
|
`));let d=36;for(let[w,v]of Object.entries(c))process.stdout.write(g(` ${w.padEnd(d)}`)+v+`
|
|
159
|
-
`);
|
|
159
|
+
`);Le(2,s,"User Identity");let E=await Oo(!t.noInteractive,!!(r??Xe()),t.email),u=null;if(n)l("init","FLOW_API_KEY detected \u2014 skipping OAuth authentication step");else {Le(3,s,"Authentication");let w=le(),v=!!w&&w!==o;if(!fn()||a||v)if(t.noInteractive||!Q()){let{clientId:N,clientSecret:M,tenant:$}=t,Z=N&&M&&$;if(!Z&&(N||M||$)){let Lt=[!N&&"--client-id",!M&&"--client-secret",!$&&"--tenant"].filter(Boolean).join(", ");return process.stderr.write(`
|
|
160
160
|
${I("\u2717")} Non-interactive mode requires all credential flags.
|
|
161
|
-
Missing: ${
|
|
161
|
+
Missing: ${Lt}
|
|
162
162
|
|
|
163
|
-
`),1}if(Z){let{runLogin:
|
|
163
|
+
`),1}if(Z){let{runLogin:Lt}=await Promise.resolve().then(()=>(ce(),ae)),kt;try{kt=await Lt({deferPersist:!0,clientId:N,clientSecret:M,tenant:$});}catch(Ce){return process.stderr.write(`
|
|
164
164
|
${I("\u2717")} Authentication failed unexpectedly.
|
|
165
165
|
${Ce.message}
|
|
166
166
|
|
|
167
|
-
`),1}if(typeof
|
|
167
|
+
`),1}if(typeof kt=="number")return kt;u=kt.result;}else return process.stderr.write(`
|
|
168
168
|
${I("\u2717")} Authentication required.
|
|
169
169
|
Run: flow-ai-obs login
|
|
170
170
|
|
|
171
171
|
`),1}else {(t.clientId||t.clientSecret||t.tenant)&&process.stderr.write(`
|
|
172
|
-
${
|
|
172
|
+
${L("\u26A0")} Credential flags (--client-id, --client-secret, --tenant) are only used with --no-interactive.
|
|
173
173
|
Continuing with interactive authentication.
|
|
174
174
|
|
|
175
175
|
`),process.stdout.write(`
|
|
176
|
-
${
|
|
176
|
+
${L("\u26A0")} Authentication required for the new endpoint.
|
|
177
177
|
|
|
178
|
-
`);let{runLogin:N}=await Promise.resolve().then(()=>(
|
|
178
|
+
`);let{runLogin:N}=await Promise.resolve().then(()=>(ce(),ae)),M=await N({deferPersist:true,skipAuthCheck:a});if(typeof M=="number")return M;u=M.result;}else ue("Already authenticated \u2014 skipping."),pn("ANTHROPIC_AUTH_TOKEN will be preserved in settings.json");}let f=fn()?j(p.ANTHROPIC_AUTH_TOKEN):null,T={...c,...E?{[p.FLOW_USER_EMAIL]:E}:{},...u?{[p.ANTHROPIC_AUTH_TOKEN]:u.jwt}:{},...f&&!u?{[p.ANTHROPIC_AUTH_TOKEN]:f}:{}},_,S;Le(n?3:4,s,"Observability (OpenTelemetry)"),process.stdout.write(`
|
|
179
179
|
${R("Metrics and Logs")}
|
|
180
180
|
`);let Ot={...tt,OTEL_EXPORTER_OTLP_ENDPOINT:c.OTEL_EXPORTER_OTLP_ENDPOINT};for(let[w,v]of Object.entries(Ot))process.stdout.write(g(` ${w.padEnd(36)}`)+v+`
|
|
181
181
|
`);process.stdout.write(`
|
|
@@ -183,10 +183,10 @@
|
|
|
183
183
|
`);let lt=["UserPromptSubmit","PreToolUse","PostToolUse","Stop"];for(let w of lt){let v=gt[w];process.stdout.write(g(` ${w.padEnd(18)}`)+`\u2192 flow-ai-obs ${w} (timeout: ${v}s)
|
|
184
184
|
`);}process.stdout.write(`
|
|
185
185
|
`);try{({settingsPath:_,preserved:S}=Vr(c.OTEL_EXPORTER_OTLP_ENDPOINT,T));}catch(w){return process.stderr.write(` \u2717 Failed to write settings: ${w.message}
|
|
186
|
-
`),1}if(u){let{saveTokenCache:w}=await Promise.resolve().then(()=>(Mt(),sn));try{await w({accessToken:u.accessToken,expiresAt:u.expiresAt});}catch(q){process.stderr.write(` ${
|
|
186
|
+
`),1}if(u){let{saveTokenCache:w}=await Promise.resolve().then(()=>(Mt(),sn));try{await w({accessToken:u.accessToken,expiresAt:u.expiresAt});}catch(q){process.stderr.write(` ${L("\u26A0")} Token cache could not be saved: ${q.message}
|
|
187
187
|
Hooks will authenticate on first use.
|
|
188
|
-
`);}let{clearLoggedOutMarker:v}=await Promise.resolve().then(()=>(dr(),dn));v();}return
|
|
189
|
-
`),process.stdout.write(
|
|
188
|
+
`);}let{clearLoggedOutMarker:v}=await Promise.resolve().then(()=>(dr(),dn));v();}return ue(`Settings written: ${_}`),S.length>0&&(process.stdout.write(`
|
|
189
|
+
`),process.stdout.write(L(` \u26A0 Third-party hooks preserved on: ${S.join(", ")}
|
|
190
190
|
`)),process.stdout.write(g(` flow-ai-obs was prepended \u2014 it executes first.
|
|
191
191
|
`))),process.stdout.write(`
|
|
192
192
|
`),t.skipHint||(process.stdout.write(`
|
|
@@ -197,52 +197,52 @@
|
|
|
197
197
|
|
|
198
198
|
`)+g(` Start your code assistant and begin working.
|
|
199
199
|
|
|
200
|
-
`))),0}var
|
|
201
|
-
`);}function
|
|
202
|
-
`);}function
|
|
203
|
-
`);}function ve(t){process.stdout.write(` ${
|
|
200
|
+
`))),0}var hn=h(()=>{"use strict";rt();k();pt();Te();ze();G();Be();x();});var yn={};D(yn,{runStatus:()=>vo});function wn(t){return !t||t.length<=8?"****":t.slice(0,4)+"****...****"+t.slice(-4)}function ko(t){process.stdout.write(` ${b("\u2713")} ${t}
|
|
201
|
+
`);}function hr(t){process.stdout.write(` ${L("\u26A0")} ${t}
|
|
202
|
+
`);}function de(t){process.stdout.write(` ${b("\u2713")} ${t}
|
|
203
|
+
`);}function ve(t){process.stdout.write(` ${L("\u26A0")} ${t}
|
|
204
204
|
`);}function Re(t){process.stdout.write(` ${I("\u2717")} ${t}
|
|
205
205
|
`);}function Bt(t){process.stdout.write(` ${g(t)}
|
|
206
206
|
`);}function Tn(t){process.stdout.write(R(U(`
|
|
207
207
|
${t}
|
|
208
|
-
`)));}function _n(t,e=false){let r=e?`${
|
|
208
|
+
`)));}function _n(t,e=false){let r=e?`${L("\u26A0")} ${R(L(t))}`:R(t);process.stdout.write(`
|
|
209
209
|
${r}
|
|
210
210
|
`);}function wr(){process.stdout.write(`
|
|
211
|
-
`);}async function vo(){Tn("Auth");let t=await Ae();t.notConfigured?(
|
|
211
|
+
`);}async function vo(){Tn("Auth");let t=await Ae();t.notConfigured?(hr("Not configured."),process.stdout.write(`
|
|
212
212
|
`),process.stdout.write(` ${g("Run `flow-ai-obs init` to set up.")}
|
|
213
|
-
`)):!t.ok&&t.error==="No credentials found"?
|
|
213
|
+
`)):!t.ok&&t.error==="No credentials found"?hr("Not authenticated. Run `flow-ai-obs login` to set up."):t.ok?(ko("Authenticated"),process.stdout.write(` ${g("URL: ")}${t.baseUrl}
|
|
214
214
|
`),process.stdout.write(` ${g("Tenant: ")}${t.tenant}
|
|
215
215
|
`),process.stdout.write(` ${g("User: ")}${t.user}
|
|
216
216
|
`),process.stdout.write(` ${g("Storage: ANTHROPIC_AUTH_TOKEN (settings.json)")}
|
|
217
|
-
`)):
|
|
217
|
+
`)):hr(`Session rejected by ${t.baseUrl}. Run \`flow-ai-obs login\` to re-authenticate.`);let e={},r={};try{let u=O__namespace.readFileSync(et(),"utf8");r=JSON.parse(u),e=r.env||{};}catch{}Tn("Observability configuration (OpenTelemetry)");let n=Object.keys(tt).filter(u=>!e[u]);_n("Metrics and Logs",n.length>0),n.length===0?(de("All OTEL env vars present in settings.json"),Bt(`Endpoint: ${e.OTEL_EXPORTER_OTLP_ENDPOINT}`)):(process.stdout.write(`
|
|
218
218
|
`),process.stdout.write(` ${g("Run: flow-ai-obs init (restores missing vars automatically)")}
|
|
219
219
|
`),process.stdout.write(`
|
|
220
220
|
`),ve(`${n.length} OTEL var(s) missing from settings.json`),n.forEach(u=>Re(`Missing: ${u}`))),wr();for(let u of Object.keys(tt)){let f=e[u]??I("(missing)");process.stdout.write(g(` ${u.padEnd(36)}`)+f+`
|
|
221
|
-
`);}let s=r.hooks??{},i=["UserPromptSubmit","PreToolUse","PostToolUse","Stop"],o=i.every(u=>{let f=s[u];return Array.isArray(f)?f.some(T=>{let _=T;return Array.isArray(_?.hooks)&&_.hooks.some(S=>S?.command?.startsWith(zt.CLI))}):false});_n("Tracing",!o),o?
|
|
221
|
+
`);}let s=r.hooks??{},i=["UserPromptSubmit","PreToolUse","PostToolUse","Stop"],o=i.every(u=>{let f=s[u];return Array.isArray(f)?f.some(T=>{let _=T;return Array.isArray(_?.hooks)&&_.hooks.some(S=>S?.command?.startsWith(zt.CLI))}):false});_n("Tracing",!o),o?de("Hooks registered (trace capture)"):(process.stdout.write(`
|
|
222
222
|
`),process.stdout.write(` ${g("Run `flow-ai-obs init` to configure.")}
|
|
223
223
|
`),process.stdout.write(`
|
|
224
224
|
`),ve("Hooks NOT registered."));for(let u of i){let f=gt[u];process.stdout.write(g(` ${u.padEnd(18)}`)+`\u2192 flow-ai-obs ${u} (timeout: ${f}s)
|
|
225
|
-
`);}wr();let a=process.env[p.FLOW_TELEMETRY]==="true",c=process.env[p.LANGFUSE_BASE_URL],d=process.env[p.LANGFUSE_PUBLIC_KEY],
|
|
225
|
+
`);}wr();let a=process.env[p.FLOW_TELEMETRY]==="true",c=process.env[p.LANGFUSE_BASE_URL],d=process.env[p.LANGFUSE_PUBLIC_KEY],E=process.env[p.LANGFUSE_SECRET_KEY];if(a)if(c&&d&&E){let u=await z();for(let f of u)f.mode==="direct"&&(de("FLOW_TELEMETRY=true (direct mode enabled)"),de("Mode: direct"),Bt(`Endpoint: ${f.endpoint}`),Bt(`PK: ${wn(d)}`),Bt(`SK: ${wn(E)}`));}else ve("FLOW_TELEMETRY=true but missing LANGFUSE vars:"),c||Re("LANGFUSE_BASE_URL not set"),d||Re("LANGFUSE_PUBLIC_KEY not set"),E||Re("LANGFUSE_SECRET_KEY not set");else {let u=await z();if(u.length>0)for(let f of u)f.mode==="gateway"&&(de("Mode: gateway"),Bt(`Endpoint: ${f.endpoint}`));else u.authError?ve("Gateway mode: token refresh failed. Run `flow-ai-obs login`."):Bt("No active tracing destination configured.");}return wr(),0}var An=h(()=>{"use strict";G();rt();k();pt();fr();});var On={};D(On,{runOtelHeaders:()=>Ro});async function Ro(){let t=oe(),e=Se(),r=st(te(p.ANTHROPIC_AUTH_TOKEN));if(t&&!e&&!r)return process.stderr.write(`[flow-ai-obs otel-headers] FLOW_API_KEY is set but x-flow-user could not be resolved.
|
|
226
226
|
Run: flow-ai-obs init --custom-email <EMAIL>
|
|
227
227
|
`),1;if(!t&&process.env[p.FLOW_API_KEY]&&process.stderr.write(`[flow-ai-obs otel-headers] FLOW_API_KEY is set but its value was rejected (invalid characters or length). Falling back to OAuth.
|
|
228
|
-
`),t&&e){let
|
|
228
|
+
`),t&&e){let o=c=>c.replace(/[\r\n]/g,""),a={"x-flow-api-key":o(t),"x-flow-user":o(e)};return process.stdout.write(JSON.stringify(a)+`
|
|
229
229
|
`),0}if(!r)return process.stderr.write(`[flow-ai-obs otel-headers] Not authenticated \u2014 run: flow-ai-obs login
|
|
230
|
-
`),1;let n;try{
|
|
231
|
-
`),1}return
|
|
230
|
+
`),1;let n=te(p.FLOW_BASE_URL),s=process.env[p.FLOW_BASE_URL];n&&(process.env[p.FLOW_BASE_URL]=n);let i;try{i=(await W(r)).accessToken;}catch(o){return process.stderr.write(`[flow-ai-obs otel-headers] Token fetch failed: ${o.message}
|
|
231
|
+
`),1}finally{s===void 0?delete process.env[p.FLOW_BASE_URL]:process.env[p.FLOW_BASE_URL]=s;}return i?(process.stdout.write(JSON.stringify({Authorization:`Bearer ${i.replace(/[\r\n]/g,"")}`})+`
|
|
232
232
|
`),0):(process.stderr.write(`[flow-ai-obs otel-headers] Empty token received
|
|
233
|
-
`),1)}var
|
|
234
|
-
`)[0].slice(0,e).trim()}function
|
|
233
|
+
`),1)}var Ln=h(()=>{"use strict";ht();G();rt();k();});function X(t,e){let r=typeof t=="object"?JSON.stringify(t):String(t??"");return r.length>e?r.slice(0,e)+" \u2026[truncated]":r}function be(t,e=100){return String(t??"").split(`
|
|
234
|
+
`)[0].slice(0,e).trim()}function pe(){return new Promise(t=>{let e="";process.stdin.setEncoding("utf8"),process.stdin.on("data",r=>{e+=r;}),process.stdin.on("end",()=>{try{t(JSON.parse(e));}catch{t({});}});})}function P(t){process.stdout.write(JSON.stringify(t));}var Ht=h(()=>{"use strict";});function ot(){return String(BigInt(Date.now())*1000000n)}var Tr,_t,fe=h(()=>{"use strict";Tr=()=>crypto.randomBytes(16).toString("hex"),_t=()=>crypto.randomBytes(8).toString("hex");});function Do(t,e){let r=$t.resolve(t);if(!r.startsWith(e))throw new Error(`Path traversal detected: ${t}`);return r}function _r(t){if(!xo.test(t))throw new Error(`Invalid session ID: ${t}`);return Do($t.join(wt.tmpdir(),`flow-obs-${t}.json`),Mo)}function Wt(t){let e;try{e=_r(t);}catch{return null}if(!O.existsSync(e))return null;try{return JSON.parse(O.readFileSync(e,"utf8"))}catch{return null}}function jt(t,e){O.writeFileSync(_r(t),JSON.stringify(e),{encoding:"utf8",mode:384});}function Sr(t){try{O.unlinkSync(_r(t));}catch{}}var xo,Mo,me=h(()=>{"use strict";xo=/^[0-9a-f-]{1,64}$/i,Mo=$t.normalize(wt.tmpdir())+$t.sep;});function In(t){if(!t||!O.existsSync(t))return null;try{let e=O.readFileSync(t,"utf8").trimEnd().split(`
|
|
235
235
|
`);for(let r=e.length-1;r>=0;r--)try{let n=JSON.parse(e[r]);if(n.type==="user"&&n.uuid)return n.uuid}catch{}}catch{}return null}function yr(t){if(!t||!O.existsSync(t))return null;try{let e=O.readFileSync(t,"utf8").trimEnd().split(`
|
|
236
|
-
`),r=[],n=0,s=0,i;for(let o=e.length-1;o>=0;o--)try{let a=JSON.parse(e[o]);if(a.type==="user")break;if(a.type==="assistant"){!i&&a.message?.model&&(i=a.message.model);let d=(a.message?.content??[]).filter(u=>u.type==="text").map(u=>u.text??"").join("");d&&r.unshift(d);let
|
|
236
|
+
`),r=[],n=0,s=0,i;for(let o=e.length-1;o>=0;o--)try{let a=JSON.parse(e[o]);if(a.type==="user")break;if(a.type==="assistant"){!i&&a.message?.model&&(i=a.message.model);let d=(a.message?.content??[]).filter(u=>u.type==="text").map(u=>u.text??"").join("");d&&r.unshift(d);let E=a.message?.usage??{};n+=(E.input_tokens??0)+(E.cache_read_input_tokens??0)+(E.cache_creation_input_tokens??0),s+=E.output_tokens??0;}}catch{}return !r.length&&n===0?null:{text:r.join(`
|
|
237
237
|
|
|
238
|
-
`),inputTokens:n,outputTokens:s,model:i}}catch{}return null}var Ar=
|
|
239
|
-
`)[0].match(/^\/([a-z][a-z0-9-]*(?::[a-z][a-z0-9-]*)?)(?:\s.*)?$/i)?.[1]??null}function Cn(t){return !!t.slashSkill||t.toolCalls.some(n=>n.tool==="Skill")?t.toolCalls.some(n=>n.tool==="Skill"&&!n.synthetic||Ko.has(n.tool))?"complete":"prerequisite_required":null}function Ue(t,e){if(!t)return null;let r=Nn(t),n=[$t.join(wt.homedir(),".claude","skills",r),$t.join(e??"",".claude","skills",r)],s=null;for(let a of n)if(O.existsSync($t.join(a,"SKILL.md"))){s=a;break}if(!s)return null;let i=[];function o(a,c){for(let d of O.readdirSync(a,{withFileTypes:true})){if(jo.has(d.name)||Vo.has(d.name)||Yo.has($t.extname(d.name)))continue;let
|
|
240
|
-
`);return}let n=!!(await z()).authError,s=t.session_id||"unknown",i=t.prompt||"",o=t.cwd||"",a=In(t.transcript_path)||Tr(),c=$n(i),d=c?Ie(c,o):null,
|
|
241
|
-
`,{flag:"a",encoding:"utf8",mode:384}),l("sendTraces:dump",`request appendada em ${Hn}`);}catch(o){l("sendTraces:dump",`falha ao salvar: ${o.message}`);}}function si(t){let e=new URL(t),r=new URL(mt().GATEWAY_HEALTH);return r.hostname=e.hostname,r.port=e.port,r.protocol=e.protocol,r}function jn(t,e){return new Promise((r,n)=>{let s=t._isSSL?_s__default.default:Ms__default.default;t.headers=Object.assign({},t.headers,{Connection:"close"});let i=s.request(t,o=>{let a=[];o.on("data",c=>a.push(c)),o.on("end",()=>r({statusCode:o.statusCode??0,body:a.join("")}));});i.setTimeout(1e4,()=>{i.destroy(new Error("Request timeout"));}),i.on("error",o=>n(new Error(`Network error: ${o.message}`))),e&&i.write(e),i.end();})}async function Yn(t,e){let r;try{r=si(t);}catch{return false}let n=r.protocol==="https:";try{let s={};e&&(s.Authorization=String(e).replace(/[\r\n]/g,""));let i=await jn({hostname:r.hostname,port:r.port||(n?443:80),path:r.pathname,method:"GET",headers:s,_isSSL:n},null);return l("checkHealth",`url=${r.href} status=${i.statusCode}`),i.statusCode>=200&&i.statusCode<300}catch{return false}}async function $e(t,e,r){let n=JSON.stringify(t),s=new URL(e),i=s.protocol==="https:",o=String(r).replace(/[\r\n]/g,""),a={"Content-Type":"application/json",Authorization:o,"Content-Length":Buffer.byteLength(n)};l("sendTraces:request",`POST ${e}`),l("sendTraces:request",`headers=${JSON.stringify({...a,Authorization:o.slice(0,20)+"\u2026"})}`),l("sendTraces:request",`body=${n.slice(0,500)}${n.length>500?"\u2026":""}`);try{let c=await jn({hostname:s.hostname,port:s.port||(i?443:80),path:s.pathname,method:"POST",headers:a,_isSSL:i},n);return l("sendTraces:response",`status=${c.statusCode}`),Wn(e,a,n,c.statusCode,c.body),c.statusCode}catch(c){return l("sendTraces:error",c.message),Wn(e,a,n,0,c.message),0}}var Hn,Vn=
|
|
238
|
+
`),inputTokens:n,outputTokens:s,model:i}}catch{}return null}var Ar=h(()=>{"use strict";});function Nn(t){return t.replace(":","/")}function Ie(t,e){if(!t)return null;let r=Nn(t),n=[$t.join(wt.homedir(),".claude","skills",r,"SKILL.md"),$t.join(e??"",".claude","skills",r,"SKILL.md")];for(let s of n)if(O.existsSync(s))try{return O.readFileSync(s,"utf8")}catch{}return null}function $n(t){return t.split(`
|
|
239
|
+
`)[0].match(/^\/([a-z][a-z0-9-]*(?::[a-z][a-z0-9-]*)?)(?:\s.*)?$/i)?.[1]??null}function Cn(t){return !!t.slashSkill||t.toolCalls.some(n=>n.tool==="Skill")?t.toolCalls.some(n=>n.tool==="Skill"&&!n.synthetic||Ko.has(n.tool))?"complete":"prerequisite_required":null}function Ue(t,e){if(!t)return null;let r=Nn(t),n=[$t.join(wt.homedir(),".claude","skills",r),$t.join(e??"",".claude","skills",r)],s=null;for(let a of n)if(O.existsSync($t.join(a,"SKILL.md"))){s=a;break}if(!s)return null;let i=[];function o(a,c){for(let d of O.readdirSync(a,{withFileTypes:true})){if(jo.has(d.name)||Vo.has(d.name)||Yo.has($t.extname(d.name)))continue;let E=c?`${c}/${d.name}`:d.name;d.isDirectory()?o($t.join(a,d.name),E):i.push(E);}}return o(s,""),i.length>0?i:null}var jo,Yo,Vo,Ko,Pe=h(()=>{"use strict";jo=new Set([".venv","__pycache__",".git","node_modules"]),Yo=new Set([".pyc",".pyo"]),Vo=new Set(["SKILL.md",".DS_Store",".gitignore"]);Ko=new Set(["Read","Write","Edit","MultiEdit","Bash","Glob","Grep","TodoWrite","WebFetch","WebSearch","Agent","Task"]);});function qo(t){try{let e=t.split(".")[1].replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(Buffer.from(e,"base64").toString())}catch{return null}}function Xo(t,e,r,n){return new Promise(s=>{let i=new URL(t),o=i.protocol==="https:",a=(o?_s__default.default:Ms__default.default).request({hostname:i.hostname,port:i.port||(o?443:80),path:i.pathname+i.search,method:"POST",headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(e),Authorization:`Bearer ${String(r).replace(/[\r\n]/g,"")}`,FlowTenant:String(n).replace(/[\r\n]/g,"")}},c=>{c.resume(),s(c.statusCode??0);});a.on("error",()=>s(0)),a.setTimeout(5e3,()=>{a.destroy(),s(0);}),a.write(e),a.end();})}async function St(t,e={}){try{let r=st(process.env[p.ANTHROPIC_AUTH_TOKEN]);if(!r)return;let n,s=new Promise((u,f)=>{n=setTimeout(()=>f(new Error("getToken timeout")),4e3),n.unref();}),{accessToken:i}=await Promise.race([W(r),s]);clearTimeout(n);let o=qo(i);if(!o)return;let a=o.tenant||r.tenant,c=JSON.stringify({action:t,booster:he().BOOSTER,metadata:e,success:!0,tenant:a,timestamp:new Date().toISOString(),os:process.platform,user:{email:o.email||"",id:o.sub||"",name:o.name||o.email||""}}),d=Tt(he().API_URL),E=await Xo(d,c,i,a);l("metrics.logEvent",`action=${t} status=${E}`);}catch(r){l("metrics.logEvent",`silenced error: ${r.message}`);}}var Ne=h(()=>{"use strict";k();ht();G();x();});async function Or(t,e=false){if(e){process.stdout.write(JSON.stringify({decision:"block",reason:zo})+`
|
|
240
|
+
`);return}let n=!!(await z()).authError,s=t.session_id||"unknown",i=t.prompt||"",o=t.cwd||"",a=In(t.transcript_path)||Tr(),c=$n(i),d=c?Ie(c,o):null,E=c?Ue(c,o):null;jt(s,{traceId:Tr(),spanId:_t(),startNs:ot(),sessionId:s,prompt:i,cwd:o,traceName:a,transcriptPath:t.transcript_path||"",toolCalls:[],spans:[],pendingTool:null,slashSkill:c,skillContent:d,skillArtifacts:E}),St("SESSION_STARTED",{traceType:c?"skill":"prompt",slashSkill:c,clientIdExpired:n}),l("UserPromptSubmit",`sid=${s}`,`traceName=${a}`,`slashSkill=${c}`),P(t);}var zo,Fn=h(()=>{"use strict";fe();me();Ar();Pe();Ht();x();k();G();Ne();zo=`\u26D4 Your Flow API key has expired. You no longer have access to Claude Code through the Flow platform. To restore observability and access, visit ${ft()}/settings/api-keys to generate a new API key, then run: flow-ai-obs login`;});async function xn(t){let e=t.session_id||"unknown",r=t.tool_name||"unknown",n=t.tool_input||{},s=Wt(e);s&&(s.pendingTool={name:r,inputStr:X(n,K.TOOL_INPUT),startNs:ot()},jt(e,s)),l("PreToolUse",`sid=${e}`,`tool=${r}`,`stateFound=${!!s}`),P(t);}var Mn=h(()=>{"use strict";fe();me();Ht();x();k();});function m(t,e){return e==null||e===""?null:{key:t,value:{stringValue:String(e)}}}function yt(...t){return t.filter(e=>e!==null)}function Dn(t,e){return {resourceSpans:[{resource:{attributes:t},scopeSpans:[{scope:Zo,spans:Array.isArray(e)?e:[e]}]}]}}var Zo,A,Bn=h(()=>{"use strict";k();Zo={name:Ee.SCOPE_NAME,version:Ee.SCOPE_VERSION},A={TRACE_NAME:"langfuse.trace.name",TRACE_INPUT:"langfuse.trace.input",TRACE_OUTPUT:"langfuse.trace.output",TRACE_METADATA:"langfuse.trace.metadata",TRACE_TAGS:"langfuse.trace.tags",USER_ID:"langfuse.user.id",SESSION_ID:"langfuse.session.id",OBS_NAME:"langfuse.observation.name",OBS_INPUT:"langfuse.observation.input",OBS_OUTPUT:"langfuse.observation.output",OBS_LEVEL:"langfuse.observation.level",OBS_TYPE:"langfuse.observation.type",MODEL:"gen_ai.request.model",INPUT_TOKENS:"gen_ai.usage.input_tokens",OUTPUT_TOKENS:"gen_ai.usage.output_tokens"};});function Wn(t,e,r,n,s){if(process.env[p.FLOW_OBS_DEBUG]!=="1")return;let i=JSON.stringify({ts:new Date().toISOString(),request:{method:"POST",url:t,headers:e,body:JSON.parse(r)},response:{status:n,body:s}});try{O.writeFileSync(Hn,i+`
|
|
241
|
+
`,{flag:"a",encoding:"utf8",mode:384}),l("sendTraces:dump",`request appendada em ${Hn}`);}catch(o){l("sendTraces:dump",`falha ao salvar: ${o.message}`);}}function si(t){let e=new URL(t),r=new URL(mt().GATEWAY_HEALTH);return r.hostname=e.hostname,r.port=e.port,r.protocol=e.protocol,r}function jn(t,e){return new Promise((r,n)=>{let s=t._isSSL?_s__default.default:Ms__default.default;t.headers=Object.assign({},t.headers,{Connection:"close"});let i=s.request(t,o=>{let a=[];o.on("data",c=>a.push(c)),o.on("end",()=>r({statusCode:o.statusCode??0,body:a.join("")}));});i.setTimeout(1e4,()=>{i.destroy(new Error("Request timeout"));}),i.on("error",o=>n(new Error(`Network error: ${o.message}`))),e&&i.write(e),i.end();})}async function Yn(t,e){let r;try{r=si(t);}catch{return false}let n=r.protocol==="https:";try{let s={};e&&(s.Authorization=String(e).replace(/[\r\n]/g,""));let i=await jn({hostname:r.hostname,port:r.port||(n?443:80),path:r.pathname,method:"GET",headers:s,_isSSL:n},null);return l("checkHealth",`url=${r.href} status=${i.statusCode}`),i.statusCode>=200&&i.statusCode<300}catch{return false}}async function $e(t,e,r){let n=JSON.stringify(t),s=new URL(e),i=s.protocol==="https:",o=String(r).replace(/[\r\n]/g,""),a={"Content-Type":"application/json",Authorization:o,"Content-Length":Buffer.byteLength(n)};l("sendTraces:request",`POST ${e}`),l("sendTraces:request",`headers=${JSON.stringify({...a,Authorization:o.slice(0,20)+"\u2026"})}`),l("sendTraces:request",`body=${n.slice(0,500)}${n.length>500?"\u2026":""}`);try{let c=await jn({hostname:s.hostname,port:s.port||(i?443:80),path:s.pathname,method:"POST",headers:a,_isSSL:i},n);return l("sendTraces:response",`status=${c.statusCode}`),Wn(e,a,n,c.statusCode,c.body),c.statusCode}catch(c){return l("sendTraces:error",c.message),Wn(e,a,n,0,c.message),0}}var Hn,Vn=h(()=>{"use strict";k();x();Hn=$t.join(wt.tmpdir(),"flow-obs-requests.ndjson");});function oi(){let t=parseInt(process.env[p.BUFFER_TTL_DAYS]??"",10);return (Number.isFinite(t)?Math.max(H.MIN_TTL_DAYS,Math.min(H.MAX_TTL_DAYS,t)):H.DEFAULT_TTL_DAYS)*24*60*60*1e3}function ii(){let t=parseInt(process.env[p.BUFFER_MAX_FILES]??"",10);return Number.isFinite(t)?Math.max(H.MIN_MAX_FILES,Math.min(H.MAX_MAX_FILES,t)):H.DEFAULT_MAX_FILES}function Gn(t){if(/[/\\]/.test(t))throw new Error(`Invalid buffer fileId: ${t}`);return $t__namespace.default.join(wt__namespace.default.tmpdir(),`${H.FILE_PREFIX}${t}.json`)}function kr(){let t=wt__namespace.default.tmpdir(),e;try{e=O__namespace.default.readdirSync(t);}catch{return []}return e.filter(r=>r.startsWith(H.FILE_PREFIX)&&r.endsWith(".json")).map(r=>{let n=$t__namespace.default.join(t,r),s=0;try{s=O__namespace.default.statSync(n).mtimeMs;}catch{}return {full:n,mtime:s}}).sort((r,n)=>r.mtime-n.mtime).map(r=>r.full)}function ge(t){try{let e=ii(),r=kr();if(r.length>=e){let i=r.slice(0,r.length-e+1);for(let o of i)try{O__namespace.default.unlinkSync(o);}catch{}}let n=`${Date.now()}-${Math.random().toString(36).slice(2,8)}`,s={fileId:n,bufferedAt:Date.now(),payload:t};return O__namespace.default.writeFileSync(Gn(n),JSON.stringify(s),{encoding:"utf8",mode:384}),l("buffer",`saved fileId=${n}`),n}catch(e){return l("buffer",`saveToBuffer failed: ${e.message}`),null}}function Jn(t){let e=kr(),r=t!=null&&t>0?t:e.length,n=[];for(let s of e){if(n.length>=r)break;try{let i=O__namespace.default.readFileSync(s,"utf8"),o=JSON.parse(i);o&&o.fileId&&o.payload&&n.push(o);}catch{l("buffer",`skipping malformed file: ${s}`);}}return n}function qn(t){try{O__namespace.default.unlinkSync(Gn(t)),l("buffer",`deleted fileId=${t}`);}catch{}}function Xn(){let t=Date.now()-oi();for(let e of kr())try{let{mtimeMs:r}=O__namespace.default.statSync(e);r<t&&(O__namespace.default.unlinkSync(e),l("buffer",`evicted stale: ${$t__namespace.default.basename(e)}`));}catch{}}var zn=h(()=>{"use strict";k();x();});async function ai(t){Xn();let e=Jn(H.REPLAY_BATCH_SIZE);e.length&&(l("replayBufferedTraces",`replaying ${e.length} buffered trace(s)`),await Promise.allSettled(e.map(async r=>{try{let n=await $e(r.payload,t.endpoint,t.authHeader);n>=200&&n<300?(qn(r.fileId),l("replayBufferedTraces",`replayed fileId=${r.fileId} status=${n}`)):l("replayBufferedTraces",`replay failed fileId=${r.fileId} status=${n}`);}catch(n){l("replayBufferedTraces",`replay error fileId=${r.fileId}: ${n.message}`);}})));}async function Zn(t){let e=await z();if(!e.length)return e.authError&&(l("postToLangfuse","auth refresh failed \u2014 buffering trace"),ge(t)),0;let r=await Promise.all(e.map(async i=>{if(i.mode!=="gateway")return {creds:i,healthy:true};let o=await Yn(i.endpoint,i.authHeader);return {creds:i,healthy:o}})),n=r.find(i=>i.creds.mode==="gateway"&&i.healthy)?.creds??r.find(i=>i.creds.mode==="direct")?.creds;return n&&await ai(n),(await Promise.all(r.map(async({creds:i,healthy:o})=>{if(i.mode==="gateway"){if(!o)return l("postToLangfuse","gateway health check failed \u2014 buffering trace"),ge(t),0;let c=await $e(t,i.endpoint,i.authHeader);return (c===0||c>=500)&&(l("postToLangfuse",`gateway send failed (status ${c}) \u2014 buffering trace`),ge(t)),c}let a=await $e(t,i.endpoint,i.authHeader);return (a===0||a>=500)&&(l("postToLangfuse",`direct endpoint unavailable (status ${a}) \u2014 buffering trace`),ge(t)),a}))).find(i=>i!==0)??0}var Qn=h(()=>{"use strict";G();x();Vn();zn();k();});var vr=h(()=>{"use strict";Bn();Qn();});function at(t){if(t==null)return "";let e=typeof t=="string"?t:JSON.stringify(t);return di.reduce((r,{re:n,replace:s})=>r.replace(n,s),e)}var Y,ci,li,ui,ts,di,Rr=h(()=>{"use strict";Y="[REDACTED]",ci="[REDACTED-EMAIL]",li="[REDACTED-CPF]",ui="[REDACTED-CNPJ]",ts="[REDACTED-PHONE]",di=[{re:/\b(sk-[A-Za-z0-9_\-]{20,})/g,replace:()=>`sk-${Y}`},{re:/\b(pk-[A-Za-z0-9_\-]{20,})/g,replace:()=>`pk-${Y}`},{re:/\b(Bearer\s+)[A-Za-z0-9\-._~+/]+=*/gi,replace:(t,e)=>`${e}${Y}`},{re:/\b(Basic\s+)[A-Za-z0-9+/]+=*/gi,replace:(t,e)=>`${e}${Y}`},{re:/(-----BEGIN [A-Z ]+-----)[^-]*(-----END [A-Z ]+-----)/g,replace:(t,e,r)=>`${e}
|
|
242
242
|
${Y}
|
|
243
|
-
${r}`},{re:/\b(AKIA[0-9A-Z]{16})\b/g,replace:()=>`AKIA${Y}`},{re:/(aws_secret_access_key\s*[=:]\s*)([A-Za-z0-9/+]{40})/gi,replace:(t,e)=>`${e}${Y}`},{re:/\b(ghp_[A-Za-z0-9]{36,})/g,replace:()=>`ghp_${Y}`},{re:/\b(github_pat_[A-Za-z0-9_]{36,})/gi,replace:()=>`github_pat_${Y}`},{re:/\b(eyJ[A-Za-z0-9_\-]+\.eyJ[A-Za-z0-9_\-]+\.[A-Za-z0-9_\-]+)/g,replace:()=>`eyJ.${Y}`},{re:/\b([A-Z0-9_]*(?:SECRET|TOKEN|KEY|PASSWORD|PASSWD|PWD|CREDENTIAL|API)[A-Z0-9_]*\s*=\s*)(['"]?)([^\s'"#\n]+)\2/gi,replace:(t,e,r)=>`${e}${r}${Y}${r}`},{re:/([a-z][a-z0-9+\-.]*:\/\/[^:/?#\s]*):([^@\s]+)@/gi,replace:(t,e)=>`${e}:${Y}@`},{re:/[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}/g,replace:()=>ci},{re:/\b\d{3}\.\d{3}\.\d{3}-\d{2}\b/g,replace:()=>li},{re:/\b\d{2}\.\d{3}\.\d{3}\/\d{4}-\d{2}\b/g,replace:()=>ui},{re:/\(\d{2}\)\s?\d{4,5}[-\s]?\d{4}/g,replace:()=>ts},{re:/\+55[\s-]?\d{2}[\s-]?\d{4,5}[-\s]?\d{4}/g,replace:()=>ts}];});async function es(t){let e=t.session_id||"unknown",r=t.tool_name||"unknown",n=t.tool_input||{},s=t.tool_response,i=s!==null&&typeof s=="object"?s.output??JSON.stringify(s):s??"",o=Wt(e);if(!o){P(t);return}let a=ot(),c=o.pendingTool,d=c?.name===r,
|
|
244
|
-
`)),_=d?.inputTokens??0,S=d?.outputTokens??0,Ot=o.map((y,dt)=>`${dt+1}. ${y.tool}${y.brief?` \u2192 ${y.brief}`:""}${y.error?" [ERROR]":""} (${y.durationMs}ms)`),lt=!!(n.slashSkill||o.some(y=>y.tool==="Skill")),w=o.some(y=>y.tool==="Agent");if(!lt&&!w){l("Stop",`sid=${e}`,"skipping trace \u2014 no Skill or Agent calls found"),St("TRACE_SKIPPED",{reason:"no_skill_or_agent"}),Sr(e),P(t);return}let v=lt?"skill":"agent",q=Math.round(Number(BigInt(s)-BigInt(n.startNs))/1e6),N=d?.model||"",M=ss(N,_,S),$=Cn(n);$==="prerequisite_required"&&d?.text&&($="complete"),$==="prerequisite_required"&&(a.push({traceId:n.traceId,spanId:_t(),parentSpanId:n.spanId,name:"prerequisite-check",kind:3,startTimeUnixNano:n.startNs,endTimeUnixNano:s,attributes:yt(m(A.OBS_NAME,"prerequisite-check"),m(A.OBS_TYPE,"EVENT"),m(A.OBS_LEVEL,"WARNING"),m(A.OBS_OUTPUT,T),m("skill.name",n.slashSkill||void 0),m("execution_status","prerequisite_required")),status:{code:1}}),l("Stop",`sid=${e}`,"prerequisite-check span injected",`skill=${n.slashSkill}`));let Z=(()=>{if(!(!lt||!n.prompt)){if(n.slashSkill){let y=n.prompt.replace(new RegExp(`^\\/${n.slashSkill}\\s*`,"i"),"").trim();return y?X(at(y),K.USER_INSTRUCTION):void 0}return X(at(n.prompt),K.USER_INSTRUCTION)||void 0}})(),ut=JSON.stringify({trace_type:v,...$!==null&&{execution_status:$},...n.slashSkill?{skill_name:n.slashSkill}:{},...n.skillArtifacts?.length&&{skill_artifacts:n.skillArtifacts},...Z!==void 0&&{user_instruction:Z},latency_ms:q,..._&&{tokens_input:_},...S&&{tokens_output:S},cost_usd:M,...N?{model:N}:{},toolCount:u,errorCount:f,stopReason:r,sessionId:n.sessionId,tools:Ot.length?Ot:void 0}),
|
|
245
|
-
`),process.stdin.on("data",e=>process.stdout.write(e));}}var ls=
|
|
243
|
+
${r}`},{re:/\b(AKIA[0-9A-Z]{16})\b/g,replace:()=>`AKIA${Y}`},{re:/(aws_secret_access_key\s*[=:]\s*)([A-Za-z0-9/+]{40})/gi,replace:(t,e)=>`${e}${Y}`},{re:/\b(ghp_[A-Za-z0-9]{36,})/g,replace:()=>`ghp_${Y}`},{re:/\b(github_pat_[A-Za-z0-9_]{36,})/gi,replace:()=>`github_pat_${Y}`},{re:/\b(eyJ[A-Za-z0-9_\-]+\.eyJ[A-Za-z0-9_\-]+\.[A-Za-z0-9_\-]+)/g,replace:()=>`eyJ.${Y}`},{re:/\b([A-Z0-9_]*(?:SECRET|TOKEN|KEY|PASSWORD|PASSWD|PWD|CREDENTIAL|API)[A-Z0-9_]*\s*=\s*)(['"]?)([^\s'"#\n]+)\2/gi,replace:(t,e,r)=>`${e}${r}${Y}${r}`},{re:/([a-z][a-z0-9+\-.]*:\/\/[^:/?#\s]*):([^@\s]+)@/gi,replace:(t,e)=>`${e}:${Y}@`},{re:/[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}/g,replace:()=>ci},{re:/\b\d{3}\.\d{3}\.\d{3}-\d{2}\b/g,replace:()=>li},{re:/\b\d{2}\.\d{3}\.\d{3}\/\d{4}-\d{2}\b/g,replace:()=>ui},{re:/\(\d{2}\)\s?\d{4,5}[-\s]?\d{4}/g,replace:()=>ts},{re:/\+55[\s-]?\d{2}[\s-]?\d{4,5}[-\s]?\d{4}/g,replace:()=>ts}];});async function es(t){let e=t.session_id||"unknown",r=t.tool_name||"unknown",n=t.tool_input||{},s=t.tool_response,i=s!==null&&typeof s=="object"?s.output??JSON.stringify(s):s??"",o=Wt(e);if(!o){P(t);return}let a=ot(),c=o.pendingTool,d=c?.name===r,E=d?c.startNs:String(BigInt(a)-200000000n),u=d?c.inputStr:X(n,K.TOOL_INPUT),f=u,T=null;if(r==="Skill"){let Z=typeof n=="object"&&n!==null?n.skill||n.name||n.skillName||n.commandName||String(Object.values(n)[0]??""):String(n);T=Z?String(Z).trim():null;let ut=T?Ie(T,o.cwd):null;ut&&(f=ut,o.skillContent||(o.skillContent=ut),o.skillArtifacts||(o.skillArtifacts=Ue(T,o.cwd))),T&&!o.slashSkill&&(o.slashSkill=T),l("PostToolUse","Skill tool detected",`skillName=${T}`,`contentFound=${!!ut}`);}let _=at(X(i,K.TOOL_OUTPUT)),S=/\b(error|exception|failed|failure|traceback|errno)\b/i.test(_.slice(0,500)),Ot=S?"ERROR":"DEFAULT",lt=_t(),w=Math.round(Number(BigInt(a)-BigInt(E))/1e6),q={Agent:"AGENT",Task:"AGENT"}[r]??"TOOL",N=r==="Skill"&&T?T:be(u,60);o.toolCalls.push({tool:r,brief:N,error:S,durationMs:w});let $=o.spans;$.push({traceId:o.traceId,spanId:lt,parentSpanId:o.spanId,name:r,kind:3,startTimeUnixNano:E,endTimeUnixNano:a,attributes:yt(m(A.OBS_NAME,r),m(A.OBS_TYPE,q),m(A.OBS_LEVEL,Ot),m(A.OBS_INPUT,at(f)),m(A.OBS_OUTPUT,_),m("tool.name",r),m("tool.error",String(S)),r==="Skill"&&T?m("skill.name",T):null,r==="Skill"?m("skill.invocation","slash-command"):null),status:{code:S?2:1}}),o.pendingTool=null,jt(e,o),S&&St("TOOL_ERROR",{toolName:r}),l("PostToolUse",`sid=${e}`,`tool=${r}`,`error=${S}`,`durationMs=${w}`,`totalSpans=${$.length}`),P(t);}var rs=h(()=>{"use strict";fe();me();vr();Ht();Pe();x();k();Rr();Ne();});function ss(t,e,r){let n=Object.keys(ns).find(o=>(t??"").toLowerCase().includes(o));if(!n)return;let s=ns[n],i=(e*s.input+r*s.output)/1e6;return Math.round(i*1e6)/1e6}var ns,os=h(()=>{"use strict";ns={"claude-opus-5":{input:5,output:25},"claude-sonnet-5":{input:2,output:10},"claude-fable-5":{input:10,output:50},"claude-opus-4-6":{input:5,output:25},"claude-opus-4-5":{input:5,output:25},"claude-sonnet-4-6":{input:3,output:15},"claude-sonnet-4-5":{input:3,output:15},"claude-haiku-4-5":{input:1,output:5},"claude-4-6-opus":{input:5,output:25},"claude-4-6-sonnet":{input:3,output:15},"claude-4-5-opus":{input:5,output:25},"claude-4-5-sonnet":{input:3,output:15},"claude-4-5-haiku":{input:1,output:5},"claude-3-5-sonnet-20241022":{input:3,output:15},"claude-3-5-haiku-20241022":{input:.8,output:4},"claude-3-opus-20240229":{input:15,output:75}};});async function is(t){let e=t.session_id||"unknown",r=t.stop_reason||"end_turn",n=Wt(e);if(!n){P(t);return}n.slashSkill&&!/^[a-z][a-z0-9-]*(?::[a-z][a-z0-9-]*)?$/i.test(n.slashSkill)&&(l("Stop",`sid=${e}`,`slashSkill rejected post-disk: "${n.slashSkill}"`),n.slashSkill=null);let s=ot(),i=await ln(),o=n.toolCalls,a=n.spans;if(n.slashSkill&&!o.some(y=>y.tool==="Skill")){let y=_t(),dt=n.skillContent?n.skillContent:JSON.stringify({skill:n.slashSkill});o.push({tool:"Skill",brief:n.slashSkill,error:false,durationMs:0,synthetic:true}),a.push({traceId:n.traceId,spanId:y,parentSpanId:n.spanId,name:"Skill",kind:3,startTimeUnixNano:n.startNs,endTimeUnixNano:n.startNs,attributes:yt(m(A.OBS_NAME,"Skill"),m(A.OBS_TYPE,"TOOL"),m(A.OBS_LEVEL,"DEFAULT"),m(A.OBS_INPUT,dt),m(A.OBS_OUTPUT,"loaded via slash command"),m("tool.name","Skill"),m("tool.error","false"),m("skill.name",n.slashSkill),m("skill.invocation","slash-command")),status:{code:1}}),l("Stop",`slashSkill=${n.slashSkill}`,"synthetic span injected");}let c=t.transcript_path||n.transcriptPath||"",d=yr(c);if(c&&(o.some(y=>y.tool==="Skill"&&!y.synthetic)||!!n.slashSkill)&&!d?.text){await new Promise(dt=>setTimeout(dt,500));let y=yr(c);y?.text&&(d=y);}l("Stop",`transcriptPath=${c||"(empty)"}`,`assistantOut=${d?`text=${d.text.length}chars`:"null"}`);let u=o.length,f=o.filter(y=>y.error).length,T=at(d?.text?X(d.text,K.TRACE_OUTPUT):u===0?"No tools used":o.map((y,dt)=>`${dt+1}. ${y.tool}${y.brief?` \u2192 ${y.brief}`:""}${y.error?" [ERROR]":""}`).join(`
|
|
244
|
+
`)),_=d?.inputTokens??0,S=d?.outputTokens??0,Ot=o.map((y,dt)=>`${dt+1}. ${y.tool}${y.brief?` \u2192 ${y.brief}`:""}${y.error?" [ERROR]":""} (${y.durationMs}ms)`),lt=!!(n.slashSkill||o.some(y=>y.tool==="Skill")),w=o.some(y=>y.tool==="Agent");if(!lt&&!w){l("Stop",`sid=${e}`,"skipping trace \u2014 no Skill or Agent calls found"),St("TRACE_SKIPPED",{reason:"no_skill_or_agent"}),Sr(e),P(t);return}let v=lt?"skill":"agent",q=Math.round(Number(BigInt(s)-BigInt(n.startNs))/1e6),N=d?.model||"",M=ss(N,_,S),$=Cn(n);$==="prerequisite_required"&&d?.text&&($="complete"),$==="prerequisite_required"&&(a.push({traceId:n.traceId,spanId:_t(),parentSpanId:n.spanId,name:"prerequisite-check",kind:3,startTimeUnixNano:n.startNs,endTimeUnixNano:s,attributes:yt(m(A.OBS_NAME,"prerequisite-check"),m(A.OBS_TYPE,"EVENT"),m(A.OBS_LEVEL,"WARNING"),m(A.OBS_OUTPUT,T),m("skill.name",n.slashSkill||void 0),m("execution_status","prerequisite_required")),status:{code:1}}),l("Stop",`sid=${e}`,"prerequisite-check span injected",`skill=${n.slashSkill}`));let Z=(()=>{if(!(!lt||!n.prompt)){if(n.slashSkill){let y=n.prompt.replace(new RegExp(`^\\/${n.slashSkill}\\s*`,"i"),"").trim();return y?X(at(y),K.USER_INSTRUCTION):void 0}return X(at(n.prompt),K.USER_INSTRUCTION)||void 0}})(),ut=JSON.stringify({trace_type:v,...$!==null&&{execution_status:$},...n.slashSkill?{skill_name:n.slashSkill}:{},...n.skillArtifacts?.length&&{skill_artifacts:n.skillArtifacts},...Z!==void 0&&{user_instruction:Z},latency_ms:q,..._&&{tokens_input:_},...S&&{tokens_output:S},cost_usd:M,...N?{model:N}:{},toolCount:u,errorCount:f,stopReason:r,sessionId:n.sessionId,tools:Ot.length?Ot:void 0}),Lt=at(X(n.prompt,K.TRACE_INPUT)),kt=yt(m(A.TRACE_NAME,n.traceName),m(A.TRACE_INPUT,Lt),m(A.TRACE_OUTPUT,T),m(A.OBS_INPUT,Lt),m(A.OBS_OUTPUT,T),m(A.TRACE_METADATA,ut),m(A.SESSION_ID,n.sessionId),m(A.USER_ID,i.user),m(A.OBS_TYPE,"GENERATION"),m(A.MODEL,N),_?m(A.INPUT_TOKENS,_):null,S?m(A.OUTPUT_TOKENS,S):null,m("claude.stop_reason",r),m("claude.tool_count",String(u)),m("claude.error_count",String(f)),m("claude.session_id",n.sessionId),m("flow.trace_type",v),{key:A.TRACE_TAGS,value:{arrayValue:{values:[{stringValue:v}]}}}),Ce={traceId:n.traceId,spanId:n.spanId,name:n.traceName,kind:1,startTimeUnixNano:n.startNs,endTimeUnixNano:s,attributes:kt,status:{code:f>0?2:1}},ds=yt(m("service.name",process.env.LANGFUSE_PROJECT_NAME||"claude-code"),m("deployment.environment",process.env.LANGFUSE_ENVIRONMENT||"default")),br=[...a,Ce];l("Stop",`sid=${e}`,`totalTools=${u}`,`errorTools=${f}`,`spans=${br.length}`,`inputTokens=${_}`,`outputTokens=${S}`,`traceOutput="${be(T,80)}"`);let ps=await Zn(Dn(ds,br));l("Stop",`POST status=${ps}`,`traceId=${n.traceId}`),St("TRACE_SENT",{latencyMs:q,totalTools:u,errorTools:f,inputTokens:_,outputTokens:S,costUsd:M}),Sr(e),P(t);}var as=h(()=>{"use strict";fe();me();vr();G();os();Ar();Ht();x();Pe();Rr();k();Ne();});var At,cs=h(()=>{"use strict";G();Ht();Fn();Mn();rs();as();At=class{static async userPromptSubmit(){let e=await pe(),r;try{r=await z();}catch{P(e);return}r.authError?await Or(e,!0):r.length>0?await Or(e):P(e);}static async preToolUse(){let e=await pe();await xn(e);}static async postToolUse(){let e=await pe();await es(e);}static async stop(){let e=await pe();await is(e);}};});var fi={};async function pi(){let t=process.argv[2];switch(t){case "UserPromptSubmit":await At.userPromptSubmit();break;case "PreToolUse":await At.preToolUse();break;case "PostToolUse":await At.postToolUse();break;case "Stop":await At.stop();break;default:process.stderr.write(`[flow-obs] unknown event: ${t}
|
|
245
|
+
`),process.stdin.on("data",e=>process.stdout.write(e));}}var ls=h(()=>{"use strict";cs();pi().catch(t=>{process.stderr.write(`[flow-obs] fatal: ${t.message}
|
|
246
246
|
`),process.exit(0);});});var mi=new Set(["UserPromptSubmit","PreToolUse","PostToolUse","Stop"]),[,,V]=process.argv;function ct(t,e){let r=t.indexOf(e);return r!==-1?t[r+1]:void 0}function us(){let{bold:t,cyan:e,dim:r,green:n}=(pt(),C(xe)),{version:s}=Kt();process.stdout.write(`
|
|
247
247
|
`+t(" flow-ai-obs")+r(" v"+s)+`
|
|
248
248
|
|
|
@@ -268,11 +268,11 @@ ${r}`},{re:/\b(AKIA[0-9A-Z]{16})\b/g,replace:()=>`AKIA${Y}`},{re:/(aws_secret_ac
|
|
|
268
268
|
`)+n(` Run: flow-ai-obs update
|
|
269
269
|
|
|
270
270
|
`));}process.exit(0);})().catch(()=>process.exit(0));else if(V==="--help"||V==="-h")us(),process.exit(0);else if(V==="init"||V==="install")(async()=>{V==="install"&&process.stderr.write(`Warning: "install" is deprecated, use "init" instead
|
|
271
|
-
`),await(It(),C(bt)).checkForUpdateInteractive();let{runInit:t}=(
|
|
272
|
-
`),process.exit(1);});else if(V==="login")(async()=>{await(It(),C(bt)).checkForUpdateInteractive();let{runLogin:t}=(
|
|
271
|
+
`),await(It(),C(bt)).checkForUpdateInteractive();let{runInit:t}=(hn(),C(En)),e=process.argv.slice(3);process.exit(await t({url:ct(e,"--custom-url"),noInteractive:e.includes("--no-interactive"),email:ct(e,"--custom-email"),clientId:ct(e,"--client-id"),clientSecret:ct(e,"--client-secret"),tenant:ct(e,"--tenant")}));})().catch(t=>{process.stderr.write(`Unexpected error: ${t.message}
|
|
272
|
+
`),process.exit(1);});else if(V==="login")(async()=>{await(It(),C(bt)).checkForUpdateInteractive();let{runLogin:t}=(ce(),C(ae)),e=process.argv.slice(3),r=await t({clientId:ct(e,"--client-id"),clientSecret:ct(e,"--client-secret"),tenant:ct(e,"--tenant")});process.exit(typeof r=="number"?r:r.code);})().catch(t=>{process.stderr.write(`Unexpected error: ${t.message}
|
|
273
273
|
`),process.exit(1);});else if(V==="status")(async()=>{await(It(),C(bt)).checkForUpdateInteractive();let{runStatus:t}=(An(),C(yn));process.exit(await t());})().catch(t=>{process.stderr.write(`Unexpected error: ${t.message}
|
|
274
274
|
`),process.exit(1);});else if(V==="update")(async()=>{let t=(It(),C(bt)),{version:e}=Kt(),r=await t.fetchLatestVersionAsync();r||(process.stderr.write(` \u2717 Could not reach npm registry \u2014 check your connection.
|
|
275
275
|
`),process.exit(1)),t.isNewer(e,r.version)||(process.stdout.write(` \u2713 Already up to date (v${e})
|
|
276
276
|
`),process.exit(0)),await t.runUpdate(r.version),process.exit(0);})().catch(t=>{process.stderr.write(`Unexpected error: ${t.message}
|
|
277
|
-
`),process.exit(1);});else if(V==="otel-headers"){let{runOtelHeaders:t}=(
|
|
277
|
+
`),process.exit(1);});else if(V==="otel-headers"){let{runOtelHeaders:t}=(Ln(),C(On));t().then(e=>process.exit(e)).catch(e=>{process.stderr.write(`[flow-ai-obs otel-headers] Unexpected error: ${e.message}
|
|
278
278
|
`),process.exit(1);});}else mi.has(V)?(ls(),C(fi)):(us(),process.exit(0));
|
package/dist/setup.js
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
'use strict';var child_process=require('child_process'),util=require('util'),i=require('fs'),p=require('path'),f=require('os'),mt=require('https');require('readline/promises');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}function _interopNamespace(e){if(e&&e.__esModule)return e;var n=Object.create(null);if(e){Object.keys(e).forEach(function(k){if(k!=='default'){var d=Object.getOwnPropertyDescriptor(e,k);Object.defineProperty(n,k,d.get?d:{enumerable:true,get:function(){return e[k]}});}})}n.default=e;return Object.freeze(n)}var i__namespace=/*#__PURE__*/_interopNamespace(i);var p__namespace=/*#__PURE__*/_interopNamespace(p);var f__namespace=/*#__PURE__*/_interopNamespace(f);var mt__default=/*#__PURE__*/_interopDefault(mt);var I=Object.defineProperty;var Pe=Object.getOwnPropertyDescriptor;var Ie=Object.getOwnPropertyNames;var Ue=Object.prototype.hasOwnProperty;var O=(e=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(e,{get:(t,r)=>(typeof require<"u"?require:t)[r]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+e+'" is not supported')});var v=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var Ne=(e,t)=>()=>{try{return t||e((t={exports:{}}).exports,t),t.exports}catch(r){throw t=0,r}},L=(e,t)=>{for(var r in t)I(e,r,{get:t[r],enumerable:true});},be=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of Ie(t))!Ue.call(e,s)&&s!==r&&I(e,s,{get:()=>t[s],enumerable:!(n=Pe(t,s))||n.enumerable});return e};var Ce=e=>be(I({},"__esModule",{value:true}),e);var q={};L(q,{AUTH_ENGINE:()=>N,BUFFER:()=>xe,CONFIG_DIR_NAME:()=>h,CONFIG_FILE_NAME:()=>_,DEBUG_LOG_FILENAME:()=>$,ENV:()=>u,FEATURES:()=>De,FLOW_URLS:()=>$e,HOOK_TIMEOUTS:()=>C,INSTALLER:()=>b,NATIVE_OTEL:()=>U,OTLP:()=>Me,STATE_FILE_PREFIX:()=>We,TRACE_LIMITS:()=>He,VALIDATION:()=>F,VAULT:()=>E,getFlowBaseUrl:()=>R,getFlowUrls:()=>k,getMetrics:()=>Ve});function R(){let e=process.env.FLOW_BASE_URL;return e&&e.trim()?e.trim():Fe}function k(){let e=R();return {AUTH_ENGINE:process.env.FLOW_AUTH_ENGINE_URL||`${e}/auth-engine-api/v2/api-key/token`,GATEWAY_TRACES:process.env.FLOW_GATEWAY_TRACES_URL||`${e}/flow-langfuse-gateway/v1/traces`,GATEWAY_HEALTH:process.env.FLOW_GATEWAY_HEALTH_URL||`${e}/flow-langfuse-gateway/v1/health`,OTEL_ENDPOINT:process.env.FLOW_OTEL_ENDPOINT_URL||`${e}/otel`}}function Ve(){let e=R();return {API_URL:process.env.FLOW_METRICS_URL||`${e}/metrics-collector-api/log-event`,BOOSTER:"flow-ai-obs"}}var Fe,$e,E,h,_,Me,U,u,De,N,b,C,xe,F,$,He,We,c=v(()=>{"use strict";Fe="https://flow.ciandt.com";$e=k(),E={SERVICE:"flow-plugins-cli",ACCOUNT_CREDS:"credentials",ACCOUNT_TOKEN:"token-cache"},h="FLOW-nodejs",_="config.json",Me={SCOPE_NAME:"flow-ai-obs",SCOPE_VERSION:"0.1.0"},U={CLAUDE_CODE_ENABLE_TELEMETRY:"1",OTEL_EXPORTER_OTLP_PROTOCOL:"http/json",OTEL_METRICS_EXPORTER:"otlp",OTEL_LOGS_EXPORTER:"otlp",OTEL_LOG_TOOL_DETAILS:"1",OTEL_LOG_USER_PROMPTS:"1"},u={FLOW_TELEMETRY:"FLOW_TELEMETRY",FLOW_TELEMETRY_GATEWAY:"FLOW_TELEMETRY_GATEWAY_URL",LANGFUSE_BASE_URL:"LANGFUSE_BASE_URL",LANGFUSE_PUBLIC_KEY:"LANGFUSE_PUBLIC_KEY",LANGFUSE_SECRET_KEY:"LANGFUSE_SECRET_KEY",ANTHROPIC_AUTH_TOKEN:"ANTHROPIC_AUTH_TOKEN",FLOW_OBS_DEBUG:"FLOW_TELEMETRY_DEBUG",FLOW_OBS_ALLOW_HTTP:"FLOW_TELEMETRY_ALLOW_HTTP",FLOW_OBS_USE_JSON_VAULT:"FLOW_TELEMETRY_USE_JSON_VAULT",BUFFER_TTL_DAYS:"FLOW_TELEMETRY_BUFFER_TTL_DAYS",BUFFER_MAX_FILES:"FLOW_TELEMETRY_BUFFER_MAX_FILES",FLOW_USER_EMAIL:"FLOW_USER_EMAIL",FLOW_API_KEY:"FLOW_API_KEY",OTEL_EXPORTER_OTLP_HEADERS:"OTEL_EXPORTER_OTLP_HEADERS",FLOW_BASE_URL:"FLOW_BASE_URL"},De={KEYCHAIN_ENABLED:!1},N={REQUEST_TIMEOUT_MS:1e4,MAX_RETRY_ATTEMPTS:3,RETRY_DELAY_MS:1e3},b={LOCK_STALE_MS:3e4,CONNECTIVITY_MAX_RETRY:3,CONNECTIVITY_RETRY_MS:2e3,CLI:"flow-ai-obs "},C={UserPromptSubmit:30,PreToolUse:3,PostToolUse:10,Stop:15},xe={FILE_PREFIX:"flow-obs-buffer-",DEFAULT_TTL_DAYS:4,MIN_TTL_DAYS:1,MAX_TTL_DAYS:30,DEFAULT_MAX_FILES:50,MIN_MAX_FILES:1,MAX_MAX_FILES:500,REPLAY_BATCH_SIZE:10},F={API_KEY_MAX_LENGTH:1024,API_KEY_PATTERN:/^[\x21-\x7E]+$/,EMAIL_MAX_LENGTH:254,EMAIL_HEADER_PATTERN:/^[\x21-\x7E]+$/},$="flow-ai-obs-debug.log",He={TOOL_INPUT:2e4,TOOL_OUTPUT:2e4,TRACE_OUTPUT:2e4,USER_INSTRUCTION:1e4,TRACE_INPUT:5e4,TOOL_BRIEF:60};We="flow-obs-";});var Z={};L(Z,{MacOsKeyVaultProvider:()=>H});var x,H,Q=v(()=>{"use strict";x=util.promisify(child_process.execFile),H=class{static async isAvailable(){try{return i.accessSync("/usr/bin/security",i.constants.X_OK),!0}catch{return !1}}async getSecret(t,r){try{let{stdout:n}=await x("security",["find-generic-password","-w","-a",r,"-s",t]);return n.trim()||null}catch{return null}}async setSecret(t,r,n){await x("security",["add-generic-password","-U","-a",r,"-s",t,"-w",n]);}async deleteSecret(t,r){try{return await x("security",["delete-generic-password","-a",r,"-s",t]),!0}catch{return !1}}getStoragePath(){return "macOS Keychain"}};});var te={};L(te,{LinuxKeyVaultProvider:()=>V});var ee,V,re=v(()=>{"use strict";ee=util.promisify(child_process.execFile),V=class{static async isAvailable(){let t=["/usr/bin/secret-tool","/bin/secret-tool","/usr/local/bin/secret-tool"];for(let r of t)try{return i.accessSync(r,i.constants.X_OK),!0}catch{}return !1}async getSecret(t,r){try{let{stdout:n}=await ee("secret-tool",["lookup","service",t,"account",r]);return n.trim()||null}catch{return null}}async setSecret(t,r,n){await new Promise((s,o)=>{let a=child_process.spawn("secret-tool",["store","--label",t,"service",t,"account",r]);a.on("error",o),a.on("close",g=>{g===0?s():o(new Error(`secret-tool exited with code ${g}`));}),a.stdin.write(n),a.stdin.end();});}async deleteSecret(t,r){try{return await ee("secret-tool",["clear","service",t,"account",r]),!0}catch{return !1}}getStoragePath(){return "Linux Secret Service (libsecret)"}};});var ne={};L(ne,{WindowsKeyVaultProvider:()=>W});var W,se=v(()=>{"use strict";W=class{static async isAvailable(){try{return await O("keytar").getPassword("__flow_probe__","__flow_probe__"),!0}catch{return !1}}async getSecret(t,r){return O("keytar").getPassword(t,r)}async setSecret(t,r,n){await O("keytar").setPassword(t,r,n);}async deleteSecret(t,r){return O("keytar").deletePassword(t,r)}getStoragePath(){return "Windows Credential Manager"}};});var _e=Ne(($r,dt)=>{dt.exports={name:"@ciandt-flow/flow-ai-obs",version:"0.12.1-beta.43",description:"Claude Code hooks for Langfuse OTLP tracing \u2014 cross-platform",main:"dist/index.js",bin:{"flow-ai-obs":"dist/cli.js","flow-ai-obs-setup":"dist/setup.js"},scripts:{build:"tsup",test:"jest",typecheck:"tsc --noEmit",lint:"eslint src bin scripts",format:'prettier --write "src/**/*.ts" "bin/**/*.ts" "scripts/**/*.ts"',"format:check":'prettier --check "src/**/*.ts" "bin/**/*.ts" "scripts/**/*.ts"',"security-scan":"trufflehog filesystem src/ --fail --no-update --exclude-paths .trufflehogignore",postinstall:`node -e "require('fs').existsSync('dist/setup.js') && require('child_process').execFileSync(process.execPath, ['dist/setup.js'], {stdio:'inherit'})"`,prepublishOnly:"npm run security-scan && npm run build","release:npm":"changeset publish",changeset:"changeset","version-packages":"changeset version","install:hooks":"node dist/cli.js install","auth:login":"node dist/cli.js auth login","auth:logout":"node dist/cli.js auth logout","auth:status":"node dist/cli.js auth status",smoke:"bash scripts/smoke-test.sh","smoke:debug":"bash scripts/smoke-test.sh --debug","smoke:send":"bash scripts/smoke-test.sh --send --allow-http --debug",regression:"jest --config jest.regression.config.js --forceExit","regression:update":"UPDATE_GOLDEN=1 jest --config jest.regression.config.js --forceExit"},files:["dist/","README.md","LICENSE.md"],keywords:["claude-code","langfuse","observability","otlp","hooks","flow","ciandt"],author:"CI&T Flow Team",license:"SEE LICENSE IN LICENSE.md",private:!1,dependencies:{},optionalDependencies:{keytar:"7.9.0"},devDependencies:{"@changesets/changelog-github":"^0.6.0","@changesets/cli":"^2.30.0","@types/jest":"^30.0.0","@types/node":"^25.8.0",jest:"^30.4.2","ts-jest":"^29.4.9",tsup:"^8.5.1","eslint-config-prettier":"^10.1.5",prettier:"^3.5.3",typescript:"^6.0.3","typescript-eslint":"^8.33.0"},engines:{node:">=18.0.0"},overrides:{esbuild:"^0.28.1"},publishConfig:{registry:"https://registry.npmjs.org",access:"public"},repository:{type:"git",url:"git+https://github.com/CI-T-HyperX/flow-codeassistant-observability.git"}};});c();c();var M={credentials:"credentials","token-cache":"tokenCache"};function T(){let e=f__namespace.default.homedir();if(process.platform==="darwin")return p__namespace.default.join(e,"Library","Preferences",h,_);if(process.platform==="win32"){let r=process.env.APPDATA??p__namespace.default.join(e,"AppData","Roaming");return p__namespace.default.join(r,h,_)}let t=process.env.XDG_CONFIG_HOME??p__namespace.default.join(e,".config");return p__namespace.default.join(t,h,_)}function D(){try{let e=i__namespace.default.readFileSync(T(),"utf8");return JSON.parse(e)}catch{return {}}}function z(e){let t=T();i__namespace.default.mkdirSync(p__namespace.default.dirname(t),{recursive:true}),i__namespace.default.writeFileSync(t,JSON.stringify(e,null,2),{encoding:"utf8",mode:384});}var S=class{static isAvailable(){return true}static hasExistingData(){try{if(!i__namespace.default.existsSync(T()))return !1;let t=JSON.parse(i__namespace.default.readFileSync(T(),"utf8"));return !!(t&&t.credentials)}catch{return false}}async getSecret(t,r){let n=D(),s=M[r]??r,o=n[s];return o?typeof o=="string"?o:JSON.stringify(o):null}async setSecret(t,r,n){let s=D(),o=M[r]??r;if(r==="token-cache")try{s[o]=JSON.parse(n);}catch{s[o]=n;}else s[o]=n;z(s);}async deleteSecret(t,r){let n=D(),s=M[r]??r;return s in n?(delete n[s],z(n),true):false}getStoragePath(){return `config.json (unencrypted) \u2014 ${T()}`}};async function oe(){return process.env[u.FLOW_OBS_USE_JSON_VAULT]==="1"?new S:await Qe()??new S}async function Qe(){switch(process.platform){case "darwin":{let{MacOsKeyVaultProvider:e}=await Promise.resolve().then(()=>(Q(),Z));return await e.isAvailable()?new e:null}case "linux":{let{LinuxKeyVaultProvider:e}=await Promise.resolve().then(()=>(re(),te));return await e.isAvailable()?new e:null}case "win32":{let{WindowsKeyVaultProvider:e}=await Promise.resolve().then(()=>(se(),ne));return await e.isAvailable()?new e:null}default:return null}}c();var et=E.SERVICE,tt=E.ACCOUNT_CREDS;E.ACCOUNT_TOKEN;var Y=null;function rt(){return Y||(Y=oe()),Y}async function ie(){let t=await(await rt()).getSecret(et,tt);if(!t)return null;try{return JSON.parse(t)}catch{return null}}c();c();c();p.join(f.tmpdir(),$);!process.env.NO_COLOR&&process.stdout.isTTY;function G(){return process.platform==="win32"?false:process.getuid?.()===0}function ce(){if(process.platform==="linux"&&process.getuid?.()===0&&process.env.SUDO_USER){let t=child_process.spawnSync("getent",["passwd",process.env.SUDO_USER],{encoding:"utf8",timeout:5e3}).stdout?.split(":")[5]?.trim();if(t)return {home:t,username:process.env.SUDO_USER}}return {home:f__namespace.homedir(),username:process.env.SUDO_USER||process.env.USER||f__namespace.userInfo().username}}function P(){if(process.env.WSL_DISTRO_NAME&&process.platform==="linux"){let e=process.env.USERPROFILE;if(!e){let r=child_process.spawnSync("cmd.exe",["/c","echo","%USERPROFILE%"],{encoding:"utf8",timeout:5e3}).stdout?.trim();r&&/^[A-Za-z]:\\/.test(r)&&(e=r);}if(e){let t=e.replace(/^([A-Za-z]):/,(r,n)=>`/mnt/${n.toLowerCase()}`).replace(/\\/g,"/");return p__namespace.join(t,".claude","settings.json")}return p__namespace.join(f__namespace.homedir(),".claude","settings.json")}if(process.platform==="win32"){let e=process.env.USERPROFILE||f__namespace.homedir();return p__namespace.join(e,".claude","settings.json")}if(process.platform==="linux"&&process.getuid?.()===0&&process.env.SUDO_USER){let t=child_process.spawnSync("getent",["passwd",process.env.SUDO_USER],{encoding:"utf8",timeout:5e3}).stdout?.split(":")[5]?.trim();if(t)return p__namespace.join(t,".claude","settings.json")}return p__namespace.join(f__namespace.homedir(),".claude","settings.json")}var le="flow-ai-obs",ue="config.json";function pe(){if(process.platform==="win32"){let r=process.env.APPDATA||p__namespace.join(f__namespace.homedir(),"AppData","Roaming");return p__namespace.join(r,le,ue)}let e=ce(),t=process.env.XDG_CONFIG_HOME||p__namespace.join(e.home,".config");return p__namespace.join(t,le,ue)}var lt=b.LOCK_STALE_MS;function de(e){try{let t=i__namespace.statSync(e);Date.now()-t.mtimeMs>lt&&i__namespace.unlinkSync(e);}catch{}try{i__namespace.writeFileSync(e,String(process.pid),{flag:"wx"});}catch(t){throw t.code==="EEXIST"?new Error("Another install is already in progress. If this is stale, remove: "+e):t}}function me(e){try{i__namespace.unlinkSync(e);}catch{}}function ut(e,t){let n=(Array.isArray(e)?e:[]).map(s=>{if(!Array.isArray(s?.hooks))return null;let o=s.hooks.filter(a=>!a.command?.startsWith?.("flow-ai-obs "));return o.length>0?{...s,hooks:o}:null}).filter(s=>s!=null);return [t,...n]}function ge(e,t){let r=P(),n=r+".lock",s=[];i__namespace.mkdirSync(p__namespace.dirname(r),{recursive:true}),de(n);try{if(i__namespace.existsSync(r)){i__namespace.copyFileSync(r,r+".bkp");try{i__namespace.chmodSync(r+".bkp",384);}catch{}}let o=pe();if(i__namespace.existsSync(o)){let l=o+".bkp";i__namespace.copyFileSync(o,l);try{i__namespace.chmodSync(l,384);}catch{}}let a={};try{a=JSON.parse(i__namespace.readFileSync(r,"utf8"));}catch{}let g=a.env&&typeof a.env=="object"?a.env:{};delete g.OTEL_EXPORTER_OTLP_HEADERS;let{getFlowUrls:Oe}=(c(),Ce(q)),ve=Oe().OTEL_ENDPOINT,Le={...U,OTEL_EXPORTER_OTLP_ENDPOINT:e??ve};a.env={...g,...Le,...t??{}},a.otelHeadersHelper="flow-ai-obs otel-headers",(!a.hooks||typeof a.hooks!="object"||Array.isArray(a.hooks))&&(a.hooks={});let Re=(l,A)=>({matcher:"",hooks:[{type:"command",command:`flow-ai-obs ${l}`,timeout:A}]}),ke=["UserPromptSubmit","PreToolUse","PostToolUse","Stop"],X=a.hooks;for(let l of ke){let A=ut(X[l],Re(l,C[l]));A.length>1&&s.push(l),X[l]=A;}i__namespace.writeFileSync(r,JSON.stringify(a,null,2)+`
|
|
2
|
+
'use strict';var child_process=require('child_process'),util=require('util'),i=require('fs'),p=require('path'),f=require('os'),mt=require('https');require('readline/promises');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}function _interopNamespace(e){if(e&&e.__esModule)return e;var n=Object.create(null);if(e){Object.keys(e).forEach(function(k){if(k!=='default'){var d=Object.getOwnPropertyDescriptor(e,k);Object.defineProperty(n,k,d.get?d:{enumerable:true,get:function(){return e[k]}});}})}n.default=e;return Object.freeze(n)}var i__namespace=/*#__PURE__*/_interopNamespace(i);var p__namespace=/*#__PURE__*/_interopNamespace(p);var f__namespace=/*#__PURE__*/_interopNamespace(f);var mt__default=/*#__PURE__*/_interopDefault(mt);var I=Object.defineProperty;var Pe=Object.getOwnPropertyDescriptor;var Ie=Object.getOwnPropertyNames;var Ue=Object.prototype.hasOwnProperty;var O=(e=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(e,{get:(t,r)=>(typeof require<"u"?require:t)[r]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+e+'" is not supported')});var v=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var Ne=(e,t)=>()=>{try{return t||e((t={exports:{}}).exports,t),t.exports}catch(r){throw t=0,r}},L=(e,t)=>{for(var r in t)I(e,r,{get:t[r],enumerable:true});},be=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of Ie(t))!Ue.call(e,s)&&s!==r&&I(e,s,{get:()=>t[s],enumerable:!(n=Pe(t,s))||n.enumerable});return e};var Ce=e=>be(I({},"__esModule",{value:true}),e);var q={};L(q,{AUTH_ENGINE:()=>N,BUFFER:()=>xe,CONFIG_DIR_NAME:()=>h,CONFIG_FILE_NAME:()=>_,DEBUG_LOG_FILENAME:()=>$,ENV:()=>u,FEATURES:()=>De,FLOW_URLS:()=>$e,HOOK_TIMEOUTS:()=>C,INSTALLER:()=>b,NATIVE_OTEL:()=>U,OTLP:()=>Me,STATE_FILE_PREFIX:()=>We,TRACE_LIMITS:()=>He,VALIDATION:()=>F,VAULT:()=>E,getFlowBaseUrl:()=>R,getFlowUrls:()=>k,getMetrics:()=>Ve});function R(){let e=process.env.FLOW_BASE_URL;return e&&e.trim()?e.trim():Fe}function k(){let e=R();return {AUTH_ENGINE:process.env.FLOW_AUTH_ENGINE_URL||`${e}/auth-engine-api/v2/api-key/token`,GATEWAY_TRACES:process.env.FLOW_GATEWAY_TRACES_URL||`${e}/flow-langfuse-gateway/v1/traces`,GATEWAY_HEALTH:process.env.FLOW_GATEWAY_HEALTH_URL||`${e}/flow-langfuse-gateway/v1/health`,OTEL_ENDPOINT:process.env.FLOW_OTEL_ENDPOINT_URL||`${e}/otel`}}function Ve(){let e=R();return {API_URL:process.env.FLOW_METRICS_URL||`${e}/metrics-collector-api/log-event`,BOOSTER:"flow-ai-obs"}}var Fe,$e,E,h,_,Me,U,u,De,N,b,C,xe,F,$,He,We,c=v(()=>{"use strict";Fe="https://flow.ciandt.com";$e=k(),E={SERVICE:"flow-plugins-cli",ACCOUNT_CREDS:"credentials",ACCOUNT_TOKEN:"token-cache"},h="FLOW-nodejs",_="config.json",Me={SCOPE_NAME:"flow-ai-obs",SCOPE_VERSION:"0.1.0"},U={CLAUDE_CODE_ENABLE_TELEMETRY:"1",OTEL_EXPORTER_OTLP_PROTOCOL:"http/json",OTEL_METRICS_EXPORTER:"otlp",OTEL_LOGS_EXPORTER:"otlp",OTEL_LOG_TOOL_DETAILS:"1",OTEL_LOG_USER_PROMPTS:"1"},u={FLOW_TELEMETRY:"FLOW_TELEMETRY",FLOW_TELEMETRY_GATEWAY:"FLOW_TELEMETRY_GATEWAY_URL",LANGFUSE_BASE_URL:"LANGFUSE_BASE_URL",LANGFUSE_PUBLIC_KEY:"LANGFUSE_PUBLIC_KEY",LANGFUSE_SECRET_KEY:"LANGFUSE_SECRET_KEY",ANTHROPIC_AUTH_TOKEN:"ANTHROPIC_AUTH_TOKEN",FLOW_OBS_DEBUG:"FLOW_TELEMETRY_DEBUG",FLOW_OBS_ALLOW_HTTP:"FLOW_TELEMETRY_ALLOW_HTTP",FLOW_OBS_USE_JSON_VAULT:"FLOW_TELEMETRY_USE_JSON_VAULT",BUFFER_TTL_DAYS:"FLOW_TELEMETRY_BUFFER_TTL_DAYS",BUFFER_MAX_FILES:"FLOW_TELEMETRY_BUFFER_MAX_FILES",FLOW_USER_EMAIL:"FLOW_USER_EMAIL",FLOW_API_KEY:"FLOW_API_KEY",OTEL_EXPORTER_OTLP_HEADERS:"OTEL_EXPORTER_OTLP_HEADERS",FLOW_BASE_URL:"FLOW_BASE_URL"},De={KEYCHAIN_ENABLED:!1},N={REQUEST_TIMEOUT_MS:1e4,MAX_RETRY_ATTEMPTS:3,RETRY_DELAY_MS:1e3},b={LOCK_STALE_MS:3e4,CONNECTIVITY_MAX_RETRY:3,CONNECTIVITY_RETRY_MS:2e3,CLI:"flow-ai-obs "},C={UserPromptSubmit:30,PreToolUse:3,PostToolUse:10,Stop:15},xe={FILE_PREFIX:"flow-obs-buffer-",DEFAULT_TTL_DAYS:4,MIN_TTL_DAYS:1,MAX_TTL_DAYS:30,DEFAULT_MAX_FILES:50,MIN_MAX_FILES:1,MAX_MAX_FILES:500,REPLAY_BATCH_SIZE:10},F={API_KEY_MAX_LENGTH:1024,API_KEY_PATTERN:/^[\x21-\x7E]+$/,EMAIL_MAX_LENGTH:254,EMAIL_HEADER_PATTERN:/^[\x21-\x7E]+$/},$="flow-ai-obs-debug.log",He={TOOL_INPUT:2e4,TOOL_OUTPUT:2e4,TRACE_OUTPUT:2e4,USER_INSTRUCTION:1e4,TRACE_INPUT:5e4,TOOL_BRIEF:60};We="flow-obs-";});var Z={};L(Z,{MacOsKeyVaultProvider:()=>H});var x,H,Q=v(()=>{"use strict";x=util.promisify(child_process.execFile),H=class{static async isAvailable(){try{return i.accessSync("/usr/bin/security",i.constants.X_OK),!0}catch{return !1}}async getSecret(t,r){try{let{stdout:n}=await x("security",["find-generic-password","-w","-a",r,"-s",t]);return n.trim()||null}catch{return null}}async setSecret(t,r,n){await x("security",["add-generic-password","-U","-a",r,"-s",t,"-w",n]);}async deleteSecret(t,r){try{return await x("security",["delete-generic-password","-a",r,"-s",t]),!0}catch{return !1}}getStoragePath(){return "macOS Keychain"}};});var te={};L(te,{LinuxKeyVaultProvider:()=>V});var ee,V,re=v(()=>{"use strict";ee=util.promisify(child_process.execFile),V=class{static async isAvailable(){let t=["/usr/bin/secret-tool","/bin/secret-tool","/usr/local/bin/secret-tool"];for(let r of t)try{return i.accessSync(r,i.constants.X_OK),!0}catch{}return !1}async getSecret(t,r){try{let{stdout:n}=await ee("secret-tool",["lookup","service",t,"account",r]);return n.trim()||null}catch{return null}}async setSecret(t,r,n){await new Promise((s,o)=>{let a=child_process.spawn("secret-tool",["store","--label",t,"service",t,"account",r]);a.on("error",o),a.on("close",g=>{g===0?s():o(new Error(`secret-tool exited with code ${g}`));}),a.stdin.write(n),a.stdin.end();});}async deleteSecret(t,r){try{return await ee("secret-tool",["clear","service",t,"account",r]),!0}catch{return !1}}getStoragePath(){return "Linux Secret Service (libsecret)"}};});var ne={};L(ne,{WindowsKeyVaultProvider:()=>W});var W,se=v(()=>{"use strict";W=class{static async isAvailable(){try{return await O("keytar").getPassword("__flow_probe__","__flow_probe__"),!0}catch{return !1}}async getSecret(t,r){return O("keytar").getPassword(t,r)}async setSecret(t,r,n){await O("keytar").setPassword(t,r,n);}async deleteSecret(t,r){return O("keytar").deletePassword(t,r)}getStoragePath(){return "Windows Credential Manager"}};});var _e=Ne(($r,dt)=>{dt.exports={name:"@ciandt-flow/flow-ai-obs",version:"0.12.1-beta.46",description:"Claude Code hooks for Langfuse OTLP tracing \u2014 cross-platform",main:"dist/index.js",bin:{"flow-ai-obs":"dist/cli.js","flow-ai-obs-setup":"dist/setup.js"},scripts:{build:"tsup",test:"jest",typecheck:"tsc --noEmit",lint:"eslint src bin scripts",format:'prettier --write "src/**/*.ts" "bin/**/*.ts" "scripts/**/*.ts"',"format:check":'prettier --check "src/**/*.ts" "bin/**/*.ts" "scripts/**/*.ts"',"security-scan":"trufflehog filesystem src/ --fail --no-update --exclude-paths .trufflehogignore",postinstall:`node -e "require('fs').existsSync('dist/setup.js') && require('child_process').execFileSync(process.execPath, ['dist/setup.js'], {stdio:'inherit'})"`,prepublishOnly:"npm run security-scan && npm run build","release:npm":"changeset publish",changeset:"changeset","version-packages":"changeset version","install:hooks":"node dist/cli.js install","auth:login":"node dist/cli.js auth login","auth:logout":"node dist/cli.js auth logout","auth:status":"node dist/cli.js auth status",smoke:"bash scripts/smoke-test.sh","smoke:debug":"bash scripts/smoke-test.sh --debug","smoke:send":"bash scripts/smoke-test.sh --send --allow-http --debug",regression:"jest --config jest.regression.config.js --forceExit","regression:update":"UPDATE_GOLDEN=1 jest --config jest.regression.config.js --forceExit"},files:["dist/","README.md","LICENSE.md"],keywords:["claude-code","langfuse","observability","otlp","hooks","flow","ciandt"],author:"CI&T Flow Team",license:"SEE LICENSE IN LICENSE.md",private:!1,dependencies:{},optionalDependencies:{keytar:"7.9.0"},devDependencies:{"@changesets/changelog-github":"^0.6.0","@changesets/cli":"^2.30.0","@types/jest":"^30.0.0","@types/node":"^25.8.0",jest:"^30.4.2","ts-jest":"^29.4.9",tsup:"^8.5.1","eslint-config-prettier":"^10.1.5",prettier:"^3.5.3",typescript:"^6.0.3","typescript-eslint":"^8.33.0"},engines:{node:">=18.0.0"},overrides:{esbuild:"^0.28.1"},publishConfig:{registry:"https://registry.npmjs.org",access:"public"},repository:{type:"git",url:"git+https://github.com/CI-T-HyperX/flow-codeassistant-observability.git"}};});c();c();var M={credentials:"credentials","token-cache":"tokenCache"};function T(){let e=f__namespace.default.homedir();if(process.platform==="darwin")return p__namespace.default.join(e,"Library","Preferences",h,_);if(process.platform==="win32"){let r=process.env.APPDATA??p__namespace.default.join(e,"AppData","Roaming");return p__namespace.default.join(r,h,_)}let t=process.env.XDG_CONFIG_HOME??p__namespace.default.join(e,".config");return p__namespace.default.join(t,h,_)}function D(){try{let e=i__namespace.default.readFileSync(T(),"utf8");return JSON.parse(e)}catch{return {}}}function z(e){let t=T();i__namespace.default.mkdirSync(p__namespace.default.dirname(t),{recursive:true}),i__namespace.default.writeFileSync(t,JSON.stringify(e,null,2),{encoding:"utf8",mode:384});}var S=class{static isAvailable(){return true}static hasExistingData(){try{if(!i__namespace.default.existsSync(T()))return !1;let t=JSON.parse(i__namespace.default.readFileSync(T(),"utf8"));return !!(t&&t.credentials)}catch{return false}}async getSecret(t,r){let n=D(),s=M[r]??r,o=n[s];return o?typeof o=="string"?o:JSON.stringify(o):null}async setSecret(t,r,n){let s=D(),o=M[r]??r;if(r==="token-cache")try{s[o]=JSON.parse(n);}catch{s[o]=n;}else s[o]=n;z(s);}async deleteSecret(t,r){let n=D(),s=M[r]??r;return s in n?(delete n[s],z(n),true):false}getStoragePath(){return `config.json (unencrypted) \u2014 ${T()}`}};async function oe(){return process.env[u.FLOW_OBS_USE_JSON_VAULT]==="1"?new S:await Qe()??new S}async function Qe(){switch(process.platform){case "darwin":{let{MacOsKeyVaultProvider:e}=await Promise.resolve().then(()=>(Q(),Z));return await e.isAvailable()?new e:null}case "linux":{let{LinuxKeyVaultProvider:e}=await Promise.resolve().then(()=>(re(),te));return await e.isAvailable()?new e:null}case "win32":{let{WindowsKeyVaultProvider:e}=await Promise.resolve().then(()=>(se(),ne));return await e.isAvailable()?new e:null}default:return null}}c();var et=E.SERVICE,tt=E.ACCOUNT_CREDS;E.ACCOUNT_TOKEN;var Y=null;function rt(){return Y||(Y=oe()),Y}async function ie(){let t=await(await rt()).getSecret(et,tt);if(!t)return null;try{return JSON.parse(t)}catch{return null}}c();c();c();p.join(f.tmpdir(),$);!process.env.NO_COLOR&&process.stdout.isTTY;function G(){return process.platform==="win32"?false:process.getuid?.()===0}function ce(){if(process.platform==="linux"&&process.getuid?.()===0&&process.env.SUDO_USER){let t=child_process.spawnSync("getent",["passwd",process.env.SUDO_USER],{encoding:"utf8",timeout:5e3}).stdout?.split(":")[5]?.trim();if(t)return {home:t,username:process.env.SUDO_USER}}return {home:f__namespace.homedir(),username:process.env.SUDO_USER||process.env.USER||f__namespace.userInfo().username}}function P(){if(process.env.WSL_DISTRO_NAME&&process.platform==="linux"){let e=process.env.USERPROFILE;if(!e){let r=child_process.spawnSync("cmd.exe",["/c","echo","%USERPROFILE%"],{encoding:"utf8",timeout:5e3}).stdout?.trim();r&&/^[A-Za-z]:\\/.test(r)&&(e=r);}if(e){let t=e.replace(/^([A-Za-z]):/,(r,n)=>`/mnt/${n.toLowerCase()}`).replace(/\\/g,"/");return p__namespace.join(t,".claude","settings.json")}return p__namespace.join(f__namespace.homedir(),".claude","settings.json")}if(process.platform==="win32"){let e=process.env.USERPROFILE||f__namespace.homedir();return p__namespace.join(e,".claude","settings.json")}if(process.platform==="linux"&&process.getuid?.()===0&&process.env.SUDO_USER){let t=child_process.spawnSync("getent",["passwd",process.env.SUDO_USER],{encoding:"utf8",timeout:5e3}).stdout?.split(":")[5]?.trim();if(t)return p__namespace.join(t,".claude","settings.json")}return p__namespace.join(f__namespace.homedir(),".claude","settings.json")}var le="flow-ai-obs",ue="config.json";function pe(){if(process.platform==="win32"){let r=process.env.APPDATA||p__namespace.join(f__namespace.homedir(),"AppData","Roaming");return p__namespace.join(r,le,ue)}let e=ce(),t=process.env.XDG_CONFIG_HOME||p__namespace.join(e.home,".config");return p__namespace.join(t,le,ue)}var lt=b.LOCK_STALE_MS;function de(e){try{let t=i__namespace.statSync(e);Date.now()-t.mtimeMs>lt&&i__namespace.unlinkSync(e);}catch{}try{i__namespace.writeFileSync(e,String(process.pid),{flag:"wx"});}catch(t){throw t.code==="EEXIST"?new Error("Another install is already in progress. If this is stale, remove: "+e):t}}function me(e){try{i__namespace.unlinkSync(e);}catch{}}function ut(e,t){let n=(Array.isArray(e)?e:[]).map(s=>{if(!Array.isArray(s?.hooks))return null;let o=s.hooks.filter(a=>!a.command?.startsWith?.("flow-ai-obs "));return o.length>0?{...s,hooks:o}:null}).filter(s=>s!=null);return [t,...n]}function ge(e,t){let r=P(),n=r+".lock",s=[];i__namespace.mkdirSync(p__namespace.dirname(r),{recursive:true}),de(n);try{if(i__namespace.existsSync(r)){i__namespace.copyFileSync(r,r+".bkp");try{i__namespace.chmodSync(r+".bkp",384);}catch{}}let o=pe();if(i__namespace.existsSync(o)){let l=o+".bkp";i__namespace.copyFileSync(o,l);try{i__namespace.chmodSync(l,384);}catch{}}let a={};try{a=JSON.parse(i__namespace.readFileSync(r,"utf8"));}catch{}let g=a.env&&typeof a.env=="object"?a.env:{};delete g.OTEL_EXPORTER_OTLP_HEADERS;let{getFlowUrls:Oe}=(c(),Ce(q)),ve=Oe().OTEL_ENDPOINT,Le={...U,OTEL_EXPORTER_OTLP_ENDPOINT:e??ve};a.env={...g,...Le,...t??{}},a.otelHeadersHelper="flow-ai-obs otel-headers",(!a.hooks||typeof a.hooks!="object"||Array.isArray(a.hooks))&&(a.hooks={});let Re=(l,A)=>({matcher:"",hooks:[{type:"command",command:`flow-ai-obs ${l}`,timeout:A}]}),ke=["UserPromptSubmit","PreToolUse","PostToolUse","Stop"],X=a.hooks;for(let l of ke){let A=ut(X[l],Re(l,C[l]));A.length>1&&s.push(l),X[l]=A;}i__namespace.writeFileSync(r,JSON.stringify(a,null,2)+`
|
|
3
3
|
`,{encoding:"utf8",mode:384});try{i__namespace.chmodSync(r,384);}catch{}}finally{me(n);}return {settingsPath:r,preserved:s}}function K(e){let t=P(),r=t+".lock";i__namespace.mkdirSync(p__namespace.dirname(t),{recursive:true}),de(r);try{let n={};try{n=JSON.parse(i__namespace.readFileSync(t,"utf8"));}catch{}(!n.env||typeof n.env!="object")&&(n.env={}),Object.assign(n.env,e),i__namespace.writeFileSync(t,JSON.stringify(n,null,2)+`
|
|
4
4
|
`,{encoding:"utf8",mode:384});try{i__namespace.chmodSync(t,384);}catch{}}finally{me(r);}}c();c();function Ee(e){if(!e)return null;try{let t=e.split(".");if(t.length<2)return null;let r=JSON.parse(Buffer.from(t[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8")),{clientId:n,clientSecret:s,tenant:o}=r;return !n||!s||!o?null:{clientId:n,clientSecret:s,tenant:o}}catch{return null}}function he(e){let t=Buffer.from(JSON.stringify({alg:"none",typ:"JWT"})).toString("base64url"),r=Buffer.from(JSON.stringify({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant})).toString("base64url");return `${t}.${r}.`}c();var J;function ye(){return J||(J=_e()),J}var Se=p__namespace.default.join(f__namespace.default.tmpdir(),"flow-obs-update-cache.json"),ht=1440*60*1e3,_t=3e3;function Tt(e,t){let r=o=>{let a=String(o).replace(/^v/,"").match(/^(\d+)\.(\d+)\.(\d+)/);return a?[+a[1],+a[2],+a[3]]:null},n=r(e),s=r(t);return !n||!s?false:s[0]!==n[0]?s[0]>n[0]:s[1]!==n[1]?s[1]>n[1]:s[2]>n[2]}function yt(){try{let e=JSON.parse(i__namespace.default.readFileSync(Se,"utf8"));return typeof e.latestVersion!="string"||Date.now()-e.checkedAt>=ht?null:e}catch{return null}}function St(e,t,r=Date.now()){try{i__namespace.default.writeFileSync(Se,JSON.stringify({latestVersion:e,updatePriority:t??null,checkedAt:r}),{mode:384});}catch{}}function wt(e){let t=ye().name,r=mt__default.default.get(`https://registry.npmjs.org/${encodeURIComponent(t)}/latest`,{timeout:_t},n=>{if(n.statusCode!==200)return n.resume(),e(new Error(`HTTP ${n.statusCode}`));let s="";n.setEncoding("utf8"),n.on("data",o=>{s+=o;}),n.on("end",()=>{try{let o=JSON.parse(s);if(typeof o.version!="string")throw new Error("no version field");e(null,{version:o.version,updatePriority:typeof o.updatePriority=="string"?o.updatePriority:null});}catch(o){e(o);}});});r.on("error",e),r.on("timeout",()=>{r.destroy(new Error("timeout"));});}function we(){try{if(yt())return;setImmediate(()=>{wt((e,t)=>{e||!t||Tt(ye().version,t.version)&&St(t.version,t.updatePriority,0);});});}catch{}}var At=p__namespace.default.resolve(__dirname,".."),Ot=process.env.INIT_CWD?p__namespace.default.resolve(process.env.INIT_CWD):null;Ot===At&&process.exit(0);G()&&(process.stderr.write(`
|
|
5
5
|
[flow-ai-obs] \u2717 Do not install with sudo.
|