@jini-ai/agent-plugins 0.6.16 → 0.6.19

package/netlify/tovu-deploy-targets.json

@@ -0,0 +1,163 @@
+{
+  "schemaVersion": 1,
+  "targets": [
+    {
+      "id": "netlify",
+      "label": "Netlify",
+      "module": "targets/netlify.mjs",
+      "projectName": {
+        "label": "Site name",
+        "help": "Netlify finds or creates a site with this name on every publish."
+      },
+      "env": {
+        "tokenVars": [
+          "NETLIFY_TOKEN",
+          "NETLIFY_ACCESS_TOKEN",
+          "NETLIFY_AUTH_TOKEN"
+        ]
+      },
+      "credential": {
+        "vendorId": "netlify",
+        "help": "A personal access token from your Netlify account.",
+        "tokenPageUrl": "https://app.netlify.com/user/applications#personal-access-tokens",
+        "fields": [
+          {
+            "name": "token",
+            "label": "Personal access token",
+            "required": true,
+            "secret": true,
+            "help": "Netlify: User settings > Applications > Personal access tokens."
+          }
+        ]
+      },
+      "i18n": {
+        "es": {
+          "Site name": "Nombre del sitio",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify busca o crea un sitio con este nombre en cada publicación.",
+          "A personal access token from your Netlify account.": "Un token de acceso personal de tu cuenta de Netlify.",
+          "Personal access token": "Token de acceso personal"
+        },
+        "id": {
+          "Site name": "Nama situs",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify menemukan atau membuat situs dengan nama ini setiap kali menerbitkan.",
+          "A personal access token from your Netlify account.": "Token akses pribadi dari akun Netlify Anda.",
+          "Personal access token": "Token akses pribadi"
+        },
+        "de": {
+          "Site name": "Website-Name",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify findet oder erstellt bei jeder Veröffentlichung eine Website mit diesem Namen.",
+          "A personal access token from your Netlify account.": "Ein persönlicher Zugriffstoken aus Ihrem Netlify-Konto.",
+          "Personal access token": "Persönlicher Zugriffstoken"
+        },
+        "zh-CN": {
+          "Site name": "站点名称",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify 会在每次发布时查找或创建使用此名称的站点。",
+          "A personal access token from your Netlify account.": "来自您 Netlify 帐户的个人访问令牌。",
+          "Personal access token": "个人访问令牌"
+        },
+        "zh-TW": {
+          "Site name": "網站名稱",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify 會在每次發佈時尋找或建立使用此名稱的網站。",
+          "A personal access token from your Netlify account.": "您 Netlify 帳戶的個人存取權杖。",
+          "Personal access token": "個人存取權杖"
+        },
+        "pt-BR": {
+          "Site name": "Nome do site",
+          "Netlify finds or creates a site with this name on every publish.": "A Netlify encontra ou cria um site com este nome em cada publicação.",
+          "A personal access token from your Netlify account.": "Um token de acesso pessoal da sua conta Netlify.",
+          "Personal access token": "Token de acesso pessoal"
+        },
+        "ru": {
+          "Site name": "Название сайта",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify при каждой публикации находит или создаёт сайт с этим именем.",
+          "A personal access token from your Netlify account.": "Персональный токен доступа из вашей учётной записи Netlify.",
+          "Personal access token": "Персональный токен доступа"
+        },
+        "fa": {
+          "Site name": "نام سایت",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify در هر انتشار سایتی با این نام پیدا یا ایجاد می‌کند.",
+          "A personal access token from your Netlify account.": "یک توکن دسترسی شخصی از حساب Netlify شما.",
+          "Personal access token": "توکن دسترسی شخصی"
+        },
+        "ar": {
+          "Site name": "اسم الموقع",
+          "Netlify finds or creates a site with this name on every publish.": "يعثر Netlify على موقع بهذا الاسم أو ينشئه عند كل نشر.",
+          "A personal access token from your Netlify account.": "رمز وصول شخصي من حساب Netlify الخاص بك.",
+          "Personal access token": "رمز وصول شخصي"
+        },
+        "ja": {
+          "Site name": "サイト名",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify は公開のたびにこの名前のサイトを見つけるか作成します。",
+          "A personal access token from your Netlify account.": "Netlify アカウントの個人アクセストークン。",
+          "Personal access token": "個人アクセストークン"
+        },
+        "ko": {
+          "Site name": "사이트 이름",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify는 게시할 때마다 이 이름의 사이트를 찾거나 만듭니다.",
+          "A personal access token from your Netlify account.": "Netlify 계정의 개인 액세스 토큰입니다.",
+          "Personal access token": "개인 액세스 토큰"
+        },
+        "pl": {
+          "Site name": "Nazwa witryny",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify przy każdej publikacji znajduje lub tworzy witrynę o tej nazwie.",
+          "A personal access token from your Netlify account.": "Osobisty token dostępu z Twojego konta Netlify.",
+          "Personal access token": "Osobisty token dostępu"
+        },
+        "hu": {
+          "Site name": "Webhely neve",
+          "Netlify finds or creates a site with this name on every publish.": "A Netlify minden közzétételkor megkeres vagy létrehoz egy ilyen nevű webhelyet.",
+          "A personal access token from your Netlify account.": "Személyes hozzáférési token a Netlify-fiókjából.",
+          "Personal access token": "Személyes hozzáférési token"
+        },
+        "fr": {
+          "Site name": "Nom du site",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify trouve ou crée un site portant ce nom à chaque publication.",
+          "A personal access token from your Netlify account.": "Un jeton d’accès personnel de votre compte Netlify.",
+          "Personal access token": "Jeton d’accès personnel"
+        },
+        "uk": {
+          "Site name": "Назва сайту",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify під час кожної публікації знаходить або створює сайт із цією назвою.",
+          "A personal access token from your Netlify account.": "Персональний токен доступу з вашого облікового запису Netlify.",
+          "Personal access token": "Персональний токен доступу"
+        },
+        "tr": {
+          "Site name": "Site adı",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify her yayında bu adla bir site bulur veya oluşturur.",
+          "A personal access token from your Netlify account.": "Netlify hesabınızdan bir kişisel erişim belirteci.",
+          "Personal access token": "Kişisel erişim belirteci"
+        },
+        "th": {
+          "Site name": "ชื่อเว็บไซต์",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify ค้นหาหรือสร้างเว็บไซต์ชื่อนี้ทุกครั้งที่เผยแพร่",
+          "A personal access token from your Netlify account.": "โทเค็นการเข้าถึงส่วนบุคคลจากบัญชี Netlify ของคุณ",
+          "Personal access token": "โทเค็นการเข้าถึงส่วนบุคคล"
+        },
+        "it": {
+          "Site name": "Nome del sito",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify trova o crea un sito con questo nome a ogni pubblicazione.",
+          "A personal access token from your Netlify account.": "Un token di accesso personale dal tuo account Netlify.",
+          "Personal access token": "Token di accesso personale"
+        },
+        "hi": {
+          "Site name": "साइट नाम",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify हर प्रकाशन पर इस नाम से साइट खोजता या बनाता है।",
+          "A personal access token from your Netlify account.": "आपके Netlify खाते का व्यक्तिगत एक्सेस टोकन।",
+          "Personal access token": "व्यक्तिगत एक्सेस टोकन"
+        },
+        "ur": {
+          "Site name": "سائٹ کا نام",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify ہر اشاعت پر اس نام کی سائٹ ڈھونڈتا یا بناتا ہے۔",
+          "A personal access token from your Netlify account.": "آپ کے Netlify اکاؤنٹ کا ذاتی رسائی ٹوکن۔",
+          "Personal access token": "ذاتی رسائی ٹوکن"
+        },
+        "bn": {
+          "Site name": "সাইটের নাম",
+          "Netlify finds or creates a site with this name on every publish.": "Netlify প্রতিটি প্রকাশনার সময় এই নামের একটি সাইট খুঁজে বা তৈরি করে।",
+          "A personal access token from your Netlify account.": "আপনার Netlify অ্যাকাউন্টের একটি ব্যক্তিগত অ্যাক্সেস টোকেন।",
+          "Personal access token": "ব্যক্তিগত অ্যাক্সেস টোকেন"
+        }
+      }
+    }
+  ]
+}

package/opentelemetry/mcp.json

@@ -0,0 +1,4 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
+  "mcpServers": {}
+}

package/opentelemetry/plugin.json

@@ -0,0 +1,52 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "opentelemetry",
+  "version": "0.1.0",
+  "description": "Connects the site's traces to any OpenTelemetry (OTLP/HTTP) backend, such as Grafana Cloud or Honeycomb, through the OpenTelemetry provider plugin in the same package (observability-opentelemetry). Ships the know-how and a secure key card: the person enters the OTLP endpoint, an optional username or instance ID, and the token; the host saves it to your project, and you choose which sites use it. No vendor code here; the provider plugin exports the traces.",
+  "author": "Tovu",
+  "license": "Apache-2.0",
+  "extensions": {
+    "tovu": {
+      "toolKeywords": { "observability_send_test_error": "OpenTelemetry" },
+      "displayName": "OpenTelemetry",
+      "summary": "Sends your site's traces to Grafana Cloud, Honeycomb or any OpenTelemetry backend.",
+      "id": "tovu/opentelemetry",
+      "providerPlugin": "observability-opentelemetry",
+      "provides": [
+        "observability",
+        "tracing"
+      ],
+      "credentialCards": [
+        {
+          "target": "opentelemetry",
+          "title": "Connect OpenTelemetry (Grafana Cloud, Honeycomb…)",
+          "label": "OpenTelemetry",
+          "category": "ops",
+          "intro": "Send this site's traces to an OpenTelemetry (OTLP/HTTP) backend.",
+          "usedFor": [
+            "Exports request, database and assistant traces over OTLP/HTTP"
+          ],
+          "keyHint": "Grafana Cloud: your stack → OpenTelemetry → Configure shows the endpoint, the instance ID (username) and creates a token. Honeycomb: endpoint https://api.honeycomb.io and Extra headers x-honeycomb-team=<ingest API key>.",
+          "helpUrl": "https://grafana.com/docs/grafana-cloud/send-data/otlp/send-data-otlp/",
+          "helpLabel": "Grafana Cloud OTLP setup",
+          "saveKind": "provider-settings",
+          "saveTarget": "observability-opentelemetry"
+        }
+      ]
+    }
+  },
+  "keywords": [
+    "opentelemetry",
+    "otel",
+    "otlp",
+    "observability",
+    "tracing",
+    "traces",
+    "grafana",
+    "grafana-cloud",
+    "honeycomb",
+    "monitoring",
+    "provider-settings",
+    "observability-opentelemetry"
+  ]
+}

package/opentelemetry/skills/opentelemetry/SKILL.md

@@ -0,0 +1,39 @@
+---
+name: opentelemetry
+description: Connect the site's traces to an OpenTelemetry backend such as Grafana Cloud or Honeycomb. Use when the person says "set up OpenTelemetry", "send traces to Grafana", "connect Honeycomb", "add tracing" or "add observability", or asks whether tracing is working.
+---
+
+# OpenTelemetry (Grafana Cloud, Honeycomb…)
+
+The host exports traces through the OpenTelemetry provider plugin, `observability-opentelemetry`, to any
+OTLP/HTTP endpoint. This plugin only knows how to set it up; it holds no key and runs no code.
+
+It is part of `observability-opentelemetry` and turns on and off with it: there is no separate switch for this plugin.
+
+## Set it up
+
+1. Check status: `provider_status {pluginId:"observability-opentelemetry"}`.
+   - Not listed: the provider plugin is not installed. Say so in one line; `content_read.plugin` shows what is.
+   - `enabled: false`: offer `plugins_set_enabled {family:"site-runtime", pluginId:"observability-opentelemetry", enabled:true}`.
+   - `usedByThisSite: false` with a `keyId`: ask "Use the saved OpenTelemetry key for <site>?".
+     Yes → `project_key_use {keyId, use:true}`. To use a different key, open the card;
+     it saves for this site only when other sites use the project key.
+   - `configured: true`: say it is already connected. Open the card again only if they ask to change it.
+2. Say in one sentence what the card is for, then open it:
+   `credential_save {kind:"plugin-provider", target:"opentelemetry"}`.
+3. What goes in each field:
+   - **Grafana Cloud:** your stack → OpenTelemetry → Configure. Endpoint like
+     `https://otlp-gateway-prod-us-east-0.grafana.net/otlp`, Username = the instance ID (a number),
+     Token = the access-policy token it creates. The host builds the Basic auth header; no base64 by hand.
+   - **Honeycomb:** endpoint `https://api.honeycomb.io`, Username and Token blank, Extra headers
+     `x-honeycomb-team=<ingest API key>` (Honeycomb reads its key from that header).
+   - **Anything else:** its OTLP/HTTP base URL; traces go to `/v1/traces` under it.
+4. After it saves: the key is saved to your project; no site uses it yet. Ask the result's
+   `ask` ("Apply this OpenTelemetry key to <site>?"). Yes → `project_key_use {keyId, use:true}`;
+   it applies now. If the result says `appliesAt: "restart"`, offer `site_restart`.
+   No → it stays saved for later. An already-attached or site-only save applies now.
+
+## Rules
+
+- Never ask for a token in chat and never put one in any tool argument. The card is the only way in.
+- Changing the endpoint or username needs the saved token and extra headers entered again; the card says so if they try.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@jini-ai/agent-plugins",
-  "version": "0.6.16",
-  "description": "Support for Agent Plugins: vendor-neutral manifest types and validators, installation, activation, digests and trusted contribution loading. Portable plugin payloads are published separately; ui-ux-design is available as @jini-ai/plugin-ui-ux-design.",
+  "version": "0.6.19",
+  "description": "Support for Agent Plugins: vendor-neutral manifest types and validators, installation, activation, digests and trusted contribution loading. Every Jini agent plugin ships here as its own subpath (@jini-ai/agent-plugins/<id>); resolving one never loads another plugin's files.",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -23,7 +23,67 @@
       "./folder-zip": "universal",
       "./folder-zip/node": "node",
       "./admin-surfaces": "universal",
-      "./admin-surfaces/client": "universal"
+      "./admin-surfaces/client": "universal",
+      "./charts-echarts": "universal",
+      "./charts-echarts/*": "universal",
+      "./charts-recharts": "universal",
+      "./charts-recharts/*": "universal",
+      "./cloudflare": "universal",
+      "./cloudflare/*": "universal",
+      "./composio": "universal",
+      "./composio/*": "universal",
+      "./fly": "universal",
+      "./fly/*": "universal",
+      "./github": "universal",
+      "./github/*": "universal",
+      "./github-pages": "universal",
+      "./github-pages/*": "universal",
+      "./google-login": "universal",
+      "./google-login/*": "universal",
+      "./google-workspace": "universal",
+      "./google-workspace/*": "universal",
+      "./higgsfield-media": "universal",
+      "./higgsfield-media/*": "universal",
+      "./jev": "universal",
+      "./jev/*": "universal",
+      "./meilisearch": "universal",
+      "./meilisearch/*": "universal",
+      "./netlify": "universal",
+      "./netlify/*": "universal",
+      "./opentelemetry": "universal",
+      "./opentelemetry/*": "universal",
+      "./posthog": "universal",
+      "./posthog/*": "universal",
+      "./railway": "universal",
+      "./railway/*": "universal",
+      "./render": "universal",
+      "./render/*": "universal",
+      "./resend": "universal",
+      "./resend/*": "universal",
+      "./s3-compatible": "universal",
+      "./s3-compatible/*": "universal",
+      "./sentry": "universal",
+      "./sentry/*": "universal",
+      "./shopify": "universal",
+      "./shopify/*": "universal",
+      "./site-compliance": "universal",
+      "./site-compliance/*": "universal",
+      "./site-import": "universal",
+      "./site-import/*": "universal",
+      "./slide-design": "universal",
+      "./slide-design/*": "universal",
+      "./supabase": "universal",
+      "./supabase/*": "universal",
+      "./ui-ux-design": "universal",
+      "./ui-ux-design/*": "universal",
+      "./vercel": "universal",
+      "./vercel/*": "universal",
+      "./wordpress": "universal",
+      "./wordpress/*": "universal",
+      "./langfuse": "universal",
+      "./langfuse/*": "universal",
+      "./stripe": "universal",
+      "./stripe/*": "universal"
     },
     "isolation": {
       "entries": {
@@ -101,13 +161,74 @@
       "types": "./dist/admin-surfaces/surface-client.d.ts",
       "import": "./dist/admin-surfaces/surface-client.js",
       "default": "./dist/admin-surfaces/surface-client.js"
-    }
+    },
+    "./charts-echarts": "./charts-echarts/plugin.json",
+    "./charts-echarts/*": "./charts-echarts/*",
+    "./charts-recharts": "./charts-recharts/plugin.json",
+    "./charts-recharts/*": "./charts-recharts/*",
+    "./cloudflare": "./cloudflare/plugin.json",
+    "./cloudflare/*": "./cloudflare/*",
+    "./composio": "./composio/plugin.json",
+    "./composio/*": "./composio/*",
+    "./fly": "./fly/plugin.json",
+    "./fly/*": "./fly/*",
+    "./github": "./github/plugin.json",
+    "./github/*": "./github/*",
+    "./github-pages": "./github-pages/plugin.json",
+    "./github-pages/*": "./github-pages/*",
+    "./google-login": "./google-login/plugin.json",
+    "./google-login/*": "./google-login/*",
+    "./google-workspace": "./google-workspace/plugin.json",
+    "./google-workspace/*": "./google-workspace/*",
+    "./higgsfield-media": "./higgsfield-media/plugin.json",
+    "./higgsfield-media/*": "./higgsfield-media/*",
+    "./jev": "./jev/plugin.json",
+    "./jev/*": "./jev/*",
+    "./meilisearch": "./meilisearch/plugin.json",
+    "./meilisearch/*": "./meilisearch/*",
+    "./netlify": "./netlify/plugin.json",
+    "./netlify/*": "./netlify/*",
+    "./opentelemetry": "./opentelemetry/plugin.json",
+    "./opentelemetry/*": "./opentelemetry/*",
+    "./posthog": "./posthog/plugin.json",
+    "./posthog/*": "./posthog/*",
+    "./railway": "./railway/plugin.json",
+    "./railway/*": "./railway/*",
+    "./render": "./render/plugin.json",
+    "./render/*": "./render/*",
+    "./resend": "./resend/plugin.json",
+    "./resend/*": "./resend/*",
+    "./s3-compatible": "./s3-compatible/plugin.json",
+    "./s3-compatible/*": "./s3-compatible/*",
+    "./sentry": "./sentry/plugin.json",
+    "./sentry/*": "./sentry/*",
+    "./shopify": "./shopify/plugin.json",
+    "./shopify/*": "./shopify/*",
+    "./site-compliance": "./site-compliance/plugin.json",
+    "./site-compliance/*": "./site-compliance/*",
+    "./site-import": "./site-import/plugin.json",
+    "./site-import/*": "./site-import/*",
+    "./slide-design": "./slide-design/plugin.json",
+    "./slide-design/*": "./slide-design/*",
+    "./supabase": "./supabase/plugin.json",
+    "./supabase/*": "./supabase/*",
+    "./ui-ux-design": "./ui-ux-design/plugin.json",
+    "./ui-ux-design/*": "./ui-ux-design/*",
+    "./vercel": "./vercel/plugin.json",
+    "./vercel/*": "./vercel/*",
+    "./wordpress": "./wordpress/plugin.json",
+    "./wordpress/*": "./wordpress/*",
+    "./langfuse": "./langfuse/plugin.json",
+    "./langfuse/*": "./langfuse/*",
+    "./stripe": "./stripe/plugin.json",
+    "./stripe/*": "./stripe/*"
   },
   "files": [
     "dist",
     "README.md",
     "CHANGELOG.md",
     "LICENSE",
+    "NOTICE",
     "!dist/**/*.test.js",
     "!dist/**/*.test.d.ts",
     "!dist/**/*.test.js.map",
@@ -115,7 +236,38 @@
     "!dist/**/__tests__/**",
     "persistent-state.js",
     "persistent-state.d.ts",
-    "core"
+    "core",
+    "charts-echarts",
+    "charts-recharts",
+    "cloudflare",
+    "composio",
+    "fly",
+    "github",
+    "github-pages",
+    "google-login",
+    "google-workspace",
+    "higgsfield-media",
+    "jev",
+    "meilisearch",
+    "netlify",
+    "opentelemetry",
+    "posthog",
+    "railway",
+    "render",
+    "resend",
+    "s3-compatible",
+    "sentry",
+    "shopify",
+    "site-compliance",
+    "site-import",
+    "slide-design",
+    "supabase",
+    "ui-ux-design",
+    "vercel",
+    "wordpress",
+    "langfuse",
+    "stripe",
+    "!**/__tests__/**"
   ],
   "publishConfig": {
     "access": "public",
@@ -129,7 +281,10 @@
     "@cfworker/json-schema": "^4.1.1",
     "@types/semver": "^7.5.8",
     "semver": "^7.6.2",
-    "@jini-ai/plugins": "^0.6.16"
+    "fast-check": "4.3.0",
+    "jsdom": "^25.0.1",
+    "@jini-ai/oauth": "^0.6.19",
+    "@jini-ai/plugins": "^0.6.19"
   },
   "peerDependencies": {
     "yauzl": "^3.4.0",

package/posthog/mcp.json

@@ -0,0 +1,4 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
+  "mcpServers": {}
+}

package/posthog/plugin.json

@@ -0,0 +1,46 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "posthog",
+  "version": "0.1.0",
+  "description": "Connects the site to PostHog product analytics through the PostHog provider plugin in the same package (analytics-posthog). Ships the know-how and a secure key card: the assistant opens the card, the person picks the region (US by default, EU or a self-hosted URL) and pastes the project API key, and the host saves it to your project, and you choose which sites use it. No PostHog code here; the provider plugin sends the events.",
+  "author": "Tovu",
+  "license": "Apache-2.0",
+  "extensions": {
+    "tovu": {
+      "displayName": "PostHog",
+      "summary": "Sends your site's product analytics to PostHog. Ask the assistant to connect PostHog.",
+      "id": "tovu/posthog",
+      "providerPlugin": "analytics-posthog",
+      "provides": [
+        "product-analytics"
+      ],
+      "credentialCards": [
+        {
+          "target": "posthog",
+          "title": "Connect PostHog",
+          "label": "PostHog",
+          "category": "ops",
+          "intro": "Send this site's product analytics to PostHog.",
+          "usedFor": [
+            "Sends product analytics events to your PostHog project"
+          ],
+          "keyHint": "In PostHog open Project settings and copy the Project API key (starts with phc_).",
+          "helpUrl": "https://us.posthog.com/settings/project#variables",
+          "helpLabel": "Find your project API key",
+          "saveKind": "provider-settings",
+          "saveTarget": "analytics-posthog"
+        }
+      ]
+    }
+  },
+  "keywords": [
+    "posthog",
+    "analytics",
+    "product-analytics",
+    "events",
+    "tracking",
+    "funnels",
+    "provider-settings",
+    "analytics-posthog"
+  ]
+}

package/posthog/skills/posthog/SKILL.md

@@ -0,0 +1,36 @@
+---
+name: posthog
+description: Connect the site to PostHog product analytics. Use when the person says "connect PostHog", "set up analytics", "add product analytics", "track events in PostHog", or asks whether PostHog is working.
+---
+
+# PostHog
+
+The host sends product analytics through the PostHog provider plugin, `analytics-posthog`. This plugin
+only knows how to set it up; it holds no key and runs no code.
+
+It is part of `analytics-posthog` and turns on and off with it: there is no separate switch for this plugin.
+
+## Set it up
+
+1. Check status: `provider_status {pluginId:"analytics-posthog"}`.
+   - Not listed: the provider plugin is not installed. Say so in one line; `content_read.plugin` shows what is.
+   - `enabled: false`: offer to turn it on with
+     `plugins_set_enabled {family:"site-runtime", pluginId:"analytics-posthog", enabled:true}` (the person confirms).
+   - `usedByThisSite: false` with a `keyId`: ask "Use the saved PostHog key for <site>?".
+     Yes → `project_key_use {keyId, use:true}`. To use a different key, open the card;
+     it saves for this site only when other sites use the project key.
+   - `configured: true`: say it is already connected. Open the card again only if they ask to change it.
+2. Say in one sentence what the card is for, then open it:
+   `credential_save {kind:"plugin-provider", target:"posthog"}`.
+   The card asks for the region (US Cloud is the default, EU Cloud, or Custom for a self-hosted
+   URL) and the Project API key (PostHog → Project settings → Project API key, starts with `phc_`).
+3. After it saves: the key is saved to your project; no site uses it yet. Ask the result's
+   `ask` ("Apply this PostHog key to <site>?"). Yes → `project_key_use {keyId, use:true}`;
+   it applies now. If the result says `appliesAt: "restart"`, offer `site_restart`.
+   No → it stays saved for later. An already-attached or site-only save applies now.
+
+## Rules
+
+- Never ask for the key in chat and never put a key in any tool argument. The card is the only way in.
+- Changing the region needs the key entered again; the card says so if they try.
+- Owner events go out only with the operator's analytics consent; that is the host's setting, not PostHog's.