@legioncodeinc/hive 0.2.1 → 0.3.0

package/dist/dashboard/web/onboarding/onboarding-screen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-screen.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/onboarding-screen.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACN,gBAAgB,EAChB,yBAAyB,EACzB,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,GAGjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAyB,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,cAAc,EAAuB,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAY1C,yFAAyF;AACzF,SAAS,kBAAkB,CAAC,KAAoC;IAC/D,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC1F,CAAC;AAoBD,8FAA8F;AAC9F,SAAS,mBAAmB,CAAC,EAAE,eAAe,EAA4C;IACzF,OAAO,CACN,6BACa,0BAA0B,EACtC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,SAAS,EAAE,QAAQ,EAAE,YAEhK,eACC,KAAK,EAAE;gBACN,OAAO,EAAE,MAAM;gBACf,aAAa,EAAE,QAAQ;gBACvB,UAAU,EAAE,QAAQ;gBACpB,GAAG,EAAE,EAAE;gBACP,QAAQ,EAAE,GAAG;gBACb,OAAO,EAAE,WAAW;gBACpB,UAAU,EAAE,mBAAmB;gBAC/B,MAAM,EAAE,iCAAiC;gBACzC,YAAY,EAAE,kBAAkB;aAChC,aAED,aAAI,KAAK,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,yCAExH,EACL,YAAG,KAAK,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,iGAEhI,EACJ,KAAC,MAAM,IAAC,OAAO,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,iBAAa,4BAA4B,EAAC,OAAO,EAAE,eAAe,gCAE5F,IACJ,GACD,CACN,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,SAAS,kBAAkB;IAC1B,OAAO,CACN,6BACa,oBAAoB,EAChC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,YAE9H,YAAG,KAAK,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,sBAAsB,EAAE,yDAAyC,GAC3I,CACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAChC,SAAS,GAAG,QAAQ,EACpB,MAAM,EAAE,cAAc,EACtB,IAAI,EACJ,UAAU,EACV,YAAY,EACZ,WAAW,EACX,sBAAsB,EACtB,eAAe,GACQ;IACvB,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,4FAA4F;IAC5F,6FAA6F;IAC7F,MAAM,UAAU,GAAG,cAAc,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAmB,GAAG,EAAE,CAAC,cAAc,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;IAE/H,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACrE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAwB,IAAI,CAAC,CAAC;IAE9E,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACpB,IAAI,CAAC,UAAU,IAAI,oBAAoB,CAAC,OAAO;YAAE,OAAO;QACxD,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;QACpC,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAEzB,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACpB,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,KAAK,CAAC,KAAK,IAAmB,EAAE;YAC/B,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC3F,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,IAAI,qBAAqB,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC/D,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;YACrC,CAAC;iBAAM,IAAI,mBAAmB,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9C,iFAAiF;gBACjF,oFAAoF;gBACpF,QAAQ,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACP,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5B,CAAC;QACF,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,GAAG,EAAE;YACX,KAAK,GAAG,KAAK,CAAC;QACf,CAAC,CAAC;IACH,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAEzB,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CACnC,CAAC,IAAoB,EAAQ,EAAE;QAC9B,MAAM,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACP,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC,EACD,CAAC,MAAM,EAAE,SAAS,CAAC,CACnB,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,QAAuC,EAAQ,EAAE;QAC3F,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,CAAC,GAAS,EAAE;QACnD,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE;YACpB,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;gBAAE,OAAO,OAAO,CAAC;YAClD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;YACpC,OAAO,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAChI,CAAC,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,GAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAEjF,MAAM,0BAA0B,GAAG,KAAK,CAAC,WAAW,CAAC,GAAS,EAAE;QAC/D,cAAc,EAAE,CAAC;QACjB,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;YAC1C,sBAAsB,EAAE,CAAC;YACzB,OAAO;QACR,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChE,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAE7B,+FAA+F;IAC/F,kEAAkE;IAClE,MAAM,mBAAmB,GAAG,KAAK,CAAC,WAAW,CAAC,GAAS,EAAE;QACxD,cAAc,EAAE,CAAC;QACjB,IAAI,eAAe,KAAK,SAAS;YAAE,eAAe,EAAE,CAAC;IACtD,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;IAEtB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,SAAS;YACb,OAAO,KAAC,kBAAkB,KAAG,CAAC;QAC/B,KAAK,eAAe;YACnB,OAAO,KAAC,mBAAmB,IAAC,eAAe,EAAE,0BAA0B,GAAI,CAAC;QAC7E,KAAK,MAAM;YACV,OAAO,KAAC,cAAc,IAAC,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAI,CAAC;QACjJ,KAAK,QAAQ;YACZ,OAAO,KAAC,cAAc,IAAC,QAAQ,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,GAAI,CAAC;QAC/I,KAAK,YAAY,CAAC,CAAC,CAAC;YACnB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,gBAAgB,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC;YAC3G,OAAO,CACN,KAAC,WAAW,IAEX,OAAO,EAAE,OAAO,EAChB,gBAAgB,EAAE,gBAAgB,EAClC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,cAAc,EACzB,UAAU,EAAE,UAAU,IANjB,OAAO,CAOX,CACF,CAAC;QACH,CAAC;QACD,KAAK,QAAQ;YACZ,OAAO,KAAC,UAAU,IAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,GAAI,CAAC;QACjF,KAAK,OAAO;YACX,OAAO,KAAC,SAAS,IAAC,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAI,CAAC;QACvH,OAAO,CAAC,CAAC,CAAC;YACT,MAAM,UAAU,GAAU,KAAK,CAAC;YAChC,OAAO,UAAU,CAAC;QACnB,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/dashboard/web/onboarding/onboarding-selection-store.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Session-scoped memory of the product subset the operator chose (Standard = the whole fleet,
+ * Advanced = exactly the checked products). PRD-009b ob-AC-16 resume honesty: without this, an
+ * interrupted Advanced install resumes from `remainingProducts(detection)`, which is every
+ * not-installed product, so a product the operator explicitly DESELECTED would be silently
+ * reinstalled on re-entry. Persisting the choice lets `buildResumeQueue` exclude a not-installed
+ * product the operator never asked for, while still resuming any product that is genuinely
+ * mid-flight or failed (those are in-flight facts, not assumptions).
+ *
+ * Storage is `sessionStorage` (per browser session, cleared when the tab closes) and every access
+ * is guarded: a missing `window`, a storage exception (private mode, quota, disabled), or a
+ * malformed value all degrade to "no memory" rather than throwing into the onboarding flow.
+ */
+import { type InstallableProduct } from "./contracts.js";
+/** Persist the chosen installable subset (order-normalized to the fixed order, de-duplicated). */
+export declare function persistSelection(selected: readonly InstallableProduct[]): void;
+/** Read the persisted subset, or null when nothing valid is stored. */
+export declare function readSelection(): readonly InstallableProduct[] | null;
+/** Drop the persisted subset (call when onboarding reaches a terminal state). */
+export declare function clearSelection(): void;

package/dist/dashboard/web/onboarding/onboarding-selection-store.js

@@ -0,0 +1,76 @@
+/**
+ * Session-scoped memory of the product subset the operator chose (Standard = the whole fleet,
+ * Advanced = exactly the checked products). PRD-009b ob-AC-16 resume honesty: without this, an
+ * interrupted Advanced install resumes from `remainingProducts(detection)`, which is every
+ * not-installed product, so a product the operator explicitly DESELECTED would be silently
+ * reinstalled on re-entry. Persisting the choice lets `buildResumeQueue` exclude a not-installed
+ * product the operator never asked for, while still resuming any product that is genuinely
+ * mid-flight or failed (those are in-flight facts, not assumptions).
+ *
+ * Storage is `sessionStorage` (per browser session, cleared when the tab closes) and every access
+ * is guarded: a missing `window`, a storage exception (private mode, quota, disabled), or a
+ * malformed value all degrade to "no memory" rather than throwing into the onboarding flow.
+ */
+import { FIXED_PRODUCT_ORDER, isInstallableProduct } from "./contracts.js";
+const SELECTION_KEY = "hive-onboarding-selection";
+function storage() {
+    try {
+        if (typeof window === "undefined")
+            return null;
+        return window.sessionStorage;
+    }
+    catch {
+        return null;
+    }
+}
+/** Persist the chosen installable subset (order-normalized to the fixed order, de-duplicated). */
+export function persistSelection(selected) {
+    const store = storage();
+    if (store === null)
+        return;
+    const normalized = FIXED_PRODUCT_ORDER.filter((p) => selected.includes(p));
+    try {
+        store.setItem(SELECTION_KEY, JSON.stringify(normalized));
+    }
+    catch {
+        // A storage write failure is non-fatal: resume simply falls back to the conservative path.
+    }
+}
+/** Read the persisted subset, or null when nothing valid is stored. */
+export function readSelection() {
+    const store = storage();
+    if (store === null)
+        return null;
+    let raw;
+    try {
+        raw = store.getItem(SELECTION_KEY);
+    }
+    catch {
+        return null;
+    }
+    if (raw === null)
+        return null;
+    try {
+        const parsed = JSON.parse(raw);
+        if (!Array.isArray(parsed))
+            return null;
+        const products = parsed.filter((v) => typeof v === "string" && isInstallableProduct(v));
+        return products.length > 0 ? FIXED_PRODUCT_ORDER.filter((p) => products.includes(p)) : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Drop the persisted subset (call when onboarding reaches a terminal state). */
+export function clearSelection() {
+    const store = storage();
+    if (store === null)
+        return;
+    try {
+        store.removeItem(SELECTION_KEY);
+    }
+    catch {
+        // Non-fatal.
+    }
+}
+//# sourceMappingURL=onboarding-selection-store.js.map

package/dist/dashboard/web/onboarding/onboarding-selection-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-selection-store.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/onboarding-selection-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAA2B,MAAM,gBAAgB,CAAC;AAEpG,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAElD,SAAS,OAAO;IACf,IAAI,CAAC;QACJ,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,MAAM,CAAC,cAAc,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,gBAAgB,CAAC,QAAuC;IACvE,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO;IAC3B,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC;QACJ,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACR,2FAA2F;IAC5F,CAAC;AACF,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa;IAC5B,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAA2B,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc;IAC7B,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO;IAC3B,IAAI,CAAC;QACJ,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,aAAa;IACd,CAAC;AACF,CAAC"}

package/dist/dashboard/web/onboarding/product-copy.d.ts

@@ -0,0 +1,40 @@
+/**
+ * The onboarding CONTENT layer, PRD-009b ob-AC-8/ob-AC-10. Per-product benefit copy (drafted from
+ * each sibling repo's README voice: `honeycomb/README.md`, `doctor/README.md`, `nectar/README.md`)
+ * plus the npm-safety reassurance every install card carries and the Doctor-deselect warning the
+ * Advanced picker shows (ob-AC-7). Kept as data, not JSX, so copy review never touches a component.
+ */
+import type { InstallableProduct, OnboardingProduct } from "./contracts.js";
+export interface ProductCopy {
+    readonly title: string;
+    /** A punchy, honest headline (drafted from the product's README hero line). */
+    readonly headline: string;
+    /** Two short supporting lines, concrete, no invented claims. */
+    readonly lines: readonly [string, string];
+    /** Doctor carries the `Recommended` badge in the Advanced picker (ob-AC-7). */
+    readonly recommended: boolean;
+}
+/**
+ * Drafted verbatim from each product's README (see the task report for the source lines this
+ * copy distills): Doctor's "watchdog that keeps your agents' brain alive" + repair-ladder pitch,
+ * Honeycomb's "shared, persistent memory" + skillify/propagation pitch, Nectar's "stable identity
+ * that survives refactors" + the fourth-recall-arm pitch. Honest and concrete, no invented claims.
+ */
+export declare const PRODUCT_COPY: Record<InstallableProduct, ProductCopy>;
+/**
+ * ob-AC-10, the npm-safety reassurance every install card carries, verbatim. Checkably true for
+ * all four packages (`@legioncodeinc/{honeycomb,doctor,hive,nectar}` each publish with npm Trusted
+ * Publishing OIDC provenance per the parent PRD's overview), so this never overstates the claim.
+ */
+export declare const NPM_SAFETY_COPY = "Installed straight from the public npm registry. Every package here is signed and provenance verified through npm Trusted Publishing (OIDC), so what installs is exactly what we published.";
+/** ob-AC-7, shown when Doctor is deselected in the Advanced picker. */
+export declare const DOCTOR_DESELECT_WARNING = "Without Doctor, nothing restarts your daemons after a crash or reboot.";
+/**
+ * Resolve a product's brand mark URL. Honeycomb keeps its existing top-level, `assetBase`-relative
+ * route (`host.ts`'s `DASHBOARD_LOGO_PATH`, unchanged by this PRD); Doctor, Hive, and Nectar are
+ * served by the daemon agent at the new fixed `/assets/brand/<name>-mark.svg` route (see the task
+ * brief), independent of `assetBase`.
+ */
+export declare function productLogoUrl(product: OnboardingProduct, assetBase: string): string;
+/** The install-stage vocabulary (ob-AC-9): a short human label per stage, never a percentage. */
+export declare const INSTALL_STAGE_LABEL: Record<"resolving" | "downloading" | "linking" | "registering_service" | "completed" | "failed", string>;

package/dist/dashboard/web/onboarding/product-copy.js

@@ -0,0 +1,70 @@
+/**
+ * The onboarding CONTENT layer, PRD-009b ob-AC-8/ob-AC-10. Per-product benefit copy (drafted from
+ * each sibling repo's README voice: `honeycomb/README.md`, `doctor/README.md`, `nectar/README.md`)
+ * plus the npm-safety reassurance every install card carries and the Doctor-deselect warning the
+ * Advanced picker shows (ob-AC-7). Kept as data, not JSX, so copy review never touches a component.
+ */
+/**
+ * Drafted verbatim from each product's README (see the task report for the source lines this
+ * copy distills): Doctor's "watchdog that keeps your agents' brain alive" + repair-ladder pitch,
+ * Honeycomb's "shared, persistent memory" + skillify/propagation pitch, Nectar's "stable identity
+ * that survives refactors" + the fourth-recall-arm pitch. Honest and concrete, no invented claims.
+ */
+export const PRODUCT_COPY = {
+    doctor: {
+        title: "Doctor",
+        headline: "Doctor keeps your daemons alive while you are not looking.",
+        lines: [
+            "Restarts a crashed daemon, then climbs an escalating repair ladder if a plain restart is not enough.",
+            "Runs OS-supervised so it starts on boot and survives its own crashes too.",
+        ],
+        recommended: true,
+    },
+    honeycomb: {
+        title: "Honeycomb",
+        headline: "Honeycomb is the shared memory your agents keep across sessions.",
+        lines: [
+            "Captures what happens on every turn and recalls it in any harness, on any machine.",
+            "Mines reusable skills from real sessions and propagates them to your whole team automatically.",
+        ],
+        recommended: false,
+    },
+    nectar: {
+        title: "Nectar",
+        headline: "Nectar gives every file in your repo an identity that survives refactors.",
+        lines: [
+            "Tracks files through renames and moves, so memory tied to an old path never goes stale.",
+            "Feeds Honeycomb's recall a fourth arm, so asking where the login logic lives actually works.",
+        ],
+        recommended: false,
+    },
+};
+/**
+ * ob-AC-10, the npm-safety reassurance every install card carries, verbatim. Checkably true for
+ * all four packages (`@legioncodeinc/{honeycomb,doctor,hive,nectar}` each publish with npm Trusted
+ * Publishing OIDC provenance per the parent PRD's overview), so this never overstates the claim.
+ */
+export const NPM_SAFETY_COPY = "Installed straight from the public npm registry. Every package here is signed and provenance verified through npm Trusted Publishing (OIDC), so what installs is exactly what we published.";
+/** ob-AC-7, shown when Doctor is deselected in the Advanced picker. */
+export const DOCTOR_DESELECT_WARNING = "Without Doctor, nothing restarts your daemons after a crash or reboot.";
+/**
+ * Resolve a product's brand mark URL. Honeycomb keeps its existing top-level, `assetBase`-relative
+ * route (`host.ts`'s `DASHBOARD_LOGO_PATH`, unchanged by this PRD); Doctor, Hive, and Nectar are
+ * served by the daemon agent at the new fixed `/assets/brand/<name>-mark.svg` route (see the task
+ * brief), independent of `assetBase`.
+ */
+export function productLogoUrl(product, assetBase) {
+    if (product === "honeycomb")
+        return `${assetBase}/honeycomb-memory-cluster.svg`;
+    return `/assets/brand/${product}-mark.svg`;
+}
+/** The install-stage vocabulary (ob-AC-9): a short human label per stage, never a percentage. */
+export const INSTALL_STAGE_LABEL = {
+    resolving: "Resolving the package",
+    downloading: "Downloading from npm",
+    linking: "Linking the binary",
+    registering_service: "Registering the service",
+    completed: "Installed",
+    failed: "Installation failed",
+};
+//# sourceMappingURL=product-copy.js.map

package/dist/dashboard/web/onboarding/product-copy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-copy.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/product-copy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAcH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAA4C;IACpE,MAAM,EAAE;QACP,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,4DAA4D;QACtE,KAAK,EAAE;YACN,sGAAsG;YACtG,2EAA2E;SAC3E;QACD,WAAW,EAAE,IAAI;KACjB;IACD,SAAS,EAAE;QACV,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,kEAAkE;QAC5E,KAAK,EAAE;YACN,oFAAoF;YACpF,gGAAgG;SAChG;QACD,WAAW,EAAE,KAAK;KAClB;IACD,MAAM,EAAE;QACP,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,2EAA2E;QACrF,KAAK,EAAE;YACN,yFAAyF;YACzF,8FAA8F;SAC9F;QACD,WAAW,EAAE,KAAK;KAClB;CACD,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAC3B,6LAA6L,CAAC;AAE/L,uEAAuE;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,wEAAwE,CAAC;AAEhH;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAA0B,EAAE,SAAiB;IAC3E,IAAI,OAAO,KAAK,WAAW;QAAE,OAAO,GAAG,SAAS,+BAA+B,CAAC;IAChF,OAAO,iBAAiB,OAAO,WAAW,CAAC;AAC5C,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,MAAM,mBAAmB,GAG5B;IACH,SAAS,EAAE,uBAAuB;IAClC,WAAW,EAAE,sBAAsB;IACnC,OAAO,EAAE,oBAAoB;IAC7B,mBAAmB,EAAE,yBAAyB;IAC9C,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,qBAAqB;CAC7B,CAAC"}

package/dist/dashboard/web/onboarding/use-install-dwell.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The install card's MINIMUM DWELL hook, PRD-009b ob-AC-11. Each product card must display for a
+ * minimum of ~30 seconds even when the install finishes sooner; a longer install simply holds the
+ * card until its own terminal state. The dwell timer NEVER masks a failure, this hook only ever
+ * gates the advance-on-SUCCESS path; a failed card renders its error immediately regardless of how
+ * much dwell time has elapsed (the caller never calls this hook's `ready` with a failure in mind).
+ */
+/** ob-AC-11's "~30 seconds" as a duration. Overridable so tests never wait 30 real seconds. */
+export declare const DEFAULT_MIN_DWELL_MS = 30000;
+export interface UseInstallDwellOptions {
+    /** Called exactly once, after `ready` has been true for the remaining minimum-dwell duration. */
+    readonly onDwellSatisfied: () => void;
+    /** Overrides {@link DEFAULT_MIN_DWELL_MS} (a test injects a short window). */
+    readonly minDwellMs?: number;
+}
+/**
+ * `ready` flips true once the install reaches its `completed` terminal state. The card's mount
+ * time is the dwell clock's start (installs begin the instant a card mounts), so a completion that
+ * lands at second 6 still holds the card until second 30; a completion that lands at second 40 has
+ * already satisfied the dwell and advances immediately.
+ */
+export declare function useInstallDwell(ready: boolean, options: UseInstallDwellOptions): void;

package/dist/dashboard/web/onboarding/use-install-dwell.js

@@ -0,0 +1,37 @@
+/**
+ * The install card's MINIMUM DWELL hook, PRD-009b ob-AC-11. Each product card must display for a
+ * minimum of ~30 seconds even when the install finishes sooner; a longer install simply holds the
+ * card until its own terminal state. The dwell timer NEVER masks a failure, this hook only ever
+ * gates the advance-on-SUCCESS path; a failed card renders its error immediately regardless of how
+ * much dwell time has elapsed (the caller never calls this hook's `ready` with a failure in mind).
+ */
+import React from "react";
+/** ob-AC-11's "~30 seconds" as a duration. Overridable so tests never wait 30 real seconds. */
+export const DEFAULT_MIN_DWELL_MS = 30_000;
+/**
+ * `ready` flips true once the install reaches its `completed` terminal state. The card's mount
+ * time is the dwell clock's start (installs begin the instant a card mounts), so a completion that
+ * lands at second 6 still holds the card until second 30; a completion that lands at second 40 has
+ * already satisfied the dwell and advances immediately.
+ */
+export function useInstallDwell(ready, options) {
+    const { minDwellMs = DEFAULT_MIN_DWELL_MS } = options;
+    const startedAtRef = React.useRef(Date.now());
+    const firedRef = React.useRef(false);
+    // Read through a ref so a caller passing a fresh `onDwellSatisfied` closure every render never
+    // re-triggers the scheduling effect below (only `ready`/`minDwellMs` should do that).
+    const onDwellSatisfiedRef = React.useRef(options.onDwellSatisfied);
+    onDwellSatisfiedRef.current = options.onDwellSatisfied;
+    React.useEffect(() => {
+        if (!ready || firedRef.current)
+            return;
+        const elapsed = Date.now() - startedAtRef.current;
+        const remaining = Math.max(0, minDwellMs - elapsed);
+        const id = setTimeout(() => {
+            firedRef.current = true;
+            onDwellSatisfiedRef.current();
+        }, remaining);
+        return () => clearTimeout(id);
+    }, [ready, minDwellMs]);
+}
+//# sourceMappingURL=use-install-dwell.js.map

package/dist/dashboard/web/onboarding/use-install-dwell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-install-dwell.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/use-install-dwell.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,+FAA+F;AAC/F,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAS3C;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,OAA+B;IAC9E,MAAM,EAAE,UAAU,GAAG,oBAAoB,EAAE,GAAG,OAAO,CAAC;IACtD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAS,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAErC,+FAA+F;IAC/F,sFAAsF;IACtF,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACnE,mBAAmB,CAAC,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAEvD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACpB,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO;YAAE,OAAO;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;YACxB,mBAAmB,CAAC,OAAO,EAAE,CAAC;QAC/B,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;AACzB,CAAC"}

package/dist/dashboard/web/onboarding/use-onboarding-token.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The one-time onboarding TOKEN hook, PRD-009b implementation note. The bootstrap mints the token
+ * and hands it to the browser via `/onboarding?t=...`; this hook reads it ONCE on mount, keeps it
+ * in React state (memory only) for the page's lifetime, and immediately strips it from the visible
+ * URL via `history.replaceState` so casual screen-sharing never exposes it. The read+strip is a side
+ * effect, so it runs inside `useEffect` (not a `useState` lazy initializer), render must stay pure.
+ */
+/** Read `?t=` once, strip it from the visible URL, and return the token (`""` until read / if absent). */
+export declare function useOnboardingToken(): string;

package/dist/dashboard/web/onboarding/use-onboarding-token.js

@@ -0,0 +1,34 @@
+/**
+ * The one-time onboarding TOKEN hook, PRD-009b implementation note. The bootstrap mints the token
+ * and hands it to the browser via `/onboarding?t=...`; this hook reads it ONCE on mount, keeps it
+ * in React state (memory only) for the page's lifetime, and immediately strips it from the visible
+ * URL via `history.replaceState` so casual screen-sharing never exposes it. The read+strip is a side
+ * effect, so it runs inside `useEffect` (not a `useState` lazy initializer), render must stay pure.
+ */
+import React from "react";
+const TOKEN_QUERY_PARAM = "t";
+/** Read `?t=` once, strip it from the visible URL, and return the token (`""` until read / if absent). */
+export function useOnboardingToken() {
+    const [token, setToken] = React.useState("");
+    React.useEffect(() => {
+        if (typeof window === "undefined")
+            return;
+        const params = new URLSearchParams(window.location.search);
+        const fromUrl = params.get(TOKEN_QUERY_PARAM);
+        if (fromUrl === null || fromUrl === "")
+            return;
+        setToken(fromUrl);
+        // Move it out of the visible URL (PRD implementation note), the token stays in memory only.
+        try {
+            const url = new URL(window.location.href);
+            url.searchParams.delete(TOKEN_QUERY_PARAM);
+            window.history.replaceState(null, "", `${url.pathname}${url.search}${url.hash}`);
+        }
+        catch {
+            // A `history` API failure (e.g. an unusual embedding context) must never block the flow ,
+            // the token still landed in state; only the cosmetic URL scrub is skipped.
+        }
+    }, []);
+    return token;
+}
+//# sourceMappingURL=use-onboarding-token.js.map

package/dist/dashboard/web/onboarding/use-onboarding-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-onboarding-token.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/use-onboarding-token.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,iBAAiB,GAAG,GAAY,CAAC;AAEvC,0GAA0G;AAC1G,MAAM,UAAU,kBAAkB;IACjC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAE7C,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACpB,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO;QAC1C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO;QAE/C,QAAQ,CAAC,OAAO,CAAC,CAAC;QAElB,4FAA4F;QAC5F,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1C,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC3C,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACR,0FAA0F;YAC1F,2EAA2E;QAC5E,CAAC;IACF,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/dashboard/web/route-daemon-owner.d.ts

@@ -0,0 +1,7 @@
+import type { DaemonName } from "../../shared/daemon-routing.js";
+/**
+ * Resolve which workload daemon owns the active dashboard route's data plane. Used by the shell's
+ * per-owner connectivity gate (PRD-001c c-AC-3): only pages owned by a down daemon swap for the
+ * ConnectivityBanner; sibling routes keep rendering via their own fail-soft panels.
+ */
+export declare function resolveRouteDaemonOwner(route: string): DaemonName;

package/dist/dashboard/web/route-daemon-owner.js

@@ -0,0 +1,15 @@
+/** Dashboard routes whose primary wire endpoints are owned by nectar (hive-graph proxy). */
+const NECTAR_ROUTE_PREFIXES = ["/hive-graph"];
+/**
+ * Resolve which workload daemon owns the active dashboard route's data plane. Used by the shell's
+ * per-owner connectivity gate (PRD-001c c-AC-3): only pages owned by a down daemon swap for the
+ * ConnectivityBanner; sibling routes keep rendering via their own fail-soft panels.
+ */
+export function resolveRouteDaemonOwner(route) {
+    for (const prefix of NECTAR_ROUTE_PREFIXES) {
+        if (route === prefix || route.startsWith(`${prefix}/`))
+            return "nectar";
+    }
+    return "honeycomb";
+}
+//# sourceMappingURL=route-daemon-owner.js.map

package/dist/dashboard/web/route-daemon-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-daemon-owner.js","sourceRoot":"","sources":["../../../src/dashboard/web/route-daemon-owner.ts"],"names":[],"mappings":"AAEA,4FAA4F;AAC5F,MAAM,qBAAqB,GAAG,CAAC,aAAa,CAAU,CAAC;AAEvD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACpD,KAAK,MAAM,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAC5C,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;IACzE,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC"}

package/dist/dashboard/web/wire.d.ts

@@ -1311,9 +1311,9 @@ export declare const SetupStateSchema: z.ZodObject<{
         hivemind: z.ZodCatch<z.ZodBoolean>;
     }, z.core.$strip>>;
     phase: z.ZodCatch<z.ZodEnum<{
+        linking: "linking";
         installed: "installed";
         fresh: "fresh";
-        linking: "linking";
         linked: "linked";
         migrating: "migrating";
         migrated: "migrated";

package/dist/shared/onboarding-types.d.ts

@@ -0,0 +1,79 @@
+/**
+ * PRD-009a: the LOCKED API contract for the `/api/onboarding/*` installer surface.
+ *
+ * These types are the single shared contract between the daemon-side installer service
+ * (`src/daemon/installer/`) and the onboarding UI (`src/dashboard/web/onboarding/`, owned by
+ * PRD-009b). The UI builds against this exact shape, so any change here is a contract change.
+ *
+ * Nothing in this module reaches persistence: the installer's only durable artifact is the
+ * one-time onboarding token file, and even that is out of band from these wire types.
+ */
+import type { FleetStatusResponse } from "./fleet-readiness.js";
+/** The four fleet product slugs (is-AC-3). The install allowlist is derived from this closed set. */
+export type ProductSlug = "honeycomb" | "doctor" | "hive" | "nectar";
+/**
+ * The three installable-via-portal products. `hive` is intentionally excluded: it is the daemon
+ * serving this very endpoint, so it is never a portal install target (a request for it is a 400).
+ */
+export type InstallableProduct = "doctor" | "honeycomb" | "nectar";
+/** The closed set of install stages streamed over SSE (is-AC-11). Never a percentage (is-AC-12). */
+export type InstallStage = "resolving" | "downloading" | "linking" | "registering_service" | "completed" | "failed";
+/** The closed detection state set for a product (is-AC-2). */
+export type ProductDetectionState = "not_installed" | "installed" | "install_in_progress" | "install_failed";
+/** A bounded, truthful failure record: the stage it failed at plus a summary (is-AC-17). */
+export interface InstallError {
+    readonly stage: InstallStage;
+    readonly summary: string;
+}
+/** One product's detection result: its state, the installed version when known, and any last error. */
+export interface ProductDetection {
+    readonly state: ProductDetectionState;
+    readonly version?: string;
+    readonly error?: InstallError;
+}
+/** `GET /api/onboarding/detect` -> the per-product detection map (is-AC-1/2). */
+export interface DetectResponse {
+    readonly products: Record<ProductSlug, ProductDetection>;
+}
+/** `POST /api/onboarding/install` body. Only the product slug crosses the wire (is-AC-4). */
+export interface InstallRequest {
+    readonly product: InstallableProduct;
+}
+/** `POST /api/onboarding/install` -> 202 when an install was started (or attached to). */
+export interface InstallAcceptedResponse {
+    readonly product: InstallableProduct;
+    readonly state: "install_in_progress";
+}
+/** `POST /api/onboarding/install` -> 200 short-circuit when already installed at the pinned version (is-AC-15). */
+export interface InstallShortCircuitResponse {
+    readonly product: InstallableProduct;
+    readonly state: "installed";
+}
+export type InstallResponse = InstallAcceptedResponse | InstallShortCircuitResponse;
+/**
+ * `POST /api/onboarding/install` -> 409 refusal (is-AC-5). `unpublished`: the manifest marks the
+ * product `published:false`. `manifest_unresolved`: neither the network manifest nor the bundled
+ * snapshot yields a shape-valid `packageName@version`. Never a fall-through to `@latest`.
+ */
+export interface InstallRefusalResponse {
+    readonly error: "unpublished" | "manifest_unresolved";
+}
+/** One SSE progress frame (is-AC-11). `detail` is an optional bounded human string, never a percent. */
+export interface ProgressEvent {
+    readonly stage: InstallStage;
+    readonly detail?: string;
+}
+/** `GET /api/onboarding/health` -> the fleet readiness projection reused from fleet-status (is-AC-18). */
+export interface HealthResponse {
+    readonly ready: boolean;
+    readonly status: FleetStatusResponse;
+}
+/**
+ * `POST /api/onboarding/event` body: a funnel event name plus optional flat string properties.
+ * The daemon validates the token and records the call; wiring it to telemetry emission is Wave 2
+ * (PRD-009c), so nothing is emitted here yet.
+ */
+export interface OnboardingEventRequest {
+    readonly event: string;
+    readonly properties?: Record<string, string>;
+}

package/dist/shared/onboarding-types.js

@@ -0,0 +1,12 @@
+/**
+ * PRD-009a: the LOCKED API contract for the `/api/onboarding/*` installer surface.
+ *
+ * These types are the single shared contract between the daemon-side installer service
+ * (`src/daemon/installer/`) and the onboarding UI (`src/dashboard/web/onboarding/`, owned by
+ * PRD-009b). The UI builds against this exact shape, so any change here is a contract change.
+ *
+ * Nothing in this module reaches persistence: the installer's only durable artifact is the
+ * one-time onboarding token file, and even that is out of band from these wire types.
+ */
+export {};
+//# sourceMappingURL=onboarding-types.js.map

package/dist/shared/onboarding-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-types.js","sourceRoot":"","sources":["../../src/shared/onboarding-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/telemetry/emit.d.ts

@@ -74,17 +74,44 @@ export declare const LEDGER_FILENAME: "telemetry.json";
  * path at all, so nothing else can egress.
  */
 export declare const ALLOWED_PROPERTY_KEYS: readonly ["package", "version", "os", "arch", "node"];
+/** Funnel-only property keys extending the lifecycle allow-list (PRD-009c tm-AC-4). */
+export declare const FUNNEL_PROPERTY_KEYS: readonly ["mode", "product", "failure_stage"];
 /** One allow-listed property key. */
 export type AllowedPropertyKey = (typeof ALLOWED_PROPERTY_KEYS)[number];
+/** One funnel-specific property key. */
+export type FunnelPropertyKey = (typeof FUNNEL_PROPERTY_KEYS)[number];
 /** The allow-listed property bag: the EXACT shape that may leave the machine. */
 export type AllowedProperties = Record<AllowedPropertyKey, string>;
+/** The full telemetry property bag: lifecycle keys plus optional closed funnel keys. */
+export type TelemetryProperties = AllowedProperties & Partial<Record<FunnelPropertyKey, string>>;
 /**
  * Assemble the allow-listed payload: the package name, the build version, and coarse platform facts
  * (OS family, CPU arch, node version). Never a hostname, a path, or any machine-identifying string.
  */
 export declare function buildAllowedProperties(version: string): AllowedProperties;
-/** The four hive lifecycle events. This union is the whole event vocabulary of this module. */
+/**
+ * Merge validated funnel extras into the base allow-listed payload. Unknown keys are dropped; invalid
+ * enum values are dropped. Lifecycle events pass no extras.
+ */
+export declare function buildTelemetryProperties(version: string, extras?: FunnelExtras): TelemetryProperties;
+/** The four hive lifecycle events. */
 export type HiveTelemetryEvent = "hive_installed" | "hive_uninstalled" | "hive_first_run" | "hive_updated";
+/** Onboarding funnel events (PRD-009c). Emitted daemon-side through this same chokepoint. */
+export type OnboardingFunnelEvent = "onboarding_started" | "mode_selected" | "login_shown" | "dashboard_reached" | "product_install_started" | "product_install_completed" | "product_install_failed" | "health_check_passed" | "login_completed";
+/** The closed event vocabulary that may egress through {@link emitTelemetry}. */
+export type TelemetryEvent = HiveTelemetryEvent | OnboardingFunnelEvent;
+/** Closed funnel `mode` values (tm-AC-4). */
+export type FunnelMode = "standard" | "advanced";
+/** Closed funnel product slugs for install events (tm-AC-4). */
+export type FunnelProduct = "doctor" | "honeycomb" | "nectar";
+/** Closed failure-stage discriminators on `product_install_failed` (tm-AC-4). */
+export type FunnelFailureStage = "resolving" | "downloading" | "linking" | "registering_service";
+/** Optional funnel extras validated before they join the allow-listed payload. */
+export interface FunnelExtras {
+    readonly mode?: FunnelMode;
+    readonly product?: FunnelProduct;
+    readonly failure_stage?: FunnelFailureStage;
+}
 /**
  * The dedupe ledger persisted at `${stateDir}/telemetry.json`. `reported` maps a dedupe key (an event
  * name, or `event@version` for `hive_updated`) to the ISO timestamp it was sent. `lastSeenVersion`
@@ -156,7 +183,7 @@ export interface EmitOutcome {
     /** When `sent` is false, why. Absent when `sent` is true. */
     readonly skipped?: EmitSkipReason;
     /** The allow-listed payload that was built (present whether or not it was sent). */
-    readonly properties: AllowedProperties;
+    readonly properties: TelemetryProperties;
 }
 /** The per-emit options. */
 export interface EmitOptions {
@@ -173,7 +200,7 @@ export interface EmitOptions {
  * 2xx the dedupe key (when supplied) is recorded in the ledger. NEVER throws and NEVER changes a CLI
  * verb's exit code: it resolves an {@link EmitOutcome} the caller may inspect or ignore.
  */
-export declare function emitTelemetry(event: HiveTelemetryEvent, opts?: EmitOptions, deps?: EmitDeps): Promise<EmitOutcome>;
+export declare function emitTelemetry(event: TelemetryEvent, opts?: EmitOptions, deps?: EmitDeps, extras?: FunnelExtras): Promise<EmitOutcome>;
 /** Emit `hive_installed` after a successful `install-service`. Deduped once per machine. */
 export declare function emitInstalled(deps?: EmitDeps): Promise<EmitOutcome>;
 /**

package/dist/telemetry/emit.js

@@ -22,6 +22,7 @@ const SHARED_INSTALL_ID_PATH = join(HONEYCOMB_HOME_DIR, "install-id");
 const INSTALL_ID_FILENAME = "install-id";
 const LEDGER_FILENAME = "telemetry.json";
 const ALLOWED_PROPERTY_KEYS = ["package", "version", "os", "arch", "node"];
+const FUNNEL_PROPERTY_KEYS = ["mode", "product", "failure_stage"];
 function buildAllowedProperties(version) {
   return {
     package: "hive",
@@ -31,6 +32,26 @@ function buildAllowedProperties(version) {
     node: process.version
   };
 }
+function buildTelemetryProperties(version, extras = {}) {
+  const base = buildAllowedProperties(version);
+  const out = { ...base };
+  if (extras.mode !== void 0 && FUNNEL_MODES.has(extras.mode))
+    out.mode = extras.mode;
+  if (extras.product !== void 0 && FUNNEL_PRODUCTS.has(extras.product))
+    out.product = extras.product;
+  if (extras.failure_stage !== void 0 && FUNNEL_FAILURE_STAGES.has(extras.failure_stage)) {
+    out.failure_stage = extras.failure_stage;
+  }
+  return out;
+}
+const FUNNEL_MODES = /* @__PURE__ */ new Set(["standard", "advanced"]);
+const FUNNEL_PRODUCTS = /* @__PURE__ */ new Set(["doctor", "honeycomb", "nectar"]);
+const FUNNEL_FAILURE_STAGES = /* @__PURE__ */ new Set([
+  "resolving",
+  "downloading",
+  "linking",
+  "registering_service"
+]);
 function emptyLedger() {
   return { reported: {} };
 }
@@ -84,11 +105,11 @@ function resolveDistinctId(deps = {}) {
   return generated;
 }
 const DEFAULT_EMIT_TIMEOUT_MS = 2e3;
-async function emitTelemetry(event, opts = {}, deps = {}) {
+async function emitTelemetry(event, opts = {}, deps = {}, extras = {}) {
   const env = deps.env ?? process.env;
   const key = deps.posthogKey ?? POSTHOG_KEY;
   const version = deps.version ?? HIVE_VERSION;
-  const properties = buildAllowedProperties(version);
+  const properties = buildTelemetryProperties(version, extras);
   if (key.length === 0)
     return { sent: false, skipped: "disabled", properties };
   if (isOptedOut(env))
@@ -176,6 +197,7 @@ export {
   DEFAULT_EMIT_TIMEOUT_MS,
   ENV_DO_NOT_TRACK,
   ENV_TELEMETRY,
+  FUNNEL_PROPERTY_KEYS,
   HIVE_STATE_DIR,
   INSTALL_ID_FILENAME,
   LEDGER_FILENAME,
@@ -184,6 +206,7 @@ export {
   POSTHOG_KEY,
   SHARED_INSTALL_ID_PATH,
   buildAllowedProperties,
+  buildTelemetryProperties,
   captureUrl,
   emitInstalled,
   emitTelemetry,