@legioncodeinc/hive 0.1.0

package/dist/telemetry/emit.d.ts

@@ -0,0 +1,197 @@
+/**
+ * hive's SINGLE telemetry-egress chokepoint.
+ *
+ * `emitTelemetry(event, opts, deps?)` is the ONLY place in this package that posts to the PostHog
+ * capture endpoint. The four lifecycle emit sites (install-service -> `hive_installed`,
+ * uninstall-service -> `hive_uninstalled`, first `start` -> `hive_first_run`, version change on
+ * `start` -> `hive_updated`) all funnel through here, so the allow-list, the opt-out gates, the
+ * dedupe ledger, and the bounded fire-and-forget POST posture live in ONE module. Mirrors the posture
+ * of honeycomb's `src/daemon/runtime/telemetry/emit.ts` and doctor's `src/telemetry/emit.ts`.
+ *
+ * Gates, in order (a return is silent; telemetry NEVER throws):
+ *   1. Build-injected `__HONEYCOMB_POSTHOG_KEY__` empty -> hard-disabled (unkeyed dev build).
+ *   2. `HONEYCOMB_TELEMETRY=0` or `DO_NOT_TRACK` truthy   -> opted out.
+ *   3. Dedupe key already in the JSON ledger              -> already sent.
+ * Only past all three does a single bounded-timeout POST fire; on a 2xx the dedupe key (when one was
+ * supplied) is recorded in the ledger and persisted.
+ *
+ * The payload is BUILT FROM A CLOSED ALLOW-LIST: exactly `{package, version, os, arch, node}`. There
+ * is no free-form property path, so a leak is structurally impossible. `distinct_id` prefers the
+ * shared `~/.honeycomb/install-id` written by the honeycomb installer (correlates the funnel across
+ * products); when absent, a UUID is generated once and persisted in hive's own state dir
+ * (`~/.honeycomb/hive/`, mode 0o700).
+ *
+ * Fail-soft everywhere: the POST is wrapped in a 2s AbortController timeout and a try/catch that
+ * swallows EVERYTHING (timeout, network error, 4xx, 5xx, ledger IO). `emitTelemetry` resolves to a
+ * structured {@link EmitOutcome} for tests; it NEVER rejects and NEVER changes a CLI verb's exit code.
+ *
+ * This module carries NO secret: the PostHog project key (`phc_...`) is a PUBLIC write-only ingest
+ * key, baked at build time via esbuild `define` (never a runtime env read, never logged).
+ */
+/**
+ * The PostHog project write-only ingest key (`phc_...`), build-injected via esbuild `define`. The
+ * `typeof` guard means a tsc-only dev/test build (no define pass) falls through to `""`, which Gate 1
+ * treats as HARD-DISABLED: an unkeyed build emits nothing, ever.
+ */
+export declare const POSTHOG_KEY: string;
+/**
+ * The PostHog ingest host, build-injected via esbuild `define`. Defaults to the US cloud when the
+ * define is absent or empty. {@link POSTHOG_CAPTURE_PATH} is appended to this host and that is the
+ * ONLY URL this module ever posts to.
+ */
+export declare const POSTHOG_HOST: string;
+/** The pinned PostHog capture path. The full ingest URL is `${host}${POSTHOG_CAPTURE_PATH}`. */
+export declare const POSTHOG_CAPTURE_PATH: "/i/v0/e/";
+/** Build the full capture URL (`${host}${path}`), tolerating a trailing slash on the host. */
+export declare function captureUrl(host?: string): string;
+/** The Honeycomb-wide opt-out env var. `HONEYCOMB_TELEMETRY=0` silences ALL telemetry. */
+export declare const ENV_TELEMETRY: "HONEYCOMB_TELEMETRY";
+/** The cross-tool opt-out standard. Any value other than empty or "0" silences ALL telemetry. */
+export declare const ENV_DO_NOT_TRACK: "DO_NOT_TRACK";
+/**
+ * True when the user has opted out via either env var. Mirrors honeycomb's and doctor's
+ * `isOptedOut` so all three chokepoints agree on the same env contract.
+ */
+export declare function isOptedOut(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * hive's own state dir. hive already keeps per-product state under
+ * `~/.honeycomb/hive/` (the staged Windows service unit lives there), so the telemetry install-id
+ * fallback and the dedupe ledger live beside it. Created lazily with mode 0o700.
+ */
+export declare const HIVE_STATE_DIR: string;
+/**
+ * The shared install-id written by the honeycomb installer. When present, its contents are used as
+ * `distinct_id` so hive's lifecycle events correlate with the installer funnel.
+ */
+export declare const SHARED_INSTALL_ID_PATH: string;
+/** Filename of hive's own generated install-id inside {@link HIVE_STATE_DIR}. */
+export declare const INSTALL_ID_FILENAME: "install-id";
+/** Filename of the dedupe ledger inside {@link HIVE_STATE_DIR}. */
+export declare const LEDGER_FILENAME: "telemetry.json";
+/**
+ * The CLOSED allow-list of property keys that may leave the machine. The payload is BUILT from
+ * exactly these five keys by {@link buildAllowedProperties}; there is no caller-supplied property
+ * path at all, so nothing else can egress.
+ */
+export declare const ALLOWED_PROPERTY_KEYS: readonly ["package", "version", "os", "arch", "node"];
+/** One allow-listed property key. */
+export type AllowedPropertyKey = (typeof ALLOWED_PROPERTY_KEYS)[number];
+/** The allow-listed property bag: the EXACT shape that may leave the machine. */
+export type AllowedProperties = Record<AllowedPropertyKey, string>;
+/**
+ * Assemble the allow-listed payload: the package name, the build version, and coarse platform facts
+ * (OS family, CPU arch, node version). Never a hostname, a path, or any machine-identifying string.
+ */
+export declare function buildAllowedProperties(version: string): AllowedProperties;
+/** The four hive lifecycle events. This union is the whole event vocabulary of this module. */
+export type HiveTelemetryEvent = "hive_installed" | "hive_uninstalled" | "hive_first_run" | "hive_updated";
+/**
+ * The dedupe ledger persisted at `${stateDir}/telemetry.json`. `reported` maps a dedupe key (an event
+ * name, or `event@version` for `hive_updated`) to the ISO timestamp it was sent. `lastSeenVersion`
+ * is the version observed on the most recent lifecycle-recorded `start`, used to detect upgrades.
+ */
+export interface TelemetryLedger {
+    readonly reported: Record<string, string>;
+    readonly lastSeenVersion?: string;
+}
+/** Load the ledger from `${stateDir}/telemetry.json`. Any IO/parse problem yields an empty ledger. */
+export declare function loadLedger(stateDir: string): TelemetryLedger;
+/**
+ * Persist the ledger, creating the state dir (mode 0o700) when needed. Throws on IO failure; callers
+ * inside the chokepoint wrap it in the fail-soft try/catch.
+ */
+export declare function saveLedger(stateDir: string, ledger: TelemetryLedger): void;
+/**
+ * Resolve the anonymized `distinct_id`, in preference order:
+ *   1. The shared `~/.honeycomb/install-id` (honeycomb installer funnel correlation), when present.
+ *   2. hive's own previously generated id at `${stateDir}/install-id`.
+ *   3. A fresh UUID, persisted best-effort at `${stateDir}/install-id` (dir mode 0o700).
+ * Never an email, account id, hostname, or path. Never throws: a persist failure still returns the
+ * generated id (that emit just will not correlate with later ones).
+ */
+export declare function resolveDistinctId(deps?: EmitDeps): string;
+/** The minimal fetch response shape the chokepoint reads. */
+export interface TelemetryFetchResponse {
+    readonly ok: boolean;
+    readonly status: number;
+}
+/** The minimal request init the chokepoint passes (POST + JSON body + abort signal). */
+export interface TelemetryFetchRequestInit {
+    readonly method: string;
+    readonly headers: Record<string, string>;
+    readonly body: string;
+    readonly signal?: AbortSignal;
+}
+/** The injectable fetch seam. Tests pass a recorder so no real network is ever hit. */
+export type TelemetryFetch = (url: string, init: TelemetryFetchRequestInit) => Promise<TelemetryFetchResponse>;
+/** The injectable deps the chokepoint runs against. All default to the production seams. */
+export interface EmitDeps {
+    /** The network seam (defaults to the global `fetch`). */
+    readonly fetch?: TelemetryFetch;
+    /** The env the opt-out gate reads (defaults to `process.env`). */
+    readonly env?: NodeJS.ProcessEnv;
+    /** Override the build-injected key (tests force the keyed/unkeyed branch without a rebuild). */
+    readonly posthogKey?: string;
+    /** Override the capture host (tests assert the posted URL without a rebuild). */
+    readonly posthogHost?: string;
+    /** Override the version stamped into the payload (defaults to {@link HIVE_VERSION}). */
+    readonly version?: string;
+    /** Override hive's state dir (tests point this at a temp dir). */
+    readonly stateDir?: string;
+    /** Override the shared install-id path (tests point this at a temp file). */
+    readonly sharedInstallIdPath?: string;
+    /** The bounded POST timeout in ms (defaults to {@link DEFAULT_EMIT_TIMEOUT_MS}). */
+    readonly timeoutMs?: number;
+    /** The clock stamping ledger entries (defaults to `new Date().toISOString()`). */
+    readonly clock?: () => string;
+}
+/** The default bounded POST timeout: a telemetry POST never hangs a verb longer than this. */
+export declare const DEFAULT_EMIT_TIMEOUT_MS: 2000;
+/** Why an emit did NOT send. NEVER thrown: a gate or failure resolves to one of these. */
+export type EmitSkipReason = "disabled" | "opted_out" | "already_reported" | "send_failed";
+/** The outcome of an {@link emitTelemetry} call (resolved, never rejected). */
+export interface EmitOutcome {
+    /** True iff a 2xx came back. */
+    readonly sent: boolean;
+    /** When `sent` is false, why. Absent when `sent` is true. */
+    readonly skipped?: EmitSkipReason;
+    /** The allow-listed payload that was built (present whether or not it was sent). */
+    readonly properties: AllowedProperties;
+}
+/** The per-emit options. */
+export interface EmitOptions {
+    /**
+     * When supplied, the emit is deduped: a ledger hit skips the send, and a successful send records
+     * this key. Plain event names dedupe once per machine; `hive_updated@<version>` dedupes per
+     * version. Omit for events that may fire more than once (`hive_uninstalled`).
+     */
+    readonly dedupeKey?: string;
+}
+/**
+ * THE SINGLE TELEMETRY CHOKEPOINT. Emit `event` with the allow-listed payload, applying, in order,
+ * the disabled / opted-out / already-reported gates, then a single bounded fire-and-forget POST. On a
+ * 2xx the dedupe key (when supplied) is recorded in the ledger. NEVER throws and NEVER changes a CLI
+ * verb's exit code: it resolves an {@link EmitOutcome} the caller may inspect or ignore.
+ */
+export declare function emitTelemetry(event: HiveTelemetryEvent, opts?: EmitOptions, deps?: EmitDeps): Promise<EmitOutcome>;
+/** Emit `hive_installed` after a successful `install-service`. Deduped once per machine. */
+export declare function emitInstalled(deps?: EmitDeps): Promise<EmitOutcome>;
+/**
+ * Emit `hive_uninstalled` on `uninstall-service`. Fired BEFORE teardown, fire-and-forget, and
+ * deliberately NOT deduped: an install/uninstall/reinstall cycle legitimately fires it again.
+ */
+export declare function emitUninstalled(deps?: EmitDeps): Promise<EmitOutcome>;
+/** The outcome of the `start` lifecycle recording: the first-run emit plus the optional update emit. */
+export interface StartLifecycleOutcome {
+    readonly firstRun: EmitOutcome;
+    /** Null when no version change was detected (or when the gates blocked everything). */
+    readonly updated: EmitOutcome | null;
+}
+/**
+ * Record the `start` lifecycle: emit `hive_first_run` once per machine, and emit
+ * `hive_updated` when the persisted last-seen version differs from the current version (deduped
+ * per version via `hive_updated@<version>`), then advance the persisted version. Capturing the
+ * upgrade on `start` means an npm reinstall is detected without any updater. Fail-soft: never throws
+ * and never blocks the daemon (the caller invokes it after the listen line).
+ */
+export declare function recordStartLifecycle(deps?: EmitDeps): Promise<StartLifecycleOutcome>;

package/dist/telemetry/emit.js

@@ -0,0 +1,196 @@
+import { randomUUID } from "node:crypto";
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { arch, platform } from "node:os";
+import { join } from "node:path";
+import { HONEYCOMB_HOME_DIR, HIVE_VERSION } from "../shared/constants.js";
+const POSTHOG_KEY = true ? "" : "";
+const POSTHOG_HOST = "".length > 0 ? "" : "https://us.i.posthog.com";
+const POSTHOG_CAPTURE_PATH = "/i/v0/e/";
+function captureUrl(host = POSTHOG_HOST) {
+  return `${host.replace(/\/+$/, "")}${POSTHOG_CAPTURE_PATH}`;
+}
+const ENV_TELEMETRY = "HONEYCOMB_TELEMETRY";
+const ENV_DO_NOT_TRACK = "DO_NOT_TRACK";
+function isOptedOut(env = process.env) {
+  if (env[ENV_TELEMETRY] === "0")
+    return true;
+  const dnt = env[ENV_DO_NOT_TRACK];
+  return dnt !== void 0 && dnt !== "" && dnt !== "0";
+}
+const HIVE_STATE_DIR = join(HONEYCOMB_HOME_DIR, "hive");
+const SHARED_INSTALL_ID_PATH = join(HONEYCOMB_HOME_DIR, "install-id");
+const INSTALL_ID_FILENAME = "install-id";
+const LEDGER_FILENAME = "telemetry.json";
+const ALLOWED_PROPERTY_KEYS = ["package", "version", "os", "arch", "node"];
+function buildAllowedProperties(version) {
+  return {
+    package: "hive",
+    version,
+    os: platform(),
+    arch: arch(),
+    node: process.version
+  };
+}
+function emptyLedger() {
+  return { reported: {} };
+}
+function loadLedger(stateDir) {
+  try {
+    const raw = JSON.parse(readFileSync(join(stateDir, LEDGER_FILENAME), "utf8"));
+    if (typeof raw !== "object" || raw === null)
+      return emptyLedger();
+    const record = raw;
+    const reported = {};
+    if (typeof record["reported"] === "object" && record["reported"] !== null) {
+      for (const [key, value] of Object.entries(record["reported"])) {
+        if (typeof value === "string")
+          reported[key] = value;
+      }
+    }
+    const lastSeenVersion = typeof record["lastSeenVersion"] === "string" ? record["lastSeenVersion"] : void 0;
+    return lastSeenVersion === void 0 ? { reported } : { reported, lastSeenVersion };
+  } catch {
+    return emptyLedger();
+  }
+}
+function saveLedger(stateDir, ledger) {
+  mkdirSync(stateDir, { recursive: true, mode: 448 });
+  writeFileSync(join(stateDir, LEDGER_FILENAME), `${JSON.stringify(ledger, null, 2)}
+`, "utf8");
+}
+function resolveDistinctId(deps = {}) {
+  const sharedPath = deps.sharedInstallIdPath ?? SHARED_INSTALL_ID_PATH;
+  try {
+    const shared = readFileSync(sharedPath, "utf8").trim();
+    if (shared.length > 0)
+      return shared;
+  } catch {
+  }
+  const stateDir = deps.stateDir ?? HIVE_STATE_DIR;
+  const ownPath = join(stateDir, INSTALL_ID_FILENAME);
+  try {
+    const own = readFileSync(ownPath, "utf8").trim();
+    if (own.length > 0)
+      return own;
+  } catch {
+  }
+  const generated = randomUUID();
+  try {
+    mkdirSync(stateDir, { recursive: true, mode: 448 });
+    writeFileSync(ownPath, `${generated}
+`, "utf8");
+  } catch {
+  }
+  return generated;
+}
+const DEFAULT_EMIT_TIMEOUT_MS = 2e3;
+async function emitTelemetry(event, opts = {}, deps = {}) {
+  const env = deps.env ?? process.env;
+  const key = deps.posthogKey ?? POSTHOG_KEY;
+  const version = deps.version ?? HIVE_VERSION;
+  const properties = buildAllowedProperties(version);
+  if (key.length === 0)
+    return { sent: false, skipped: "disabled", properties };
+  if (isOptedOut(env))
+    return { sent: false, skipped: "opted_out", properties };
+  try {
+    const stateDir = deps.stateDir ?? HIVE_STATE_DIR;
+    const ledger = loadLedger(stateDir);
+    if (opts.dedupeKey !== void 0 && ledger.reported[opts.dedupeKey] !== void 0) {
+      return { sent: false, skipped: "already_reported", properties };
+    }
+    const distinctId = resolveDistinctId(deps);
+    const ok = await postCapture(event, properties, distinctId, key, deps);
+    if (!ok)
+      return { sent: false, skipped: "send_failed", properties };
+    if (opts.dedupeKey !== void 0) {
+      const clock = deps.clock ?? (() => (/* @__PURE__ */ new Date()).toISOString());
+      try {
+        const fresh = loadLedger(stateDir);
+        saveLedger(stateDir, {
+          ...fresh,
+          reported: { ...fresh.reported, [opts.dedupeKey]: clock() }
+        });
+      } catch {
+      }
+    }
+    return { sent: true, properties };
+  } catch {
+    return { sent: false, skipped: "send_failed", properties };
+  }
+}
+async function postCapture(event, properties, distinctId, key, deps) {
+  const doFetch = deps.fetch ?? globalThis.fetch;
+  const host = deps.posthogHost ?? POSTHOG_HOST;
+  const timeoutMs = deps.timeoutMs ?? DEFAULT_EMIT_TIMEOUT_MS;
+  const body = { api_key: key, event, properties, distinct_id: distinctId };
+  const controller = new AbortController();
+  const timer = setTimeout(() => {
+    controller.abort();
+  }, timeoutMs);
+  try {
+    const resp = await doFetch(captureUrl(host), {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+      signal: controller.signal
+    });
+    return resp.ok;
+  } catch {
+    return false;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function emitInstalled(deps = {}) {
+  return emitTelemetry("hive_installed", { dedupeKey: "hive_installed" }, deps);
+}
+async function emitUninstalled(deps = {}) {
+  return emitTelemetry("hive_uninstalled", {}, deps);
+}
+async function recordStartLifecycle(deps = {}) {
+  const version = deps.version ?? HIVE_VERSION;
+  const firstRun = await emitTelemetry("hive_first_run", { dedupeKey: "hive_first_run" }, deps);
+  if (firstRun.skipped === "disabled" || firstRun.skipped === "opted_out") {
+    return { firstRun, updated: null };
+  }
+  try {
+    const stateDir = deps.stateDir ?? HIVE_STATE_DIR;
+    const lastSeen = loadLedger(stateDir).lastSeenVersion;
+    let updated = null;
+    if (lastSeen !== void 0 && lastSeen !== version) {
+      updated = await emitTelemetry("hive_updated", { dedupeKey: `hive_updated@${version}` }, deps);
+    }
+    const advance = lastSeen === void 0 || updated !== null && (updated.sent || updated.skipped === "already_reported");
+    if (advance) {
+      const fresh = loadLedger(stateDir);
+      saveLedger(stateDir, { ...fresh, lastSeenVersion: version });
+    }
+    return { firstRun, updated };
+  } catch {
+    return { firstRun, updated: null };
+  }
+}
+export {
+  ALLOWED_PROPERTY_KEYS,
+  DEFAULT_EMIT_TIMEOUT_MS,
+  ENV_DO_NOT_TRACK,
+  ENV_TELEMETRY,
+  HIVE_STATE_DIR,
+  INSTALL_ID_FILENAME,
+  LEDGER_FILENAME,
+  POSTHOG_CAPTURE_PATH,
+  POSTHOG_HOST,
+  POSTHOG_KEY,
+  SHARED_INSTALL_ID_PATH,
+  buildAllowedProperties,
+  captureUrl,
+  emitInstalled,
+  emitTelemetry,
+  emitUninstalled,
+  isOptedOut,
+  loadLedger,
+  recordStartLifecycle,
+  resolveDistinctId,
+  saveLedger
+};

package/dist/telemetry/emit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.js","sourceRoot":"","sources":["../../src/telemetry/emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE1E,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAW,OAAO,yBAAyB,KAAK,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;AAElH;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GACvB,OAAO,0BAA0B,KAAK,QAAQ,IAAI,0BAA0B,CAAC,MAAM,GAAG,CAAC;IACrF,CAAC,CAAC,0BAA0B;IAC5B,CAAC,CAAC,0BAA0B,CAAC;AAEjC,gGAAgG;AAChG,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAmB,CAAC;AAExD,8FAA8F;AAC9F,MAAM,UAAU,UAAU,CAAC,OAAe,YAAY;IACpD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,oBAAoB,EAAE,CAAC;AAC9D,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,0FAA0F;AAC1F,MAAM,CAAC,MAAM,aAAa,GAAG,qBAA8B,CAAC;AAC5D,iGAAiG;AACjG,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAuB,CAAC;AAExD;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClC,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,CAAC;AACxD,CAAC;AAED,+EAA+E;AAC/E,4EAA4E;AAC5E,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;AAE/D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;AAE7E,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAqB,CAAC;AAEzD,mEAAmE;AACnE,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAyB,CAAC;AAEzD,+EAA+E;AAC/E,kCAAkC;AAClC,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAQ3F;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO;QACL,OAAO,EAAE,MAAM;QACf,OAAO;QACP,EAAE,EAAE,QAAQ,EAAE;QACd,IAAI,EAAE,IAAI,EAAE;QACZ,IAAI,EAAE,OAAO,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AA2BD,qFAAqF;AACrF,SAAS,WAAW;IAClB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC1B,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACvF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,WAAW,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,GAA8B,CAAC;QAC9C,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAA4B,CAAC,EAAE,CAAC;gBACzF,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACvD,CAAC;QACH,CAAC;QACD,MAAM,eAAe,GAAG,OAAO,MAAM,CAAC,iBAAiB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9G,OAAO,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,MAAuB;IAClE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACjG,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAiB,EAAE;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,IAAI,sBAAsB,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,aAAa,CAAC,OAAO,EAAE,GAAG,SAAS,IAAI,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;IAC7E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AA6CD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAc,CAAC;AAyCtD,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAyB,EACzB,OAAoB,EAAE,EACtB,OAAiB,EAAE;IAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,WAAW,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC;IAC7C,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAEnD,sFAAsF;IACtF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAE9E,2DAA2D;IAC3D,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;IAE9E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC;QACjD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEpC,kEAAkE;QAClE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YAClF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC;QAClE,CAAC;QAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;QAEpE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAW,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC;gBACH,sEAAsE;gBACtE,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACnC,UAAU,CAAC,QAAQ,EAAE;oBACnB,GAAG,KAAK;oBACR,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE;iBAC3D,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,gFAAgF;YAClF,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CACxB,KAAyB,EACzB,UAA6B,EAC7B,UAAkB,EAClB,GAAW,EACX,IAAc;IAEd,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAK,UAAU,CAAC,KAAmC,CAAC;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAC5D,MAAM,IAAI,GAAgB,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;IAEvF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,EAAE,SAAS,CAAC,CAAC;IACd,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAE/E,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAiB,EAAE;IACrD,OAAO,aAAa,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,IAAI,CAAC,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAiB,EAAE;IACvD,OAAO,aAAa,CAAC,kBAAkB,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AASD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAiB,EAAE;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,IAAI,CAAC,CAAC;IAE9F,yFAAyF;IACzF,IAAI,QAAQ,CAAC,OAAO,KAAK,UAAU,IAAI,QAAQ,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;QACxE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC;QACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC;QAEtD,IAAI,OAAO,GAAuB,IAAI,CAAC;QACvC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACnD,OAAO,GAAG,MAAM,aAAa,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,gBAAgB,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAChG,CAAC;QAED,+FAA+F;QAC/F,gGAAgG;QAChG,2DAA2D;QAC3D,MAAM,OAAO,GACX,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,kBAAkB,CAAC,CAAC,CAAC;QAC3G,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YACnC,UAAU,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@legioncodeinc/hive",
+  "version": "0.1.0",
+  "description": "Hive portal daemon",
+  "license": "AGPL-3.0-or-later",
+  "type": "module",
+  "//publishConfig": "PRD-001c: minimum fix needed for a valid scoped-package publish, mirroring honeycomb/doctor. `access: public` is required because scoped packages default to restricted; `provenance` pairs with release.yaml's `id-token: write` OIDC identity.",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "main": "dist/cli.js",
+  "bin": {
+    "hive": "dist/cli.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc && node esbuild.config.mjs",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "start": "node dist/cli.js start",
+    "prepack": "npm run build"
+  },
+  "dependencies": {
+    "@hono/node-server": "^2.0.6",
+    "hono": "^4.12.27",
+    "react": "18.3.1",
+    "react-dom": "18.3.1",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@testing-library/dom": "^10.4.1",
+    "@testing-library/react": "^16.3.2",
+    "@types/node": "^26.0.1",
+    "@types/react": "^18.3.31",
+    "@types/react-dom": "^18.3.7",
+    "esbuild": "^0.28.1",
+    "jsdom": "^29.1.1",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.9"
+  },
+  "allowScripts": {
+    "esbuild@0.28.1": true
+  }
+}