@jini-ai/provider-plugins 0.6.15-rc.2 → 0.6.19

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @jini-ai/provider-plugins
 
+## 0.6.19
+
+- ECharts pie and donut specs now draw every series as an equally wide concentric ring, preserving the donut hole, category palette, shared legend and series/category/value tooltips. Single-series options are unchanged; missing/null shares, negative shares and all-zero rings retain the core table fallback.
+- Publishable again, for the providers with no package of their own: the browser chart providers. Exports `./charts-recharts/*` and `./charts-echarts/*` (each its own `plugins/<id>/` folder), `./package.json`, `./catalog` and `./plugins/*`; `files` lists only the two chart payloads. `build`/`prepack` type-check, then build both charts. Removed: the `./build` export (workspace tooling; pack tests import the builder from source). Recharts, React, ECharts, zrender and tslib are bundled into the artifacts and stay development dependencies. `catalog.json` lists only the two chart artifacts.
+- The builder swaps only `plugins/<id>`, so building a second id into the same package keeps the first.
+- The builder bundles each manifest-declared `browserProviders` script and stylesheet from the same `client/` path under the source (`.ts`/`.tsx` for scripts) for the browser (ESM, es2022, minified, `NODE_ENV=production`), refuses any remaining import (no Node-builtin allowance), retains bundled licenses, covers the assets in the integrity map and validates the declarations before staged publication.
+- New browser-only provider source `charts-recharts` (`tovu/charts-recharts`, browser provider `plugin.recharts`, kinds bar, line and pie), restored from the deleted `@jini-ai/charts-recharts` workspace with Recharts 3.10.1 and React 19.2.7 pinned exactly. It carries the three fixes that were hand-patched into Tovu's shipped bundle: bar labels get their band less 4px and three lines on a 58px axis, so dock-width labels stop truncating; bar and line charts of whole counts get whole-number y ticks, `min(5, max(2, span + 1))` of them with the span measured from zero, so a largest count of 1 draws 0–1; fractional data keeps Recharts' defaults. Its server entry registers nothing. JSX is type-checked only through `tsconfig.charts.json`, and only `src/charts-*` tests run in jsdom.
+- Recharts bar labels keep each " · " separator on the line of the word before it (a no-break space), so a narrow band never draws the dot alone on a line (Tovu 47b4199e0 patched the same symptom into its shipped bundle by binding the dot forward, which re-truncates the next word at ~300px).
+- The artifact integration test covers browser-only sources. For each one it checks the packed declaration, `validateBrowserProviders`, client assets with no imports, a server entry that registers nothing, install and load with no server provider, host admission of the retained bytes, and a mount of the built bundle.
+- New browser-only provider source `charts-echarts` (`jini/charts-echarts`, browser provider `plugin.echarts`, kinds bar, line, area, pie, donut, scatter and stacked-bar) on Apache ECharts 6.1.0, pinned exactly. It draws multi-series specs, axis names and `format`/axis number formats; scatter reads `categoryKey` as the numeric x and each series as a y; whole-number data gets whole ticks. It registers only the charts and components those kinds use, always renders SVG (never canvas) with ECharts' aria description on, paints with the host's `--jini-chart-*` tokens (palette defaults in its own stylesheet), and replaces series and axes on every update so a dropped series or a former kind leaves nothing behind. `supportsEChartsSpec` refuses what it would draw incompletely (unknown kinds, text or nested values, all-gap data, mismatched or negative or all-zero pie shares, non-numeric scatter x, malformed locales), so the host falls back to the next provider or the table. Its server entry registers nothing. The artifact integration test packs, admits and mounts its built bundle.
+
+## 0.6.17
+
+### Patch Changes
+
+- Handle npm 12 pack JSON through the shared parser in artifact tests; align release-version fixtures with 0.6.17.
+
 ## 0.6.13
 
 ### Patch Changes

package/NOTICE

@@ -0,0 +1,28 @@
+Open SaaS adaptations
+Source: https://github.com/wasp-lang/open-saas
+Commit: c2c6285bdb14b040584505372ad9bb062a0bca11
+Adapted from template/app/src/payment/stripe/checkoutUtils.ts and stripe/webhook.ts:
+hosted Checkout request construction, session interpretation and ignored webhook handling.
+The Jini adapter uses raw REST and the commerce evidence/settlement contracts.
+
+MIT License
+
+Copyright (c) 2023 wasp-lang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/README.md

@@ -1,16 +1,28 @@
 # @jini-ai/provider-plugins
 
-One asset distribution of ordinary tier-3 Jini server plugins. There are no callable adapter exports:
-hosts install and load the artifacts. Vendor SDKs are bundled into each artifact at build time and
-never become dependencies or peers of a core `@jini-ai/*` package.
+The source workspace and published distribution of every Jini provider runtime. `@jini-ai/provider-plugins/charts-recharts/*`
+and `@jini-ai/provider-plugins/charts-echarts/*` reach `plugins/<id>/<version>/` (resolve
+`@jini-ai/provider-plugins/package.json` for the version); each folder installs on its own. All other providers use the same subpath layout (see `docs/plugin-packages-migration.md`). There are no
+callable adapter exports: hosts install and load the artifacts. Vendor SDKs (Recharts, React, ECharts
+and its zrender/tslib) are bundled into each artifact at build time and stay development dependencies,
+never dependencies or peers of a core `@jini-ai/*` package.
 
 | plugin id | provider (`contract` / `id`) | factory `required` input | factory `optional` input |
 |---|---|---|---|
 | `fixture-provider` | `fixture` / `fixture` | `{ value }` | — (conformance fixture) |
-| `observability-opentelemetry` | `observability` / `opentelemetry` | `{ serviceName, tracerName, endpoint?, tracesEndpoint?, username?, token?, headers? }` — any OTLP/HTTP endpoint; `token` (+ `username`) becomes `Authorization: Bearer` (or `Basic`), extra `headers` ride as given | `{ spanProcessors? }` (tests) |
+| `observability-opentelemetry` | `observability` / `opentelemetry` | `{ serviceName, tracerName, endpoint?, tracesEndpoint?, username?, token?, headers? }` — any OTLP/HTTP endpoint; `token` (+ `username`) becomes `Authorization: Bearer` (or `Basic`), extra `headers` ride as given | `{ exportEnabled?, spanProcessors?, metricReaders? }` |
 | `ai-trace-langfuse` | `ai_trace` / `langfuse` | `{ publicKey, secretKey, baseUrl?, environment?, release? }` | `{ client? }` (tests) |
 | `analytics-posthog` | `product_analytics` / `posthog` | `{ apiKey, host }` | `{ fetch?, flushAt? }` (tests) |
-| `observability-sentry` | `observability` / `sentry` | `{ dsn, environment?, tracesSampleRate? }` (rate default 0) | `{ client?, transport? }` (host-owned client is never closed) |
+| `observability-sentry` | `observability` / `sentry` | `{ dsn, environment?, tracesSampleRate? }` (rate default 0) | `{ exportEnabled?, client?, transport? }` (host-owned client is never closed) |
+| `charts-recharts` | browser `chart` / `plugin.recharts` (bar, line, pie) | — browser-only; the server entry registers nothing | — |
+| `charts-echarts` | browser `chart` / `plugin.echarts` (bar, line, area, pie, donut, scatter, stacked-bar) | — browser-only; the server entry registers nothing | — |
+
+Observability factories deny outbound delivery unless the host passes `exportEnabled: true` in
+factory options, independently of saved configuration and user consent. Hosts use diagnostics'
+`observabilityExportAllowed` decision with their own runtime facts. Sentry uses its private client's
+SDK `enabled` option and guards borrowed clients; denied instances advertise no native `crashUpload`.
+OpenTelemetry retains local tracing and metric admission with no export processors/readers when
+denied. Analytics and AI tracing keep their existing policies.
 
 Observability factories return diagnostics' `ObservabilityPort` plus `dispose`; `analytics-posthog`
 returns `@jini-ai/analytics/product`'s `ProductAnalyticsPort`, which the host wraps in
@@ -32,9 +44,12 @@ build fails otherwise. Two configured observability
 providers fan out through diagnostics' existing fan-out. Inputs come from the host's secure plugin
 settings; never from manifests, browser assets or agent instructions.
 
-`pnpm --filter @jini-ai/provider-plugins build` produces `catalog.json` and
-`plugins/<id>/<version>/{jini.plugin.json,server/index.mjs,licenses/**}`. `pnpm pack` builds these
-assets through `prepack`. esbuild bundles runtime dependencies, permits only Node builtins as
+`pnpm --filter @jini-ai/provider-plugins build` type-checks, then runs `scripts/build.ts <id> .` for
+every provider id, producing
+`plugins/<id>/<version>/{jini.plugin.json,server/index.mjs,client/**,licenses/**}`; building one id
+leaves the others' folders in place. `pnpm pack` builds these assets through `prepack`. `catalog.json`
+lists the shipped artifacts; its versions follow the package version, set by hand at release like
+the manifest versions (the full catalog is `@jini-ai/plugin-catalog/catalog`). esbuild bundles runtime dependencies, permits only Node builtins as
 external imports, retains bundled packages' license/notice files, and the existing installer
 integrity helper hashes every packaged file except the manifest. SDK packages are build-time
 (dev) dependencies of this distribution, never runtime dependencies of an installed artifact.

package/catalog.json

@@ -1,32 +1,42 @@
 [
   {
     "id": "ai-trace-langfuse",
-    "version": "0.6.15-rc.2",
-    "path": "plugins/ai-trace-langfuse/0.6.15-rc.2"
+    "version": "0.6.19",
+    "path": "plugins/ai-trace-langfuse/0.6.19"
   },
   {
     "id": "analytics-posthog",
-    "version": "0.6.15-rc.2",
-    "path": "plugins/analytics-posthog/0.6.15-rc.2"
+    "version": "0.6.19",
+    "path": "plugins/analytics-posthog/0.6.19"
+  },
+  {
+    "id": "charts-echarts",
+    "version": "0.6.19",
+    "path": "plugins/charts-echarts/0.6.19"
+  },
+  {
+    "id": "charts-recharts",
+    "version": "0.6.19",
+    "path": "plugins/charts-recharts/0.6.19"
   },
   {
     "id": "fixture-provider",
-    "version": "0.6.15-rc.2",
-    "path": "plugins/fixture-provider/0.6.15-rc.2"
+    "version": "0.6.19",
+    "path": "plugins/fixture-provider/0.6.19"
   },
   {
     "id": "observability-opentelemetry",
-    "version": "0.6.15-rc.2",
-    "path": "plugins/observability-opentelemetry/0.6.15-rc.2"
+    "version": "0.6.19",
+    "path": "plugins/observability-opentelemetry/0.6.19"
   },
   {
     "id": "observability-sentry",
-    "version": "0.6.15-rc.2",
-    "path": "plugins/observability-sentry/0.6.15-rc.2"
+    "version": "0.6.19",
+    "path": "plugins/observability-sentry/0.6.19"
   },
   {
     "id": "payments-stripe",
-    "version": "0.6.15-rc.2",
-    "path": "plugins/payments-stripe/0.6.15-rc.2"
+    "version": "0.6.19",
+    "path": "plugins/payments-stripe/0.6.19"
   }
 ]

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@jini-ai/provider-plugins",
-  "version": "0.6.15-rc.2",
-  "description": "Self-contained server provider plugin artifacts for the existing Jini plugin host.",
+  "version": "0.6.19",
+  "description": "Provider runtime artifacts, independently addressable as subpaths of @jini-ai/provider-plugins. Agent-facing plugins live in @jini-ai/agent-plugins.",
   "type": "module",
   "license": "Apache-2.0",
   "repository": {
@@ -14,20 +14,56 @@
     "kind": "plugin-packaging",
     "runtime": "node",
     "entries": {
+      "./package.json": "node",
       "./catalog": "node",
-      "./plugins/*": "node"
+      "./charts-echarts/*": "node",
+      "./charts-recharts/*": "node",
+      "./plugins/*": "node",
+      "./ai-trace-langfuse": "node",
+      "./ai-trace-langfuse/*": "node",
+      "./analytics-posthog": "node",
+      "./analytics-posthog/*": "node",
+      "./observability-opentelemetry": "node",
+      "./observability-opentelemetry/*": "node",
+      "./observability-sentry": "node",
+      "./observability-sentry/*": "node",
+      "./payments-stripe": "node",
+      "./payments-stripe/*": "node",
+      "./fixture-provider/*": "node"
     }
   },
   "exports": {
+    "./package.json": "./package.json",
     "./catalog": "./catalog.json",
-    "./plugins/*": "./plugins/*"
+    "./charts-echarts/*": "./plugins/charts-echarts/*",
+    "./charts-recharts/*": "./plugins/charts-recharts/*",
+    "./plugins/*": "./plugins/*",
+    "./ai-trace-langfuse": "./plugins/ai-trace-langfuse/0.6.19/jini.plugin.json",
+    "./ai-trace-langfuse/*": "./plugins/ai-trace-langfuse/*",
+    "./analytics-posthog": "./plugins/analytics-posthog/0.6.19/jini.plugin.json",
+    "./analytics-posthog/*": "./plugins/analytics-posthog/*",
+    "./observability-opentelemetry": "./plugins/observability-opentelemetry/0.6.19/jini.plugin.json",
+    "./observability-opentelemetry/*": "./plugins/observability-opentelemetry/*",
+    "./observability-sentry": "./plugins/observability-sentry/0.6.19/jini.plugin.json",
+    "./observability-sentry/*": "./plugins/observability-sentry/*",
+    "./payments-stripe": "./plugins/payments-stripe/0.6.19/jini.plugin.json",
+    "./payments-stripe/*": "./plugins/payments-stripe/*",
+    "./fixture-provider/*": "./plugins/fixture-provider/*"
   },
   "files": [
+    "plugins/ai-trace-langfuse",
+    "plugins/analytics-posthog",
+    "plugins/charts-echarts",
+    "plugins/charts-recharts",
+    "plugins/fixture-provider",
+    "plugins/observability-opentelemetry",
+    "plugins/observability-sentry",
+    "plugins/payments-stripe",
     "catalog.json",
-    "plugins",
     "README.md",
     "CHANGELOG.md",
-    "LICENSE"
+    "LICENSE",
+    "NOTICE"
   ],
   "publishConfig": {
     "access": "public",
@@ -43,22 +79,35 @@
     "@opentelemetry/sdk-trace-node": "^2.10.0",
     "@opentelemetry/semantic-conventions": "^1.43.0",
     "@sentry/node": "11.6.0",
+    "@testing-library/jest-dom": "6.9.1",
+    "@testing-library/react": "16.3.2",
+    "@types/jsdom": "21.1.7",
+    "@types/react": "19.2.17",
+    "@types/react-dom": "19.2.3",
+    "echarts": "6.1.0",
     "esbuild": "^0.28.1",
+    "jsdom": "25.0.1",
     "langfuse": "3.39.2",
     "posthog-js": "1.260.2",
     "posthog-node": "5.55.1",
+    "react": "19.2.7",
+    "react-dom": "19.2.7",
+    "recharts": "3.10.1",
     "tsx": "^4.19.0",
     "typescript": "^5.9.3",
-    "@jini-ai/analytics": "^0.6.15-rc.2",
-    "@jini-ai/cookie-consent": "^0.6.15-rc.2",
-    "@jini-ai/plugins": "^0.6.15-rc.2",
-    "@jini-ai/diagnostics": "^0.6.15-rc.2",
-    "@jini-ai/capability-providers": "^0.6.15-rc.2",
-    "@jini-ai/agent-runtime": "^0.6.15-rc.2"
+    "@jini-ai/agent-runtime": "^0.6.19",
+    "@jini-ai/capability-providers": "^0.6.19",
+    "@jini-ai/commerce": "^0.6.19",
+    "@jini-ai/cookie-consent": "^0.6.19",
+    "@jini-ai/analytics": "^0.6.19",
+    "@jini-ai/diagnostics": "^0.6.19",
+    "@jini-ai/plugins": "^0.6.19",
+    "@jini-ai/ui": "^0.6.19"
   },
   "scripts": {
-    "build": "node --import tsx scripts/build.ts",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "vitest run"
+    "build": "pnpm run typecheck && node --import tsx scripts/build.ts charts-recharts . && node --import tsx scripts/build.ts charts-echarts . && node --import tsx scripts/build.ts ai-trace-langfuse . && node --import tsx scripts/build.ts analytics-posthog . && node --import tsx scripts/build.ts observability-opentelemetry . && node --import tsx scripts/build.ts observability-sentry . && node --import tsx scripts/build.ts payments-stripe . && node --import tsx scripts/build.ts fixture-provider .",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.charts.json --noEmit",
+    "test": "vitest run",
+    "test:coverage": "vitest run -c vitest.coverage.config.ts --coverage"
   }
 }

package/plugins/ai-trace-langfuse/0.6.19/CHANGELOG.md

@@ -0,0 +1,7 @@
+## 0.6.17
+
+### Patch Changes
+
+- Handle npm 12 pack JSON through the shared parser in packaging tests.
+- Include the declared cookie-consent build-time dependency in the publication contract test.
+

package/plugins/ai-trace-langfuse/0.6.19/NOTICE

@@ -0,0 +1,6 @@
+Jini ai-trace-langfuse provider plugin
+Copyright 2026 Leona Burime
+
+Plugin sources remain in packages/provider-plugins/src/ai-trace-langfuse.
+See LICENSE for the Apache License, Version 2.0.
+Bundled dependency licenses and source records are retained in the generated artifact.

package/plugins/ai-trace-langfuse/0.6.19/README.md

@@ -0,0 +1,13 @@
+# @jini-ai/provider-plugins/ai-trace-langfuse
+
+Self-contained Langfuse AI tracing provider artifact. Registers `ai_trace/langfuse` (contract version 1).
+
+Resolve `@jini-ai/provider-plugins/package.json` with the host's Node package resolver,
+discover the versioned artifact beneath `plugins/ai-trace-langfuse/<package-version>`,
+and pass it through the existing Jini plugin installer and provider artifact loader.
+Installation alone does not enable or configure the provider. The artifact has no runtime npm dependencies and contains only this provider's prebuilt payload
+and retained licenses.
+
+Sources remain in `packages/provider-plugins/src/ai-trace-langfuse`. The distribution’s `build` and `prepack`
+call the existing single-plugin builder; the generated `plugins/` payload is not source.
+The npm version supplies the artifact version; SDK ranges and provider identities are preserved.

package/plugins/ai-trace-langfuse/{0.6.15-rc.2 → 0.6.19}/jini.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "ai-trace-langfuse",
   "name": "Langfuse",
-  "version": "0.6.15-rc.2",
+  "version": "0.6.19",
   "sdkRange": "^0.1.0 || ^1.0.0",
   "engine": 1,
   "tier": "tier-3",
@@ -58,8 +58,13 @@
   "hooks": [],
   "fields": [],
   "integrity": {
+    "CHANGELOG.md": "sha256-bd2036b212f0dc0f28f651d9810531cfdc69b4dc89273ef2671f2479a1366795",
+    "LICENSE": "sha256-9d95806a26532623360eb84bb17d298f394b55ef73fb4c0796d99b4319b2b0da",
+    "NOTICE": "sha256-3e795e2d068b53ee6964c05e2724f467451faaf9749dec970884dfa1ad4368de",
+    "README.md": "sha256-a5e9d3d8dd1079cb2c9fc5150aed5540ac147de64d0417cb83dd7eb5363470b9",
     "licenses/_jini-ai_provider-plugins/LICENSE": "sha256-9d95806a26532623360eb84bb17d298f394b55ef73fb4c0796d99b4319b2b0da",
-    "licenses/_jini-ai_provider-plugins/package-license.json": "sha256-22b074b00e072934cd991672d049d66e77209826f8793e748797124ba7e5e25a",
+    "licenses/_jini-ai_provider-plugins/NOTICE": "sha256-41f25c5b9af4c8e8e98e2a7c658b3922253c760686e17e0ef7fa003fae83cb95",
+    "licenses/_jini-ai_provider-plugins/package-license.json": "sha256-addb32dd2800ab975fca696f62af2bd253843978c8489d9f8f863f00499c09ec",
     "licenses/langfuse/LICENSE": "sha256-500dc50774b3a1b58900bf28e03f63906d6e910a56da147ef154cddb5c1619b3",
     "licenses/langfuse/LICENSE-SOURCE": "sha256-86e467e07d45cff307b1b33738dea99cf2ae2a22fbe5fb571ae3a03819d41f54",
     "licenses/langfuse/SOURCE": "sha256-7828b8d9c40401be34ccf1682306881431fd1ee6d86a3b5ad10f4104c217ce0a",

package/plugins/ai-trace-langfuse/0.6.19/licenses/_jini-ai_provider-plugins/NOTICE

@@ -0,0 +1,28 @@
+Open SaaS adaptations
+Source: https://github.com/wasp-lang/open-saas
+Commit: c2c6285bdb14b040584505372ad9bb062a0bca11
+Adapted from template/app/src/payment/stripe/checkoutUtils.ts and stripe/webhook.ts:
+hosted Checkout request construction, session interpretation and ignored webhook handling.
+The Jini adapter uses raw REST and the commerce evidence/settlement contracts.
+
+MIT License
+
+Copyright (c) 2023 wasp-lang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/plugins/{analytics-posthog/0.6.15-rc.2 → ai-trace-langfuse/0.6.19}/licenses/_jini-ai_provider-plugins/package-license.json

@@ -1,5 +1,5 @@
 {
   "name": "@jini-ai/provider-plugins",
-  "version": "0.6.15-rc.2",
+  "version": "0.6.19",
   "license": "Apache-2.0"
 }

package/plugins/analytics-posthog/0.6.19/CHANGELOG.md

@@ -0,0 +1,6 @@
+## 0.6.17
+
+### Patch Changes
+
+- Handle npm 12 pack JSON through the shared parser in packaging tests.
+

package/plugins/analytics-posthog/0.6.19/NOTICE

@@ -0,0 +1,11 @@
+Jini PostHog Provider Plugin
+Copyright 2026 Leona Burime
+
+This product includes software derived from Open Design
+(https://github.com/nexu-io/open-design), Copyright its contributors,
+used under the Apache License, Version 2.0.
+
+The provider sources remain at packages/provider-plugins/src/analytics-posthog.
+This standalone distribution is extracted from @jini-ai/provider-plugins.
+Bundled dependency licenses and notices are retained under the artifact's licenses/
+directory by the shared builder and are included in its integrity manifest.

package/plugins/analytics-posthog/0.6.19/README.md

@@ -0,0 +1,25 @@
+# @jini-ai/provider-plugins/analytics-posthog
+
+Independently installable PostHog provider for Jini's existing plugin host.
+This package ships only `analytics-posthog`; vendor SDKs are bundled at build time.
+It has no runtime, peer, optional, or other plugin dependencies and no install hook.
+Installing the npm package does not activate the plugin.
+Its agent setup face (skill and credential card) is not here: it ships as
+`@jini-ai/agent-plugins/posthog`.
+
+Resolve `@jini-ai/provider-plugins/package.json` with Node's package resolver.
+Discover `plugins/analytics-posthog/<package-version>/jini.plugin.json` beneath that root,
+then use the existing preview/install/enable/configure flow and provider artifact loader.
+The `./plugins/*` export exposes the same artifact files; no new loader is required.
+The contribution remains `product_analytics/posthog`, contract version 1.
+
+The provider implements `@jini-ai/analytics/product`. Hosts retain product analytics privacy
+and consent guards. The consent contribution loads the byte-pinned browser SDK only after
+the applicable consent choice; its adapter and SDK stay within this plugin's artifact.
+
+Sources remain in `packages/provider-plugins/src/analytics-posthog`.
+Both `build` and `prepack` call the existing single-plugin builder, using this package's
+version for the generated artifact. The npm release is **0.6.19** in Jini's fixed
+Changesets release group. Build output under `plugins/` is generated and uncommitted.
+Reviewed LICENSE and NOTICE files belong to this distribution; the builder retains them
+and bundled dependency licenses inside the artifact before computing its integrity.

package/plugins/analytics-posthog/{0.6.15-rc.2 → 0.6.19}/jini.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "analytics-posthog",
   "name": "PostHog",
-  "version": "0.6.15-rc.2",
+  "version": "0.6.19",
   "sdkRange": "^0.1.0 || ^1.0.0",
   "engine": 1,
   "tier": "tier-3",
@@ -87,15 +87,21 @@
   "hooks": [],
   "fields": [],
   "integrity": {
+    "CHANGELOG.md": "sha256-24133b66cc1aa98538cb8b5120843ba24d9f26a26fa7b133b3667672bfde4838",
+    "LICENSE": "sha256-9d95806a26532623360eb84bb17d298f394b55ef73fb4c0796d99b4319b2b0da",
+    "NOTICE": "sha256-75da95e7c5263160f874d3eb197e3010f2196378b40df69cedc6ff3247261cf3",
+    "README.md": "sha256-a464369906fa4fc9f6f3833a5c9822bd343c9c1adda172ca76ac92cecf2bdbd4",
     "licenses/_jini-ai_cookie-consent/LICENSE": "sha256-9d95806a26532623360eb84bb17d298f394b55ef73fb4c0796d99b4319b2b0da",
-    "licenses/_jini-ai_cookie-consent/LICENSE-SOURCE": "sha256-58940f4718ec99b6673941bf42b3f1edc09f8e6159709003ccc80909f6f5a5ee",
-    "licenses/_jini-ai_cookie-consent/package-license.json": "sha256-7cb7ef6eb54103f8dbde227e666228db1a7f2655ca6f92fc6d68a7145b8e65c8",
+    "licenses/_jini-ai_cookie-consent/LICENSE-SOURCE": "sha256-10776a05303459d50088c43e1d38ef6716ec003237c808c418449b7d2085d44c",
+    "licenses/_jini-ai_cookie-consent/NOTICE": "sha256-41f25c5b9af4c8e8e98e2a7c658b3922253c760686e17e0ef7fa003fae83cb95",
+    "licenses/_jini-ai_cookie-consent/package-license.json": "sha256-4adde774f58850e9c2f6e7696c72671e500df82f21424e970d47856858fa803d",
     "licenses/_jini-ai_core/LICENSE": "sha256-9d95806a26532623360eb84bb17d298f394b55ef73fb4c0796d99b4319b2b0da",
-    "licenses/_jini-ai_core/package-license.json": "sha256-de1a77e93d920d378dac25027dec19990b4133dfbb39124e3f7b58fd07cda3d9",
+    "licenses/_jini-ai_core/package-license.json": "sha256-2be9306e3802751f79413289322c7437a7e3ea261de5b45469c2ffa89adbf42c",
     "licenses/_jini-ai_diagnostics/LICENSE": "sha256-9d95806a26532623360eb84bb17d298f394b55ef73fb4c0796d99b4319b2b0da",
-    "licenses/_jini-ai_diagnostics/package-license.json": "sha256-bac8bbf6597f10e741d82d93b3ffae2cfc8cdd193821cffbeebb1ee331261160",
+    "licenses/_jini-ai_diagnostics/package-license.json": "sha256-82be2e67767672995a11b4fee80eb3db2a0db204267d5b79090d5d6b2ed0d44e",
     "licenses/_jini-ai_provider-plugins/LICENSE": "sha256-9d95806a26532623360eb84bb17d298f394b55ef73fb4c0796d99b4319b2b0da",
-    "licenses/_jini-ai_provider-plugins/package-license.json": "sha256-22b074b00e072934cd991672d049d66e77209826f8793e748797124ba7e5e25a",
+    "licenses/_jini-ai_provider-plugins/NOTICE": "sha256-41f25c5b9af4c8e8e98e2a7c658b3922253c760686e17e0ef7fa003fae83cb95",
+    "licenses/_jini-ai_provider-plugins/package-license.json": "sha256-addb32dd2800ab975fca696f62af2bd253843978c8489d9f8f863f00499c09ec",
     "licenses/_posthog_core/LICENSE": "sha256-d3fb92ac01f0bef4078f89aac9f20f76da3383ad45becf6204abdf5495f43f8f",
     "licenses/_posthog_core/package-license.json": "sha256-51e1e60575cebc489313e9ffe4c5b9c08582bdefa071de03cf4c0772df66ccc5",
     "licenses/js-tokens/LICENSE": "sha256-33038d552d766f4501d8da25b66053ed217c61274ffce1c6bee413bb037c259c",
@@ -104,8 +110,8 @@
     "licenses/posthog-js/package-license.json": "sha256-15156f5af3c1699358c4857b0c155fa444c21527b295aecff8edcdcdbbc349f6",
     "licenses/posthog-node/LICENSE": "sha256-d3fb92ac01f0bef4078f89aac9f20f76da3383ad45becf6204abdf5495f43f8f",
     "licenses/posthog-node/package-license.json": "sha256-477479010682b08537c8ad318f1f71dc25b0e88a9b0f9f6b4cc90c168624c6be",
-    "server/consent-adapter.mjs": "sha256-21841db34d51aeb7f6d8bbeb0fbeb15d83bbe09721a6b162c1970f4b4be6e150",
-    "server/index.mjs": "sha256-6e30135bb36bbad787f82d0dfe4b240dc2161b5a4378beb25ee93814ce137c29",
+    "server/consent-adapter.mjs": "sha256-a37d6ad7073b5d5149572a4bf8a95c71d24337f4b6358ab98676481e2d663035",
+    "server/index.mjs": "sha256-61e2500f0e5b81506b805da5cbd3e903a84fa133d41d057f0db9d58e74c06a10",
     "server/posthog-browser.js": "sha256-42c78610e8c1a1ff3258259c13becb34699668a81f091af2e80146b3a006be2a"
   }
 }

package/plugins/analytics-posthog/0.6.19/licenses/_jini-ai_cookie-consent/LICENSE-SOURCE

@@ -0,0 +1 @@
+License text copied from @jini-ai/core@0.6.19 (same repository and declared license).

package/plugins/analytics-posthog/0.6.19/licenses/_jini-ai_cookie-consent/NOTICE

@@ -0,0 +1,28 @@
+Open SaaS adaptations
+Source: https://github.com/wasp-lang/open-saas
+Commit: c2c6285bdb14b040584505372ad9bb062a0bca11
+Adapted from template/app/src/payment/stripe/checkoutUtils.ts and stripe/webhook.ts:
+hosted Checkout request construction, session interpretation and ignored webhook handling.
+The Jini adapter uses raw REST and the commerce evidence/settlement contracts.
+
+MIT License
+
+Copyright (c) 2023 wasp-lang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/plugins/analytics-posthog/{0.6.15-rc.2 → 0.6.19}/licenses/_jini-ai_cookie-consent/package-license.json

@@ -1,5 +1,5 @@
 {
   "name": "@jini-ai/cookie-consent",
-  "version": "0.6.15-rc.2",
+  "version": "0.6.19",
   "license": "Apache-2.0"
 }

package/plugins/{observability-opentelemetry/0.6.15-rc.2 → analytics-posthog/0.6.19}/licenses/_jini-ai_core/package-license.json

@@ -1,5 +1,5 @@
 {
   "name": "@jini-ai/core",
-  "version": "0.6.15-rc.2",
+  "version": "0.6.19",
   "license": "Apache-2.0"
 }

package/plugins/{observability-sentry/0.6.15-rc.2 → analytics-posthog/0.6.19}/licenses/_jini-ai_diagnostics/package-license.json

@@ -1,5 +1,5 @@
 {
   "name": "@jini-ai/diagnostics",
-  "version": "0.6.15-rc.2",
+  "version": "0.6.19",
   "license": "Apache-2.0"
 }

package/plugins/analytics-posthog/0.6.19/licenses/_jini-ai_provider-plugins/NOTICE

@@ -0,0 +1,28 @@
+Open SaaS adaptations
+Source: https://github.com/wasp-lang/open-saas
+Commit: c2c6285bdb14b040584505372ad9bb062a0bca11
+Adapted from template/app/src/payment/stripe/checkoutUtils.ts and stripe/webhook.ts:
+hosted Checkout request construction, session interpretation and ignored webhook handling.
+The Jini adapter uses raw REST and the commerce evidence/settlement contracts.
+
+MIT License
+
+Copyright (c) 2023 wasp-lang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/plugins/{fixture-provider/0.6.15-rc.2 → analytics-posthog/0.6.19}/licenses/_jini-ai_provider-plugins/package-license.json

@@ -1,5 +1,5 @@
 {
   "name": "@jini-ai/provider-plugins",
-  "version": "0.6.15-rc.2",
+  "version": "0.6.19",
   "license": "Apache-2.0"
 }

package/plugins/analytics-posthog/0.6.19/server/consent-adapter.mjs

@@ -0,0 +1 @@
+function g(e,o){let t=(e.defaultView?.location.hostname??"").split("."),r=`${o}=; Path=/; Max-Age=0`;e.cookie=r;for(let n=0;n<t.length-1;n++)e.cookie=`${r}; Domain=.${t.slice(n).join(".")}`}function d(e,o){if(o){for(let t of e.cookie.split(/;\s*/)){let r=t.split("=")[0];o.cookies?.some(n=>r.startsWith(n))&&g(e,r)}try{let t=e.defaultView.localStorage;for(let r of Object.keys(t))o.local?.some(n=>r.startsWith(n))&&t.removeItem(r)}catch{}}}function u({doc:e,storage:o},t={}){d(e,o)}function f({attributes:e},o={}){let t={};for(let r of["site_id","release","environment"]){let n=e[r];n&&(t[r]=n)}return t}function m({apiKey:e,siteId:o,release:t,environment:r},n={}){return JSON.stringify({api_key:e,event:"$pageview",properties:{distinct_id:"visitor:ephemeral",$process_person_profile:!1,$geoip_disable:!0,surface:"site",...f({attributes:{site_id:o,release:t,environment:r}})}})}async function y({config:e,signal:o,ports:t},r={}){return await(t.request??fetch)(e.host+"/e/",{method:"POST",credentials:"omit",referrerPolicy:"no-referrer",headers:{"content-type":"application/json"},body:m(e),signal:o}).catch(()=>{}),{revoke:()=>!0}}var p={cookies:["ph_","__ph"],local:["ph_","__ph"]},h="jini_consent",_=["$event_type","$el_tag_name","$browser","$browser_version","$os","$device_type","$lib","$lib_version","$viewport_width","$viewport_height","distinct_id","$device_id","$session_id","$window_id","$is_identified"];function v({path:e},o={}){return(e||"/").split("/").map(t=>{let r;try{r=decodeURIComponent(t)}catch{return":redacted"}return/@|[a-f0-9]{32,}|[\w-]{40,}/i.test(r)?":redacted":t}).join("/")}function P(e){return e.split(";").slice(0,32).map(o=>{let t=/^[a-z][a-z0-9-]*/i.exec(o);return t?t[0]+(o.match(/:nth-(?:child|of-type)\(\d+\)/g)??[]).join(""):""}).filter(Boolean).join(";")}function b(e){return e.slice(0,32).filter(o=>!!o&&/^[a-z][a-z0-9-]*$/i.test(String(o.tag_name??""))).map(o=>{let t={tag_name:o.tag_name};for(let r of["nth_child","nth_of_type"])Number.isInteger(o[r])&&o[r]>0&&(t[r]=o[r]);return t})}function S({event:e,location:o,siteId:t,release:r,environment:n},a={}){let s=e.properties??{},i={};for(let c of _)s[c]!==void 0&&(i[c]=s[c]);return i.$process_person_profile=!0,i.$pathname=v({path:o.pathname}),i.$current_url=o.origin+String(i.$pathname),i.$host=o.hostname,typeof s.$elements_chain=="string"&&(i.$elements_chain=P(s.$elements_chain)),Array.isArray(s.$elements)&&(i.$elements=b(s.$elements)),e.event==="$identify"&&(i.$set={}),Object.assign(i,f({attributes:{site_id:t,release:r,environment:n}}),{surface:"site"}),e.properties=i,e}function k(e,o,t){return{api_host:e.host,persistence:"localStorage+cookie",disable_persistence:!1,persistence_name:`jini_site_${e.siteId||"site"}`,person_profiles:"identified_only",disable_compression:!0,request_batching:!1,mask_all_element_attributes:!0,mask_all_text:!0,autocapture:{capture_copied_text:!1},capture_pageview:"history_change",capture_pageleave:!1,disable_session_recording:!e.sessionReplay,session_recording:{maskAllInputs:!0,maskTextSelector:"*"},disable_surveys:!0,advanced_disable_feature_flags:!0,advanced_disable_flags:!0,disable_web_experiments:!0,capture_performance:!1,capture_heatmaps:!1,capture_dead_clicks:!1,disable_external_dependency_loading:!0,enable_recording_console_log:!1,capture_exceptions:!1,ip:!1,before_send:r=>t.aborted?null:S({event:r,location:o.location,siteId:e.siteId,release:e.release,environment:e.environment}),loaded:r=>{let n=r.get_distinct_id();t.aborted||r.identify(n.startsWith("visitor:")?n:`visitor:${n}`)}}}function E({src:e,integrity:o,doc:t},{importModule:r=n=>import(n)}={}){let n=t.createElement("script");return n.type="module",n.integrity=o,n.src=e,new Promise((a,s)=>{n.onload=()=>a(),n.onerror=()=>s(new Error("The analytics SDK failed its integrity check or did not load.")),t.head.append(n)}).then(()=>r(n.src)).then(a=>a.default)}function C({ports:e},o={}){let t=null;function r({state:n},a={}){if(!(n.analyticsLevel==="full"||!e.doc))try{u({doc:e.doc,storage:p})}catch{}}return{onState:r,id:"posthog",kind:"consent-adapter",category:"analytics",supportsAnonymous:!0,storage:p,async grant({config:n,state:a,signal:s}){if(s.aborted||(r({state:a}),a.analyticsLevel==="none"))return null;if(a.analyticsLevel==="anonymous")return y({config:n,signal:s,ports:e});let i;try{i=await e.loadSdk({src:n.sdk,integrity:n.integrity})}catch{return null}if(s.aborted)return null;let c=k(n,e,s);t?t.set_config(c):t=i.init(n.apiKey,c,h);let l=t;return{revoke(){return l.stopSessionRecording?.(),l.set_config({disable_persistence:!0,autocapture:!1,capture_pageview:!1,disable_session_recording:!0,before_send:()=>null}),!n.sessionReplay}}}}}function w(){let e=globalThis;return{loadSdk:({src:o,integrity:t})=>E({src:o,integrity:t,doc:e.document}),get location(){return e.location},get doc(){return e.document}}}var N=C({ports:w()});export{p as POSTHOG_STORAGE,m as anonymousPageview,C as createPostHogConsentAdapter,N as default,E as loadVerifiedSdk,f as postHogBrowserAttributes,v as safePath,S as sanitizeEvent};