@newrelic/preflight 0.0.1-pre.1 → 1.0.0

package/dist/install/schedule.js

@@ -0,0 +1,114 @@
+import { execFileSync } from 'node:child_process';
+import { writeFileSync, readFileSync, existsSync, statSync, accessSync, constants, unlinkSync, mkdirSync, } from 'node:fs';
+import { resolve, join } from 'node:path';
+import { homedir } from 'node:os';
+function escapeXml(s) {
+    return s
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;');
+}
+const PLIST_LABEL = 'com.preflight.update';
+function plistPath() {
+    return resolve(homedir(), 'Library', 'LaunchAgents', `${PLIST_LABEL}.plist`);
+}
+function updateLogPath() {
+    return resolve(homedir(), '.newrelic-preflight', 'update.log');
+}
+function buildPlist(binaryPath, hour, minute) {
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${PLIST_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${escapeXml(binaryPath)}</string>
+    <string>update</string>
+  </array>
+  <key>StartCalendarInterval</key>
+  <dict>
+    <key>Hour</key>
+    <integer>${hour}</integer>
+    <key>Minute</key>
+    <integer>${minute}</integer>
+  </dict>
+  <key>StandardOutPath</key>
+  <string>${escapeXml(updateLogPath())}</string>
+  <key>StandardErrorPath</key>
+  <string>${escapeXml(updateLogPath())}</string>
+  <key>RunAtLoad</key>
+  <false/>
+</dict>
+</plist>`;
+}
+export function installSchedule(binaryPath, hour, minute) {
+    const path = plistPath();
+    mkdirSync(resolve(homedir(), 'Library', 'LaunchAgents'), { recursive: true, mode: 0o755 });
+    writeFileSync(path, buildPlist(binaryPath, hour, minute), { mode: 0o600 });
+    try {
+        execFileSync('launchctl', ['unload', path], { stdio: 'pipe' });
+    }
+    catch {
+        // Not yet loaded — that's fine.
+    }
+    try {
+        execFileSync('launchctl', ['load', path], { stdio: 'pipe' });
+    }
+    catch (err) {
+        throw new Error(`launchctl load failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+export function removeSchedule() {
+    const path = plistPath();
+    if (!existsSync(path))
+        return;
+    try {
+        execFileSync('launchctl', ['unload', path], { stdio: 'pipe' });
+    }
+    catch {
+        // Already unloaded.
+    }
+    unlinkSync(path);
+}
+export function getScheduleStatus() {
+    const path = plistPath();
+    if (!existsSync(path))
+        return { installed: false };
+    try {
+        const content = readFileSync(path, 'utf-8');
+        const hourMatch = content.match(/<key>Hour<\/key>\s*<integer>(\d+)<\/integer>/);
+        const minuteMatch = content.match(/<key>Minute<\/key>\s*<integer>(\d+)<\/integer>/);
+        const binaryMatch = content.match(/<key>ProgramArguments<\/key>\s*<array>\s*<string>([^<]+)<\/string>/);
+        return {
+            installed: true,
+            hour: hourMatch ? parseInt(hourMatch[1], 10) : undefined,
+            minute: minuteMatch ? parseInt(minuteMatch[1], 10) : undefined,
+            binaryPath: binaryMatch ? binaryMatch[1] : undefined,
+        };
+    }
+    catch {
+        return { installed: false };
+    }
+}
+export function resolveBinaryPath() {
+    // Walk PATH directly — avoids hardcoding the `which` location and is safe
+    // for Nix/Homebrew installs where binaries live outside /usr/bin.
+    const pathDirs = (process.env.PATH ?? '').split(':').filter(Boolean);
+    for (const dir of pathDirs) {
+        const candidate = join(dir, 'preflight');
+        try {
+            if (statSync(candidate).isFile()) {
+                accessSync(candidate, constants.X_OK);
+                return candidate;
+            }
+        }
+        catch {
+            continue;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=schedule.js.map

package/dist/install/schedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule.js","sourceRoot":"","sources":["../../src/install/schedule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,aAAa,EACb,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,UAAU,EACV,SAAS,EACT,UAAU,EACV,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAE3C,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,WAAW,QAAQ,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,qBAAqB,EAAE,YAAY,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,IAAY,EAAE,MAAc;IAClE,OAAO;;;;;YAKG,WAAW;;;cAGT,SAAS,CAAC,UAAU,CAAC;;;;;;eAMpB,IAAI;;eAEJ,MAAM;;;YAGT,SAAS,CAAC,aAAa,EAAE,CAAC;;YAE1B,SAAS,CAAC,aAAa,EAAE,CAAC;;;;SAI7B,CAAC;AACV,CAAC;AASD,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,IAAY,EAAE,MAAc;IAC9E,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,YAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IACD,IAAI,CAAC;QACH,YAAY,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO;IAC9B,IAAI,CAAC;QACH,YAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpF,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAC/B,oEAAoE,CACrE,CAAC;QACF,OAAO;YACL,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACxD,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YAC9D,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SACrD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBACtC,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/install/setup-wizard.d.ts

@@ -0,0 +1,40 @@
+interface WizardLogger {
+    warn(msg: string, meta?: object): void;
+    info(msg: string, meta?: object): void;
+}
+export interface CopyStarterAlertRulesOptions {
+    /** Path to the source examples/local-alert-rules.json. */
+    readonly sourcePath: string;
+    /** Destination path (default: ~/.newrelic-preflight/alerts/rules.json). */
+    readonly destPath: string;
+    /** Optional logger; otherwise no-op. */
+    readonly logger?: WizardLogger;
+}
+export interface CopyStarterAlertRulesResult {
+    readonly copied: boolean;
+    readonly reason?: string;
+}
+/**
+ * Copy the bundled starter alert rules into the destination path. Idempotent:
+ * if the destination already exists, the function leaves it alone (so a
+ * user-edited rules file is never clobbered by a re-run of `setup`). The
+ * destination directory is created with `0o700` if missing; the file is
+ * written with `0o600`.
+ */
+export declare function copyStarterAlertRules(opts: CopyStarterAlertRulesOptions): CopyStarterAlertRulesResult;
+export type WizardMode = 'cloud' | 'local' | 'both';
+export declare function buildConfig(existing: Record<string, unknown>, inputs: {
+    accountId: string;
+    licenseKey: string;
+    developer: string;
+    teamId: string | null;
+    projectId: string | null;
+    sessionBudgetUsd: number | null;
+    mode?: WizardMode;
+    dashboardPort?: number | null;
+    nrApiKey?: string | null;
+    collectorHost?: string | null;
+}): Record<string, unknown>;
+export declare function runSetupWizard(): Promise<void>;
+export {};
+//# sourceMappingURL=setup-wizard.d.ts.map

package/dist/install/setup-wizard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard.d.ts","sourceRoot":"","sources":["../../src/install/setup-wizard.ts"],"names":[],"mappings":"AAuBA,UAAU,YAAY;IACpB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAwBD,MAAM,WAAW,4BAA4B;IAC3C,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,4BAA4B,GACjC,2BAA2B,CA6B7B;AA2CD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;AAEpD,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,MAAM,EAAE;IACN,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,GACA,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBzB;AAWD,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CA6ZpD"}

package/dist/install/setup-wizard.js

@@ -0,0 +1,489 @@
+import { createInterface } from 'node:readline/promises';
+import { writeFileSync, renameSync, mkdirSync, readFileSync, existsSync, copyFileSync, chmodSync, realpathSync, } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { homedir } from 'node:os';
+import { normalizeDeveloperName, ConfigFileSchema } from '../config.js';
+import { migrateStoragePath } from './migrate.js';
+import { runInstallCli, verifyBinaryOnPath } from './cli.js';
+import { installSchedule, resolveBinaryPath } from './schedule.js';
+import { validateLicenseKey, validateApiKey } from './key-validator.js';
+const DEFAULT_STORAGE_PATH = resolve(homedir(), '.newrelic-preflight');
+const CONFIG_PATH = resolve(DEFAULT_STORAGE_PATH, 'config.json');
+const ALERT_RULES_DEST = resolve(DEFAULT_STORAGE_PATH, 'alerts', 'rules.json');
+/**
+ * Resolve the path to the bundled `examples/local-alert-rules.json`. The
+ * wizard ships from either `dist/install/` (when installed via npm) or
+ * `src/install/` (when executed via `npx tsx`); both resolve to the repo
+ * root by walking up two directories from the running script.
+ *
+ * Uses `process.argv[1]` rather than `__dirname` (which doesn't exist in
+ * ESM) or `import.meta.url` (which trips Jest's TS module check). Same
+ * pattern as `src/index.ts` for resolving the static dashboard dir.
+ */
+function defaultStarterRulesSource() {
+    const rawPath = process.argv[1] ?? process.cwd();
+    const scriptPath = (() => {
+        try {
+            return realpathSync(rawPath);
+        }
+        catch {
+            return rawPath;
+        }
+    })();
+    return resolve(dirname(scriptPath), '..', '..', 'examples', 'local-alert-rules.json');
+}
+/**
+ * Copy the bundled starter alert rules into the destination path. Idempotent:
+ * if the destination already exists, the function leaves it alone (so a
+ * user-edited rules file is never clobbered by a re-run of `setup`). The
+ * destination directory is created with `0o700` if missing; the file is
+ * written with `0o600`.
+ */
+export function copyStarterAlertRules(opts) {
+    const { sourcePath, destPath, logger } = opts;
+    if (existsSync(destPath)) {
+        logger?.info('alerts: rules file already exists; skipping copy', {
+            destPath,
+        });
+        return { copied: false, reason: 'exists' };
+    }
+    if (!existsSync(sourcePath)) {
+        logger?.warn('alerts: starter rules source not found', { sourcePath });
+        return { copied: false, reason: 'source-missing' };
+    }
+    try {
+        mkdirSync(dirname(destPath), { recursive: true, mode: 0o700 });
+        copyFileSync(sourcePath, destPath);
+        // copyFileSync preserves permissions from source; force 0o600 so the
+        // destination is locked-down regardless of what the source file had.
+        try {
+            chmodSync(destPath, 0o600);
+        }
+        catch {
+            // Non-fatal — Windows may not honour chmod, etc.
+        }
+        logger?.info('alerts: copied starter rules', { sourcePath, destPath });
+        return { copied: true };
+    }
+    catch (err) {
+        const error = err instanceof Error ? err.message : String(err);
+        logger?.warn('alerts: copy failed', { sourcePath, destPath, error });
+        return { copied: false, reason: error };
+    }
+}
+function print(msg = '') {
+    process.stdout.write(msg + '\n');
+}
+function loadExisting() {
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(CONFIG_PATH, 'utf-8'));
+    }
+    catch {
+        return {};
+    }
+    // Validate via the same schema loadMcpConfig uses, then keep ONLY recognized
+    // top-level keys. The schema is `.passthrough()` so safeParse won't strip
+    // unknown keys for us; the explicit filter below makes sure the wizard's
+    // later spread (`...existing` in buildConfig) doesn't perpetuate stale keys
+    // back into the rewritten config file.
+    const validation = ConfigFileSchema.safeParse(parsed);
+    const knownKeys = new Set(Object.keys(ConfigFileSchema.shape));
+    if (!validation.success) {
+        // Recognized-key value is malformed (e.g. accountId is a number, not a
+        // string). Log a warning and fall back to defaults — the wizard will
+        // re-prompt for those fields rather than pre-fill bad data.
+        const issues = validation.error.issues
+            .map((issue) => `${issue.path.join('.') || 'root'}: ${issue.message}`)
+            .join('; ');
+        process.stderr.write(`[setup-wizard] Existing config has invalid values; ignoring: ${issues}\n`);
+        return {};
+    }
+    // Strip unknown keys from the validated object so they don't get spread
+    // back into the rewritten config.
+    const filtered = {};
+    for (const [key, value] of Object.entries(validation.data)) {
+        if (knownKeys.has(key)) {
+            filtered[key] = value;
+        }
+    }
+    return filtered;
+}
+export function buildConfig(existing, inputs) {
+    const mode = inputs.mode ?? 'cloud';
+    const includeNrCreds = mode !== 'local';
+    return {
+        ...existing,
+        ...(inputs.mode ? { mode } : {}),
+        ...(includeNrCreds ? { accountId: inputs.accountId, licenseKey: inputs.licenseKey } : {}),
+        developer: inputs.developer,
+        ...(inputs.teamId ? { teamId: inputs.teamId } : {}),
+        ...(inputs.projectId ? { projectId: inputs.projectId } : {}),
+        ...(inputs.sessionBudgetUsd !== null ? { sessionBudgetUsd: inputs.sessionBudgetUsd } : {}),
+        ...(inputs.dashboardPort != null
+            ? { dashboard: { port: inputs.dashboardPort, host: '127.0.0.1', openOnStart: false } }
+            : {}),
+        ...(inputs.nrApiKey ? { nrApiKey: inputs.nrApiKey } : {}),
+        ...(inputs.collectorHost ? { collectorHost: inputs.collectorHost } : {}),
+    };
+}
+function parseModeAnswer(raw, fallback) {
+    const trimmed = raw.trim().toLowerCase();
+    if (trimmed === '' || trimmed === fallback)
+        return fallback;
+    if (trimmed === 'cloud' || trimmed === '1')
+        return 'cloud';
+    if (trimmed === 'local' || trimmed === '2')
+        return 'local';
+    if (trimmed === 'both' || trimmed === '3')
+        return 'both';
+    return fallback;
+}
+export async function runSetupWizard() {
+    migrateStoragePath(true);
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        print('\n=== Preflight Setup ===\n');
+        print('This wizard will configure observability for your AI coding assistant.');
+        print('Press Ctrl+C at any time to cancel.\n');
+        const existing = loadExisting();
+        // Step 0: Mode
+        const existingMode = typeof existing.mode === 'string' &&
+            (existing.mode === 'cloud' || existing.mode === 'local' || existing.mode === 'both')
+            ? existing.mode
+            : 'local';
+        print('Modes:');
+        print('  1) cloud — ship telemetry to New Relic');
+        print('  2) local — keep all data on this machine, run a local dashboard (default)');
+        print('  3) both  — ship to NR AND run the local dashboard');
+        const modeRaw = await rl.question(`Which mode? [${existingMode}]: `);
+        const mode = parseModeAnswer(modeRaw, existingMode);
+        // Step 1+2: NR credentials (skip in local mode)
+        let accountId = '';
+        let licenseKey = '';
+        let collectorHost = null;
+        let nrApiKey = null;
+        let validatedEmail = null;
+        if (mode !== 'local') {
+            const envAccountId = process.env.NEW_RELIC_ACCOUNT_ID?.trim() ?? '';
+            const existingAccountId = typeof existing.accountId === 'string' ? existing.accountId : '';
+            const defaultAccountId = existingAccountId || envAccountId;
+            const accountIdHint = existingAccountId
+                ? existingAccountId
+                : envAccountId
+                    ? '$NEW_RELIC_ACCOUNT_ID'
+                    : '';
+            const accountIdPrompt = accountIdHint
+                ? `Account ID — your NR account number, found in the NR One URL [${accountIdHint}]: `
+                : 'Account ID — your NR account number, found in the NR One URL (required): ';
+            accountId = (await rl.question(accountIdPrompt)).trim();
+            if (!accountId)
+                accountId = defaultAccountId;
+            if (!/^\d{1,12}$/.test(accountId)) {
+                const src = accountId === envAccountId && !existingAccountId
+                    ? ' (value from $NEW_RELIC_ACCOUNT_ID)'
+                    : '';
+                console.error(`Invalid account ID: "${accountId}". Must be 1–12 digits.${src}`);
+                rl.close();
+                process.exit(1);
+            }
+            const envLicenseKey = process.env.NEW_RELIC_LICENSE_KEY?.trim() ?? '';
+            const existingKey = typeof existing.licenseKey === 'string' ? existing.licenseKey : '';
+            const defaultKey = existingKey || envLicenseKey;
+            const keyHint = existingKey
+                ? '(already set)'
+                : envLicenseKey
+                    ? '$NEW_RELIC_LICENSE_KEY'
+                    : 'required';
+            const keyPrompt = `License Key — authenticates telemetry ingest to your NR account [${keyHint}]: `;
+            licenseKey = (await rl.question(keyPrompt)).trim();
+            if (!licenseKey)
+                licenseKey = defaultKey;
+            if (!licenseKey) {
+                console.error('License key is required. Set NEW_RELIC_LICENSE_KEY or enter a value above.');
+                rl.close();
+                process.exit(1);
+            }
+            // Step 2b: Environment / region
+            const existingCollectorHost = typeof existing.collectorHost === 'string' ? existing.collectorHost : null;
+            const keyLower = licenseKey.toLowerCase();
+            const autoEnv = keyLower.startsWith('eu01')
+                ? 'eu'
+                : keyLower.startsWith('gov01')
+                    ? 'gov'
+                    : 'us';
+            const defaultEnv = existingCollectorHost ?? autoEnv;
+            print('Environment:');
+            print('  1) US      — api.newrelic.com');
+            print('  2) EU      — api.eu.newrelic.com');
+            print('  3) FedRAMP — api.newrelic.com (FedRAMP/GovCloud)');
+            const envRaw = (await rl.question(`Which environment? [${defaultEnv}]: `))
+                .trim()
+                .toLowerCase();
+            const resolvedEnv = envRaw === '' || envRaw === defaultEnv
+                ? defaultEnv
+                : envRaw === '1' || envRaw === 'us'
+                    ? 'us'
+                    : envRaw === '2' || envRaw === 'eu'
+                        ? 'eu'
+                        : envRaw === '3' || envRaw === 'fedramp' || envRaw === 'gov'
+                            ? 'gov'
+                            : defaultEnv;
+            collectorHost = resolvedEnv === 'us' ? null : resolvedEnv;
+            // Warn if license key prefix contradicts selected environment.
+            const keyRegion = keyLower.startsWith('eu01')
+                ? 'eu'
+                : keyLower.startsWith('gov01')
+                    ? 'gov'
+                    : keyLower.startsWith('us01')
+                        ? 'us'
+                        : null;
+            if (keyRegion && keyRegion !== resolvedEnv) {
+                print(`  ⚠ Your license key looks like a ${keyRegion.toUpperCase()} key but you selected ${resolvedEnv.toUpperCase()}. Verify this is intentional.`);
+            }
+            // Step 2c: NR API key (optional)
+            const envApiKey = process.env.NEW_RELIC_API_KEY?.trim() ?? '';
+            const existingApiKey = typeof existing.nrApiKey === 'string' ? existing.nrApiKey : null;
+            const defaultApiKey = existingApiKey ?? (envApiKey || null);
+            const apiKeyHint = existingApiKey
+                ? '(already set)'
+                : envApiKey
+                    ? '$NEW_RELIC_API_KEY'
+                    : 'optional';
+            const apiKeyRaw = (await rl.question(`API Key (NRAK-...) — for team queries and deploying dashboards/alerts [${apiKeyHint}]: `)).trim();
+            if (apiKeyRaw) {
+                nrApiKey = apiKeyRaw;
+            }
+            else if (defaultApiKey) {
+                nrApiKey = defaultApiKey;
+            }
+            // Step 2d: Validate credentials
+            print('\nValidating credentials...');
+            const licenseResult = await validateLicenseKey({ licenseKey, accountId, collectorHost });
+            if (licenseResult.valid) {
+                print('  ✓ License key: OK');
+            }
+            else if (licenseResult.reason === 'unauthorized') {
+                print('  ✗ License key: unauthorized — double-check your key and environment selection');
+            }
+            else if (licenseResult.reason === 'timeout' || licenseResult.reason === 'network') {
+                print(`  ⚠ License key: could not reach NR ingest API (${licenseResult.detail ?? licenseResult.reason}) — check your network`);
+            }
+            else {
+                print(`  ⚠ License key: unexpected response (${licenseResult.detail ?? 'unknown'}) — proceeding anyway`);
+            }
+            if (nrApiKey) {
+                const apiResult = await validateApiKey({ nrApiKey, collectorHost });
+                if (apiResult.valid) {
+                    validatedEmail = apiResult.detail ?? null;
+                    const who = validatedEmail ? ` (${validatedEmail})` : '';
+                    print(`  ✓ API key: OK${who}`);
+                }
+                else if (apiResult.reason === 'unauthorized') {
+                    print('  ✗ API key: unauthorized — double-check your NRAK key');
+                }
+                else if (apiResult.reason === 'timeout' || apiResult.reason === 'network') {
+                    print(`  ⚠ API key: could not reach NerdGraph (${apiResult.detail ?? apiResult.reason}) — check your network`);
+                }
+                else {
+                    print(`  ⚠ API key: unexpected response (${apiResult.detail ?? 'unknown'}) — proceeding anyway`);
+                }
+            }
+        }
+        print('\n  ℹ  Telemetry note: this server sends events and metrics to your NR account — ingest costs');
+        print('     apply on paid plans. Monitor usage via NR One → Data Management → Data Ingestion.');
+        // Step 3: Developer name — prefer existing config, then email local-part, then $USER
+        const emailLocalPart = validatedEmail ? (validatedEmail.split('@')[0] ?? '') : '';
+        const defaultDeveloper = typeof existing.developer === 'string'
+            ? existing.developer
+            : normalizeDeveloperName(emailLocalPart || process.env.USER || process.env.USERNAME || '');
+        const rawInput = (await rl.question(`Developer name — stamped on every event so you can filter your own data [${defaultDeveloper}]: `)).trim() || defaultDeveloper;
+        const developer = normalizeDeveloperName(rawInput);
+        if (developer !== rawInput) {
+            print(`  → Normalized to: ${developer}`);
+        }
+        // Step 4: Optional fields
+        print('\n-- Optional fields (press Enter to skip any) --');
+        const existingTeamId = typeof existing.teamId === 'string' ? existing.teamId : null;
+        const teamIdAnswer = (await rl.question(`Team label — a slug you define, e.g. "platform-eng" (not your NR account ID) used for recording metrics [${existingTeamId ?? 'optional'}]: `)).trim();
+        const teamId = teamIdAnswer || existingTeamId;
+        const existingProjectId = typeof existing.projectId === 'string' ? existing.projectId : null;
+        const projectIdAnswer = (await rl.question(`Project ID — labels all events by project for per-project filtering [${existingProjectId ?? 'optional, auto-detected from git'}]: `)).trim();
+        const projectId = projectIdAnswer || existingProjectId;
+        // Step 5: Budget caps
+        const existingBudget = typeof existing.sessionBudgetUsd === 'number' ? String(existing.sessionBudgetUsd) : null;
+        const sessionBudgetStr = (await rl.question(`Session budget USD — triggers a warning event when AI spend exceeds this per session [${existingBudget ?? 'no limit'}]: `)).trim() ||
+            (existingBudget ?? '');
+        let sessionBudgetUsd = null;
+        if (sessionBudgetStr) {
+            const parsed = parseFloat(sessionBudgetStr);
+            if (!Number.isFinite(parsed) || parsed <= 0) {
+                console.error(`Invalid session budget "${sessionBudgetStr}": must be a positive number.`);
+                rl.close();
+                process.exit(1);
+            }
+            sessionBudgetUsd = parsed;
+        }
+        // Step 5b: Dashboard port (local/both only)
+        let dashboardPort = null;
+        if (mode === 'local' || mode === 'both') {
+            const existingDashboard = existing.dashboard && typeof existing.dashboard === 'object'
+                ? existing.dashboard
+                : null;
+            const defaultPort = existingDashboard?.port ?? 7777;
+            const portStr = (await rl.question(`Dashboard port — open http://127.0.0.1:${defaultPort} in your browser to view metrics [${defaultPort}]: `)).trim();
+            if (portStr) {
+                const parsed = parseInt(portStr, 10);
+                if (!Number.isFinite(parsed) || parsed <= 0 || parsed >= 65536) {
+                    console.error(`Invalid port "${portStr}": must be 1–65535.`);
+                    rl.close();
+                    process.exit(1);
+                }
+                dashboardPort = parsed;
+            }
+            else {
+                dashboardPort = defaultPort;
+            }
+        }
+        // Write config
+        const config = buildConfig(existing, {
+            accountId,
+            licenseKey,
+            developer,
+            teamId,
+            projectId,
+            sessionBudgetUsd,
+            mode,
+            dashboardPort,
+            nrApiKey,
+            collectorHost,
+        });
+        mkdirSync(DEFAULT_STORAGE_PATH, { recursive: true, mode: 0o700 });
+        const configTmp = CONFIG_PATH + '.tmp';
+        writeFileSync(configTmp, JSON.stringify(config, null, 2), { mode: 0o600 });
+        renameSync(configTmp, CONFIG_PATH);
+        print(`\nConfig written to ${CONFIG_PATH}`);
+        // Step 5c: Starter alert rules (local + both modes only).
+        // Default-yes prompt; copy is idempotent — re-running the wizard never
+        // overwrites a user-edited rules file.
+        if (mode === 'local' || mode === 'both') {
+            const copyAnswer = (await rl.question('Copy starter alert rules to ~/.newrelic-preflight/alerts/rules.json? [Y/n]: '))
+                .trim()
+                .toLowerCase();
+            if (copyAnswer !== 'n' && copyAnswer !== 'no') {
+                const result = copyStarterAlertRules({
+                    sourcePath: defaultStarterRulesSource(),
+                    destPath: ALERT_RULES_DEST,
+                    logger: {
+                        warn: (msg) => print(`  ! ${msg}`),
+                        info: (msg) => print(`  → ${msg}`),
+                    },
+                });
+                if (result.copied) {
+                    print(`Starter alert rules copied to ${ALERT_RULES_DEST}`);
+                }
+                else if (result.reason === 'exists') {
+                    print(`Existing rules.json left in place (skipped — file exists).`);
+                }
+                else {
+                    print(`Could not copy starter rules: ${result.reason ?? 'unknown error'}`);
+                }
+            }
+        }
+        // Step 6: Hook install
+        // Config is already written above; pass no credentials to install so it only
+        // wires hooks and MCP without overwriting the config we just wrote.
+        const installHooks = (await rl.question('\nInstall Claude Code hooks now? [Y/n]: '))
+            .trim()
+            .toLowerCase();
+        if (installHooks !== 'n') {
+            print('\nRunning hook installer...');
+            await runInstallCli(['install']);
+            print('Hooks installed.');
+            if (verifyBinaryOnPath()) {
+                print('✓ preflight is on your PATH');
+            }
+            else {
+                print('\n⚠ preflight is not on your PATH.');
+                print('  Claude Code hooks will fail with "command not found" until this is resolved.');
+                print('  Fix: run `npm link` in the project directory, or install globally:');
+                print('    npm install -g @newrelic/preflight');
+            }
+        }
+        // Step 7: Auto-update schedule (macOS only)
+        if (process.platform === 'darwin') {
+            const enableUpdate = (await rl.question('\nEnable daily auto-updates? [Y/n]: '))
+                .trim()
+                .toLowerCase();
+            if (enableUpdate !== 'n' && enableUpdate !== 'no') {
+                const timeRaw = (await rl.question('Update time (24h HH:MM) [08:00]: ')).trim();
+                const timeStr = timeRaw || '08:00';
+                const match = timeStr.match(/^(\d{1,2}):(\d{2})$/);
+                const parsedHour = match ? parseInt(match[1], 10) : -1;
+                const parsedMinute = match ? parseInt(match[2], 10) : -1;
+                const validTime = parsedHour >= 0 && parsedHour <= 23 && parsedMinute >= 0 && parsedMinute <= 59;
+                const hour = validTime ? parsedHour : 8;
+                const minute = validTime ? parsedMinute : 0;
+                if (!validTime && timeStr !== '08:00') {
+                    print(`⚠ Invalid time "${timeStr}", using default 08:00.`);
+                }
+                const hh = String(hour).padStart(2, '0');
+                const mm = String(minute).padStart(2, '0');
+                const binaryPath = resolveBinaryPath();
+                if (binaryPath) {
+                    try {
+                        installSchedule(binaryPath, hour, minute);
+                        print(`✓ Daily auto-update scheduled for ${hh}:${mm}`);
+                    }
+                    catch {
+                        print(`⚠ Could not register schedule — run: preflight schedule --time ${hh}:${mm}`);
+                    }
+                }
+                else {
+                    print('\n⚠ Cannot schedule — preflight not found on PATH.');
+                    print(`  Run preflight schedule --time ${hh}:${mm} after fixing PATH.`);
+                }
+            }
+        }
+        // Step 8: Dashboard deploy — show manual command
+        if (mode !== 'local') {
+            const regionFlag = collectorHost === 'eu' ? ' --eu' : '';
+            // Mask the API key in printed commands — users copy these snippets to
+            // terminals, docs, and chat messages, and the raw key could be captured.
+            const apiKeyVar = nrApiKey
+                ? `NEW_RELIC_API_KEY=${nrApiKey.slice(0, 8)}...`
+                : 'NEW_RELIC_API_KEY=<NRAK-...>';
+            print('\nTo deploy dashboards, run:');
+            print(`  ${apiKeyVar} NEW_RELIC_ACCOUNT_ID=${accountId} preflight deploy-dashboards --all${regionFlag}`);
+            print(`\nFor a personal dashboard pre-filtered to you:`);
+            print(`  ${apiKeyVar} NEW_RELIC_ACCOUNT_ID=${accountId} preflight deploy-dashboards ai-coding-assistant-personal.json --developer ${developer}${regionFlag}`);
+            print(`\nFor personal alerts scoped to you:`);
+            print(`  ${apiKeyVar} NEW_RELIC_ACCOUNT_ID=${accountId} preflight deploy-alerts --developer ${developer}${regionFlag}`);
+        }
+        else if (mode === 'local') {
+            print(`\nLocal mode selected — dashboard and metrics will be available locally.`);
+        }
+        // The MCP server is launched automatically by Claude Code based on the
+        // .mcp.json entry written above — there is no manual start step. Telling
+        // users to run `preflight --stdio` themselves leads them to
+        // start a second process that competes with the auto-launched one for
+        // the buffer file lock and produces interleaved metrics.
+        print('\n✓ Setup complete.');
+        print('  Start a new Claude Code session — the MCP server and hooks are loaded at session');
+        print('  start. If you ran this setup inside an existing session, exit and start a fresh one');
+        print('  for the hooks to take effect.');
+        if (mode !== 'cloud') {
+            print(`  Dashboard is available at http://127.0.0.1:${dashboardPort ?? 7777} once Claude Code starts.`);
+            print('  On first launch you will see only nr_observe_health and nr_observe_get_config until');
+            print('  the first tool call fires the hook — all tools appear automatically after that.');
+        }
+        else {
+            print('  Metrics will appear in your New Relic dashboard within a few minutes.');
+        }
+        print('');
+    }
+    finally {
+        rl.close();
+    }
+}
+//# sourceMappingURL=setup-wizard.js.map