@openhands/agent-canvas 1.12.0 → 1.14.0

package/dist/services/telemetry.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.cjs","names":[],"sources":["../../src/services/telemetry.ts"],"sourcesContent":["/**\n * Telemetry service for tracking library usage.\n *\n * This module handles anonymous telemetry for the @openhands/agent-canvas package\n * using the PostHog SDK for reliable event delivery with batching, retry logic,\n * and offline support.\n *\n * TRACKING PHILOSOPHY:\n * - Install event (canvas_install): Sent immediately on first use, regardless of consent.\n *   This is anonymous and contains no PII - just basic browser info and a random ID.\n * - Session/custom events: Only sent after user grants consent via the consent modal.\n * - Users can opt out of all future tracking by declining consent.\n *\n * AD BLOCKER BYPASS:\n * By default, telemetry is routed through OpenHands' reverse proxy (z.openhands.dev)\n * to avoid being blocked by ad blockers. Library consumers can override this with:\n * - VITE_POSTHOG_HOST: Custom proxy URL or direct PostHog URL\n * - VITE_POSTHOG_UI_HOST: PostHog UI host (defaults to https://us.posthog.com)\n *\n * IMPORTANT: By default, telemetry is sent to the OpenHands PostHog project.\n * Source builds can override this with VITE_POSTHOG_API_KEY. Precompiled\n * library consumers can pass the same settings to configureTelemetry().\n *\n * Users can disable all telemetry (including install tracking) via:\n * - Setting VITE_DO_NOT_TRACK=1 environment variable\n * - Browser's Do Not Track setting\n */\n\nimport type { BootstrapConfig, CaptureResult, PostHog } from \"posthog-js\";\nimport { getLockedCloudAuthMode } from \"#/api/agent-server-config\";\nimport defaults from \"../../config/defaults.json\";\n\nimport packageJson from \"../../package.json\";\nimport {\n  AGENT_CANVAS_CLIENT_SOURCE,\n  AGENT_CANVAS_CLIENT_VERSION,\n} from \"#/api/client-source\";\nimport {\n  getBackendTelemetryProperties,\n  getCloudTelemetryProperties,\n  type BackendTelemetryContextInput,\n  type CloudTelemetryContextInput,\n} from \"#/services/telemetry-context\";\n\nconst TELEMETRY_CONSENT_KEY = \"openhands-telemetry-consent\";\nconst TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY =\n  \"openhands-telemetry-consent-pending-cloud-sync\";\nconst TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY =\n  \"openhands-telemetry-consent-pending-local-revocation\";\nconst TELEMETRY_CONSENT_CHANGE_EVENT = \"openhands-telemetry-consent-change\";\nconst TELEMETRY_FIRST_USE_KEY = \"openhands-telemetry-first-use\";\nconst TELEMETRY_SESSION_KEY = \"openhands-telemetry-session\";\nconst POSTHOG_INSTANCE_NAME = \"agent-canvas\";\nconst POSTHOG_PAGEVIEW_CAPTURE_MODE = \"history_change\";\n\n// Unconfigured source builds use staging. Production release workflows pass\n// VITE_POSTHOG_API_KEY explicitly for both the app and library artifacts.\nconst DEFAULT_POSTHOG_API_KEY: string =\n  (import.meta.env.VITE_POSTHOG_API_KEY as string | undefined) ||\n  defaults.telemetry.posthogApiKey;\n\n// Default to OpenHands' reverse proxy to bypass ad blockers.\n// The proxy at z.openhands.dev routes to PostHog's US region.\n// Library consumers can override this with their own proxy or direct PostHog URL.\nconst DEFAULT_POSTHOG_HOST =\n  import.meta.env.VITE_POSTHOG_HOST || \"https://z.openhands.dev\";\n\n// UI host is needed for PostHog features like toolbar to work correctly\n// when using a reverse proxy. Defaults to US region.\nconst DEFAULT_POSTHOG_UI_HOST =\n  import.meta.env.VITE_POSTHOG_UI_HOST || \"https://us.posthog.com\";\n\nexport interface TelemetryConfig {\n  /** PostHog project key. Useful for precompiled library consumers. */\n  apiKey?: string;\n  /** Event ingestion host or reverse proxy. */\n  apiHost?: string;\n  /** PostHog UI host used by toolbar links and other UI features. */\n  uiHost?: string;\n}\n\nexport type TelemetryConfiguration = TelemetryConfig | false;\n\nexport type TelemetryConsent = \"granted\" | \"denied\" | \"pending\";\nexport type ResolvedTelemetryConsent = Exclude<TelemetryConsent, \"pending\">;\n\nexport interface SetTelemetryConsentOptions {\n  /** Do not persist a value mirrored from backend settings back to Cloud. */\n  syncToCloud?: boolean;\n}\n\nlet posthogInstance: PostHog | null = null;\nlet initializationPromise: Promise<PostHog | null> | null = null;\nlet pendingBootstrap: BootstrapConfig | undefined;\nlet telemetryConfig: TelemetryConfig = {};\nlet telemetryDisabled = false;\n\ninterface TelemetryIdentity {\n  distinctId: string;\n  properties: Record<string, unknown>;\n}\n\n// undefined means that Cloud identity has not resolved yet; null means that it\n// resolved without a user. This distinction prevents startup from resetting a\n// persisted identity while the current account is still loading.\nlet desiredTelemetryIdentity: TelemetryIdentity | null | undefined;\nlet desiredIdentityRevision = 0;\nlet appliedIdentityRevision = -1;\n\nconst CANVAS_EVENT_PROPERTIES = Object.freeze({\n  client_source: AGENT_CANVAS_CLIENT_SOURCE,\n  client_version: AGENT_CANVAS_CLIENT_VERSION,\n  package_name: packageJson.name,\n  package_version: packageJson.version,\n});\n\nlet telemetryBackendContext = getBackendTelemetryProperties({});\nlet telemetryCloudContext = getCloudTelemetryProperties();\n\nexport function setTelemetryBackendContext(\n  context: BackendTelemetryContextInput,\n): void {\n  telemetryBackendContext = getBackendTelemetryProperties(context);\n}\n\nexport function setTelemetryCloudContext(\n  context: CloudTelemetryContextInput | null,\n): void {\n  telemetryCloudContext = getCloudTelemetryProperties(context);\n}\n\nfunction addCanvasEventProperties(\n  event: CaptureResult | null,\n): CaptureResult | null {\n  if (!event) return null;\n\n  return {\n    ...event,\n    properties: {\n      ...telemetryBackendContext,\n      ...telemetryCloudContext,\n      ...event.properties,\n      ...CANVAS_EVENT_PROPERTIES,\n    },\n  };\n}\n\nfunction restorePostHogConsent(posthog: PostHog): void {\n  if (telemetryDisabled || getTelemetryConsent() !== \"granted\") {\n    posthog.opt_out_capturing();\n  } else {\n    posthog.opt_in_capturing();\n  }\n}\n\nfunction resetPostHogIdentity(posthog: PostHog, resetDeviceId = false): void {\n  posthog.reset(resetDeviceId);\n  appliedIdentityRevision = -1;\n  // PostHog reset clears its own consent persistence, so immediately restore\n  // the canonical Canvas decision kept in localStorage.\n  restorePostHogConsent(posthog);\n}\n\nfunction applyDesiredTelemetryIdentity(posthog: PostHog): void {\n  if (desiredTelemetryIdentity === undefined || !isTelemetryEnabled()) return;\n\n  const desiredId = desiredTelemetryIdentity?.distinctId;\n  const currentId = posthog.get_property(\"$user_id\");\n  if (currentId != null && currentId !== desiredId) {\n    resetPostHogIdentity(posthog);\n  }\n\n  if (desiredTelemetryIdentity === null) {\n    appliedIdentityRevision = desiredIdentityRevision;\n    return;\n  }\n\n  if (\n    posthog.get_property(\"$user_id\") !== desiredTelemetryIdentity.distinctId ||\n    appliedIdentityRevision !== desiredIdentityRevision\n  ) {\n    posthog.identify(\n      desiredTelemetryIdentity.distinctId,\n      desiredTelemetryIdentity.properties,\n    );\n    appliedIdentityRevision = desiredIdentityRevision;\n  }\n}\n\nfunction propertiesEqual(\n  left: Record<string, unknown>,\n  right: Record<string, unknown>,\n): boolean {\n  const keys = Object.keys(left);\n  return (\n    keys.length === Object.keys(right).length &&\n    keys.every((key) => left[key] === right[key])\n  );\n}\n\n/**\n * Configure the single Canvas telemetry client before its first use.\n * Passing false disables telemetry and install tracking for embedded hosts.\n */\nexport function configureTelemetry(config: TelemetryConfiguration): void {\n  if (config === false) {\n    if (telemetryDisabled) return;\n    telemetryDisabled = true;\n    posthogInstance?.opt_out_capturing();\n    notifyTelemetryConsentListeners();\n    return;\n  }\n\n  const wasDisabled = telemetryDisabled;\n  telemetryDisabled = false;\n\n  if (!posthogInstance && !initializationPromise) {\n    const definedConfig = Object.fromEntries(\n      Object.entries(config).filter(([, value]) => value !== undefined),\n    ) as TelemetryConfig;\n    telemetryConfig = { ...telemetryConfig, ...definedConfig };\n  }\n\n  if (wasDisabled) {\n    if (posthogInstance) {\n      restorePostHogConsent(posthogInstance);\n      applyDesiredTelemetryIdentity(posthogInstance);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\nfunction getResolvedTelemetryConfig(): Required<TelemetryConfig> | null {\n  if (telemetryDisabled) return null;\n\n  return {\n    apiKey: telemetryConfig.apiKey || DEFAULT_POSTHOG_API_KEY,\n    apiHost: telemetryConfig.apiHost || DEFAULT_POSTHOG_HOST,\n    uiHost: telemetryConfig.uiHost || DEFAULT_POSTHOG_UI_HOST,\n  };\n}\n\n/**\n * Check if we're in a browser environment\n */\nfunction isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof localStorage !== \"undefined\";\n}\n\n/**\n * Lazily load PostHog to avoid SSR/Node.js issues.\n * PostHog is a browser-only library, so we dynamically import it only when needed.\n */\nasync function getPostHog(): Promise<PostHog | null> {\n  if (!isBrowser()) {\n    return null;\n  }\n\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  try {\n    const { default: posthog } = await import(\"posthog-js\");\n    return posthog;\n  } catch {\n    // Failed to load PostHog - telemetry will be disabled\n    return null;\n  }\n}\n\n/**\n * Check if telemetry is disabled via environment variable or browser setting.\n * Works in both Node.js and browser (Vite) environments.\n */\nfunction isDoNotTrackEnabled(): boolean {\n  if (telemetryDisabled) {\n    return true;\n  }\n\n  // Check Vite environment variable (browser)\n  if (\n    typeof import.meta !== \"undefined\" &&\n    import.meta.env?.VITE_DO_NOT_TRACK === \"1\"\n  ) {\n    return true;\n  }\n\n  // Check Node.js environment variable (SSR/testing)\n  if (typeof process !== \"undefined\" && process.env?.DO_NOT_TRACK === \"1\") {\n    return true;\n  }\n\n  // Check browser's navigator.doNotTrack standard\n  if (\n    typeof navigator !== \"undefined\" &&\n    (navigator.doNotTrack === \"1\" ||\n      // @ts-expect-error - Some browsers use window.doNotTrack\n      (typeof window !== \"undefined\" && window.doNotTrack === \"1\"))\n  ) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Initialize PostHog SDK.\n *\n * @param enableCapturing - If true, enable capturing immediately (for install tracking).\n *                          If false, start with capturing disabled (for consent-gated tracking).\n */\nexport function configurePostHogBootstrap(\n  bootstrap: BootstrapConfig | undefined,\n): void {\n  if (!posthogInstance) {\n    pendingBootstrap = bootstrap;\n  }\n}\n\nexport async function initializePostHogClient(\n  enableCapturing = false,\n): Promise<PostHog | null> {\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  if (initializationPromise) {\n    return initializationPromise;\n  }\n\n  initializationPromise = (async () => {\n    const config = getResolvedTelemetryConfig();\n    if (!config) {\n      return null;\n    }\n\n    const posthog = await getPostHog();\n    if (!posthog) {\n      return null;\n    }\n\n    // A named instance isolates Canvas configuration, consent, identity, and\n    // persistence from a host application's default PostHog singleton.\n    const initializedPostHog = posthog.init(\n      config.apiKey,\n      {\n        api_host: config.apiHost,\n        ui_host: config.uiHost,\n        opt_out_capturing_by_default: !enableCapturing,\n        persistence: \"localStorage\",\n        persistence_name: POSTHOG_INSTANCE_NAME,\n        consent_persistence_name: `${POSTHOG_INSTANCE_NAME}-consent`,\n        person_profiles: \"always\",\n        capture_pageview: POSTHOG_PAGEVIEW_CAPTURE_MODE,\n        autocapture: true,\n        disable_session_recording: true,\n        bootstrap: pendingBootstrap,\n        before_send: addCanvasEventProperties,\n      },\n      POSTHOG_INSTANCE_NAME,\n    );\n    if (!initializedPostHog) return null;\n\n    posthogInstance = initializedPostHog;\n    pendingBootstrap = undefined;\n\n    if (telemetryDisabled) {\n      posthogInstance.opt_out_capturing();\n    } else if (getTelemetryConsent() === \"granted\") {\n      posthogInstance.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthogInstance);\n    } else if (!enableCapturing) {\n      posthogInstance.opt_out_capturing();\n    }\n\n    return posthogInstance;\n  })();\n\n  try {\n    return await initializationPromise;\n  } finally {\n    if (!posthogInstance) {\n      initializationPromise = null;\n    }\n  }\n}\n\n/**\n * Get user's telemetry consent preference\n */\nexport function getTelemetryConsent(): TelemetryConsent {\n  if (!isBrowser()) {\n    return \"pending\";\n  }\n\n  // Check environment variable for opt-out\n  if (isDoNotTrackEnabled()) {\n    return \"denied\";\n  }\n\n  if (getLockedCloudAuthMode() === \"cookie\") {\n    return \"granted\";\n  }\n\n  try {\n    const consent = localStorage.getItem(TELEMETRY_CONSENT_KEY);\n    if (consent === \"granted\" || consent === \"denied\") {\n      return consent;\n    }\n  } catch {\n    // Ignore storage errors\n  }\n\n  return \"pending\";\n}\n\n/**\n * Return an explicit browser choice that still needs to survive a Cloud login.\n * It remains pending across local backends so their settings cannot consume a\n * decision that must still be applied after the user connects to Cloud.\n */\nexport function getPendingCloudTelemetryConsent(): ResolvedTelemetryConsent | null {\n  if (!isBrowser()) return null;\n\n  try {\n    const consent = localStorage.getItem(\n      TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY,\n    );\n    return consent === \"granted\" || consent === \"denied\" ? consent : null;\n  } catch {\n    return null;\n  }\n}\n\n/** Return the pre-reset actor whose local Automation consent must be revoked. */\nexport function getPendingLocalTelemetryRevocationId(): string | null {\n  if (!isBrowser()) return null;\n\n  try {\n    return localStorage.getItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY);\n  } catch {\n    return null;\n  }\n}\n\nexport function subscribeTelemetryConsent(listener: () => void): () => void {\n  if (!isBrowser()) return () => {};\n  const handleStorage = (event: StorageEvent) => {\n    if (\n      event.key === TELEMETRY_CONSENT_KEY ||\n      event.key === TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY\n    ) {\n      listener();\n    }\n  };\n  window.addEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n  window.addEventListener(\"storage\", handleStorage);\n\n  return () => {\n    window.removeEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n    window.removeEventListener(\"storage\", handleStorage);\n  };\n}\n\nfunction notifyTelemetryConsentListeners(): void {\n  if (isBrowser())\n    window.dispatchEvent(new Event(TELEMETRY_CONSENT_CHANGE_EVENT));\n}\n\nfunction markTelemetryConsentForCloudSync(\n  consent: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    localStorage.setItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY, consent);\n  } catch {\n    // Ignore storage errors; the in-browser consent decision still applies.\n  }\n}\n\nfunction markPendingLocalTelemetryRevocation(distinctId: string | null): void {\n  if (!isBrowser() || !distinctId) return;\n\n  try {\n    localStorage.setItem(\n      TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY,\n      distinctId,\n    );\n  } catch {\n    // Ignore storage errors; browser capture is still disabled below.\n  }\n}\n\nexport function clearPendingLocalTelemetryRevocation(\n  expectedDistinctId: string,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    if (\n      localStorage.getItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY) !==\n      expectedDistinctId\n    ) {\n      return;\n    }\n    localStorage.removeItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY);\n  } catch {\n    // Ignore storage errors.\n  }\n}\n\nexport function clearPendingCloudTelemetryConsent(\n  expected?: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    if (\n      expected !== undefined &&\n      localStorage.getItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY) !==\n        expected\n    ) {\n      return;\n    }\n    localStorage.removeItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY);\n    notifyTelemetryConsentListeners();\n  } catch {\n    // Ignore storage errors.\n  }\n}\n\n/**\n * Set user's telemetry consent preference\n */\nexport async function setTelemetryConsent(\n  consent: ResolvedTelemetryConsent,\n  { syncToCloud = true }: SetTelemetryConsentOptions = {},\n): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    const previousConsent = getTelemetryConsent();\n    const unchanged = previousConsent === consent;\n    localStorage.setItem(TELEMETRY_CONSENT_KEY, consent);\n    if (telemetryDisabled) return;\n    if (unchanged) return;\n\n    // Reuse an initialized client synchronously so a same-flush identify()\n    // cannot run before consent is applied. Only the cold path awaits import.\n    const posthog = posthogInstance ?? (await initializePostHogClient());\n    if (!posthog) {\n      return;\n    }\n\n    if (consent === \"granted\") {\n      posthog.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthog);\n    } else {\n      markPendingLocalTelemetryRevocation(posthog.get_distinct_id?.() ?? null);\n      if (posthog.get_property?.(\"$user_id\") != null) {\n        resetPostHogIdentity(posthog);\n      } else {\n        posthog.opt_out_capturing();\n      }\n    }\n  } catch {\n    // Ignore storage errors\n  } finally {\n    // Notify UI/backend/identity reconcilers only after the browser capture state\n    // reflects this decision. Otherwise a pre-login grant can trigger an\n    // identify while PostHog is still opted out and lose funnel continuity.\n    if (syncToCloud) {\n      markTelemetryConsentForCloudSync(consent);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\n/**\n * Declare the current Cloud identity. The telemetry service applies it only\n * after consent and owns all reset/account-switch semantics.\n */\nexport async function setTelemetryIdentity(\n  distinctId: string | null,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const nextIdentity = distinctId === null ? null : { distinctId, properties };\n  const unchanged =\n    desiredTelemetryIdentity === nextIdentity ||\n    (desiredTelemetryIdentity !== undefined &&\n      desiredTelemetryIdentity !== null &&\n      nextIdentity !== null &&\n      desiredTelemetryIdentity.distinctId === nextIdentity.distinctId &&\n      propertiesEqual(desiredTelemetryIdentity.properties, properties));\n  if (unchanged) return;\n\n  desiredTelemetryIdentity = nextIdentity;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  if (!isTelemetryEnabled()) return;\n  const posthog = posthogInstance ?? (await initializePostHogClient());\n  if (posthog && isTelemetryEnabled()) {\n    // Read the desired identity after the await so a newer account always wins\n    // if identity changes while the SDK is loading.\n    applyDesiredTelemetryIdentity(posthog);\n  }\n}\n\n/**\n * Check if telemetry is enabled (user has granted consent)\n */\nexport function isTelemetryEnabled(): boolean {\n  return getTelemetryConsent() === \"granted\";\n}\n\n/**\n * Check if first use event has already been sent\n */\nfunction hasFirstUseSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return localStorage.getItem(TELEMETRY_FIRST_USE_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark first use event as sent\n */\nfunction markFirstUseSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_FIRST_USE_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Track the initial install of the library.\n *\n * IMPORTANT: This is sent immediately on first use, regardless of consent status.\n * This allows us to track library adoption even if users haven't made a consent choice yet.\n *\n * The event is:\n * - Completely anonymous (no PII, just a random PostHog distinct_id)\n * - Sent only once per installation (tracked via localStorage, persists across sessions)\n * - Still respects DO_NOT_TRACK environment variable and browser setting\n *\n * Users who want complete privacy can:\n * - Set VITE_DO_NOT_TRACK=1 or browser's Do Not Track\n * - Later deny consent to prevent all future tracking\n */\nexport async function trackInstall(): Promise<void> {\n  // Respect hard opt-out via environment variable or browser setting\n  if (isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Already sent install event (persisted in localStorage - survives app relaunches)\n  if (hasFirstUseSent()) {\n    return;\n  }\n\n  // Initialize PostHog with capturing enabled (for this one event)\n  const posthog = await initializePostHogClient(true);\n  if (!posthog || isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Temporarily enable capturing if it was disabled\n  const wasOptedOut = posthog.has_opted_out_capturing?.() ?? false;\n  if (wasOptedOut) {\n    posthog.opt_in_capturing();\n  }\n\n  // Capture the install event\n  posthog.capture(\"canvas_install\", {\n    platform: typeof navigator !== \"undefined\" ? navigator.platform : \"unknown\",\n    user_agent:\n      typeof navigator !== \"undefined\" ? navigator.userAgent : \"unknown\",\n    referrer: typeof document !== \"undefined\" ? document.referrer : \"\",\n    url_origin: typeof window !== \"undefined\" ? window.location.origin : \"\",\n    embedded: typeof window !== \"undefined\" && window.self !== window.top,\n  });\n\n  // Mark as sent (stored in localStorage - persists across browser sessions)\n  markFirstUseSent();\n\n  // Restore opt-out state if user hasn't granted consent yet\n  // This ensures we only send the install event, not subsequent events\n  const currentConsent = getTelemetryConsent();\n  if (currentConsent !== \"granted\") {\n    posthog.opt_out_capturing();\n  }\n}\n\n/**\n * Check if session start event has already been sent (this browser session)\n */\nfunction hasSessionSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return sessionStorage.getItem(TELEMETRY_SESSION_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark session start event as sent (uses sessionStorage so it resets on new tabs/sessions)\n */\nfunction markSessionSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    sessionStorage.setItem(TELEMETRY_SESSION_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/** Return the shared client only when a consented capture is safe to emit. */\nasync function getPostHogForConsentedCapture(): Promise<PostHog | null> {\n  if (!isTelemetryEnabled() || getTelemetryConsent() !== \"granted\") return null;\n\n  const posthog = await initializePostHogClient();\n  if (!posthog || !isTelemetryEnabled()) return null;\n\n  // The browser preference is the canonical capture decision. PostHog may\n  // still carry an older opt-out marker while backend consent is loading or\n  // after a previous backend temporarily reported a stale value. Heal that\n  // drift at the event boundary so capture() cannot silently discard an event\n  // that the user has explicitly allowed.\n  if (posthog.has_opted_out_capturing?.()) {\n    posthog.opt_in_capturing();\n  }\n\n  applyDesiredTelemetryIdentity(posthog);\n\n  return posthog;\n}\n\n/**\n * Track a session start event.\n * Called each time a new browser session starts (respects consent).\n * Uses sessionStorage for deduplication - only sends once per browser session.\n */\nexport async function trackSessionStart(): Promise<void> {\n  // Already sent session event this browser session\n  if (hasSessionSent()) {\n    return;\n  }\n\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(\"canvas_new_session\", {\n    is_first_use: !hasFirstUseSent(),\n  });\n\n  // Mark as sent for this session\n  markSessionSent();\n}\n\n/** Return the active PostHog distinct ID when consent allows capture. */\nexport async function getTelemetryDistinctId(): Promise<string | null> {\n  const posthog = await getPostHogForConsentedCapture();\n  return posthog?.get_distinct_id?.() ?? null;\n}\n\n/** Return the PostHog distinct ID for local consent sync without emitting capture. */\nexport async function getTelemetryDistinctIdForConsentSync(): Promise<\n  string | null\n> {\n  if (!isBrowser()) return null;\n\n  if (getTelemetryConsent() !== \"granted\") {\n    const pendingRevocationId = getPendingLocalTelemetryRevocationId();\n    if (pendingRevocationId) return pendingRevocationId;\n  }\n\n  if (telemetryDisabled || isDoNotTrackEnabled()) return null;\n\n  const posthog = await initializePostHogClient();\n  return posthog?.get_distinct_id?.() ?? null;\n}\n\n/**\n * Track a custom event (respects consent).\n */\nexport async function trackEvent(\n  eventName: string,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(eventName, properties);\n}\n\n/** Track an exception through the same consent-aware client as custom events. */\nexport async function trackException(\n  error: unknown,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.captureException(error, properties);\n}\n\n/**\n * Clear all telemetry data (for privacy/GDPR requests)\n */\nexport async function clearTelemetryData(): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    markPendingLocalTelemetryRevocation(\n      posthogInstance?.get_distinct_id?.() ?? null,\n    );\n    localStorage.removeItem(TELEMETRY_CONSENT_KEY);\n    localStorage.removeItem(TELEMETRY_FIRST_USE_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n  clearPendingCloudTelemetryConsent();\n  try {\n    sessionStorage.removeItem(TELEMETRY_SESSION_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n\n  telemetryBackendContext = getBackendTelemetryProperties({});\n  telemetryCloudContext = getCloudTelemetryProperties();\n  desiredTelemetryIdentity = null;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  try {\n    if (posthogInstance) {\n      resetPostHogIdentity(posthogInstance, true);\n    }\n  } catch {\n    // A reset failure must not leave capture enabled after a privacy clear.\n    try {\n      posthogInstance?.opt_out_capturing();\n    } catch {\n      // Telemetry failures must not break the application.\n    }\n  } finally {\n    notifyTelemetryConsentListeners();\n  }\n}\n"],"mappings":"sMA4CA,IAAM,EAAwB,8BACxB,EACJ,iDACI,EACJ,uDACI,EAAiC,qCACjC,EAA0B,gCAC1B,EAAwB,8BACxB,EAAwB,eACxB,EAAgC,iBAIhC,EAAA,mDAOA,EACiC,0BAIjC,EACoC,yBAqBtC,EAAkC,KAClC,EAAwD,KACxD,EACA,EAAmC,CAAC,EACpC,EAAoB,GAUpB,EACA,EAA0B,EAC1B,EAA0B,GAExB,EAA0B,OAAO,OAAO,CAC5C,cAAe,EAAA,2BACf,eAAgB,EAAA,4BAChB,aAAc,EAAA,QAAY,KAC1B,gBAAiB,EAAA,QAAY,OAC/B,CAAC,EAEG,EAA0B,EAAA,8BAA8B,CAAC,CAAC,EAC1D,EAAwB,EAAA,4BAA4B,EAExD,SAAgB,EACd,EACM,CACN,EAA0B,EAAA,8BAA8B,CAAO,CACjE,CAEA,SAAgB,EACd,EACM,CACN,EAAwB,EAAA,4BAA4B,CAAO,CAC7D,CAEA,SAAS,EACP,EACsB,CAGtB,OAFK,EAEE,CACL,GAAG,EACH,WAAY,CACV,GAAG,EACH,GAAG,EACH,GAAG,EAAM,WACT,GAAG,CACL,CACF,EAVmB,IAWrB,CAEA,SAAS,EAAsB,EAAwB,CACjD,GAAqB,EAAoB,IAAM,UACjD,EAAQ,kBAAkB,EAE1B,EAAQ,iBAAiB,CAE7B,CAEA,SAAS,EAAqB,EAAkB,EAAgB,GAAa,CAC3E,EAAQ,MAAM,CAAa,EAC3B,EAA0B,GAG1B,EAAsB,CAAO,CAC/B,CAEA,SAAS,EAA8B,EAAwB,CAC7D,GAAI,IAA6B,IAAA,IAAa,CAAC,EAAmB,EAAG,OAErE,IAAM,EAAY,GAA0B,WACtC,EAAY,EAAQ,aAAa,UAAU,EAKjD,GAJI,GAAa,MAAQ,IAAc,GACrC,EAAqB,CAAO,EAG1B,IAA6B,KAAM,CACrC,EAA0B,EAC1B,MACF,EAGE,EAAQ,aAAa,UAAU,IAAM,EAAyB,YAC9D,IAA4B,KAE5B,EAAQ,SACN,EAAyB,WACzB,EAAyB,UAC3B,EACA,EAA0B,EAE9B,CAEA,SAAS,EACP,EACA,EACS,CACT,IAAM,EAAO,OAAO,KAAK,CAAI,EAC7B,OACE,EAAK,SAAW,OAAO,KAAK,CAAK,EAAE,QACnC,EAAK,MAAO,GAAQ,EAAK,KAAS,EAAM,EAAI,CAEhD,CAMA,SAAgB,GAAmB,EAAsC,CACvE,GAAI,IAAW,GAAO,CACpB,GAAI,EAAmB,OACvB,EAAoB,GACpB,GAAiB,kBAAkB,EACnC,EAAgC,EAChC,MACF,CAEA,IAAM,EAAc,EAGpB,GAFA,EAAoB,GAEhB,CAAC,GAAmB,CAAC,EAAuB,CAC9C,IAAM,EAAgB,OAAO,YAC3B,OAAO,QAAQ,CAAM,EAAE,QAAQ,EAAG,KAAW,IAAU,IAAA,EAAS,CAClE,EACA,EAAkB,CAAE,GAAG,EAAiB,GAAG,CAAc,CAC3D,CAEI,IACE,IACF,EAAsB,CAAe,EACrC,EAA8B,CAAe,GAE/C,EAAgC,EAEpC,CAEA,SAAS,GAA+D,CAGtE,OAFI,EAA0B,KAEvB,CACL,OAAQ,EAAgB,QAAU,EAClC,QAAS,EAAgB,SAAW,EACpC,OAAQ,EAAgB,QAAU,CACpC,CACF,CAKA,SAAS,GAAqB,CAC5B,OAAO,OAAO,OAAW,KAAe,OAAO,aAAiB,GAClE,CAMA,eAAe,GAAsC,CACnD,GAAI,CAAC,EAAU,EACb,OAAO,KAGT,GAAI,EACF,OAAO,EAGT,GAAI,CACF,GAAM,CAAE,QAAS,GAAY,MAAA,QAAA,QAAA,EAAA,SAAA,QAAM,4CAAA,CAAA,EACnC,OAAO,CACT,MAAQ,CAEN,OAAO,IACT,CACF,CAMA,SAAS,GAA+B,CA4BtC,MATA,GAlBI,GAaA,OAAO,QAAY,KAAe,QAAQ,KAAK,eAAiB,KAMlE,OAAO,UAAc,MACpB,UAAU,aAAe,KAEvB,OAAO,OAAW,KAAe,OAAO,aAAe,KAM9D,CAQA,SAAgB,EACd,EACM,CACD,IACH,EAAmB,EAEvB,CAEA,eAAsB,EACpB,EAAkB,GACO,CACzB,GAAI,EACF,OAAO,EAGT,GAAI,EACF,OAAO,EAGT,GAAyB,SAAY,CACnC,IAAM,EAAS,EAA2B,EAC1C,GAAI,CAAC,EACH,OAAO,KAGT,IAAM,EAAU,MAAM,EAAW,EACjC,GAAI,CAAC,EACH,OAAO,KAKT,IAAM,EAAqB,EAAQ,KACjC,EAAO,OACP,CACE,SAAU,EAAO,QACjB,QAAS,EAAO,OAChB,6BAA8B,CAAC,EAC/B,YAAa,eACb,iBAAkB,EAClB,yBAA0B,GAAG,EAAsB,UACnD,gBAAiB,SACjB,iBAAkB,EAClB,YAAa,GACb,0BAA2B,GAC3B,UAAW,EACX,YAAa,CACf,EACA,CACF,EAeA,OAdK,GAEL,EAAkB,EAClB,EAAmB,IAAA,GAEf,EACF,EAAgB,kBAAkB,EACzB,EAAoB,IAAM,WACnC,EAAgB,iBAAiB,EACjC,EAA8B,CAAe,GACnC,GACV,EAAgB,kBAAkB,EAG7B,GAdyB,IAelC,GAAG,EAEH,GAAI,CACF,OAAO,MAAM,CACf,QAAU,CACH,IACH,EAAwB,KAE5B,CACF,CAKA,SAAgB,GAAwC,CACtD,GAAI,CAAC,EAAU,EACb,MAAO,UAIT,GAAI,EAAoB,EACtB,MAAO,SAGT,GAAI,EAAA,uBAAuB,IAAM,SAC/B,MAAO,UAGT,GAAI,CACF,IAAM,EAAU,aAAa,QAAQ,CAAqB,EAC1D,GAAI,IAAY,WAAa,IAAY,SACvC,OAAO,CAEX,MAAQ,CAER,CAEA,MAAO,SACT,CAqBA,SAAgB,GAAsD,CACpE,GAAI,CAAC,EAAU,EAAG,OAAO,KAEzB,GAAI,CACF,OAAO,aAAa,QAAQ,CAA8C,CAC5E,MAAQ,CACN,OAAO,IACT,CACF,CAEA,SAAgB,EAA0B,EAAkC,CAC1E,GAAI,CAAC,EAAU,EAAG,UAAa,CAAC,EAChC,IAAM,EAAiB,GAAwB,EAE3C,EAAM,MAAQ,GACd,EAAM,MAAQ,IAEd,EAAS,CAEb,EAIA,OAHA,OAAO,iBAAiB,EAAgC,CAAQ,EAChE,OAAO,iBAAiB,UAAW,CAAa,MAEnC,CACX,OAAO,oBAAoB,EAAgC,CAAQ,EACnE,OAAO,oBAAoB,UAAW,CAAa,CACrD,CACF,CAEA,SAAS,GAAwC,CAC3C,EAAU,GACZ,OAAO,cAAc,IAAI,MAAM,CAA8B,CAAC,CAClE,CAEA,SAAS,EACP,EACM,CACD,KAAU,EAEf,GAAI,CACF,aAAa,QAAQ,EAA0C,CAAO,CACxE,MAAQ,CAER,CACF,CAEA,SAAS,EAAoC,EAAiC,CACxE,MAAC,EAAU,GAAK,CAAC,GAErB,GAAI,CACF,aAAa,QACX,EACA,CACF,CACF,MAAQ,CAER,CACF,CAEA,SAAgB,EACd,EACM,CACD,KAAU,EAEf,GAAI,CACF,GACE,aAAa,QAAQ,CAA8C,IACnE,EAEA,OAEF,aAAa,WAAW,CAA8C,CACxE,MAAQ,CAER,CACF,CAEA,SAAgB,EACd,EACM,CACD,KAAU,EAEf,GAAI,CACF,GACE,IAAa,IAAA,IACb,aAAa,QAAQ,CAAwC,IAC3D,EAEF,OAEF,aAAa,WAAW,CAAwC,EAChE,EAAgC,CAClC,MAAQ,CAER,CACF,CAKA,eAAsB,EACpB,EACA,CAAE,cAAc,IAAqC,CAAC,EACvC,CACV,KAAU,EAIf,GAAI,CAEF,IAAM,EADkB,EACN,IAAoB,EAGtC,GAFA,aAAa,QAAQ,EAAuB,CAAO,EAC/C,GACA,EAAW,OAIf,IAAM,EAAU,GAAoB,MAAM,EAAwB,EAClE,GAAI,CAAC,EACH,OAGE,IAAY,WACd,EAAQ,iBAAiB,EACzB,EAA8B,CAAO,IAErC,EAAoC,EAAQ,kBAAkB,GAAK,IAAI,EACnE,EAAQ,eAAe,UAAU,GAAK,KAGxC,EAAQ,kBAAkB,EAF1B,EAAqB,CAAO,EAKlC,MAAQ,CAER,QAAU,CAIJ,GACF,EAAiC,CAAO,EAE1C,EAAgC,CAClC,CACF,CAMA,eAAsB,EACpB,EACA,EAAsC,CAAC,EACxB,CACf,IAAM,EAAe,IAAe,KAAO,KAAO,CAAE,aAAY,YAAW,EAc3E,GAZE,IAA6B,GAC5B,GAC8B,MAC7B,IAAiB,MACjB,EAAyB,aAAe,EAAa,YACrD,EAAgB,EAAyB,WAAY,CAAU,IAGnE,EAA2B,EAC3B,GAA2B,EAC3B,EAA0B,GAEtB,CAAC,EAAmB,GAAG,OAC3B,IAAM,EAAU,GAAoB,MAAM,EAAwB,EAC9D,GAAW,EAAmB,GAGhC,EAA8B,CAAO,CAEzC,CAKA,SAAgB,GAA8B,CAC5C,OAAO,EAAoB,IAAM,SACnC,CAKA,SAAS,GAA2B,CAClC,GAAI,CAAC,EAAU,EACb,MAAO,GAGT,GAAI,CACF,OAAO,aAAa,QAAQ,CAAuB,IAAM,MAC3D,MAAQ,CACN,MAAO,EACT,CACF,CAKA,SAAS,GAAyB,CAC3B,KAAU,EAIf,GAAI,CACF,aAAa,QAAQ,EAAyB,MAAM,CACtD,MAAQ,CAER,CACF,CAiBA,eAAsB,GAA8B,CAOlD,GALI,EAAoB,GAKpB,EAAgB,EAClB,OAIF,IAAM,EAAU,MAAM,EAAwB,EAAI,EAC9C,CAAC,GAAW,EAAoB,KAKhB,EAAQ,0BAA0B,GAAK,KAEzD,EAAQ,iBAAiB,EAI3B,EAAQ,QAAQ,iBAAkB,CAChC,SAAU,OAAO,UAAc,IAAc,UAAU,SAAW,UAClE,WACE,OAAO,UAAc,IAAc,UAAU,UAAY,UAC3D,SAAU,OAAO,SAAa,IAAc,SAAS,SAAW,GAChE,WAAY,OAAO,OAAW,IAAc,OAAO,SAAS,OAAS,GACrE,SAAU,OAAO,OAAW,KAAe,OAAO,OAAS,OAAO,GACpE,CAAC,EAGD,EAAiB,EAIM,EACnB,IAAmB,WACrB,EAAQ,kBAAkB,EAE9B,CAKA,SAAS,IAA0B,CACjC,GAAI,CAAC,EAAU,EACb,MAAO,GAGT,GAAI,CACF,OAAO,eAAe,QAAQ,CAAqB,IAAM,MAC3D,MAAQ,CACN,MAAO,EACT,CACF,CAKA,SAAS,IAAwB,CAC1B,KAAU,EAIf,GAAI,CACF,eAAe,QAAQ,EAAuB,MAAM,CACtD,MAAQ,CAER,CACF,CAGA,eAAe,GAAyD,CACtE,GAAI,CAAC,EAAmB,GAAK,EAAoB,IAAM,UAAW,OAAO,KAEzE,IAAM,EAAU,MAAM,EAAwB,EAc9C,MAbI,CAAC,GAAW,CAAC,EAAmB,EAAU,MAO1C,EAAQ,0BAA0B,GACpC,EAAQ,iBAAiB,EAG3B,EAA8B,CAAO,EAE9B,EACT,CAOA,eAAsB,IAAmC,CAEvD,GAAI,GAAe,EACjB,OAGF,IAAM,EAAU,MAAM,EAA8B,EAC/C,IAEL,EAAQ,QAAQ,qBAAsB,CACpC,aAAc,CAAC,EAAgB,CACjC,CAAC,EAGD,GAAgB,EAClB,CAGA,eAAsB,IAAiD,CAErE,OAAO,MADe,EAA8B,IACpC,kBAAkB,GAAK,IACzC,CAGA,eAAsB,IAEpB,CACA,GAAI,CAAC,EAAU,EAAG,OAAO,KAEzB,GAAI,EAAoB,IAAM,UAAW,CACvC,IAAM,EAAsB,EAAqC,EACjE,GAAI,EAAqB,OAAO,CAClC,CAKA,OAHI,GAAqB,EAAoB,EAAU,MAGhD,MADe,EAAwB,IAC9B,kBAAkB,GAAK,IACzC,CAKA,eAAsB,GACpB,EACA,EAAsC,CAAC,EACxB,CACf,IAAM,EAAU,MAAM,EAA8B,EAC/C,GAEL,EAAQ,QAAQ,EAAW,CAAU,CACvC,CAGA,eAAsB,GACpB,EACA,EAAsC,CAAC,EACxB,CACf,IAAM,EAAU,MAAM,EAA8B,EAC/C,GAEL,EAAQ,iBAAiB,EAAO,CAAU,CAC5C,CAKA,eAAsB,IAAoC,CACnD,KAAU,EAIf,IAAI,CACF,EACE,GAAiB,kBAAkB,GAAK,IAC1C,EACA,aAAa,WAAW,CAAqB,EAC7C,aAAa,WAAW,CAAuB,CACjD,MAAQ,CAER,CACA,EAAkC,EAClC,GAAI,CACF,eAAe,WAAW,CAAqB,CACjD,MAAQ,CAER,CAEA,EAA0B,EAAA,8BAA8B,CAAC,CAAC,EAC1D,EAAwB,EAAA,4BAA4B,EACpD,EAA2B,KAC3B,GAA2B,EAC3B,EAA0B,GAE1B,GAAI,CACE,GACF,EAAqB,EAAiB,EAAI,CAE9C,MAAQ,CAEN,GAAI,CACF,GAAiB,kBAAkB,CACrC,MAAQ,CAER,CACF,QAAU,CACR,EAAgC,CAClC,CA3BA,CA4BF"}
+{"version":3,"file":"telemetry.cjs","names":[],"sources":["../../src/services/telemetry.ts"],"sourcesContent":["/**\n * Telemetry service for tracking library usage.\n *\n * This module handles anonymous telemetry for the @openhands/agent-canvas package\n * using the PostHog SDK for reliable event delivery with batching, retry logic,\n * and offline support.\n *\n * TRACKING PHILOSOPHY:\n * - Install event (canvas_install): Sent immediately on first use, regardless of consent.\n *   This is anonymous and contains no PII - just basic browser info and a random ID.\n * - Session/custom events: Only sent after user grants consent via the consent modal.\n * - Users can opt out of all future tracking by declining consent.\n *\n * AD BLOCKER BYPASS:\n * By default, telemetry is routed through OpenHands' reverse proxy (z.openhands.dev)\n * to avoid being blocked by ad blockers. Library consumers can override this with:\n * - VITE_POSTHOG_HOST: Custom proxy URL or direct PostHog URL\n * - VITE_POSTHOG_UI_HOST: PostHog UI host (defaults to https://us.posthog.com)\n *\n * IMPORTANT: By default, telemetry is sent to the OpenHands PostHog project.\n * Source builds can override this with VITE_POSTHOG_API_KEY. Precompiled\n * library consumers can pass the same settings to configureTelemetry().\n *\n * Users can disable all telemetry (including install tracking) via:\n * - Setting VITE_DO_NOT_TRACK=1 environment variable\n * - Browser's Do Not Track setting\n */\n\nimport type { BootstrapConfig, CaptureResult, PostHog } from \"posthog-js\";\nimport { getLockedCloudAuthMode } from \"#/api/agent-server-config\";\nimport defaults from \"../../config/defaults.json\";\n\nimport packageJson from \"../../package.json\";\nimport {\n  AGENT_CANVAS_CLIENT_SOURCE,\n  AGENT_CANVAS_CLIENT_VERSION,\n} from \"#/api/client-source\";\nimport {\n  getBackendTelemetryProperties,\n  getCloudTelemetryProperties,\n  type BackendTelemetryContextInput,\n  type CloudTelemetryContextInput,\n} from \"#/services/telemetry-context\";\n\nconst TELEMETRY_CONSENT_KEY = \"openhands-telemetry-consent\";\nconst TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY =\n  \"openhands-telemetry-consent-pending-cloud-sync\";\nconst TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY =\n  \"openhands-telemetry-consent-pending-local-revocation\";\nconst TELEMETRY_CONSENT_CHANGE_EVENT = \"openhands-telemetry-consent-change\";\nconst TELEMETRY_FIRST_USE_KEY = \"openhands-telemetry-first-use\";\nconst TELEMETRY_SESSION_KEY = \"openhands-telemetry-session\";\nconst POSTHOG_INSTANCE_NAME = \"agent-canvas\";\nconst POSTHOG_PAGEVIEW_CAPTURE_MODE = \"history_change\";\n\n// Unconfigured source builds use staging. Production release workflows pass\n// VITE_POSTHOG_API_KEY explicitly for both the app and library artifacts.\nconst DEFAULT_POSTHOG_API_KEY: string =\n  (import.meta.env.VITE_POSTHOG_API_KEY as string | undefined) ||\n  defaults.telemetry.posthogApiKey;\n\n// Default to OpenHands' reverse proxy to bypass ad blockers.\n// The proxy at z.openhands.dev routes to PostHog's US region.\n// Library consumers can override this with their own proxy or direct PostHog URL.\nconst DEFAULT_POSTHOG_HOST =\n  import.meta.env.VITE_POSTHOG_HOST || \"https://z.openhands.dev\";\n\n// UI host is needed for PostHog features like toolbar to work correctly\n// when using a reverse proxy. Defaults to US region.\nconst DEFAULT_POSTHOG_UI_HOST =\n  import.meta.env.VITE_POSTHOG_UI_HOST || \"https://us.posthog.com\";\n\nexport interface TelemetryConfig {\n  /** PostHog project key. Useful for precompiled library consumers. */\n  apiKey?: string;\n  /** Event ingestion host or reverse proxy. */\n  apiHost?: string;\n  /** PostHog UI host used by toolbar links and other UI features. */\n  uiHost?: string;\n}\n\nexport type TelemetryConfiguration = TelemetryConfig | false;\n\nexport type TelemetryConsent = \"granted\" | \"denied\" | \"pending\";\nexport type ResolvedTelemetryConsent = Exclude<TelemetryConsent, \"pending\">;\n\nexport interface SetTelemetryConsentOptions {\n  /** Do not persist a value mirrored from backend settings back to Cloud. */\n  syncToCloud?: boolean;\n}\n\nlet posthogInstance: PostHog | null = null;\nlet initializationPromise: Promise<PostHog | null> | null = null;\nlet pendingBootstrap: BootstrapConfig | undefined;\nlet telemetryConfig: TelemetryConfig = {};\nlet telemetryDisabled = false;\n\ninterface TelemetryIdentity {\n  distinctId: string;\n  properties: Record<string, unknown>;\n}\n\n// undefined means that Cloud identity has not resolved yet; null means that it\n// resolved without a user. This distinction prevents startup from resetting a\n// persisted identity while the current account is still loading.\nlet desiredTelemetryIdentity: TelemetryIdentity | null | undefined;\nlet desiredIdentityRevision = 0;\nlet appliedIdentityRevision = -1;\n\nconst CANVAS_EVENT_PROPERTIES = Object.freeze({\n  client_source: AGENT_CANVAS_CLIENT_SOURCE,\n  client_version: AGENT_CANVAS_CLIENT_VERSION,\n  package_name: packageJson.name,\n  package_version: packageJson.version,\n});\n\nlet telemetryBackendContext = getBackendTelemetryProperties({});\nlet telemetryCloudContext = getCloudTelemetryProperties();\n\nexport function setTelemetryBackendContext(\n  context: BackendTelemetryContextInput,\n): void {\n  telemetryBackendContext = getBackendTelemetryProperties(context);\n}\n\nexport function setTelemetryCloudContext(\n  context: CloudTelemetryContextInput | null,\n): void {\n  telemetryCloudContext = getCloudTelemetryProperties(context);\n}\n\nfunction addCanvasEventProperties(\n  event: CaptureResult | null,\n): CaptureResult | null {\n  if (!event) return null;\n\n  return {\n    ...event,\n    properties: {\n      ...telemetryBackendContext,\n      ...telemetryCloudContext,\n      ...event.properties,\n      ...CANVAS_EVENT_PROPERTIES,\n    },\n  };\n}\n\nfunction restorePostHogConsent(posthog: PostHog): void {\n  if (telemetryDisabled || getTelemetryConsent() !== \"granted\") {\n    posthog.opt_out_capturing();\n  } else {\n    posthog.opt_in_capturing();\n  }\n}\n\nfunction resetPostHogIdentity(posthog: PostHog, resetDeviceId = false): void {\n  posthog.reset(resetDeviceId);\n  appliedIdentityRevision = -1;\n  // PostHog reset clears its own consent persistence, so immediately restore\n  // the canonical Canvas decision kept in localStorage.\n  restorePostHogConsent(posthog);\n}\n\nfunction applyDesiredTelemetryIdentity(posthog: PostHog): void {\n  if (desiredTelemetryIdentity === undefined || !isTelemetryEnabled()) return;\n\n  const desiredId = desiredTelemetryIdentity?.distinctId;\n  const currentId = posthog.get_property(\"$user_id\");\n  if (currentId != null && currentId !== desiredId) {\n    resetPostHogIdentity(posthog);\n  }\n\n  if (desiredTelemetryIdentity === null) {\n    appliedIdentityRevision = desiredIdentityRevision;\n    return;\n  }\n\n  if (\n    posthog.get_property(\"$user_id\") !== desiredTelemetryIdentity.distinctId ||\n    appliedIdentityRevision !== desiredIdentityRevision\n  ) {\n    posthog.identify(\n      desiredTelemetryIdentity.distinctId,\n      desiredTelemetryIdentity.properties,\n    );\n    appliedIdentityRevision = desiredIdentityRevision;\n  }\n}\n\nfunction propertiesEqual(\n  left: Record<string, unknown>,\n  right: Record<string, unknown>,\n): boolean {\n  const keys = Object.keys(left);\n  return (\n    keys.length === Object.keys(right).length &&\n    keys.every((key) => left[key] === right[key])\n  );\n}\n\n/**\n * Configure the single Canvas telemetry client before its first use.\n * Passing false disables telemetry and install tracking for embedded hosts.\n */\nexport function configureTelemetry(config: TelemetryConfiguration): void {\n  if (config === false) {\n    if (telemetryDisabled) return;\n    telemetryDisabled = true;\n    posthogInstance?.opt_out_capturing();\n    notifyTelemetryConsentListeners();\n    return;\n  }\n\n  const wasDisabled = telemetryDisabled;\n  telemetryDisabled = false;\n\n  if (!posthogInstance && !initializationPromise) {\n    const definedConfig = Object.fromEntries(\n      Object.entries(config).filter(([, value]) => value !== undefined),\n    ) as TelemetryConfig;\n    telemetryConfig = { ...telemetryConfig, ...definedConfig };\n  }\n\n  if (wasDisabled) {\n    if (posthogInstance) {\n      restorePostHogConsent(posthogInstance);\n      applyDesiredTelemetryIdentity(posthogInstance);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\nfunction getResolvedTelemetryConfig(): Required<TelemetryConfig> | null {\n  if (telemetryDisabled) return null;\n\n  return {\n    apiKey: telemetryConfig.apiKey || DEFAULT_POSTHOG_API_KEY,\n    apiHost: telemetryConfig.apiHost || DEFAULT_POSTHOG_HOST,\n    uiHost: telemetryConfig.uiHost || DEFAULT_POSTHOG_UI_HOST,\n  };\n}\n\n/**\n * Check if we're in a browser environment\n */\nfunction isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof localStorage !== \"undefined\";\n}\n\n/**\n * Lazily load PostHog to avoid SSR/Node.js issues.\n * PostHog is a browser-only library, so we dynamically import it only when needed.\n */\nasync function getPostHog(): Promise<PostHog | null> {\n  if (!isBrowser()) {\n    return null;\n  }\n\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  try {\n    const { default: posthog } = await import(\"posthog-js\");\n    return posthog;\n  } catch {\n    // Failed to load PostHog - telemetry will be disabled\n    return null;\n  }\n}\n\n/**\n * Check if telemetry is disabled via environment variable or browser setting.\n * Works in both Node.js and browser (Vite) environments.\n */\nfunction isDoNotTrackEnabled(): boolean {\n  if (telemetryDisabled) {\n    return true;\n  }\n\n  // Check Vite environment variable (browser)\n  if (\n    typeof import.meta !== \"undefined\" &&\n    import.meta.env?.VITE_DO_NOT_TRACK === \"1\"\n  ) {\n    return true;\n  }\n\n  // Check Node.js environment variable (SSR/testing)\n  if (typeof process !== \"undefined\" && process.env?.DO_NOT_TRACK === \"1\") {\n    return true;\n  }\n\n  // Check browser's navigator.doNotTrack standard\n  if (\n    typeof navigator !== \"undefined\" &&\n    (navigator.doNotTrack === \"1\" ||\n      // @ts-expect-error - Some browsers use window.doNotTrack\n      (typeof window !== \"undefined\" && window.doNotTrack === \"1\"))\n  ) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Initialize PostHog SDK.\n *\n * @param enableCapturing - If true, enable capturing immediately (for install tracking).\n *                          If false, start with capturing disabled (for consent-gated tracking).\n */\nexport function configurePostHogBootstrap(\n  bootstrap: BootstrapConfig | undefined,\n): void {\n  if (!posthogInstance) {\n    pendingBootstrap = bootstrap;\n  }\n}\n\nexport async function initializePostHogClient(\n  enableCapturing = false,\n): Promise<PostHog | null> {\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  if (initializationPromise) {\n    return initializationPromise;\n  }\n\n  initializationPromise = (async () => {\n    const config = getResolvedTelemetryConfig();\n    if (!config) {\n      return null;\n    }\n\n    const posthog = await getPostHog();\n    if (!posthog) {\n      return null;\n    }\n\n    // A named instance isolates Canvas configuration, consent, identity, and\n    // persistence from a host application's default PostHog singleton.\n    const initializedPostHog = posthog.init(\n      config.apiKey,\n      {\n        api_host: config.apiHost,\n        ui_host: config.uiHost,\n        opt_out_capturing_by_default: !enableCapturing,\n        persistence: \"localStorage\",\n        persistence_name: POSTHOG_INSTANCE_NAME,\n        consent_persistence_name: `${POSTHOG_INSTANCE_NAME}-consent`,\n        person_profiles: \"always\",\n        capture_pageview: POSTHOG_PAGEVIEW_CAPTURE_MODE,\n        autocapture: true,\n        disable_session_recording: true,\n        bootstrap: pendingBootstrap,\n        before_send: addCanvasEventProperties,\n      },\n      POSTHOG_INSTANCE_NAME,\n    );\n    if (!initializedPostHog) return null;\n\n    posthogInstance = initializedPostHog;\n    pendingBootstrap = undefined;\n\n    if (telemetryDisabled) {\n      posthogInstance.opt_out_capturing();\n    } else if (getTelemetryConsent() === \"granted\") {\n      posthogInstance.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthogInstance);\n    } else if (!enableCapturing) {\n      posthogInstance.opt_out_capturing();\n    }\n\n    return posthogInstance;\n  })();\n\n  try {\n    return await initializationPromise;\n  } finally {\n    if (!posthogInstance) {\n      initializationPromise = null;\n    }\n  }\n}\n\n/**\n * Get user's telemetry consent preference\n */\nexport function getTelemetryConsent(): TelemetryConsent {\n  if (!isBrowser()) {\n    return \"pending\";\n  }\n\n  // Check environment variable for opt-out\n  if (isDoNotTrackEnabled()) {\n    return \"denied\";\n  }\n\n  if (getLockedCloudAuthMode() === \"cookie\") {\n    return \"granted\";\n  }\n\n  try {\n    const consent = localStorage.getItem(TELEMETRY_CONSENT_KEY);\n    if (consent === \"granted\" || consent === \"denied\") {\n      return consent;\n    }\n  } catch {\n    // Ignore storage errors\n  }\n\n  return \"pending\";\n}\n\n/**\n * Return an explicit browser choice that still needs to survive a Cloud login.\n * It remains pending across local backends so their settings cannot consume a\n * decision that must still be applied after the user connects to Cloud.\n */\nexport function getPendingCloudTelemetryConsent(): ResolvedTelemetryConsent | null {\n  if (!isBrowser()) return null;\n\n  try {\n    const consent = localStorage.getItem(\n      TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY,\n    );\n    return consent === \"granted\" || consent === \"denied\" ? consent : null;\n  } catch {\n    return null;\n  }\n}\n\n/** Return the pre-reset actor whose local Automation consent must be revoked. */\nexport function getPendingLocalTelemetryRevocationId(): string | null {\n  if (!isBrowser()) return null;\n\n  try {\n    return localStorage.getItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY);\n  } catch {\n    return null;\n  }\n}\n\nexport function subscribeTelemetryConsent(listener: () => void): () => void {\n  if (!isBrowser()) return () => {};\n  const handleStorage = (event: StorageEvent) => {\n    if (\n      event.key === TELEMETRY_CONSENT_KEY ||\n      event.key === TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY\n    ) {\n      listener();\n    }\n  };\n  window.addEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n  window.addEventListener(\"storage\", handleStorage);\n\n  return () => {\n    window.removeEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n    window.removeEventListener(\"storage\", handleStorage);\n  };\n}\n\nfunction notifyTelemetryConsentListeners(): void {\n  if (isBrowser())\n    window.dispatchEvent(new Event(TELEMETRY_CONSENT_CHANGE_EVENT));\n}\n\nfunction markTelemetryConsentForCloudSync(\n  consent: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    localStorage.setItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY, consent);\n  } catch {\n    // Ignore storage errors; the in-browser consent decision still applies.\n  }\n}\n\nfunction markPendingLocalTelemetryRevocation(distinctId: string | null): void {\n  if (!isBrowser() || !distinctId) return;\n\n  try {\n    localStorage.setItem(\n      TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY,\n      distinctId,\n    );\n  } catch {\n    // Ignore storage errors; browser capture is still disabled below.\n  }\n}\n\nexport function clearPendingLocalTelemetryRevocation(\n  expectedDistinctId: string,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    if (\n      localStorage.getItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY) !==\n      expectedDistinctId\n    ) {\n      return;\n    }\n    localStorage.removeItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY);\n  } catch {\n    // Ignore storage errors.\n  }\n}\n\nexport function clearPendingCloudTelemetryConsent(\n  expected?: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    if (\n      expected !== undefined &&\n      localStorage.getItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY) !==\n        expected\n    ) {\n      return;\n    }\n    localStorage.removeItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY);\n    notifyTelemetryConsentListeners();\n  } catch {\n    // Ignore storage errors.\n  }\n}\n\n/**\n * Set user's telemetry consent preference\n */\nexport async function setTelemetryConsent(\n  consent: ResolvedTelemetryConsent,\n  { syncToCloud = true }: SetTelemetryConsentOptions = {},\n): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    const previousConsent = getTelemetryConsent();\n    const unchanged = previousConsent === consent;\n    localStorage.setItem(TELEMETRY_CONSENT_KEY, consent);\n    if (telemetryDisabled) return;\n    if (unchanged) return;\n\n    // Reuse an initialized client synchronously so a same-flush identify()\n    // cannot run before consent is applied. Only the cold path awaits import.\n    const posthog = posthogInstance ?? (await initializePostHogClient());\n    if (!posthog) {\n      return;\n    }\n\n    if (consent === \"granted\") {\n      posthog.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthog);\n    } else {\n      markPendingLocalTelemetryRevocation(posthog.get_distinct_id?.() ?? null);\n      if (posthog.get_property?.(\"$user_id\") != null) {\n        resetPostHogIdentity(posthog);\n      } else {\n        posthog.opt_out_capturing();\n      }\n    }\n  } catch {\n    // Ignore storage errors\n  } finally {\n    // Notify UI/backend/identity reconcilers only after the browser capture state\n    // reflects this decision. Otherwise a pre-login grant can trigger an\n    // identify while PostHog is still opted out and lose funnel continuity.\n    if (syncToCloud) {\n      markTelemetryConsentForCloudSync(consent);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\n/**\n * Declare the current Cloud identity. The telemetry service applies it only\n * after consent and owns all reset/account-switch semantics.\n */\nexport async function setTelemetryIdentity(\n  distinctId: string | null,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const nextIdentity = distinctId === null ? null : { distinctId, properties };\n  const unchanged =\n    desiredTelemetryIdentity === nextIdentity ||\n    (desiredTelemetryIdentity !== undefined &&\n      desiredTelemetryIdentity !== null &&\n      nextIdentity !== null &&\n      desiredTelemetryIdentity.distinctId === nextIdentity.distinctId &&\n      propertiesEqual(desiredTelemetryIdentity.properties, properties));\n  if (unchanged) return;\n\n  desiredTelemetryIdentity = nextIdentity;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  if (!isTelemetryEnabled()) return;\n  const posthog = posthogInstance ?? (await initializePostHogClient());\n  if (posthog && isTelemetryEnabled()) {\n    // Read the desired identity after the await so a newer account always wins\n    // if identity changes while the SDK is loading.\n    applyDesiredTelemetryIdentity(posthog);\n  }\n}\n\n/**\n * Check if telemetry is enabled (user has granted consent)\n */\nexport function isTelemetryEnabled(): boolean {\n  return getTelemetryConsent() === \"granted\";\n}\n\n/**\n * Check if first use event has already been sent\n */\nfunction hasFirstUseSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return localStorage.getItem(TELEMETRY_FIRST_USE_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark first use event as sent\n */\nfunction markFirstUseSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_FIRST_USE_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Track the initial install of the library.\n *\n * IMPORTANT: This is sent immediately on first use, regardless of consent status.\n * This allows us to track library adoption even if users haven't made a consent choice yet.\n *\n * The event is:\n * - Completely anonymous (no PII, just a random PostHog distinct_id)\n * - Sent only once per installation (tracked via localStorage, persists across sessions)\n * - Still respects DO_NOT_TRACK environment variable and browser setting\n *\n * Users who want complete privacy can:\n * - Set VITE_DO_NOT_TRACK=1 or browser's Do Not Track\n * - Later deny consent to prevent all future tracking\n */\nexport async function trackInstall(): Promise<void> {\n  // Respect hard opt-out via environment variable or browser setting\n  if (isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Already sent install event (persisted in localStorage - survives app relaunches)\n  if (hasFirstUseSent()) {\n    return;\n  }\n\n  // Initialize PostHog with capturing enabled (for this one event)\n  const posthog = await initializePostHogClient(true);\n  if (!posthog || isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Temporarily enable capturing if it was disabled\n  const wasOptedOut = posthog.has_opted_out_capturing?.() ?? false;\n  if (wasOptedOut) {\n    posthog.opt_in_capturing();\n  }\n\n  // Capture the install event\n  posthog.capture(\"canvas_install\", {\n    platform: typeof navigator !== \"undefined\" ? navigator.platform : \"unknown\",\n    user_agent:\n      typeof navigator !== \"undefined\" ? navigator.userAgent : \"unknown\",\n    referrer: typeof document !== \"undefined\" ? document.referrer : \"\",\n    url_origin: typeof window !== \"undefined\" ? window.location.origin : \"\",\n    embedded: typeof window !== \"undefined\" && window.self !== window.top,\n  });\n\n  // Mark as sent (stored in localStorage - persists across browser sessions)\n  markFirstUseSent();\n\n  // Restore opt-out state if user hasn't granted consent yet\n  // This ensures we only send the install event, not subsequent events\n  const currentConsent = getTelemetryConsent();\n  if (currentConsent !== \"granted\") {\n    posthog.opt_out_capturing();\n  }\n}\n\n/**\n * Check if session start event has already been sent (this browser session)\n */\nfunction hasSessionSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return sessionStorage.getItem(TELEMETRY_SESSION_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark session start event as sent (uses sessionStorage so it resets on new tabs/sessions)\n */\nfunction markSessionSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    sessionStorage.setItem(TELEMETRY_SESSION_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/** Return the shared client only when a consented capture is safe to emit. */\nasync function getPostHogForConsentedCapture(): Promise<PostHog | null> {\n  if (!isTelemetryEnabled() || getTelemetryConsent() !== \"granted\") return null;\n\n  const posthog = await initializePostHogClient();\n  if (!posthog || !isTelemetryEnabled()) return null;\n\n  // The browser preference is the canonical capture decision. PostHog may\n  // still carry an older opt-out marker while backend consent is loading or\n  // after a previous backend temporarily reported a stale value. Heal that\n  // drift at the event boundary so capture() cannot silently discard an event\n  // that the user has explicitly allowed.\n  if (posthog.has_opted_out_capturing?.()) {\n    posthog.opt_in_capturing();\n  }\n\n  applyDesiredTelemetryIdentity(posthog);\n\n  return posthog;\n}\n\n/**\n * Track a session start event.\n * Called each time a new browser session starts (respects consent).\n * Uses sessionStorage for deduplication - only sends once per browser session.\n */\nexport async function trackSessionStart(): Promise<void> {\n  // Already sent session event this browser session\n  if (hasSessionSent()) {\n    return;\n  }\n\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(\"canvas_new_session\", {\n    is_first_use: !hasFirstUseSent(),\n  });\n\n  // Mark as sent for this session\n  markSessionSent();\n}\n\n/** Return the active PostHog distinct ID when consent allows capture. */\nexport async function getTelemetryDistinctId(): Promise<string | null> {\n  const posthog = await getPostHogForConsentedCapture();\n  return posthog?.get_distinct_id?.() ?? null;\n}\n\n/** Return the PostHog distinct ID for local consent sync without emitting capture. */\nexport async function getTelemetryDistinctIdForConsentSync(): Promise<\n  string | null\n> {\n  if (!isBrowser()) return null;\n\n  if (getTelemetryConsent() !== \"granted\") {\n    const pendingRevocationId = getPendingLocalTelemetryRevocationId();\n    if (pendingRevocationId) return pendingRevocationId;\n  }\n\n  if (telemetryDisabled || isDoNotTrackEnabled()) return null;\n\n  const posthog = await initializePostHogClient();\n  return posthog?.get_distinct_id?.() ?? null;\n}\n\n/**\n * Track a custom event (respects consent).\n */\nexport async function trackEvent(\n  eventName: string,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(eventName, properties);\n}\n\n/** Track an exception through the same consent-aware client as custom events. */\nexport async function trackException(\n  error: unknown,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.captureException(error, properties);\n}\n\n/**\n * Clear all telemetry data (for privacy/GDPR requests)\n */\nexport async function clearTelemetryData(): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    markPendingLocalTelemetryRevocation(\n      posthogInstance?.get_distinct_id?.() ?? null,\n    );\n    localStorage.removeItem(TELEMETRY_CONSENT_KEY);\n    localStorage.removeItem(TELEMETRY_FIRST_USE_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n  clearPendingCloudTelemetryConsent();\n  try {\n    sessionStorage.removeItem(TELEMETRY_SESSION_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n\n  telemetryBackendContext = getBackendTelemetryProperties({});\n  telemetryCloudContext = getCloudTelemetryProperties();\n  desiredTelemetryIdentity = null;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  try {\n    if (posthogInstance) {\n      resetPostHogIdentity(posthogInstance, true);\n    }\n  } catch {\n    // A reset failure must not leave capture enabled after a privacy clear.\n    try {\n      posthogInstance?.opt_out_capturing();\n    } catch {\n      // Telemetry failures must not break the application.\n    }\n  } finally {\n    notifyTelemetryConsentListeners();\n  }\n}\n"],"mappings":"sMA4CA,IAAM,EAAwB,8BACxB,EACJ,iDACI,EACJ,uDACI,EAAiC,qCACjC,EAA0B,gCAC1B,EAAwB,8BACxB,EAAwB,eACxB,EAAgC,iBAIhC,EAAA,mDAOA,EACiC,0BAIjC,EACoC,yBAqBtC,EAAkC,KAClC,EAAwD,KACxD,EACA,EAAmC,CAAC,EACpC,EAAoB,GAUpB,EACA,EAA0B,EAC1B,EAA0B,GAExB,EAA0B,OAAO,OAAO,CAC5C,cAAe,EAAA,2BACf,eAAgB,EAAA,4BAChB,aAAc,EAAA,QAAY,KAC1B,gBAAiB,EAAA,QAAY,OAC/B,CAAC,EAEG,EAA0B,EAAA,8BAA8B,CAAC,CAAC,EAC1D,EAAwB,EAAA,4BAA4B,EAExD,SAAgB,EACd,EACM,CACN,EAA0B,EAAA,8BAA8B,CAAO,CACjE,CAEA,SAAgB,EACd,EACM,CACN,EAAwB,EAAA,4BAA4B,CAAO,CAC7D,CAEA,SAAS,EACP,EACsB,CAGtB,OAFK,EAEE,CACL,GAAG,EACH,WAAY,CACV,GAAG,EACH,GAAG,EACH,GAAG,EAAM,WACT,GAAG,CACL,CACF,EAVmB,IAWrB,CAEA,SAAS,EAAsB,EAAwB,CACjD,GAAqB,EAAoB,IAAM,UACjD,EAAQ,kBAAkB,EAE1B,EAAQ,iBAAiB,CAE7B,CAEA,SAAS,EAAqB,EAAkB,EAAgB,GAAa,CAC3E,EAAQ,MAAM,CAAa,EAC3B,EAA0B,GAG1B,EAAsB,CAAO,CAC/B,CAEA,SAAS,EAA8B,EAAwB,CAC7D,GAAI,IAA6B,IAAA,IAAa,CAAC,EAAmB,EAAG,OAErE,IAAM,EAAY,GAA0B,WACtC,EAAY,EAAQ,aAAa,UAAU,EAKjD,GAJI,GAAa,MAAQ,IAAc,GACrC,EAAqB,CAAO,EAG1B,IAA6B,KAAM,CACrC,EAA0B,EAC1B,MACF,EAGE,EAAQ,aAAa,UAAU,IAAM,EAAyB,YAC9D,IAA4B,KAE5B,EAAQ,SACN,EAAyB,WACzB,EAAyB,UAC3B,EACA,EAA0B,EAE9B,CAEA,SAAS,EACP,EACA,EACS,CACT,IAAM,EAAO,OAAO,KAAK,CAAI,EAC7B,OACE,EAAK,SAAW,OAAO,KAAK,CAAK,EAAE,QACnC,EAAK,MAAO,GAAQ,EAAK,KAAS,EAAM,EAAI,CAEhD,CAMA,SAAgB,GAAmB,EAAsC,CACvE,GAAI,IAAW,GAAO,CACpB,GAAI,EAAmB,OACvB,EAAoB,GACpB,GAAiB,kBAAkB,EACnC,EAAgC,EAChC,MACF,CAEA,IAAM,EAAc,EAGpB,GAFA,EAAoB,GAEhB,CAAC,GAAmB,CAAC,EAAuB,CAC9C,IAAM,EAAgB,OAAO,YAC3B,OAAO,QAAQ,CAAM,EAAE,QAAQ,EAAG,KAAW,IAAU,IAAA,EAAS,CAClE,EACA,EAAkB,CAAE,GAAG,EAAiB,GAAG,CAAc,CAC3D,CAEI,IACE,IACF,EAAsB,CAAe,EACrC,EAA8B,CAAe,GAE/C,EAAgC,EAEpC,CAEA,SAAS,GAA+D,CAGtE,OAFI,EAA0B,KAEvB,CACL,OAAQ,EAAgB,QAAU,EAClC,QAAS,EAAgB,SAAW,EACpC,OAAQ,EAAgB,QAAU,CACpC,CACF,CAKA,SAAS,GAAqB,CAC5B,OAAO,OAAO,OAAW,KAAe,OAAO,aAAiB,GAClE,CAMA,eAAe,GAAsC,CACnD,GAAI,CAAC,EAAU,EACb,OAAO,KAGT,GAAI,EACF,OAAO,EAGT,GAAI,CACF,GAAM,CAAE,QAAS,GAAY,MAAA,QAAA,QAAA,EAAA,SAAA,QAAM,4CAAA,CAAA,EACnC,OAAO,CACT,MAAQ,CAEN,OAAO,IACT,CACF,CAMA,SAAS,GAA+B,CA4BtC,MATA,GAlBI,GAaA,OAAO,QAAY,KAAe,QAAQ,KAAK,eAAiB,KAMlE,OAAO,UAAc,MACpB,UAAU,aAAe,KAEvB,OAAO,OAAW,KAAe,OAAO,aAAe,KAM9D,CAQA,SAAgB,EACd,EACM,CACD,IACH,EAAmB,EAEvB,CAEA,eAAsB,EACpB,EAAkB,GACO,CACzB,GAAI,EACF,OAAO,EAGT,GAAI,EACF,OAAO,EAGT,GAAyB,SAAY,CACnC,IAAM,EAAS,EAA2B,EAC1C,GAAI,CAAC,EACH,OAAO,KAGT,IAAM,EAAU,MAAM,EAAW,EACjC,GAAI,CAAC,EACH,OAAO,KAKT,IAAM,EAAqB,EAAQ,KACjC,EAAO,OACP,CACE,SAAU,EAAO,QACjB,QAAS,EAAO,OAChB,6BAA8B,CAAC,EAC/B,YAAa,eACb,iBAAkB,EAClB,yBAA0B,GAAG,EAAsB,UACnD,gBAAiB,SACjB,iBAAkB,EAClB,YAAa,GACb,0BAA2B,GAC3B,UAAW,EACX,YAAa,CACf,EACA,CACF,EAeA,OAdK,GAEL,EAAkB,EAClB,EAAmB,IAAA,GAEf,EACF,EAAgB,kBAAkB,EACzB,EAAoB,IAAM,WACnC,EAAgB,iBAAiB,EACjC,EAA8B,CAAe,GACnC,GACV,EAAgB,kBAAkB,EAG7B,GAdyB,IAelC,GAAG,EAEH,GAAI,CACF,OAAO,MAAM,CACf,QAAU,CACH,IACH,EAAwB,KAE5B,CACF,CAKA,SAAgB,GAAwC,CACtD,GAAI,CAAC,EAAU,EACb,MAAO,UAIT,GAAI,EAAoB,EACtB,MAAO,SAGT,GAAI,EAAA,uBAAuB,IAAM,SAC/B,MAAO,UAGT,GAAI,CACF,IAAM,EAAU,aAAa,QAAQ,CAAqB,EAC1D,GAAI,IAAY,WAAa,IAAY,SACvC,OAAO,CAEX,MAAQ,CAER,CAEA,MAAO,SACT,CAqBA,SAAgB,GAAsD,CACpE,GAAI,CAAC,EAAU,EAAG,OAAO,KAEzB,GAAI,CACF,OAAO,aAAa,QAAQ,CAA8C,CAC5E,MAAQ,CACN,OAAO,IACT,CACF,CAEA,SAAgB,EAA0B,EAAkC,CAC1E,GAAI,CAAC,EAAU,EAAG,UAAa,CAAC,EAChC,IAAM,EAAiB,GAAwB,EAE3C,EAAM,MAAQ,GACd,EAAM,MAAQ,IAEd,EAAS,CAEb,EAIA,OAHA,OAAO,iBAAiB,EAAgC,CAAQ,EAChE,OAAO,iBAAiB,UAAW,CAAa,MAEnC,CACX,OAAO,oBAAoB,EAAgC,CAAQ,EACnE,OAAO,oBAAoB,UAAW,CAAa,CACrD,CACF,CAEA,SAAS,GAAwC,CAC3C,EAAU,GACZ,OAAO,cAAc,IAAI,MAAM,CAA8B,CAAC,CAClE,CAEA,SAAS,EACP,EACM,CACD,KAAU,EAEf,GAAI,CACF,aAAa,QAAQ,EAA0C,CAAO,CACxE,MAAQ,CAER,CACF,CAEA,SAAS,EAAoC,EAAiC,CACxE,MAAC,EAAU,GAAK,CAAC,GAErB,GAAI,CACF,aAAa,QACX,EACA,CACF,CACF,MAAQ,CAER,CACF,CAEA,SAAgB,EACd,EACM,CACD,KAAU,EAEf,GAAI,CACF,GACE,aAAa,QAAQ,CAA8C,IACnE,EAEA,OAEF,aAAa,WAAW,CAA8C,CACxE,MAAQ,CAER,CACF,CAEA,SAAgB,EACd,EACM,CACD,KAAU,EAEf,GAAI,CACF,GACE,IAAa,IAAA,IACb,aAAa,QAAQ,CAAwC,IAC3D,EAEF,OAEF,aAAa,WAAW,CAAwC,EAChE,EAAgC,CAClC,MAAQ,CAER,CACF,CAKA,eAAsB,EACpB,EACA,CAAE,cAAc,IAAqC,CAAC,EACvC,CACV,KAAU,EAIf,GAAI,CAEF,IAAM,EADkB,EACN,IAAoB,EAGtC,GAFA,aAAa,QAAQ,EAAuB,CAAO,EAC/C,GACA,EAAW,OAIf,IAAM,EAAU,GAAoB,MAAM,EAAwB,EAClE,GAAI,CAAC,EACH,OAGE,IAAY,WACd,EAAQ,iBAAiB,EACzB,EAA8B,CAAO,IAErC,EAAoC,EAAQ,kBAAkB,GAAK,IAAI,EACnE,EAAQ,eAAe,UAAU,GAAK,KAGxC,EAAQ,kBAAkB,EAF1B,EAAqB,CAAO,EAKlC,MAAQ,CAER,QAAU,CAIJ,GACF,EAAiC,CAAO,EAE1C,EAAgC,CAClC,CACF,CAMA,eAAsB,EACpB,EACA,EAAsC,CAAC,EACxB,CACf,IAAM,EAAe,IAAe,KAAO,KAAO,CAAE,aAAY,YAAW,EAc3E,GAZE,IAA6B,GAC5B,GAC8B,MAC7B,IAAiB,MACjB,EAAyB,aAAe,EAAa,YACrD,EAAgB,EAAyB,WAAY,CAAU,IAGnE,EAA2B,EAC3B,GAA2B,EAC3B,EAA0B,GAEtB,CAAC,EAAmB,GAAG,OAC3B,IAAM,EAAU,GAAoB,MAAM,EAAwB,EAC9D,GAAW,EAAmB,GAGhC,EAA8B,CAAO,CAEzC,CAKA,SAAgB,GAA8B,CAC5C,OAAO,EAAoB,IAAM,SACnC,CAKA,SAAS,GAA2B,CAClC,GAAI,CAAC,EAAU,EACb,MAAO,GAGT,GAAI,CACF,OAAO,aAAa,QAAQ,CAAuB,IAAM,MAC3D,MAAQ,CACN,MAAO,EACT,CACF,CAKA,SAAS,GAAyB,CAC3B,KAAU,EAIf,GAAI,CACF,aAAa,QAAQ,EAAyB,MAAM,CACtD,MAAQ,CAER,CACF,CAiBA,eAAsB,GAA8B,CAOlD,GALI,EAAoB,GAKpB,EAAgB,EAClB,OAIF,IAAM,EAAU,MAAM,EAAwB,EAAI,EAC9C,CAAC,GAAW,EAAoB,KAKhB,EAAQ,0BAA0B,GAAK,KAEzD,EAAQ,iBAAiB,EAI3B,EAAQ,QAAQ,iBAAkB,CAChC,SAAU,OAAO,UAAc,IAAc,UAAU,SAAW,UAClE,WACE,OAAO,UAAc,IAAc,UAAU,UAAY,UAC3D,SAAU,OAAO,SAAa,IAAc,SAAS,SAAW,GAChE,WAAY,OAAO,OAAW,IAAc,OAAO,SAAS,OAAS,GACrE,SAAU,OAAO,OAAW,KAAe,OAAO,OAAS,OAAO,GACpE,CAAC,EAGD,EAAiB,EAIM,EACnB,IAAmB,WACrB,EAAQ,kBAAkB,EAE9B,CAKA,SAAS,IAA0B,CACjC,GAAI,CAAC,EAAU,EACb,MAAO,GAGT,GAAI,CACF,OAAO,eAAe,QAAQ,CAAqB,IAAM,MAC3D,MAAQ,CACN,MAAO,EACT,CACF,CAKA,SAAS,IAAwB,CAC1B,KAAU,EAIf,GAAI,CACF,eAAe,QAAQ,EAAuB,MAAM,CACtD,MAAQ,CAER,CACF,CAGA,eAAe,GAAyD,CACtE,GAAI,CAAC,EAAmB,GAAK,EAAoB,IAAM,UAAW,OAAO,KAEzE,IAAM,EAAU,MAAM,EAAwB,EAc9C,MAbI,CAAC,GAAW,CAAC,EAAmB,EAAU,MAO1C,EAAQ,0BAA0B,GACpC,EAAQ,iBAAiB,EAG3B,EAA8B,CAAO,EAE9B,EACT,CAOA,eAAsB,IAAmC,CAEvD,GAAI,GAAe,EACjB,OAGF,IAAM,EAAU,MAAM,EAA8B,EAC/C,IAEL,EAAQ,QAAQ,qBAAsB,CACpC,aAAc,CAAC,EAAgB,CACjC,CAAC,EAGD,GAAgB,EAClB,CAGA,eAAsB,IAAiD,CAErE,OAAO,MADe,EAA8B,IACpC,kBAAkB,GAAK,IACzC,CAGA,eAAsB,IAEpB,CACA,GAAI,CAAC,EAAU,EAAG,OAAO,KAEzB,GAAI,EAAoB,IAAM,UAAW,CACvC,IAAM,EAAsB,EAAqC,EACjE,GAAI,EAAqB,OAAO,CAClC,CAKA,OAHI,GAAqB,EAAoB,EAAU,MAGhD,MADe,EAAwB,IAC9B,kBAAkB,GAAK,IACzC,CAKA,eAAsB,GACpB,EACA,EAAsC,CAAC,EACxB,CACf,IAAM,EAAU,MAAM,EAA8B,EAC/C,GAEL,EAAQ,QAAQ,EAAW,CAAU,CACvC,CAgBA,eAAsB,IAAoC,CACnD,KAAU,EAIf,IAAI,CACF,EACE,GAAiB,kBAAkB,GAAK,IAC1C,EACA,aAAa,WAAW,CAAqB,EAC7C,aAAa,WAAW,CAAuB,CACjD,MAAQ,CAER,CACA,EAAkC,EAClC,GAAI,CACF,eAAe,WAAW,CAAqB,CACjD,MAAQ,CAER,CAEA,EAA0B,EAAA,8BAA8B,CAAC,CAAC,EAC1D,EAAwB,EAAA,4BAA4B,EACpD,EAA2B,KAC3B,GAA2B,EAC3B,EAA0B,GAE1B,GAAI,CACE,GACF,EAAqB,EAAiB,EAAI,CAE9C,MAAQ,CAEN,GAAI,CACF,GAAiB,kBAAkB,CACrC,MAAQ,CAER,CACF,QAAU,CACR,EAAgC,CAClC,CA3BA,CA4BF"}

package/dist/services/telemetry.js

@@ -3,43 +3,43 @@ import t from "../package.js";
 import { AGENT_CANVAS_CLIENT_SOURCE as n, AGENT_CANVAS_CLIENT_VERSION as r } from "../api/client-source.js";
 import { getBackendTelemetryProperties as i, getCloudTelemetryProperties as a } from "./telemetry-context.js";
 //#region src/services/telemetry.ts
-var o = "openhands-telemetry-consent", s = "openhands-telemetry-consent-pending-cloud-sync", c = "openhands-telemetry-consent-pending-local-revocation", l = "openhands-telemetry-consent-change", u = "openhands-telemetry-first-use", d = "openhands-telemetry-session", f = "agent-canvas", p = "history_change", ee = "phc_BgzfxKdgsYMLFTmJqt424ZoyVHvKFfrwttLimzdYTKFK", m = "https://z.openhands.dev", h = "https://us.posthog.com", g = null, _ = null, v, y = {}, b = !1, x, S = 0, C = -1, w = Object.freeze({
+var o = "openhands-telemetry-consent", s = "openhands-telemetry-consent-pending-cloud-sync", c = "openhands-telemetry-consent-pending-local-revocation", l = "openhands-telemetry-consent-change", u = "openhands-telemetry-first-use", d = "openhands-telemetry-session", f = "agent-canvas", p = "history_change", m = "phc_BgzfxKdgsYMLFTmJqt424ZoyVHvKFfrwttLimzdYTKFK", h = "https://z.openhands.dev", g = "https://us.posthog.com", _ = null, v = null, y, b = {}, x = !1, S, C = 0, w = -1, T = Object.freeze({
 	client_source: n,
 	client_version: r,
 	package_name: t.name,
 	package_version: t.version
-}), T = i({}), E = a();
-function D(e) {
-	T = i(e);
-}
+}), E = i({}), D = a();
 function O(e) {
-	E = a(e);
+	E = i(e);
 }
 function k(e) {
+	D = a(e);
+}
+function ee(e) {
 	return e ? {
 		...e,
 		properties: {
-			...T,
 			...E,
+			...D,
 			...e.properties,
-			...w
+			...T
 		}
 	} : null;
 }
 function A(e) {
-	b || V() !== "granted" ? e.opt_out_capturing() : e.opt_in_capturing();
+	x || V() !== "granted" ? e.opt_out_capturing() : e.opt_in_capturing();
 }
 function j(e, t = !1) {
-	e.reset(t), C = -1, A(e);
+	e.reset(t), w = -1, A(e);
 }
 function M(e) {
-	if (x === void 0 || !Z()) return;
-	let t = x?.distinctId, n = e.get_property("$user_id");
-	if (n != null && n !== t && j(e), x === null) {
-		C = S;
+	if (S === void 0 || !Z()) return;
+	let t = S?.distinctId, n = e.get_property("$user_id");
+	if (n != null && n !== t && j(e), S === null) {
+		w = C;
 		return;
 	}
-	(e.get_property("$user_id") !== x.distinctId || C !== S) && (e.identify(x.distinctId, x.properties), C = S);
+	(e.get_property("$user_id") !== S.distinctId || w !== C) && (e.identify(S.distinctId, S.properties), w = C);
 }
 function N(e, t) {
 	let n = Object.keys(e);
@@ -47,25 +47,25 @@ function N(e, t) {
 }
 function P(e) {
 	if (e === !1) {
-		if (b) return;
-		b = !0, g?.opt_out_capturing(), W();
+		if (x) return;
+		x = !0, _?.opt_out_capturing(), W();
 		return;
 	}
-	let t = b;
-	if (b = !1, !g && !_) {
+	let t = x;
+	if (x = !1, !_ && !v) {
 		let t = Object.fromEntries(Object.entries(e).filter(([, e]) => e !== void 0));
-		y = {
-			...y,
+		b = {
+			...b,
 			...t
 		};
 	}
-	t && (g && (A(g), M(g)), W());
+	t && (_ && (A(_), M(_)), W());
 }
 function F() {
-	return b ? null : {
-		apiKey: y.apiKey || ee,
-		apiHost: y.apiHost || m,
-		uiHost: y.uiHost || h
+	return x ? null : {
+		apiKey: b.apiKey || m,
+		apiHost: b.apiHost || h,
+		uiHost: b.uiHost || g
 	};
 }
 function I() {
@@ -73,7 +73,7 @@ function I() {
 }
 async function L() {
 	if (!I()) return null;
-	if (g) return g;
+	if (_) return _;
 	try {
 		let { default: e } = await import("../node_modules/posthog-js/dist/module.js");
 		return e;
@@ -82,15 +82,15 @@ async function L() {
 	}
 }
 function R() {
-	return !!(b || typeof process < "u" && process.env?.DO_NOT_TRACK === "1" || typeof navigator < "u" && (navigator.doNotTrack === "1" || typeof window < "u" && window.doNotTrack === "1"));
+	return !!(x || typeof process < "u" && process.env?.DO_NOT_TRACK === "1" || typeof navigator < "u" && (navigator.doNotTrack === "1" || typeof window < "u" && window.doNotTrack === "1"));
 }
 function z(e) {
-	g || (v = e);
+	_ || (y = e);
 }
 async function B(e = !1) {
-	if (g) return g;
 	if (_) return _;
-	_ = (async () => {
+	if (v) return v;
+	v = (async () => {
 		let t = F();
 		if (!t) return null;
 		let n = await L();
@@ -106,15 +106,15 @@ async function B(e = !1) {
 			capture_pageview: p,
 			autocapture: !0,
 			disable_session_recording: !0,
-			bootstrap: v,
-			before_send: k
+			bootstrap: y,
+			before_send: ee
 		}, f);
-		return r ? (g = r, v = void 0, b ? g.opt_out_capturing() : V() === "granted" ? (g.opt_in_capturing(), M(g)) : e || g.opt_out_capturing(), g) : null;
+		return r ? (_ = r, y = void 0, x ? _.opt_out_capturing() : V() === "granted" ? (_.opt_in_capturing(), M(_)) : e || _.opt_out_capturing(), _) : null;
 	})();
 	try {
-		return await _;
+		return await v;
 	} finally {
-		g || (_ = null);
+		_ || (v = null);
 	}
 }
 function V() {
@@ -172,8 +172,8 @@ function J(e) {
 async function Y(e, { syncToCloud: t = !0 } = {}) {
 	if (I()) try {
 		let t = V() === e;
-		if (localStorage.setItem(o, e), b || t) return;
-		let n = g ?? await B();
+		if (localStorage.setItem(o, e), x || t) return;
+		let n = _ ?? await B();
 		if (!n) return;
 		e === "granted" ? (n.opt_in_capturing(), M(n)) : (K(n.get_distinct_id?.() ?? null), n.get_property?.("$user_id") == null ? n.opt_out_capturing() : j(n));
 	} catch {} finally {
@@ -185,8 +185,8 @@ async function X(e, t = {}) {
 		distinctId: e,
 		properties: t
 	};
-	if (x === n || x != null && n !== null && x.distinctId === n.distinctId && N(x.properties, t) || (x = n, S += 1, C = -1, !Z())) return;
-	let r = g ?? await B();
+	if (S === n || S != null && n !== null && S.distinctId === n.distinctId && N(S.properties, t) || (S = n, C += 1, w = -1, !Z())) return;
+	let r = _ ?? await B();
 	r && Z() && M(r);
 }
 function Z() {
@@ -248,31 +248,27 @@ async function se() {
 		let e = H();
 		if (e) return e;
 	}
-	return b || R() ? null : (await B())?.get_distinct_id?.() ?? null;
+	return x || R() ? null : (await B())?.get_distinct_id?.() ?? null;
 }
 async function ce(e, t = {}) {
 	let n = await $();
 	n && n.capture(e, t);
 }
-async function le(e, t = {}) {
-	let n = await $();
-	n && n.captureException(e, t);
-}
-async function ue() {
+async function le() {
 	if (I()) {
 		try {
-			K(g?.get_distinct_id?.() ?? null), localStorage.removeItem(o), localStorage.removeItem(u);
+			K(_?.get_distinct_id?.() ?? null), localStorage.removeItem(o), localStorage.removeItem(u);
 		} catch {}
 		J();
 		try {
 			sessionStorage.removeItem(d);
 		} catch {}
-		T = i({}), E = a(), x = null, S += 1, C = -1;
+		E = i({}), D = a(), S = null, C += 1, w = -1;
 		try {
-			g && j(g, !0);
+			_ && j(_, !0);
 		} catch {
 			try {
-				g?.opt_out_capturing();
+				_?.opt_out_capturing();
 			} catch {}
 		} finally {
 			W();
@@ -280,6 +276,6 @@ async function ue() {
 	}
 }
 //#endregion
-export { q as clearPendingLocalTelemetryRevocation, ue as clearTelemetryData, z as configurePostHogBootstrap, P as configureTelemetry, V as getTelemetryConsent, oe as getTelemetryDistinctId, se as getTelemetryDistinctIdForConsentSync, B as initializePostHogClient, Z as isTelemetryEnabled, D as setTelemetryBackendContext, O as setTelemetryCloudContext, Y as setTelemetryConsent, X as setTelemetryIdentity, U as subscribeTelemetryConsent, ce as trackEvent, le as trackException, ne as trackInstall, ae as trackSessionStart };
+export { q as clearPendingLocalTelemetryRevocation, le as clearTelemetryData, z as configurePostHogBootstrap, P as configureTelemetry, V as getTelemetryConsent, oe as getTelemetryDistinctId, se as getTelemetryDistinctIdForConsentSync, B as initializePostHogClient, Z as isTelemetryEnabled, O as setTelemetryBackendContext, k as setTelemetryCloudContext, Y as setTelemetryConsent, X as setTelemetryIdentity, U as subscribeTelemetryConsent, ce as trackEvent, ne as trackInstall, ae as trackSessionStart };
 
 //# sourceMappingURL=telemetry.js.map

package/dist/services/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","names":[],"sources":["../../src/services/telemetry.ts"],"sourcesContent":["/**\n * Telemetry service for tracking library usage.\n *\n * This module handles anonymous telemetry for the @openhands/agent-canvas package\n * using the PostHog SDK for reliable event delivery with batching, retry logic,\n * and offline support.\n *\n * TRACKING PHILOSOPHY:\n * - Install event (canvas_install): Sent immediately on first use, regardless of consent.\n *   This is anonymous and contains no PII - just basic browser info and a random ID.\n * - Session/custom events: Only sent after user grants consent via the consent modal.\n * - Users can opt out of all future tracking by declining consent.\n *\n * AD BLOCKER BYPASS:\n * By default, telemetry is routed through OpenHands' reverse proxy (z.openhands.dev)\n * to avoid being blocked by ad blockers. Library consumers can override this with:\n * - VITE_POSTHOG_HOST: Custom proxy URL or direct PostHog URL\n * - VITE_POSTHOG_UI_HOST: PostHog UI host (defaults to https://us.posthog.com)\n *\n * IMPORTANT: By default, telemetry is sent to the OpenHands PostHog project.\n * Source builds can override this with VITE_POSTHOG_API_KEY. Precompiled\n * library consumers can pass the same settings to configureTelemetry().\n *\n * Users can disable all telemetry (including install tracking) via:\n * - Setting VITE_DO_NOT_TRACK=1 environment variable\n * - Browser's Do Not Track setting\n */\n\nimport type { BootstrapConfig, CaptureResult, PostHog } from \"posthog-js\";\nimport { getLockedCloudAuthMode } from \"#/api/agent-server-config\";\nimport defaults from \"../../config/defaults.json\";\n\nimport packageJson from \"../../package.json\";\nimport {\n  AGENT_CANVAS_CLIENT_SOURCE,\n  AGENT_CANVAS_CLIENT_VERSION,\n} from \"#/api/client-source\";\nimport {\n  getBackendTelemetryProperties,\n  getCloudTelemetryProperties,\n  type BackendTelemetryContextInput,\n  type CloudTelemetryContextInput,\n} from \"#/services/telemetry-context\";\n\nconst TELEMETRY_CONSENT_KEY = \"openhands-telemetry-consent\";\nconst TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY =\n  \"openhands-telemetry-consent-pending-cloud-sync\";\nconst TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY =\n  \"openhands-telemetry-consent-pending-local-revocation\";\nconst TELEMETRY_CONSENT_CHANGE_EVENT = \"openhands-telemetry-consent-change\";\nconst TELEMETRY_FIRST_USE_KEY = \"openhands-telemetry-first-use\";\nconst TELEMETRY_SESSION_KEY = \"openhands-telemetry-session\";\nconst POSTHOG_INSTANCE_NAME = \"agent-canvas\";\nconst POSTHOG_PAGEVIEW_CAPTURE_MODE = \"history_change\";\n\n// Unconfigured source builds use staging. Production release workflows pass\n// VITE_POSTHOG_API_KEY explicitly for both the app and library artifacts.\nconst DEFAULT_POSTHOG_API_KEY: string =\n  (import.meta.env.VITE_POSTHOG_API_KEY as string | undefined) ||\n  defaults.telemetry.posthogApiKey;\n\n// Default to OpenHands' reverse proxy to bypass ad blockers.\n// The proxy at z.openhands.dev routes to PostHog's US region.\n// Library consumers can override this with their own proxy or direct PostHog URL.\nconst DEFAULT_POSTHOG_HOST =\n  import.meta.env.VITE_POSTHOG_HOST || \"https://z.openhands.dev\";\n\n// UI host is needed for PostHog features like toolbar to work correctly\n// when using a reverse proxy. Defaults to US region.\nconst DEFAULT_POSTHOG_UI_HOST =\n  import.meta.env.VITE_POSTHOG_UI_HOST || \"https://us.posthog.com\";\n\nexport interface TelemetryConfig {\n  /** PostHog project key. Useful for precompiled library consumers. */\n  apiKey?: string;\n  /** Event ingestion host or reverse proxy. */\n  apiHost?: string;\n  /** PostHog UI host used by toolbar links and other UI features. */\n  uiHost?: string;\n}\n\nexport type TelemetryConfiguration = TelemetryConfig | false;\n\nexport type TelemetryConsent = \"granted\" | \"denied\" | \"pending\";\nexport type ResolvedTelemetryConsent = Exclude<TelemetryConsent, \"pending\">;\n\nexport interface SetTelemetryConsentOptions {\n  /** Do not persist a value mirrored from backend settings back to Cloud. */\n  syncToCloud?: boolean;\n}\n\nlet posthogInstance: PostHog | null = null;\nlet initializationPromise: Promise<PostHog | null> | null = null;\nlet pendingBootstrap: BootstrapConfig | undefined;\nlet telemetryConfig: TelemetryConfig = {};\nlet telemetryDisabled = false;\n\ninterface TelemetryIdentity {\n  distinctId: string;\n  properties: Record<string, unknown>;\n}\n\n// undefined means that Cloud identity has not resolved yet; null means that it\n// resolved without a user. This distinction prevents startup from resetting a\n// persisted identity while the current account is still loading.\nlet desiredTelemetryIdentity: TelemetryIdentity | null | undefined;\nlet desiredIdentityRevision = 0;\nlet appliedIdentityRevision = -1;\n\nconst CANVAS_EVENT_PROPERTIES = Object.freeze({\n  client_source: AGENT_CANVAS_CLIENT_SOURCE,\n  client_version: AGENT_CANVAS_CLIENT_VERSION,\n  package_name: packageJson.name,\n  package_version: packageJson.version,\n});\n\nlet telemetryBackendContext = getBackendTelemetryProperties({});\nlet telemetryCloudContext = getCloudTelemetryProperties();\n\nexport function setTelemetryBackendContext(\n  context: BackendTelemetryContextInput,\n): void {\n  telemetryBackendContext = getBackendTelemetryProperties(context);\n}\n\nexport function setTelemetryCloudContext(\n  context: CloudTelemetryContextInput | null,\n): void {\n  telemetryCloudContext = getCloudTelemetryProperties(context);\n}\n\nfunction addCanvasEventProperties(\n  event: CaptureResult | null,\n): CaptureResult | null {\n  if (!event) return null;\n\n  return {\n    ...event,\n    properties: {\n      ...telemetryBackendContext,\n      ...telemetryCloudContext,\n      ...event.properties,\n      ...CANVAS_EVENT_PROPERTIES,\n    },\n  };\n}\n\nfunction restorePostHogConsent(posthog: PostHog): void {\n  if (telemetryDisabled || getTelemetryConsent() !== \"granted\") {\n    posthog.opt_out_capturing();\n  } else {\n    posthog.opt_in_capturing();\n  }\n}\n\nfunction resetPostHogIdentity(posthog: PostHog, resetDeviceId = false): void {\n  posthog.reset(resetDeviceId);\n  appliedIdentityRevision = -1;\n  // PostHog reset clears its own consent persistence, so immediately restore\n  // the canonical Canvas decision kept in localStorage.\n  restorePostHogConsent(posthog);\n}\n\nfunction applyDesiredTelemetryIdentity(posthog: PostHog): void {\n  if (desiredTelemetryIdentity === undefined || !isTelemetryEnabled()) return;\n\n  const desiredId = desiredTelemetryIdentity?.distinctId;\n  const currentId = posthog.get_property(\"$user_id\");\n  if (currentId != null && currentId !== desiredId) {\n    resetPostHogIdentity(posthog);\n  }\n\n  if (desiredTelemetryIdentity === null) {\n    appliedIdentityRevision = desiredIdentityRevision;\n    return;\n  }\n\n  if (\n    posthog.get_property(\"$user_id\") !== desiredTelemetryIdentity.distinctId ||\n    appliedIdentityRevision !== desiredIdentityRevision\n  ) {\n    posthog.identify(\n      desiredTelemetryIdentity.distinctId,\n      desiredTelemetryIdentity.properties,\n    );\n    appliedIdentityRevision = desiredIdentityRevision;\n  }\n}\n\nfunction propertiesEqual(\n  left: Record<string, unknown>,\n  right: Record<string, unknown>,\n): boolean {\n  const keys = Object.keys(left);\n  return (\n    keys.length === Object.keys(right).length &&\n    keys.every((key) => left[key] === right[key])\n  );\n}\n\n/**\n * Configure the single Canvas telemetry client before its first use.\n * Passing false disables telemetry and install tracking for embedded hosts.\n */\nexport function configureTelemetry(config: TelemetryConfiguration): void {\n  if (config === false) {\n    if (telemetryDisabled) return;\n    telemetryDisabled = true;\n    posthogInstance?.opt_out_capturing();\n    notifyTelemetryConsentListeners();\n    return;\n  }\n\n  const wasDisabled = telemetryDisabled;\n  telemetryDisabled = false;\n\n  if (!posthogInstance && !initializationPromise) {\n    const definedConfig = Object.fromEntries(\n      Object.entries(config).filter(([, value]) => value !== undefined),\n    ) as TelemetryConfig;\n    telemetryConfig = { ...telemetryConfig, ...definedConfig };\n  }\n\n  if (wasDisabled) {\n    if (posthogInstance) {\n      restorePostHogConsent(posthogInstance);\n      applyDesiredTelemetryIdentity(posthogInstance);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\nfunction getResolvedTelemetryConfig(): Required<TelemetryConfig> | null {\n  if (telemetryDisabled) return null;\n\n  return {\n    apiKey: telemetryConfig.apiKey || DEFAULT_POSTHOG_API_KEY,\n    apiHost: telemetryConfig.apiHost || DEFAULT_POSTHOG_HOST,\n    uiHost: telemetryConfig.uiHost || DEFAULT_POSTHOG_UI_HOST,\n  };\n}\n\n/**\n * Check if we're in a browser environment\n */\nfunction isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof localStorage !== \"undefined\";\n}\n\n/**\n * Lazily load PostHog to avoid SSR/Node.js issues.\n * PostHog is a browser-only library, so we dynamically import it only when needed.\n */\nasync function getPostHog(): Promise<PostHog | null> {\n  if (!isBrowser()) {\n    return null;\n  }\n\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  try {\n    const { default: posthog } = await import(\"posthog-js\");\n    return posthog;\n  } catch {\n    // Failed to load PostHog - telemetry will be disabled\n    return null;\n  }\n}\n\n/**\n * Check if telemetry is disabled via environment variable or browser setting.\n * Works in both Node.js and browser (Vite) environments.\n */\nfunction isDoNotTrackEnabled(): boolean {\n  if (telemetryDisabled) {\n    return true;\n  }\n\n  // Check Vite environment variable (browser)\n  if (\n    typeof import.meta !== \"undefined\" &&\n    import.meta.env?.VITE_DO_NOT_TRACK === \"1\"\n  ) {\n    return true;\n  }\n\n  // Check Node.js environment variable (SSR/testing)\n  if (typeof process !== \"undefined\" && process.env?.DO_NOT_TRACK === \"1\") {\n    return true;\n  }\n\n  // Check browser's navigator.doNotTrack standard\n  if (\n    typeof navigator !== \"undefined\" &&\n    (navigator.doNotTrack === \"1\" ||\n      // @ts-expect-error - Some browsers use window.doNotTrack\n      (typeof window !== \"undefined\" && window.doNotTrack === \"1\"))\n  ) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Initialize PostHog SDK.\n *\n * @param enableCapturing - If true, enable capturing immediately (for install tracking).\n *                          If false, start with capturing disabled (for consent-gated tracking).\n */\nexport function configurePostHogBootstrap(\n  bootstrap: BootstrapConfig | undefined,\n): void {\n  if (!posthogInstance) {\n    pendingBootstrap = bootstrap;\n  }\n}\n\nexport async function initializePostHogClient(\n  enableCapturing = false,\n): Promise<PostHog | null> {\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  if (initializationPromise) {\n    return initializationPromise;\n  }\n\n  initializationPromise = (async () => {\n    const config = getResolvedTelemetryConfig();\n    if (!config) {\n      return null;\n    }\n\n    const posthog = await getPostHog();\n    if (!posthog) {\n      return null;\n    }\n\n    // A named instance isolates Canvas configuration, consent, identity, and\n    // persistence from a host application's default PostHog singleton.\n    const initializedPostHog = posthog.init(\n      config.apiKey,\n      {\n        api_host: config.apiHost,\n        ui_host: config.uiHost,\n        opt_out_capturing_by_default: !enableCapturing,\n        persistence: \"localStorage\",\n        persistence_name: POSTHOG_INSTANCE_NAME,\n        consent_persistence_name: `${POSTHOG_INSTANCE_NAME}-consent`,\n        person_profiles: \"always\",\n        capture_pageview: POSTHOG_PAGEVIEW_CAPTURE_MODE,\n        autocapture: true,\n        disable_session_recording: true,\n        bootstrap: pendingBootstrap,\n        before_send: addCanvasEventProperties,\n      },\n      POSTHOG_INSTANCE_NAME,\n    );\n    if (!initializedPostHog) return null;\n\n    posthogInstance = initializedPostHog;\n    pendingBootstrap = undefined;\n\n    if (telemetryDisabled) {\n      posthogInstance.opt_out_capturing();\n    } else if (getTelemetryConsent() === \"granted\") {\n      posthogInstance.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthogInstance);\n    } else if (!enableCapturing) {\n      posthogInstance.opt_out_capturing();\n    }\n\n    return posthogInstance;\n  })();\n\n  try {\n    return await initializationPromise;\n  } finally {\n    if (!posthogInstance) {\n      initializationPromise = null;\n    }\n  }\n}\n\n/**\n * Get user's telemetry consent preference\n */\nexport function getTelemetryConsent(): TelemetryConsent {\n  if (!isBrowser()) {\n    return \"pending\";\n  }\n\n  // Check environment variable for opt-out\n  if (isDoNotTrackEnabled()) {\n    return \"denied\";\n  }\n\n  if (getLockedCloudAuthMode() === \"cookie\") {\n    return \"granted\";\n  }\n\n  try {\n    const consent = localStorage.getItem(TELEMETRY_CONSENT_KEY);\n    if (consent === \"granted\" || consent === \"denied\") {\n      return consent;\n    }\n  } catch {\n    // Ignore storage errors\n  }\n\n  return \"pending\";\n}\n\n/**\n * Return an explicit browser choice that still needs to survive a Cloud login.\n * It remains pending across local backends so their settings cannot consume a\n * decision that must still be applied after the user connects to Cloud.\n */\nexport function getPendingCloudTelemetryConsent(): ResolvedTelemetryConsent | null {\n  if (!isBrowser()) return null;\n\n  try {\n    const consent = localStorage.getItem(\n      TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY,\n    );\n    return consent === \"granted\" || consent === \"denied\" ? consent : null;\n  } catch {\n    return null;\n  }\n}\n\n/** Return the pre-reset actor whose local Automation consent must be revoked. */\nexport function getPendingLocalTelemetryRevocationId(): string | null {\n  if (!isBrowser()) return null;\n\n  try {\n    return localStorage.getItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY);\n  } catch {\n    return null;\n  }\n}\n\nexport function subscribeTelemetryConsent(listener: () => void): () => void {\n  if (!isBrowser()) return () => {};\n  const handleStorage = (event: StorageEvent) => {\n    if (\n      event.key === TELEMETRY_CONSENT_KEY ||\n      event.key === TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY\n    ) {\n      listener();\n    }\n  };\n  window.addEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n  window.addEventListener(\"storage\", handleStorage);\n\n  return () => {\n    window.removeEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n    window.removeEventListener(\"storage\", handleStorage);\n  };\n}\n\nfunction notifyTelemetryConsentListeners(): void {\n  if (isBrowser())\n    window.dispatchEvent(new Event(TELEMETRY_CONSENT_CHANGE_EVENT));\n}\n\nfunction markTelemetryConsentForCloudSync(\n  consent: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    localStorage.setItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY, consent);\n  } catch {\n    // Ignore storage errors; the in-browser consent decision still applies.\n  }\n}\n\nfunction markPendingLocalTelemetryRevocation(distinctId: string | null): void {\n  if (!isBrowser() || !distinctId) return;\n\n  try {\n    localStorage.setItem(\n      TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY,\n      distinctId,\n    );\n  } catch {\n    // Ignore storage errors; browser capture is still disabled below.\n  }\n}\n\nexport function clearPendingLocalTelemetryRevocation(\n  expectedDistinctId: string,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    if (\n      localStorage.getItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY) !==\n      expectedDistinctId\n    ) {\n      return;\n    }\n    localStorage.removeItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY);\n  } catch {\n    // Ignore storage errors.\n  }\n}\n\nexport function clearPendingCloudTelemetryConsent(\n  expected?: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    if (\n      expected !== undefined &&\n      localStorage.getItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY) !==\n        expected\n    ) {\n      return;\n    }\n    localStorage.removeItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY);\n    notifyTelemetryConsentListeners();\n  } catch {\n    // Ignore storage errors.\n  }\n}\n\n/**\n * Set user's telemetry consent preference\n */\nexport async function setTelemetryConsent(\n  consent: ResolvedTelemetryConsent,\n  { syncToCloud = true }: SetTelemetryConsentOptions = {},\n): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    const previousConsent = getTelemetryConsent();\n    const unchanged = previousConsent === consent;\n    localStorage.setItem(TELEMETRY_CONSENT_KEY, consent);\n    if (telemetryDisabled) return;\n    if (unchanged) return;\n\n    // Reuse an initialized client synchronously so a same-flush identify()\n    // cannot run before consent is applied. Only the cold path awaits import.\n    const posthog = posthogInstance ?? (await initializePostHogClient());\n    if (!posthog) {\n      return;\n    }\n\n    if (consent === \"granted\") {\n      posthog.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthog);\n    } else {\n      markPendingLocalTelemetryRevocation(posthog.get_distinct_id?.() ?? null);\n      if (posthog.get_property?.(\"$user_id\") != null) {\n        resetPostHogIdentity(posthog);\n      } else {\n        posthog.opt_out_capturing();\n      }\n    }\n  } catch {\n    // Ignore storage errors\n  } finally {\n    // Notify UI/backend/identity reconcilers only after the browser capture state\n    // reflects this decision. Otherwise a pre-login grant can trigger an\n    // identify while PostHog is still opted out and lose funnel continuity.\n    if (syncToCloud) {\n      markTelemetryConsentForCloudSync(consent);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\n/**\n * Declare the current Cloud identity. The telemetry service applies it only\n * after consent and owns all reset/account-switch semantics.\n */\nexport async function setTelemetryIdentity(\n  distinctId: string | null,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const nextIdentity = distinctId === null ? null : { distinctId, properties };\n  const unchanged =\n    desiredTelemetryIdentity === nextIdentity ||\n    (desiredTelemetryIdentity !== undefined &&\n      desiredTelemetryIdentity !== null &&\n      nextIdentity !== null &&\n      desiredTelemetryIdentity.distinctId === nextIdentity.distinctId &&\n      propertiesEqual(desiredTelemetryIdentity.properties, properties));\n  if (unchanged) return;\n\n  desiredTelemetryIdentity = nextIdentity;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  if (!isTelemetryEnabled()) return;\n  const posthog = posthogInstance ?? (await initializePostHogClient());\n  if (posthog && isTelemetryEnabled()) {\n    // Read the desired identity after the await so a newer account always wins\n    // if identity changes while the SDK is loading.\n    applyDesiredTelemetryIdentity(posthog);\n  }\n}\n\n/**\n * Check if telemetry is enabled (user has granted consent)\n */\nexport function isTelemetryEnabled(): boolean {\n  return getTelemetryConsent() === \"granted\";\n}\n\n/**\n * Check if first use event has already been sent\n */\nfunction hasFirstUseSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return localStorage.getItem(TELEMETRY_FIRST_USE_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark first use event as sent\n */\nfunction markFirstUseSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_FIRST_USE_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Track the initial install of the library.\n *\n * IMPORTANT: This is sent immediately on first use, regardless of consent status.\n * This allows us to track library adoption even if users haven't made a consent choice yet.\n *\n * The event is:\n * - Completely anonymous (no PII, just a random PostHog distinct_id)\n * - Sent only once per installation (tracked via localStorage, persists across sessions)\n * - Still respects DO_NOT_TRACK environment variable and browser setting\n *\n * Users who want complete privacy can:\n * - Set VITE_DO_NOT_TRACK=1 or browser's Do Not Track\n * - Later deny consent to prevent all future tracking\n */\nexport async function trackInstall(): Promise<void> {\n  // Respect hard opt-out via environment variable or browser setting\n  if (isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Already sent install event (persisted in localStorage - survives app relaunches)\n  if (hasFirstUseSent()) {\n    return;\n  }\n\n  // Initialize PostHog with capturing enabled (for this one event)\n  const posthog = await initializePostHogClient(true);\n  if (!posthog || isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Temporarily enable capturing if it was disabled\n  const wasOptedOut = posthog.has_opted_out_capturing?.() ?? false;\n  if (wasOptedOut) {\n    posthog.opt_in_capturing();\n  }\n\n  // Capture the install event\n  posthog.capture(\"canvas_install\", {\n    platform: typeof navigator !== \"undefined\" ? navigator.platform : \"unknown\",\n    user_agent:\n      typeof navigator !== \"undefined\" ? navigator.userAgent : \"unknown\",\n    referrer: typeof document !== \"undefined\" ? document.referrer : \"\",\n    url_origin: typeof window !== \"undefined\" ? window.location.origin : \"\",\n    embedded: typeof window !== \"undefined\" && window.self !== window.top,\n  });\n\n  // Mark as sent (stored in localStorage - persists across browser sessions)\n  markFirstUseSent();\n\n  // Restore opt-out state if user hasn't granted consent yet\n  // This ensures we only send the install event, not subsequent events\n  const currentConsent = getTelemetryConsent();\n  if (currentConsent !== \"granted\") {\n    posthog.opt_out_capturing();\n  }\n}\n\n/**\n * Check if session start event has already been sent (this browser session)\n */\nfunction hasSessionSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return sessionStorage.getItem(TELEMETRY_SESSION_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark session start event as sent (uses sessionStorage so it resets on new tabs/sessions)\n */\nfunction markSessionSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    sessionStorage.setItem(TELEMETRY_SESSION_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/** Return the shared client only when a consented capture is safe to emit. */\nasync function getPostHogForConsentedCapture(): Promise<PostHog | null> {\n  if (!isTelemetryEnabled() || getTelemetryConsent() !== \"granted\") return null;\n\n  const posthog = await initializePostHogClient();\n  if (!posthog || !isTelemetryEnabled()) return null;\n\n  // The browser preference is the canonical capture decision. PostHog may\n  // still carry an older opt-out marker while backend consent is loading or\n  // after a previous backend temporarily reported a stale value. Heal that\n  // drift at the event boundary so capture() cannot silently discard an event\n  // that the user has explicitly allowed.\n  if (posthog.has_opted_out_capturing?.()) {\n    posthog.opt_in_capturing();\n  }\n\n  applyDesiredTelemetryIdentity(posthog);\n\n  return posthog;\n}\n\n/**\n * Track a session start event.\n * Called each time a new browser session starts (respects consent).\n * Uses sessionStorage for deduplication - only sends once per browser session.\n */\nexport async function trackSessionStart(): Promise<void> {\n  // Already sent session event this browser session\n  if (hasSessionSent()) {\n    return;\n  }\n\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(\"canvas_new_session\", {\n    is_first_use: !hasFirstUseSent(),\n  });\n\n  // Mark as sent for this session\n  markSessionSent();\n}\n\n/** Return the active PostHog distinct ID when consent allows capture. */\nexport async function getTelemetryDistinctId(): Promise<string | null> {\n  const posthog = await getPostHogForConsentedCapture();\n  return posthog?.get_distinct_id?.() ?? null;\n}\n\n/** Return the PostHog distinct ID for local consent sync without emitting capture. */\nexport async function getTelemetryDistinctIdForConsentSync(): Promise<\n  string | null\n> {\n  if (!isBrowser()) return null;\n\n  if (getTelemetryConsent() !== \"granted\") {\n    const pendingRevocationId = getPendingLocalTelemetryRevocationId();\n    if (pendingRevocationId) return pendingRevocationId;\n  }\n\n  if (telemetryDisabled || isDoNotTrackEnabled()) return null;\n\n  const posthog = await initializePostHogClient();\n  return posthog?.get_distinct_id?.() ?? null;\n}\n\n/**\n * Track a custom event (respects consent).\n */\nexport async function trackEvent(\n  eventName: string,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(eventName, properties);\n}\n\n/** Track an exception through the same consent-aware client as custom events. */\nexport async function trackException(\n  error: unknown,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.captureException(error, properties);\n}\n\n/**\n * Clear all telemetry data (for privacy/GDPR requests)\n */\nexport async function clearTelemetryData(): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    markPendingLocalTelemetryRevocation(\n      posthogInstance?.get_distinct_id?.() ?? null,\n    );\n    localStorage.removeItem(TELEMETRY_CONSENT_KEY);\n    localStorage.removeItem(TELEMETRY_FIRST_USE_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n  clearPendingCloudTelemetryConsent();\n  try {\n    sessionStorage.removeItem(TELEMETRY_SESSION_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n\n  telemetryBackendContext = getBackendTelemetryProperties({});\n  telemetryCloudContext = getCloudTelemetryProperties();\n  desiredTelemetryIdentity = null;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  try {\n    if (posthogInstance) {\n      resetPostHogIdentity(posthogInstance, true);\n    }\n  } catch {\n    // A reset failure must not leave capture enabled after a privacy clear.\n    try {\n      posthogInstance?.opt_out_capturing();\n    } catch {\n      // Telemetry failures must not break the application.\n    }\n  } finally {\n    notifyTelemetryConsentListeners();\n  }\n}\n"],"mappings":";;;;;AA4CA,IAAM,IAAwB,+BACxB,IACJ,kDACI,IACJ,wDACI,IAAiC,sCACjC,IAA0B,iCAC1B,IAAwB,+BACxB,IAAwB,gBACxB,IAAgC,kBAIhC,KAAA,oDAOA,IACiC,2BAIjC,IACoC,0BAqBtC,IAAkC,MAClC,IAAwD,MACxD,GACA,IAAmC,CAAC,GACpC,IAAoB,IAUpB,GACA,IAA0B,GAC1B,IAA0B,IAExB,IAA0B,OAAO,OAAO;CAC5C,eAAe;CACf,gBAAgB;CAChB,cAAc,EAAY;CAC1B,iBAAiB,EAAY;AAC/B,CAAC,GAEG,IAA0B,EAA8B,CAAC,CAAC,GAC1D,IAAwB,EAA4B;AAExD,SAAgB,EACd,GACM;CACN,IAA0B,EAA8B,CAAO;AACjE;AAEA,SAAgB,EACd,GACM;CACN,IAAwB,EAA4B,CAAO;AAC7D;AAEA,SAAS,EACP,GACsB;CAGtB,OAFK,IAEE;EACL,GAAG;EACH,YAAY;GACV,GAAG;GACH,GAAG;GACH,GAAG,EAAM;GACT,GAAG;EACL;CACF,IAVmB;AAWrB;AAEA,SAAS,EAAsB,GAAwB;CACrD,AAAI,KAAqB,EAAoB,MAAM,YACjD,EAAQ,kBAAkB,IAE1B,EAAQ,iBAAiB;AAE7B;AAEA,SAAS,EAAqB,GAAkB,IAAgB,IAAa;CAK3E,AAJA,EAAQ,MAAM,CAAa,GAC3B,IAA0B,IAG1B,EAAsB,CAAO;AAC/B;AAEA,SAAS,EAA8B,GAAwB;CAC7D,IAAI,MAA6B,KAAA,KAAa,CAAC,EAAmB,GAAG;CAErE,IAAM,IAAY,GAA0B,YACtC,IAAY,EAAQ,aAAa,UAAU;CAKjD,IAJI,KAAa,QAAQ,MAAc,KACrC,EAAqB,CAAO,GAG1B,MAA6B,MAAM;EACrC,IAA0B;EAC1B;CACF;CAEA,CACE,EAAQ,aAAa,UAAU,MAAM,EAAyB,cAC9D,MAA4B,OAE5B,EAAQ,SACN,EAAyB,YACzB,EAAyB,UAC3B,GACA,IAA0B;AAE9B;AAEA,SAAS,EACP,GACA,GACS;CACT,IAAM,IAAO,OAAO,KAAK,CAAI;CAC7B,OACE,EAAK,WAAW,OAAO,KAAK,CAAK,EAAE,UACnC,EAAK,OAAO,MAAQ,EAAK,OAAS,EAAM,EAAI;AAEhD;AAMA,SAAgB,EAAmB,GAAsC;CACvE,IAAI,MAAW,IAAO;EACpB,IAAI,GAAmB;EAGvB,AAFA,IAAoB,IACpB,GAAiB,kBAAkB,GACnC,EAAgC;EAChC;CACF;CAEA,IAAM,IAAc;CAGpB,IAFA,IAAoB,IAEhB,CAAC,KAAmB,CAAC,GAAuB;EAC9C,IAAM,IAAgB,OAAO,YAC3B,OAAO,QAAQ,CAAM,EAAE,QAAQ,GAAG,OAAW,MAAU,KAAA,CAAS,CAClE;EACA,IAAkB;GAAE,GAAG;GAAiB,GAAG;EAAc;CAC3D;CAEA,AAAI,MACE,MACF,EAAsB,CAAe,GACrC,EAA8B,CAAe,IAE/C,EAAgC;AAEpC;AAEA,SAAS,IAA+D;CAGtE,OAFI,IAA0B,OAEvB;EACL,QAAQ,EAAgB,UAAU;EAClC,SAAS,EAAgB,WAAW;EACpC,QAAQ,EAAgB,UAAU;CACpC;AACF;AAKA,SAAS,IAAqB;CAC5B,OAAO,OAAO,SAAW,OAAe,OAAO,eAAiB;AAClE;AAMA,eAAe,IAAsC;CACnD,IAAI,CAAC,EAAU,GACb,OAAO;CAGT,IAAI,GACF,OAAO;CAGT,IAAI;EACF,IAAM,EAAE,SAAS,MAAY,MAAM,OAAO;EAC1C,OAAO;CACT,QAAQ;EAEN,OAAO;CACT;AACF;AAMA,SAAS,IAA+B;CA4BtC,OATA,GAlBI,KAaA,OAAO,UAAY,OAAe,QAAQ,KAAK,iBAAiB,OAMlE,OAAO,YAAc,QACpB,UAAU,eAAe,OAEvB,OAAO,SAAW,OAAe,OAAO,eAAe;AAM9D;AAQA,SAAgB,EACd,GACM;CACN,AAAK,MACH,IAAmB;AAEvB;AAEA,eAAsB,EACpB,IAAkB,IACO;CACzB,IAAI,GACF,OAAO;CAGT,IAAI,GACF,OAAO;CAGT,KAAyB,YAAY;EACnC,IAAM,IAAS,EAA2B;EAC1C,IAAI,CAAC,GACH,OAAO;EAGT,IAAM,IAAU,MAAM,EAAW;EACjC,IAAI,CAAC,GACH,OAAO;EAKT,IAAM,IAAqB,EAAQ,KACjC,EAAO,QACP;GACE,UAAU,EAAO;GACjB,SAAS,EAAO;GAChB,8BAA8B,CAAC;GAC/B,aAAa;GACb,kBAAkB;GAClB,0BAA0B,GAAG,EAAsB;GACnD,iBAAiB;GACjB,kBAAkB;GAClB,aAAa;GACb,2BAA2B;GAC3B,WAAW;GACX,aAAa;EACf,GACA,CACF;EAeA,OAdK,KAEL,IAAkB,GAClB,IAAmB,KAAA,GAEf,IACF,EAAgB,kBAAkB,IACzB,EAAoB,MAAM,aACnC,EAAgB,iBAAiB,GACjC,EAA8B,CAAe,KACnC,KACV,EAAgB,kBAAkB,GAG7B,KAdyB;CAelC,GAAG;CAEH,IAAI;EACF,OAAO,MAAM;CACf,UAAU;EACR,AAAK,MACH,IAAwB;CAE5B;AACF;AAKA,SAAgB,IAAwC;CACtD,IAAI,CAAC,EAAU,GACb,OAAO;CAIT,IAAI,EAAoB,GACtB,OAAO;CAGT,IAAI,EAAuB,MAAM,UAC/B,OAAO;CAGT,IAAI;EACF,IAAM,IAAU,aAAa,QAAQ,CAAqB;EAC1D,IAAI,MAAY,aAAa,MAAY,UACvC,OAAO;CAEX,QAAQ,CAER;CAEA,OAAO;AACT;AAqBA,SAAgB,IAAsD;CACpE,IAAI,CAAC,EAAU,GAAG,OAAO;CAEzB,IAAI;EACF,OAAO,aAAa,QAAQ,CAA8C;CAC5E,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,EAA0B,GAAkC;CAC1E,IAAI,CAAC,EAAU,GAAG,aAAa,CAAC;CAChC,IAAM,KAAiB,MAAwB;EAC7C,CACE,EAAM,QAAQ,KACd,EAAM,QAAQ,MAEd,EAAS;CAEb;CAIA,OAHA,OAAO,iBAAiB,GAAgC,CAAQ,GAChE,OAAO,iBAAiB,WAAW,CAAa,SAEnC;EAEX,AADA,OAAO,oBAAoB,GAAgC,CAAQ,GACnE,OAAO,oBAAoB,WAAW,CAAa;CACrD;AACF;AAEA,SAAS,IAAwC;CAC/C,AAAI,EAAU,KACZ,OAAO,cAAc,IAAI,MAAM,CAA8B,CAAC;AAClE;AAEA,SAAS,EACP,GACM;CACD,MAAU,GAEf,IAAI;EACF,aAAa,QAAQ,GAA0C,CAAO;CACxE,QAAQ,CAER;AACF;AAEA,SAAS,EAAoC,GAAiC;CACxE,OAAC,EAAU,KAAK,CAAC,IAErB,IAAI;EACF,aAAa,QACX,GACA,CACF;CACF,QAAQ,CAER;AACF;AAEA,SAAgB,EACd,GACM;CACD,MAAU,GAEf,IAAI;EACF,IACE,aAAa,QAAQ,CAA8C,MACnE,GAEA;EAEF,aAAa,WAAW,CAA8C;CACxE,QAAQ,CAER;AACF;AAEA,SAAgB,EACd,GACM;CACD,MAAU,GAEf,IAAI;EACF,IACE,MAAa,KAAA,KACb,aAAa,QAAQ,CAAwC,MAC3D,GAEF;EAGF,AADA,aAAa,WAAW,CAAwC,GAChE,EAAgC;CAClC,QAAQ,CAER;AACF;AAKA,eAAsB,EACpB,GACA,EAAE,iBAAc,OAAqC,CAAC,GACvC;CACV,MAAU,GAIf,IAAI;EAEF,IAAM,IADkB,EACN,MAAoB;EAGtC,IAFA,aAAa,QAAQ,GAAuB,CAAO,GAC/C,KACA,GAAW;EAIf,IAAM,IAAU,KAAoB,MAAM,EAAwB;EAClE,IAAI,CAAC,GACH;EAGF,AAAI,MAAY,aACd,EAAQ,iBAAiB,GACzB,EAA8B,CAAO,MAErC,EAAoC,EAAQ,kBAAkB,KAAK,IAAI,GACnE,EAAQ,eAAe,UAAU,KAAK,OAGxC,EAAQ,kBAAkB,IAF1B,EAAqB,CAAO;CAKlC,QAAQ,CAER,UAAU;EAOR,AAHI,KACF,EAAiC,CAAO,GAE1C,EAAgC;CAClC;AACF;AAMA,eAAsB,EACpB,GACA,IAAsC,CAAC,GACxB;CACf,IAAM,IAAe,MAAe,OAAO,OAAO;EAAE;EAAY;CAAW;CAc3E,IAZE,MAA6B,KAC5B,KAC8B,QAC7B,MAAiB,QACjB,EAAyB,eAAe,EAAa,cACrD,EAAgB,EAAyB,YAAY,CAAU,MAGnE,IAA2B,GAC3B,KAA2B,GAC3B,IAA0B,IAEtB,CAAC,EAAmB,IAAG;CAC3B,IAAM,IAAU,KAAoB,MAAM,EAAwB;CAClE,AAAI,KAAW,EAAmB,KAGhC,EAA8B,CAAO;AAEzC;AAKA,SAAgB,IAA8B;CAC5C,OAAO,EAAoB,MAAM;AACnC;AAKA,SAAS,IAA2B;CAClC,IAAI,CAAC,EAAU,GACb,OAAO;CAGT,IAAI;EACF,OAAO,aAAa,QAAQ,CAAuB,MAAM;CAC3D,QAAQ;EACN,OAAO;CACT;AACF;AAKA,SAAS,KAAyB;CAC3B,MAAU,GAIf,IAAI;EACF,aAAa,QAAQ,GAAyB,MAAM;CACtD,QAAQ,CAER;AACF;AAiBA,eAAsB,KAA8B;CAOlD,IALI,EAAoB,KAKpB,EAAgB,GAClB;CAIF,IAAM,IAAU,MAAM,EAAwB,EAAI;CAC9C,CAAC,KAAW,EAAoB,OAKhB,EAAQ,0BAA0B,KAAK,OAEzD,EAAQ,iBAAiB,GAI3B,EAAQ,QAAQ,kBAAkB;EAChC,UAAU,OAAO,YAAc,MAAc,UAAU,WAAW;EAClE,YACE,OAAO,YAAc,MAAc,UAAU,YAAY;EAC3D,UAAU,OAAO,WAAa,MAAc,SAAS,WAAW;EAChE,YAAY,OAAO,SAAW,MAAc,OAAO,SAAS,SAAS;EACrE,UAAU,OAAO,SAAW,OAAe,OAAO,SAAS,OAAO;CACpE,CAAC,GAGD,GAAiB,GAIM,EACnB,MAAmB,aACrB,EAAQ,kBAAkB;AAE9B;AAKA,SAAS,KAA0B;CACjC,IAAI,CAAC,EAAU,GACb,OAAO;CAGT,IAAI;EACF,OAAO,eAAe,QAAQ,CAAqB,MAAM;CAC3D,QAAQ;EACN,OAAO;CACT;AACF;AAKA,SAAS,KAAwB;CAC1B,MAAU,GAIf,IAAI;EACF,eAAe,QAAQ,GAAuB,MAAM;CACtD,QAAQ,CAER;AACF;AAGA,eAAe,IAAyD;CACtE,IAAI,CAAC,EAAmB,KAAK,EAAoB,MAAM,WAAW,OAAO;CAEzE,IAAM,IAAU,MAAM,EAAwB;CAc9C,OAbI,CAAC,KAAW,CAAC,EAAmB,IAAU,QAO1C,EAAQ,0BAA0B,KACpC,EAAQ,iBAAiB,GAG3B,EAA8B,CAAO,GAE9B;AACT;AAOA,eAAsB,KAAmC;CAEvD,IAAI,GAAe,GACjB;CAGF,IAAM,IAAU,MAAM,EAA8B;CAC/C,MAEL,EAAQ,QAAQ,sBAAsB,EACpC,cAAc,CAAC,EAAgB,EACjC,CAAC,GAGD,GAAgB;AAClB;AAGA,eAAsB,KAAiD;CAErE,QAAO,MADe,EAA8B,IACpC,kBAAkB,KAAK;AACzC;AAGA,eAAsB,KAEpB;CACA,IAAI,CAAC,EAAU,GAAG,OAAO;CAEzB,IAAI,EAAoB,MAAM,WAAW;EACvC,IAAM,IAAsB,EAAqC;EACjE,IAAI,GAAqB,OAAO;CAClC;CAKA,OAHI,KAAqB,EAAoB,IAAU,QAGhD,MADe,EAAwB,IAC9B,kBAAkB,KAAK;AACzC;AAKA,eAAsB,GACpB,GACA,IAAsC,CAAC,GACxB;CACf,IAAM,IAAU,MAAM,EAA8B;CAC/C,KAEL,EAAQ,QAAQ,GAAW,CAAU;AACvC;AAGA,eAAsB,GACpB,GACA,IAAsC,CAAC,GACxB;CACf,IAAM,IAAU,MAAM,EAA8B;CAC/C,KAEL,EAAQ,iBAAiB,GAAO,CAAU;AAC5C;AAKA,eAAsB,KAAoC;CACnD,MAAU,GAIf;MAAI;GAKF,AAJA,EACE,GAAiB,kBAAkB,KAAK,IAC1C,GACA,aAAa,WAAW,CAAqB,GAC7C,aAAa,WAAW,CAAuB;EACjD,QAAQ,CAER;EACA,EAAkC;EAClC,IAAI;GACF,eAAe,WAAW,CAAqB;EACjD,QAAQ,CAER;EAMA,AAJA,IAA0B,EAA8B,CAAC,CAAC,GAC1D,IAAwB,EAA4B,GACpD,IAA2B,MAC3B,KAA2B,GAC3B,IAA0B;EAE1B,IAAI;GACF,AAAI,KACF,EAAqB,GAAiB,EAAI;EAE9C,QAAQ;GAEN,IAAI;IACF,GAAiB,kBAAkB;GACrC,QAAQ,CAER;EACF,UAAU;GACR,EAAgC;EAClC;CA3BA;AA4BF"}
+{"version":3,"file":"telemetry.js","names":[],"sources":["../../src/services/telemetry.ts"],"sourcesContent":["/**\n * Telemetry service for tracking library usage.\n *\n * This module handles anonymous telemetry for the @openhands/agent-canvas package\n * using the PostHog SDK for reliable event delivery with batching, retry logic,\n * and offline support.\n *\n * TRACKING PHILOSOPHY:\n * - Install event (canvas_install): Sent immediately on first use, regardless of consent.\n *   This is anonymous and contains no PII - just basic browser info and a random ID.\n * - Session/custom events: Only sent after user grants consent via the consent modal.\n * - Users can opt out of all future tracking by declining consent.\n *\n * AD BLOCKER BYPASS:\n * By default, telemetry is routed through OpenHands' reverse proxy (z.openhands.dev)\n * to avoid being blocked by ad blockers. Library consumers can override this with:\n * - VITE_POSTHOG_HOST: Custom proxy URL or direct PostHog URL\n * - VITE_POSTHOG_UI_HOST: PostHog UI host (defaults to https://us.posthog.com)\n *\n * IMPORTANT: By default, telemetry is sent to the OpenHands PostHog project.\n * Source builds can override this with VITE_POSTHOG_API_KEY. Precompiled\n * library consumers can pass the same settings to configureTelemetry().\n *\n * Users can disable all telemetry (including install tracking) via:\n * - Setting VITE_DO_NOT_TRACK=1 environment variable\n * - Browser's Do Not Track setting\n */\n\nimport type { BootstrapConfig, CaptureResult, PostHog } from \"posthog-js\";\nimport { getLockedCloudAuthMode } from \"#/api/agent-server-config\";\nimport defaults from \"../../config/defaults.json\";\n\nimport packageJson from \"../../package.json\";\nimport {\n  AGENT_CANVAS_CLIENT_SOURCE,\n  AGENT_CANVAS_CLIENT_VERSION,\n} from \"#/api/client-source\";\nimport {\n  getBackendTelemetryProperties,\n  getCloudTelemetryProperties,\n  type BackendTelemetryContextInput,\n  type CloudTelemetryContextInput,\n} from \"#/services/telemetry-context\";\n\nconst TELEMETRY_CONSENT_KEY = \"openhands-telemetry-consent\";\nconst TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY =\n  \"openhands-telemetry-consent-pending-cloud-sync\";\nconst TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY =\n  \"openhands-telemetry-consent-pending-local-revocation\";\nconst TELEMETRY_CONSENT_CHANGE_EVENT = \"openhands-telemetry-consent-change\";\nconst TELEMETRY_FIRST_USE_KEY = \"openhands-telemetry-first-use\";\nconst TELEMETRY_SESSION_KEY = \"openhands-telemetry-session\";\nconst POSTHOG_INSTANCE_NAME = \"agent-canvas\";\nconst POSTHOG_PAGEVIEW_CAPTURE_MODE = \"history_change\";\n\n// Unconfigured source builds use staging. Production release workflows pass\n// VITE_POSTHOG_API_KEY explicitly for both the app and library artifacts.\nconst DEFAULT_POSTHOG_API_KEY: string =\n  (import.meta.env.VITE_POSTHOG_API_KEY as string | undefined) ||\n  defaults.telemetry.posthogApiKey;\n\n// Default to OpenHands' reverse proxy to bypass ad blockers.\n// The proxy at z.openhands.dev routes to PostHog's US region.\n// Library consumers can override this with their own proxy or direct PostHog URL.\nconst DEFAULT_POSTHOG_HOST =\n  import.meta.env.VITE_POSTHOG_HOST || \"https://z.openhands.dev\";\n\n// UI host is needed for PostHog features like toolbar to work correctly\n// when using a reverse proxy. Defaults to US region.\nconst DEFAULT_POSTHOG_UI_HOST =\n  import.meta.env.VITE_POSTHOG_UI_HOST || \"https://us.posthog.com\";\n\nexport interface TelemetryConfig {\n  /** PostHog project key. Useful for precompiled library consumers. */\n  apiKey?: string;\n  /** Event ingestion host or reverse proxy. */\n  apiHost?: string;\n  /** PostHog UI host used by toolbar links and other UI features. */\n  uiHost?: string;\n}\n\nexport type TelemetryConfiguration = TelemetryConfig | false;\n\nexport type TelemetryConsent = \"granted\" | \"denied\" | \"pending\";\nexport type ResolvedTelemetryConsent = Exclude<TelemetryConsent, \"pending\">;\n\nexport interface SetTelemetryConsentOptions {\n  /** Do not persist a value mirrored from backend settings back to Cloud. */\n  syncToCloud?: boolean;\n}\n\nlet posthogInstance: PostHog | null = null;\nlet initializationPromise: Promise<PostHog | null> | null = null;\nlet pendingBootstrap: BootstrapConfig | undefined;\nlet telemetryConfig: TelemetryConfig = {};\nlet telemetryDisabled = false;\n\ninterface TelemetryIdentity {\n  distinctId: string;\n  properties: Record<string, unknown>;\n}\n\n// undefined means that Cloud identity has not resolved yet; null means that it\n// resolved without a user. This distinction prevents startup from resetting a\n// persisted identity while the current account is still loading.\nlet desiredTelemetryIdentity: TelemetryIdentity | null | undefined;\nlet desiredIdentityRevision = 0;\nlet appliedIdentityRevision = -1;\n\nconst CANVAS_EVENT_PROPERTIES = Object.freeze({\n  client_source: AGENT_CANVAS_CLIENT_SOURCE,\n  client_version: AGENT_CANVAS_CLIENT_VERSION,\n  package_name: packageJson.name,\n  package_version: packageJson.version,\n});\n\nlet telemetryBackendContext = getBackendTelemetryProperties({});\nlet telemetryCloudContext = getCloudTelemetryProperties();\n\nexport function setTelemetryBackendContext(\n  context: BackendTelemetryContextInput,\n): void {\n  telemetryBackendContext = getBackendTelemetryProperties(context);\n}\n\nexport function setTelemetryCloudContext(\n  context: CloudTelemetryContextInput | null,\n): void {\n  telemetryCloudContext = getCloudTelemetryProperties(context);\n}\n\nfunction addCanvasEventProperties(\n  event: CaptureResult | null,\n): CaptureResult | null {\n  if (!event) return null;\n\n  return {\n    ...event,\n    properties: {\n      ...telemetryBackendContext,\n      ...telemetryCloudContext,\n      ...event.properties,\n      ...CANVAS_EVENT_PROPERTIES,\n    },\n  };\n}\n\nfunction restorePostHogConsent(posthog: PostHog): void {\n  if (telemetryDisabled || getTelemetryConsent() !== \"granted\") {\n    posthog.opt_out_capturing();\n  } else {\n    posthog.opt_in_capturing();\n  }\n}\n\nfunction resetPostHogIdentity(posthog: PostHog, resetDeviceId = false): void {\n  posthog.reset(resetDeviceId);\n  appliedIdentityRevision = -1;\n  // PostHog reset clears its own consent persistence, so immediately restore\n  // the canonical Canvas decision kept in localStorage.\n  restorePostHogConsent(posthog);\n}\n\nfunction applyDesiredTelemetryIdentity(posthog: PostHog): void {\n  if (desiredTelemetryIdentity === undefined || !isTelemetryEnabled()) return;\n\n  const desiredId = desiredTelemetryIdentity?.distinctId;\n  const currentId = posthog.get_property(\"$user_id\");\n  if (currentId != null && currentId !== desiredId) {\n    resetPostHogIdentity(posthog);\n  }\n\n  if (desiredTelemetryIdentity === null) {\n    appliedIdentityRevision = desiredIdentityRevision;\n    return;\n  }\n\n  if (\n    posthog.get_property(\"$user_id\") !== desiredTelemetryIdentity.distinctId ||\n    appliedIdentityRevision !== desiredIdentityRevision\n  ) {\n    posthog.identify(\n      desiredTelemetryIdentity.distinctId,\n      desiredTelemetryIdentity.properties,\n    );\n    appliedIdentityRevision = desiredIdentityRevision;\n  }\n}\n\nfunction propertiesEqual(\n  left: Record<string, unknown>,\n  right: Record<string, unknown>,\n): boolean {\n  const keys = Object.keys(left);\n  return (\n    keys.length === Object.keys(right).length &&\n    keys.every((key) => left[key] === right[key])\n  );\n}\n\n/**\n * Configure the single Canvas telemetry client before its first use.\n * Passing false disables telemetry and install tracking for embedded hosts.\n */\nexport function configureTelemetry(config: TelemetryConfiguration): void {\n  if (config === false) {\n    if (telemetryDisabled) return;\n    telemetryDisabled = true;\n    posthogInstance?.opt_out_capturing();\n    notifyTelemetryConsentListeners();\n    return;\n  }\n\n  const wasDisabled = telemetryDisabled;\n  telemetryDisabled = false;\n\n  if (!posthogInstance && !initializationPromise) {\n    const definedConfig = Object.fromEntries(\n      Object.entries(config).filter(([, value]) => value !== undefined),\n    ) as TelemetryConfig;\n    telemetryConfig = { ...telemetryConfig, ...definedConfig };\n  }\n\n  if (wasDisabled) {\n    if (posthogInstance) {\n      restorePostHogConsent(posthogInstance);\n      applyDesiredTelemetryIdentity(posthogInstance);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\nfunction getResolvedTelemetryConfig(): Required<TelemetryConfig> | null {\n  if (telemetryDisabled) return null;\n\n  return {\n    apiKey: telemetryConfig.apiKey || DEFAULT_POSTHOG_API_KEY,\n    apiHost: telemetryConfig.apiHost || DEFAULT_POSTHOG_HOST,\n    uiHost: telemetryConfig.uiHost || DEFAULT_POSTHOG_UI_HOST,\n  };\n}\n\n/**\n * Check if we're in a browser environment\n */\nfunction isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof localStorage !== \"undefined\";\n}\n\n/**\n * Lazily load PostHog to avoid SSR/Node.js issues.\n * PostHog is a browser-only library, so we dynamically import it only when needed.\n */\nasync function getPostHog(): Promise<PostHog | null> {\n  if (!isBrowser()) {\n    return null;\n  }\n\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  try {\n    const { default: posthog } = await import(\"posthog-js\");\n    return posthog;\n  } catch {\n    // Failed to load PostHog - telemetry will be disabled\n    return null;\n  }\n}\n\n/**\n * Check if telemetry is disabled via environment variable or browser setting.\n * Works in both Node.js and browser (Vite) environments.\n */\nfunction isDoNotTrackEnabled(): boolean {\n  if (telemetryDisabled) {\n    return true;\n  }\n\n  // Check Vite environment variable (browser)\n  if (\n    typeof import.meta !== \"undefined\" &&\n    import.meta.env?.VITE_DO_NOT_TRACK === \"1\"\n  ) {\n    return true;\n  }\n\n  // Check Node.js environment variable (SSR/testing)\n  if (typeof process !== \"undefined\" && process.env?.DO_NOT_TRACK === \"1\") {\n    return true;\n  }\n\n  // Check browser's navigator.doNotTrack standard\n  if (\n    typeof navigator !== \"undefined\" &&\n    (navigator.doNotTrack === \"1\" ||\n      // @ts-expect-error - Some browsers use window.doNotTrack\n      (typeof window !== \"undefined\" && window.doNotTrack === \"1\"))\n  ) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Initialize PostHog SDK.\n *\n * @param enableCapturing - If true, enable capturing immediately (for install tracking).\n *                          If false, start with capturing disabled (for consent-gated tracking).\n */\nexport function configurePostHogBootstrap(\n  bootstrap: BootstrapConfig | undefined,\n): void {\n  if (!posthogInstance) {\n    pendingBootstrap = bootstrap;\n  }\n}\n\nexport async function initializePostHogClient(\n  enableCapturing = false,\n): Promise<PostHog | null> {\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  if (initializationPromise) {\n    return initializationPromise;\n  }\n\n  initializationPromise = (async () => {\n    const config = getResolvedTelemetryConfig();\n    if (!config) {\n      return null;\n    }\n\n    const posthog = await getPostHog();\n    if (!posthog) {\n      return null;\n    }\n\n    // A named instance isolates Canvas configuration, consent, identity, and\n    // persistence from a host application's default PostHog singleton.\n    const initializedPostHog = posthog.init(\n      config.apiKey,\n      {\n        api_host: config.apiHost,\n        ui_host: config.uiHost,\n        opt_out_capturing_by_default: !enableCapturing,\n        persistence: \"localStorage\",\n        persistence_name: POSTHOG_INSTANCE_NAME,\n        consent_persistence_name: `${POSTHOG_INSTANCE_NAME}-consent`,\n        person_profiles: \"always\",\n        capture_pageview: POSTHOG_PAGEVIEW_CAPTURE_MODE,\n        autocapture: true,\n        disable_session_recording: true,\n        bootstrap: pendingBootstrap,\n        before_send: addCanvasEventProperties,\n      },\n      POSTHOG_INSTANCE_NAME,\n    );\n    if (!initializedPostHog) return null;\n\n    posthogInstance = initializedPostHog;\n    pendingBootstrap = undefined;\n\n    if (telemetryDisabled) {\n      posthogInstance.opt_out_capturing();\n    } else if (getTelemetryConsent() === \"granted\") {\n      posthogInstance.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthogInstance);\n    } else if (!enableCapturing) {\n      posthogInstance.opt_out_capturing();\n    }\n\n    return posthogInstance;\n  })();\n\n  try {\n    return await initializationPromise;\n  } finally {\n    if (!posthogInstance) {\n      initializationPromise = null;\n    }\n  }\n}\n\n/**\n * Get user's telemetry consent preference\n */\nexport function getTelemetryConsent(): TelemetryConsent {\n  if (!isBrowser()) {\n    return \"pending\";\n  }\n\n  // Check environment variable for opt-out\n  if (isDoNotTrackEnabled()) {\n    return \"denied\";\n  }\n\n  if (getLockedCloudAuthMode() === \"cookie\") {\n    return \"granted\";\n  }\n\n  try {\n    const consent = localStorage.getItem(TELEMETRY_CONSENT_KEY);\n    if (consent === \"granted\" || consent === \"denied\") {\n      return consent;\n    }\n  } catch {\n    // Ignore storage errors\n  }\n\n  return \"pending\";\n}\n\n/**\n * Return an explicit browser choice that still needs to survive a Cloud login.\n * It remains pending across local backends so their settings cannot consume a\n * decision that must still be applied after the user connects to Cloud.\n */\nexport function getPendingCloudTelemetryConsent(): ResolvedTelemetryConsent | null {\n  if (!isBrowser()) return null;\n\n  try {\n    const consent = localStorage.getItem(\n      TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY,\n    );\n    return consent === \"granted\" || consent === \"denied\" ? consent : null;\n  } catch {\n    return null;\n  }\n}\n\n/** Return the pre-reset actor whose local Automation consent must be revoked. */\nexport function getPendingLocalTelemetryRevocationId(): string | null {\n  if (!isBrowser()) return null;\n\n  try {\n    return localStorage.getItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY);\n  } catch {\n    return null;\n  }\n}\n\nexport function subscribeTelemetryConsent(listener: () => void): () => void {\n  if (!isBrowser()) return () => {};\n  const handleStorage = (event: StorageEvent) => {\n    if (\n      event.key === TELEMETRY_CONSENT_KEY ||\n      event.key === TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY\n    ) {\n      listener();\n    }\n  };\n  window.addEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n  window.addEventListener(\"storage\", handleStorage);\n\n  return () => {\n    window.removeEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n    window.removeEventListener(\"storage\", handleStorage);\n  };\n}\n\nfunction notifyTelemetryConsentListeners(): void {\n  if (isBrowser())\n    window.dispatchEvent(new Event(TELEMETRY_CONSENT_CHANGE_EVENT));\n}\n\nfunction markTelemetryConsentForCloudSync(\n  consent: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    localStorage.setItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY, consent);\n  } catch {\n    // Ignore storage errors; the in-browser consent decision still applies.\n  }\n}\n\nfunction markPendingLocalTelemetryRevocation(distinctId: string | null): void {\n  if (!isBrowser() || !distinctId) return;\n\n  try {\n    localStorage.setItem(\n      TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY,\n      distinctId,\n    );\n  } catch {\n    // Ignore storage errors; browser capture is still disabled below.\n  }\n}\n\nexport function clearPendingLocalTelemetryRevocation(\n  expectedDistinctId: string,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    if (\n      localStorage.getItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY) !==\n      expectedDistinctId\n    ) {\n      return;\n    }\n    localStorage.removeItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY);\n  } catch {\n    // Ignore storage errors.\n  }\n}\n\nexport function clearPendingCloudTelemetryConsent(\n  expected?: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    if (\n      expected !== undefined &&\n      localStorage.getItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY) !==\n        expected\n    ) {\n      return;\n    }\n    localStorage.removeItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY);\n    notifyTelemetryConsentListeners();\n  } catch {\n    // Ignore storage errors.\n  }\n}\n\n/**\n * Set user's telemetry consent preference\n */\nexport async function setTelemetryConsent(\n  consent: ResolvedTelemetryConsent,\n  { syncToCloud = true }: SetTelemetryConsentOptions = {},\n): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    const previousConsent = getTelemetryConsent();\n    const unchanged = previousConsent === consent;\n    localStorage.setItem(TELEMETRY_CONSENT_KEY, consent);\n    if (telemetryDisabled) return;\n    if (unchanged) return;\n\n    // Reuse an initialized client synchronously so a same-flush identify()\n    // cannot run before consent is applied. Only the cold path awaits import.\n    const posthog = posthogInstance ?? (await initializePostHogClient());\n    if (!posthog) {\n      return;\n    }\n\n    if (consent === \"granted\") {\n      posthog.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthog);\n    } else {\n      markPendingLocalTelemetryRevocation(posthog.get_distinct_id?.() ?? null);\n      if (posthog.get_property?.(\"$user_id\") != null) {\n        resetPostHogIdentity(posthog);\n      } else {\n        posthog.opt_out_capturing();\n      }\n    }\n  } catch {\n    // Ignore storage errors\n  } finally {\n    // Notify UI/backend/identity reconcilers only after the browser capture state\n    // reflects this decision. Otherwise a pre-login grant can trigger an\n    // identify while PostHog is still opted out and lose funnel continuity.\n    if (syncToCloud) {\n      markTelemetryConsentForCloudSync(consent);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\n/**\n * Declare the current Cloud identity. The telemetry service applies it only\n * after consent and owns all reset/account-switch semantics.\n */\nexport async function setTelemetryIdentity(\n  distinctId: string | null,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const nextIdentity = distinctId === null ? null : { distinctId, properties };\n  const unchanged =\n    desiredTelemetryIdentity === nextIdentity ||\n    (desiredTelemetryIdentity !== undefined &&\n      desiredTelemetryIdentity !== null &&\n      nextIdentity !== null &&\n      desiredTelemetryIdentity.distinctId === nextIdentity.distinctId &&\n      propertiesEqual(desiredTelemetryIdentity.properties, properties));\n  if (unchanged) return;\n\n  desiredTelemetryIdentity = nextIdentity;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  if (!isTelemetryEnabled()) return;\n  const posthog = posthogInstance ?? (await initializePostHogClient());\n  if (posthog && isTelemetryEnabled()) {\n    // Read the desired identity after the await so a newer account always wins\n    // if identity changes while the SDK is loading.\n    applyDesiredTelemetryIdentity(posthog);\n  }\n}\n\n/**\n * Check if telemetry is enabled (user has granted consent)\n */\nexport function isTelemetryEnabled(): boolean {\n  return getTelemetryConsent() === \"granted\";\n}\n\n/**\n * Check if first use event has already been sent\n */\nfunction hasFirstUseSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return localStorage.getItem(TELEMETRY_FIRST_USE_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark first use event as sent\n */\nfunction markFirstUseSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_FIRST_USE_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Track the initial install of the library.\n *\n * IMPORTANT: This is sent immediately on first use, regardless of consent status.\n * This allows us to track library adoption even if users haven't made a consent choice yet.\n *\n * The event is:\n * - Completely anonymous (no PII, just a random PostHog distinct_id)\n * - Sent only once per installation (tracked via localStorage, persists across sessions)\n * - Still respects DO_NOT_TRACK environment variable and browser setting\n *\n * Users who want complete privacy can:\n * - Set VITE_DO_NOT_TRACK=1 or browser's Do Not Track\n * - Later deny consent to prevent all future tracking\n */\nexport async function trackInstall(): Promise<void> {\n  // Respect hard opt-out via environment variable or browser setting\n  if (isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Already sent install event (persisted in localStorage - survives app relaunches)\n  if (hasFirstUseSent()) {\n    return;\n  }\n\n  // Initialize PostHog with capturing enabled (for this one event)\n  const posthog = await initializePostHogClient(true);\n  if (!posthog || isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Temporarily enable capturing if it was disabled\n  const wasOptedOut = posthog.has_opted_out_capturing?.() ?? false;\n  if (wasOptedOut) {\n    posthog.opt_in_capturing();\n  }\n\n  // Capture the install event\n  posthog.capture(\"canvas_install\", {\n    platform: typeof navigator !== \"undefined\" ? navigator.platform : \"unknown\",\n    user_agent:\n      typeof navigator !== \"undefined\" ? navigator.userAgent : \"unknown\",\n    referrer: typeof document !== \"undefined\" ? document.referrer : \"\",\n    url_origin: typeof window !== \"undefined\" ? window.location.origin : \"\",\n    embedded: typeof window !== \"undefined\" && window.self !== window.top,\n  });\n\n  // Mark as sent (stored in localStorage - persists across browser sessions)\n  markFirstUseSent();\n\n  // Restore opt-out state if user hasn't granted consent yet\n  // This ensures we only send the install event, not subsequent events\n  const currentConsent = getTelemetryConsent();\n  if (currentConsent !== \"granted\") {\n    posthog.opt_out_capturing();\n  }\n}\n\n/**\n * Check if session start event has already been sent (this browser session)\n */\nfunction hasSessionSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return sessionStorage.getItem(TELEMETRY_SESSION_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark session start event as sent (uses sessionStorage so it resets on new tabs/sessions)\n */\nfunction markSessionSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    sessionStorage.setItem(TELEMETRY_SESSION_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/** Return the shared client only when a consented capture is safe to emit. */\nasync function getPostHogForConsentedCapture(): Promise<PostHog | null> {\n  if (!isTelemetryEnabled() || getTelemetryConsent() !== \"granted\") return null;\n\n  const posthog = await initializePostHogClient();\n  if (!posthog || !isTelemetryEnabled()) return null;\n\n  // The browser preference is the canonical capture decision. PostHog may\n  // still carry an older opt-out marker while backend consent is loading or\n  // after a previous backend temporarily reported a stale value. Heal that\n  // drift at the event boundary so capture() cannot silently discard an event\n  // that the user has explicitly allowed.\n  if (posthog.has_opted_out_capturing?.()) {\n    posthog.opt_in_capturing();\n  }\n\n  applyDesiredTelemetryIdentity(posthog);\n\n  return posthog;\n}\n\n/**\n * Track a session start event.\n * Called each time a new browser session starts (respects consent).\n * Uses sessionStorage for deduplication - only sends once per browser session.\n */\nexport async function trackSessionStart(): Promise<void> {\n  // Already sent session event this browser session\n  if (hasSessionSent()) {\n    return;\n  }\n\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(\"canvas_new_session\", {\n    is_first_use: !hasFirstUseSent(),\n  });\n\n  // Mark as sent for this session\n  markSessionSent();\n}\n\n/** Return the active PostHog distinct ID when consent allows capture. */\nexport async function getTelemetryDistinctId(): Promise<string | null> {\n  const posthog = await getPostHogForConsentedCapture();\n  return posthog?.get_distinct_id?.() ?? null;\n}\n\n/** Return the PostHog distinct ID for local consent sync without emitting capture. */\nexport async function getTelemetryDistinctIdForConsentSync(): Promise<\n  string | null\n> {\n  if (!isBrowser()) return null;\n\n  if (getTelemetryConsent() !== \"granted\") {\n    const pendingRevocationId = getPendingLocalTelemetryRevocationId();\n    if (pendingRevocationId) return pendingRevocationId;\n  }\n\n  if (telemetryDisabled || isDoNotTrackEnabled()) return null;\n\n  const posthog = await initializePostHogClient();\n  return posthog?.get_distinct_id?.() ?? null;\n}\n\n/**\n * Track a custom event (respects consent).\n */\nexport async function trackEvent(\n  eventName: string,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(eventName, properties);\n}\n\n/** Track an exception through the same consent-aware client as custom events. */\nexport async function trackException(\n  error: unknown,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.captureException(error, properties);\n}\n\n/**\n * Clear all telemetry data (for privacy/GDPR requests)\n */\nexport async function clearTelemetryData(): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    markPendingLocalTelemetryRevocation(\n      posthogInstance?.get_distinct_id?.() ?? null,\n    );\n    localStorage.removeItem(TELEMETRY_CONSENT_KEY);\n    localStorage.removeItem(TELEMETRY_FIRST_USE_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n  clearPendingCloudTelemetryConsent();\n  try {\n    sessionStorage.removeItem(TELEMETRY_SESSION_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n\n  telemetryBackendContext = getBackendTelemetryProperties({});\n  telemetryCloudContext = getCloudTelemetryProperties();\n  desiredTelemetryIdentity = null;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  try {\n    if (posthogInstance) {\n      resetPostHogIdentity(posthogInstance, true);\n    }\n  } catch {\n    // A reset failure must not leave capture enabled after a privacy clear.\n    try {\n      posthogInstance?.opt_out_capturing();\n    } catch {\n      // Telemetry failures must not break the application.\n    }\n  } finally {\n    notifyTelemetryConsentListeners();\n  }\n}\n"],"mappings":";;;;;AA4CA,IAAM,IAAwB,+BACxB,IACJ,kDACI,IACJ,wDACI,IAAiC,sCACjC,IAA0B,iCAC1B,IAAwB,+BACxB,IAAwB,gBACxB,IAAgC,kBAIhC,IAAA,oDAOA,IACiC,2BAIjC,IACoC,0BAqBtC,IAAkC,MAClC,IAAwD,MACxD,GACA,IAAmC,CAAC,GACpC,IAAoB,IAUpB,GACA,IAA0B,GAC1B,IAA0B,IAExB,IAA0B,OAAO,OAAO;CAC5C,eAAe;CACf,gBAAgB;CAChB,cAAc,EAAY;CAC1B,iBAAiB,EAAY;AAC/B,CAAC,GAEG,IAA0B,EAA8B,CAAC,CAAC,GAC1D,IAAwB,EAA4B;AAExD,SAAgB,EACd,GACM;CACN,IAA0B,EAA8B,CAAO;AACjE;AAEA,SAAgB,EACd,GACM;CACN,IAAwB,EAA4B,CAAO;AAC7D;AAEA,SAAS,GACP,GACsB;CAGtB,OAFK,IAEE;EACL,GAAG;EACH,YAAY;GACV,GAAG;GACH,GAAG;GACH,GAAG,EAAM;GACT,GAAG;EACL;CACF,IAVmB;AAWrB;AAEA,SAAS,EAAsB,GAAwB;CACrD,AAAI,KAAqB,EAAoB,MAAM,YACjD,EAAQ,kBAAkB,IAE1B,EAAQ,iBAAiB;AAE7B;AAEA,SAAS,EAAqB,GAAkB,IAAgB,IAAa;CAK3E,AAJA,EAAQ,MAAM,CAAa,GAC3B,IAA0B,IAG1B,EAAsB,CAAO;AAC/B;AAEA,SAAS,EAA8B,GAAwB;CAC7D,IAAI,MAA6B,KAAA,KAAa,CAAC,EAAmB,GAAG;CAErE,IAAM,IAAY,GAA0B,YACtC,IAAY,EAAQ,aAAa,UAAU;CAKjD,IAJI,KAAa,QAAQ,MAAc,KACrC,EAAqB,CAAO,GAG1B,MAA6B,MAAM;EACrC,IAA0B;EAC1B;CACF;CAEA,CACE,EAAQ,aAAa,UAAU,MAAM,EAAyB,cAC9D,MAA4B,OAE5B,EAAQ,SACN,EAAyB,YACzB,EAAyB,UAC3B,GACA,IAA0B;AAE9B;AAEA,SAAS,EACP,GACA,GACS;CACT,IAAM,IAAO,OAAO,KAAK,CAAI;CAC7B,OACE,EAAK,WAAW,OAAO,KAAK,CAAK,EAAE,UACnC,EAAK,OAAO,MAAQ,EAAK,OAAS,EAAM,EAAI;AAEhD;AAMA,SAAgB,EAAmB,GAAsC;CACvE,IAAI,MAAW,IAAO;EACpB,IAAI,GAAmB;EAGvB,AAFA,IAAoB,IACpB,GAAiB,kBAAkB,GACnC,EAAgC;EAChC;CACF;CAEA,IAAM,IAAc;CAGpB,IAFA,IAAoB,IAEhB,CAAC,KAAmB,CAAC,GAAuB;EAC9C,IAAM,IAAgB,OAAO,YAC3B,OAAO,QAAQ,CAAM,EAAE,QAAQ,GAAG,OAAW,MAAU,KAAA,CAAS,CAClE;EACA,IAAkB;GAAE,GAAG;GAAiB,GAAG;EAAc;CAC3D;CAEA,AAAI,MACE,MACF,EAAsB,CAAe,GACrC,EAA8B,CAAe,IAE/C,EAAgC;AAEpC;AAEA,SAAS,IAA+D;CAGtE,OAFI,IAA0B,OAEvB;EACL,QAAQ,EAAgB,UAAU;EAClC,SAAS,EAAgB,WAAW;EACpC,QAAQ,EAAgB,UAAU;CACpC;AACF;AAKA,SAAS,IAAqB;CAC5B,OAAO,OAAO,SAAW,OAAe,OAAO,eAAiB;AAClE;AAMA,eAAe,IAAsC;CACnD,IAAI,CAAC,EAAU,GACb,OAAO;CAGT,IAAI,GACF,OAAO;CAGT,IAAI;EACF,IAAM,EAAE,SAAS,MAAY,MAAM,OAAO;EAC1C,OAAO;CACT,QAAQ;EAEN,OAAO;CACT;AACF;AAMA,SAAS,IAA+B;CA4BtC,OATA,GAlBI,KAaA,OAAO,UAAY,OAAe,QAAQ,KAAK,iBAAiB,OAMlE,OAAO,YAAc,QACpB,UAAU,eAAe,OAEvB,OAAO,SAAW,OAAe,OAAO,eAAe;AAM9D;AAQA,SAAgB,EACd,GACM;CACN,AAAK,MACH,IAAmB;AAEvB;AAEA,eAAsB,EACpB,IAAkB,IACO;CACzB,IAAI,GACF,OAAO;CAGT,IAAI,GACF,OAAO;CAGT,KAAyB,YAAY;EACnC,IAAM,IAAS,EAA2B;EAC1C,IAAI,CAAC,GACH,OAAO;EAGT,IAAM,IAAU,MAAM,EAAW;EACjC,IAAI,CAAC,GACH,OAAO;EAKT,IAAM,IAAqB,EAAQ,KACjC,EAAO,QACP;GACE,UAAU,EAAO;GACjB,SAAS,EAAO;GAChB,8BAA8B,CAAC;GAC/B,aAAa;GACb,kBAAkB;GAClB,0BAA0B,GAAG,EAAsB;GACnD,iBAAiB;GACjB,kBAAkB;GAClB,aAAa;GACb,2BAA2B;GAC3B,WAAW;GACX,aAAa;EACf,GACA,CACF;EAeA,OAdK,KAEL,IAAkB,GAClB,IAAmB,KAAA,GAEf,IACF,EAAgB,kBAAkB,IACzB,EAAoB,MAAM,aACnC,EAAgB,iBAAiB,GACjC,EAA8B,CAAe,KACnC,KACV,EAAgB,kBAAkB,GAG7B,KAdyB;CAelC,GAAG;CAEH,IAAI;EACF,OAAO,MAAM;CACf,UAAU;EACR,AAAK,MACH,IAAwB;CAE5B;AACF;AAKA,SAAgB,IAAwC;CACtD,IAAI,CAAC,EAAU,GACb,OAAO;CAIT,IAAI,EAAoB,GACtB,OAAO;CAGT,IAAI,EAAuB,MAAM,UAC/B,OAAO;CAGT,IAAI;EACF,IAAM,IAAU,aAAa,QAAQ,CAAqB;EAC1D,IAAI,MAAY,aAAa,MAAY,UACvC,OAAO;CAEX,QAAQ,CAER;CAEA,OAAO;AACT;AAqBA,SAAgB,IAAsD;CACpE,IAAI,CAAC,EAAU,GAAG,OAAO;CAEzB,IAAI;EACF,OAAO,aAAa,QAAQ,CAA8C;CAC5E,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,EAA0B,GAAkC;CAC1E,IAAI,CAAC,EAAU,GAAG,aAAa,CAAC;CAChC,IAAM,KAAiB,MAAwB;EAC7C,CACE,EAAM,QAAQ,KACd,EAAM,QAAQ,MAEd,EAAS;CAEb;CAIA,OAHA,OAAO,iBAAiB,GAAgC,CAAQ,GAChE,OAAO,iBAAiB,WAAW,CAAa,SAEnC;EAEX,AADA,OAAO,oBAAoB,GAAgC,CAAQ,GACnE,OAAO,oBAAoB,WAAW,CAAa;CACrD;AACF;AAEA,SAAS,IAAwC;CAC/C,AAAI,EAAU,KACZ,OAAO,cAAc,IAAI,MAAM,CAA8B,CAAC;AAClE;AAEA,SAAS,EACP,GACM;CACD,MAAU,GAEf,IAAI;EACF,aAAa,QAAQ,GAA0C,CAAO;CACxE,QAAQ,CAER;AACF;AAEA,SAAS,EAAoC,GAAiC;CACxE,OAAC,EAAU,KAAK,CAAC,IAErB,IAAI;EACF,aAAa,QACX,GACA,CACF;CACF,QAAQ,CAER;AACF;AAEA,SAAgB,EACd,GACM;CACD,MAAU,GAEf,IAAI;EACF,IACE,aAAa,QAAQ,CAA8C,MACnE,GAEA;EAEF,aAAa,WAAW,CAA8C;CACxE,QAAQ,CAER;AACF;AAEA,SAAgB,EACd,GACM;CACD,MAAU,GAEf,IAAI;EACF,IACE,MAAa,KAAA,KACb,aAAa,QAAQ,CAAwC,MAC3D,GAEF;EAGF,AADA,aAAa,WAAW,CAAwC,GAChE,EAAgC;CAClC,QAAQ,CAER;AACF;AAKA,eAAsB,EACpB,GACA,EAAE,iBAAc,OAAqC,CAAC,GACvC;CACV,MAAU,GAIf,IAAI;EAEF,IAAM,IADkB,EACN,MAAoB;EAGtC,IAFA,aAAa,QAAQ,GAAuB,CAAO,GAC/C,KACA,GAAW;EAIf,IAAM,IAAU,KAAoB,MAAM,EAAwB;EAClE,IAAI,CAAC,GACH;EAGF,AAAI,MAAY,aACd,EAAQ,iBAAiB,GACzB,EAA8B,CAAO,MAErC,EAAoC,EAAQ,kBAAkB,KAAK,IAAI,GACnE,EAAQ,eAAe,UAAU,KAAK,OAGxC,EAAQ,kBAAkB,IAF1B,EAAqB,CAAO;CAKlC,QAAQ,CAER,UAAU;EAOR,AAHI,KACF,EAAiC,CAAO,GAE1C,EAAgC;CAClC;AACF;AAMA,eAAsB,EACpB,GACA,IAAsC,CAAC,GACxB;CACf,IAAM,IAAe,MAAe,OAAO,OAAO;EAAE;EAAY;CAAW;CAc3E,IAZE,MAA6B,KAC5B,KAC8B,QAC7B,MAAiB,QACjB,EAAyB,eAAe,EAAa,cACrD,EAAgB,EAAyB,YAAY,CAAU,MAGnE,IAA2B,GAC3B,KAA2B,GAC3B,IAA0B,IAEtB,CAAC,EAAmB,IAAG;CAC3B,IAAM,IAAU,KAAoB,MAAM,EAAwB;CAClE,AAAI,KAAW,EAAmB,KAGhC,EAA8B,CAAO;AAEzC;AAKA,SAAgB,IAA8B;CAC5C,OAAO,EAAoB,MAAM;AACnC;AAKA,SAAS,IAA2B;CAClC,IAAI,CAAC,EAAU,GACb,OAAO;CAGT,IAAI;EACF,OAAO,aAAa,QAAQ,CAAuB,MAAM;CAC3D,QAAQ;EACN,OAAO;CACT;AACF;AAKA,SAAS,KAAyB;CAC3B,MAAU,GAIf,IAAI;EACF,aAAa,QAAQ,GAAyB,MAAM;CACtD,QAAQ,CAER;AACF;AAiBA,eAAsB,KAA8B;CAOlD,IALI,EAAoB,KAKpB,EAAgB,GAClB;CAIF,IAAM,IAAU,MAAM,EAAwB,EAAI;CAC9C,CAAC,KAAW,EAAoB,OAKhB,EAAQ,0BAA0B,KAAK,OAEzD,EAAQ,iBAAiB,GAI3B,EAAQ,QAAQ,kBAAkB;EAChC,UAAU,OAAO,YAAc,MAAc,UAAU,WAAW;EAClE,YACE,OAAO,YAAc,MAAc,UAAU,YAAY;EAC3D,UAAU,OAAO,WAAa,MAAc,SAAS,WAAW;EAChE,YAAY,OAAO,SAAW,MAAc,OAAO,SAAS,SAAS;EACrE,UAAU,OAAO,SAAW,OAAe,OAAO,SAAS,OAAO;CACpE,CAAC,GAGD,GAAiB,GAIM,EACnB,MAAmB,aACrB,EAAQ,kBAAkB;AAE9B;AAKA,SAAS,KAA0B;CACjC,IAAI,CAAC,EAAU,GACb,OAAO;CAGT,IAAI;EACF,OAAO,eAAe,QAAQ,CAAqB,MAAM;CAC3D,QAAQ;EACN,OAAO;CACT;AACF;AAKA,SAAS,KAAwB;CAC1B,MAAU,GAIf,IAAI;EACF,eAAe,QAAQ,GAAuB,MAAM;CACtD,QAAQ,CAER;AACF;AAGA,eAAe,IAAyD;CACtE,IAAI,CAAC,EAAmB,KAAK,EAAoB,MAAM,WAAW,OAAO;CAEzE,IAAM,IAAU,MAAM,EAAwB;CAc9C,OAbI,CAAC,KAAW,CAAC,EAAmB,IAAU,QAO1C,EAAQ,0BAA0B,KACpC,EAAQ,iBAAiB,GAG3B,EAA8B,CAAO,GAE9B;AACT;AAOA,eAAsB,KAAmC;CAEvD,IAAI,GAAe,GACjB;CAGF,IAAM,IAAU,MAAM,EAA8B;CAC/C,MAEL,EAAQ,QAAQ,sBAAsB,EACpC,cAAc,CAAC,EAAgB,EACjC,CAAC,GAGD,GAAgB;AAClB;AAGA,eAAsB,KAAiD;CAErE,QAAO,MADe,EAA8B,IACpC,kBAAkB,KAAK;AACzC;AAGA,eAAsB,KAEpB;CACA,IAAI,CAAC,EAAU,GAAG,OAAO;CAEzB,IAAI,EAAoB,MAAM,WAAW;EACvC,IAAM,IAAsB,EAAqC;EACjE,IAAI,GAAqB,OAAO;CAClC;CAKA,OAHI,KAAqB,EAAoB,IAAU,QAGhD,MADe,EAAwB,IAC9B,kBAAkB,KAAK;AACzC;AAKA,eAAsB,GACpB,GACA,IAAsC,CAAC,GACxB;CACf,IAAM,IAAU,MAAM,EAA8B;CAC/C,KAEL,EAAQ,QAAQ,GAAW,CAAU;AACvC;AAgBA,eAAsB,KAAoC;CACnD,MAAU,GAIf;MAAI;GAKF,AAJA,EACE,GAAiB,kBAAkB,KAAK,IAC1C,GACA,aAAa,WAAW,CAAqB,GAC7C,aAAa,WAAW,CAAuB;EACjD,QAAQ,CAER;EACA,EAAkC;EAClC,IAAI;GACF,eAAe,WAAW,CAAqB;EACjD,QAAQ,CAER;EAMA,AAJA,IAA0B,EAA8B,CAAC,CAAC,GAC1D,IAAwB,EAA4B,GACpD,IAA2B,MAC3B,KAA2B,GAC3B,IAA0B;EAE1B,IAAI;GACF,AAAI,KACF,EAAqB,GAAiB,EAAI;EAE9C,QAAQ;GAEN,IAAI;IACF,GAAiB,kBAAkB;GACrC,QAAQ,CAER;EACF,UAAU;GACR,EAAgC;EAClC;CA3BA;AA4BF"}

package/dist/stores/archived-conversations-store.cjs

@@ -0,0 +1,2 @@
+require("../_virtual/_rolldown/runtime.cjs");const e=require("../node_modules/zustand/esm/react.cjs"),t=require("../node_modules/zustand/esm/middleware.cjs");var n=`archived-conversations`,r={archivesByBackendId:{}};function i(e,t){return e[t]??[]}var a=e.create()(t.persist((e,t)=>({...r,archiveConversation:(n,r)=>{let a=i(t().archivesByBackendId,n);a.includes(r)||e(e=>({archivesByBackendId:{...e.archivesByBackendId,[n]:[r,...a]}}))},removeArchivedConversation:(n,r)=>{let a=i(t().archivesByBackendId,n);a.includes(r)&&e(e=>({archivesByBackendId:{...e.archivesByBackendId,[n]:a.filter(e=>e!==r)}}))},isArchived:(e,n)=>i(t().archivesByBackendId,e).includes(n)}),{name:n,storage:t.createJSONStorage(()=>localStorage),partialize:e=>({archivesByBackendId:e.archivesByBackendId})}));exports.useArchivedConversationsStore=a;
+//# sourceMappingURL=archived-conversations-store.cjs.map

package/dist/stores/archived-conversations-store.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"archived-conversations-store.cjs","names":[],"sources":["../../src/stores/archived-conversations-store.ts"],"sourcesContent":["import { create } from \"zustand\";\nimport { persist, createJSONStorage } from \"zustand/middleware\";\n\nexport const ARCHIVED_CONVERSATIONS_STORAGE_KEY = \"archived-conversations\";\n\ninterface ArchivedConversationsState {\n  archivesByBackendId: Record<string, string[]>;\n}\n\ninterface ArchivedConversationsActions {\n  archiveConversation: (backendId: string, conversationId: string) => void;\n  removeArchivedConversation: (\n    backendId: string,\n    conversationId: string,\n  ) => void;\n  isArchived: (backendId: string, conversationId: string) => boolean;\n}\n\ntype ArchivedConversationsStore = ArchivedConversationsState &\n  ArchivedConversationsActions;\n\nconst initialState: ArchivedConversationsState = {\n  archivesByBackendId: {},\n};\n\nfunction getArchivesForBackend(\n  archivesByBackendId: Record<string, string[]>,\n  backendId: string,\n): string[] {\n  return archivesByBackendId[backendId] ?? [];\n}\n\nexport const useArchivedConversationsStore =\n  create<ArchivedConversationsStore>()(\n    persist(\n      (set, get) => ({\n        ...initialState,\n\n        archiveConversation: (backendId, conversationId) => {\n          const current = getArchivesForBackend(\n            get().archivesByBackendId,\n            backendId,\n          );\n          if (current.includes(conversationId)) {\n            return;\n          }\n          set((state) => ({\n            archivesByBackendId: {\n              ...state.archivesByBackendId,\n              [backendId]: [conversationId, ...current],\n            },\n          }));\n        },\n\n        removeArchivedConversation: (backendId, conversationId) => {\n          const current = getArchivesForBackend(\n            get().archivesByBackendId,\n            backendId,\n          );\n          if (!current.includes(conversationId)) {\n            return;\n          }\n          set((state) => ({\n            archivesByBackendId: {\n              ...state.archivesByBackendId,\n              [backendId]: current.filter((id) => id !== conversationId),\n            },\n          }));\n        },\n\n        isArchived: (backendId, conversationId) =>\n          getArchivesForBackend(get().archivesByBackendId, backendId).includes(\n            conversationId,\n          ),\n      }),\n      {\n        name: ARCHIVED_CONVERSATIONS_STORAGE_KEY,\n        storage: createJSONStorage(() => localStorage),\n        partialize: (state): ArchivedConversationsState => ({\n          archivesByBackendId: state.archivesByBackendId,\n        }),\n      },\n    ),\n  );\n"],"mappings":"8JAGA,IAAa,EAAqC,yBAkB5C,EAA2C,CAC/C,oBAAqB,CAAC,CACxB,EAEA,SAAS,EACP,EACA,EACU,CACV,OAAO,EAAoB,IAAc,CAAC,CAC5C,CAEA,IAAa,EACX,EAAA,OAAmC,EACjC,EAAA,SACG,EAAK,KAAS,CACb,GAAG,EAEH,qBAAsB,EAAW,IAAmB,CAClD,IAAM,EAAU,EACd,EAAI,EAAE,oBACN,CACF,EACI,EAAQ,SAAS,CAAc,GAGnC,EAAK,IAAW,CACd,oBAAqB,CACnB,GAAG,EAAM,qBACR,GAAY,CAAC,EAAgB,GAAG,CAAO,CAC1C,CACF,EAAE,CACJ,EAEA,4BAA6B,EAAW,IAAmB,CACzD,IAAM,EAAU,EACd,EAAI,EAAE,oBACN,CACF,EACK,EAAQ,SAAS,CAAc,GAGpC,EAAK,IAAW,CACd,oBAAqB,CACnB,GAAG,EAAM,qBACR,GAAY,EAAQ,OAAQ,GAAO,IAAO,CAAc,CAC3D,CACF,EAAE,CACJ,EAEA,YAAa,EAAW,IACtB,EAAsB,EAAI,EAAE,oBAAqB,CAAS,EAAE,SAC1D,CACF,CACJ,GACA,CACE,KAAM,EACN,QAAS,EAAA,sBAAwB,YAAY,EAC7C,WAAa,IAAuC,CAClD,oBAAqB,EAAM,mBAC7B,EACF,CACF,CACF"}

package/dist/stores/archived-conversations-store.d.ts

@@ -0,0 +1,24 @@
+export declare const ARCHIVED_CONVERSATIONS_STORAGE_KEY = "archived-conversations";
+interface ArchivedConversationsState {
+    archivesByBackendId: Record<string, string[]>;
+}
+interface ArchivedConversationsActions {
+    archiveConversation: (backendId: string, conversationId: string) => void;
+    removeArchivedConversation: (backendId: string, conversationId: string) => void;
+    isArchived: (backendId: string, conversationId: string) => boolean;
+}
+type ArchivedConversationsStore = ArchivedConversationsState & ArchivedConversationsActions;
+export declare const useArchivedConversationsStore: import("zustand").UseBoundStore<Omit<import("zustand").StoreApi<ArchivedConversationsStore>, "setState" | "persist"> & {
+    setState(partial: ArchivedConversationsStore | Partial<ArchivedConversationsStore> | ((state: ArchivedConversationsStore) => ArchivedConversationsStore | Partial<ArchivedConversationsStore>), replace?: false | undefined): unknown;
+    setState(state: ArchivedConversationsStore | ((state: ArchivedConversationsStore) => ArchivedConversationsStore), replace: true): unknown;
+    persist: {
+        setOptions: (options: Partial<import("zustand/middleware").PersistOptions<ArchivedConversationsStore, unknown, unknown>>) => void;
+        clearStorage: () => void;
+        rehydrate: () => Promise<void> | void;
+        hasHydrated: () => boolean;
+        onHydrate: (fn: (state: ArchivedConversationsStore) => void) => () => void;
+        onFinishHydration: (fn: (state: ArchivedConversationsStore) => void) => () => void;
+        getOptions: () => Partial<import("zustand/middleware").PersistOptions<ArchivedConversationsStore, unknown, unknown>>;
+    };
+}>;
+export {};