@openhands/agent-canvas 1.5.0 → 1.5.2

package/dist/services/telemetry.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.cjs","names":[],"sources":["../../src/services/telemetry.ts"],"sourcesContent":["/**\n * Telemetry service for tracking library usage.\n *\n * This module handles anonymous telemetry for the @openhands/agent-canvas package\n * using the PostHog SDK for reliable event delivery with batching, retry logic,\n * and offline support.\n *\n * TRACKING PHILOSOPHY:\n * - Install event (canvas_install): Sent immediately on first use, regardless of consent.\n *   This is anonymous and contains no PII - just basic browser info and a random ID.\n * - Session/custom events: Only sent after user grants consent via the consent modal.\n * - Users can opt out of all future tracking by declining consent.\n *\n * AD BLOCKER BYPASS:\n * By default, telemetry is routed through OpenHands' reverse proxy (z.openhands.dev)\n * to avoid being blocked by ad blockers. Library consumers can override this with:\n * - VITE_POSTHOG_HOST: Custom proxy URL or direct PostHog URL\n * - VITE_POSTHOG_UI_HOST: PostHog UI host (defaults to https://us.posthog.com)\n *\n * IMPORTANT: By default, telemetry is sent to the OpenHands PostHog project.\n * Library consumers can override this by setting VITE_POSTHOG_API_KEY.\n *\n * Users can disable all telemetry (including install tracking) via:\n * - Setting VITE_DO_NOT_TRACK=1 environment variable\n * - Browser's Do Not Track setting\n */\n\nimport type { PostHog } from \"posthog-js\";\nimport packageJson from \"../../package.json\";\n\nconst TELEMETRY_CONSENT_KEY = \"openhands-telemetry-consent\";\nconst TELEMETRY_FIRST_USE_KEY = \"openhands-telemetry-first-use\";\nconst TELEMETRY_SESSION_KEY = \"openhands-telemetry-session\";\nconst POSTHOG_INSTANCE_NAME = \"agent-canvas\";\n\n// PostHog project keys — one per deployment environment, hardcoded so they\n// are baked into the static bundle at build time and cannot drift at runtime.\n// Replace POSTHOG_STAGING_KEY with a dedicated project key once provisioned.\nconst POSTHOG_PROD_KEY = \"phc_BgzfxKdgsYMLFTmJqt424ZoyVHvKFfrwttLimzdYTKFK\";\nconst POSTHOG_STAGING_KEY = \"phc_kBtz5nKmxVRRQ7HtPwr2QX9eMC5j65zE86QKocVNwb4U\";\n\n// Always use the staging key unless VITE_APP_ENV is explicitly set to\n// \"production\" at bundle time (hardcoded in build:lib and production CI).\n// Library consumers can always override with VITE_POSTHOG_API_KEY.\nconst POSTHOG_API_KEY: string =\n  (import.meta.env.VITE_POSTHOG_API_KEY as string | undefined) ||\n  (import.meta.env.VITE_APP_ENV === \"production\"\n    ? POSTHOG_PROD_KEY\n    : POSTHOG_STAGING_KEY);\n\n// Default to OpenHands' reverse proxy to bypass ad blockers.\n// The proxy at z.openhands.dev routes to PostHog's US region.\n// Library consumers can override this with their own proxy or direct PostHog URL.\nconst POSTHOG_HOST =\n  import.meta.env.VITE_POSTHOG_HOST || \"https://z.openhands.dev\";\n\n// UI host is needed for PostHog features like toolbar to work correctly\n// when using a reverse proxy. Defaults to US region.\nconst POSTHOG_UI_HOST =\n  import.meta.env.VITE_POSTHOG_UI_HOST || \"https://us.posthog.com\";\n\nexport type TelemetryConsent = \"granted\" | \"denied\" | \"pending\";\n\nlet isInitialized = false;\nlet posthogInstance: PostHog | null = null;\n\n/**\n * Check if we're in a browser environment\n */\nfunction isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof localStorage !== \"undefined\";\n}\n\n/**\n * Lazily load PostHog to avoid SSR/Node.js issues.\n * PostHog is a browser-only library, so we dynamically import it only when needed.\n */\nasync function getPostHog(): Promise<PostHog | null> {\n  if (!isBrowser()) {\n    return null;\n  }\n\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  try {\n    const { default: posthog } = await import(\"posthog-js\");\n    return posthog;\n  } catch {\n    // Failed to load PostHog - telemetry will be disabled\n    return null;\n  }\n}\n\n/**\n * Check if telemetry is disabled via environment variable or browser setting.\n * Works in both Node.js and browser (Vite) environments.\n */\nfunction isDoNotTrackEnabled(): boolean {\n  // Check Vite environment variable (browser)\n  if (\n    typeof import.meta !== \"undefined\" &&\n    import.meta.env?.VITE_DO_NOT_TRACK === \"1\"\n  ) {\n    return true;\n  }\n\n  // Check Node.js environment variable (SSR/testing)\n  if (typeof process !== \"undefined\" && process.env?.DO_NOT_TRACK === \"1\") {\n    return true;\n  }\n\n  // Check browser's navigator.doNotTrack standard\n  if (\n    typeof navigator !== \"undefined\" &&\n    (navigator.doNotTrack === \"1\" ||\n      // @ts-expect-error - Some browsers use window.doNotTrack\n      (typeof window !== \"undefined\" && window.doNotTrack === \"1\"))\n  ) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Initialize PostHog SDK.\n *\n * @param enableCapturing - If true, enable capturing immediately (for install tracking).\n *                          If false, start with capturing disabled (for consent-gated tracking).\n */\nasync function initializePostHog(\n  enableCapturing = false,\n): Promise<PostHog | null> {\n  if (isInitialized) {\n    return posthogInstance;\n  }\n\n  const posthog = await getPostHog();\n  if (!posthog) {\n    return null;\n  }\n\n  // Canvas telemetry must not share PostHog's default singleton with host-app\n  // analytics. A named instance gives it independent configuration, consent,\n  // persistence, and delivery state.\n  posthogInstance = posthog.init(\n    POSTHOG_API_KEY,\n    {\n      api_host: POSTHOG_HOST,\n      // UI host is required when using a reverse proxy so PostHog features work correctly\n      ui_host: POSTHOG_UI_HOST,\n      // Start with capturing disabled by default - we enable it explicitly when needed\n      opt_out_capturing_by_default: !enableCapturing,\n      // Don't auto-capture page views - we control when to track\n      capture_pageview: false,\n      // Don't auto-capture clicks etc.\n      autocapture: false,\n      // Use localStorage for persistence\n      persistence: \"localStorage\",\n      persistence_name: POSTHOG_INSTANCE_NAME,\n      consent_persistence_name: `${POSTHOG_INSTANCE_NAME}-consent`,\n      // Disable session recording\n      disable_session_recording: true,\n      // Set default properties for all events\n      loaded: (ph) => {\n        ph.register({\n          package_name: packageJson.name,\n          package_version: packageJson.version,\n        });\n      },\n    },\n    POSTHOG_INSTANCE_NAME,\n  );\n\n  isInitialized = true;\n  return posthogInstance;\n}\n\n/**\n * Get user's telemetry consent preference\n */\nexport function getTelemetryConsent(): TelemetryConsent {\n  if (!isBrowser()) {\n    return \"pending\";\n  }\n\n  // Check environment variable for opt-out\n  if (isDoNotTrackEnabled()) {\n    return \"denied\";\n  }\n\n  try {\n    const consent = localStorage.getItem(TELEMETRY_CONSENT_KEY);\n    if (consent === \"granted\" || consent === \"denied\") {\n      return consent;\n    }\n  } catch {\n    // Ignore storage errors\n  }\n\n  return \"pending\";\n}\n\n/**\n * Set user's telemetry consent preference\n */\nexport async function setTelemetryConsent(\n  consent: \"granted\" | \"denied\",\n): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_CONSENT_KEY, consent);\n\n    // Initialize PostHog if not already done\n    const posthog = await initializePostHog();\n    if (!posthog) {\n      return;\n    }\n\n    if (consent === \"granted\") {\n      // Enable capturing\n      posthog.opt_in_capturing();\n    } else {\n      // Disable capturing and clear any queued events\n      posthog.opt_out_capturing();\n    }\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Check if telemetry is enabled (user has granted consent)\n */\nexport function isTelemetryEnabled(): boolean {\n  return getTelemetryConsent() === \"granted\";\n}\n\n/**\n * Check if first use event has already been sent\n */\nfunction hasFirstUseSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return localStorage.getItem(TELEMETRY_FIRST_USE_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark first use event as sent\n */\nfunction markFirstUseSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_FIRST_USE_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Track the initial install of the library.\n *\n * IMPORTANT: This is sent immediately on first use, regardless of consent status.\n * This allows us to track library adoption even if users haven't made a consent choice yet.\n *\n * The event is:\n * - Completely anonymous (no PII, just a random PostHog distinct_id)\n * - Sent only once per installation (tracked via localStorage, persists across sessions)\n * - Still respects DO_NOT_TRACK environment variable and browser setting\n *\n * Users who want complete privacy can:\n * - Set VITE_DO_NOT_TRACK=1 or browser's Do Not Track\n * - Later deny consent to prevent all future tracking\n */\nexport async function trackInstall(): Promise<void> {\n  // Respect hard opt-out via environment variable or browser setting\n  if (isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Already sent install event (persisted in localStorage - survives app relaunches)\n  if (hasFirstUseSent()) {\n    return;\n  }\n\n  // Initialize PostHog with capturing enabled (for this one event)\n  const posthog = await initializePostHog(true);\n  if (!posthog) {\n    return;\n  }\n\n  // Temporarily enable capturing if it was disabled\n  const wasOptedOut = posthog.has_opted_out_capturing?.() ?? false;\n  if (wasOptedOut) {\n    posthog.opt_in_capturing();\n  }\n\n  // Capture the install event\n  posthog.capture(\"canvas_install\", {\n    platform: typeof navigator !== \"undefined\" ? navigator.platform : \"unknown\",\n    user_agent:\n      typeof navigator !== \"undefined\" ? navigator.userAgent : \"unknown\",\n    referrer: typeof document !== \"undefined\" ? document.referrer : \"\",\n    url_origin: typeof window !== \"undefined\" ? window.location.origin : \"\",\n    embedded: typeof window !== \"undefined\" && window.self !== window.top,\n  });\n\n  // Mark as sent (stored in localStorage - persists across browser sessions)\n  markFirstUseSent();\n\n  // Restore opt-out state if user hasn't granted consent yet\n  // This ensures we only send the install event, not subsequent events\n  const currentConsent = getTelemetryConsent();\n  if (currentConsent !== \"granted\") {\n    posthog.opt_out_capturing();\n  }\n}\n\n/**\n * Check if session start event has already been sent (this browser session)\n */\nfunction hasSessionSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return sessionStorage.getItem(TELEMETRY_SESSION_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark session start event as sent (uses sessionStorage so it resets on new tabs/sessions)\n */\nfunction markSessionSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    sessionStorage.setItem(TELEMETRY_SESSION_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Track a session start event.\n * Called each time a new browser session starts (respects consent).\n * Uses sessionStorage for deduplication - only sends once per browser session.\n */\nexport async function trackSessionStart(): Promise<void> {\n  if (!isTelemetryEnabled()) {\n    return;\n  }\n\n  // Already sent session event this browser session\n  if (hasSessionSent()) {\n    return;\n  }\n\n  // Initialize PostHog if needed\n  const posthog = await initializePostHog();\n  if (!posthog) {\n    return;\n  }\n\n  posthog.capture(\"canvas_new_session\", {\n    is_first_use: !hasFirstUseSent(),\n  });\n\n  // Mark as sent for this session\n  markSessionSent();\n}\n\n/**\n * Track a custom event (respects consent).\n */\nexport async function trackEvent(\n  eventName: string,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  if (!isTelemetryEnabled()) {\n    return;\n  }\n\n  // Initialize PostHog if needed\n  const posthog = await initializePostHog();\n  if (!posthog) {\n    return;\n  }\n\n  posthog.capture(eventName, properties);\n}\n\n/**\n * Clear all telemetry data (for privacy/GDPR requests)\n */\nexport async function clearTelemetryData(): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.removeItem(TELEMETRY_CONSENT_KEY);\n    localStorage.removeItem(TELEMETRY_FIRST_USE_KEY);\n    sessionStorage.removeItem(TELEMETRY_SESSION_KEY);\n\n    // Reset PostHog if initialized\n    if (isInitialized && posthogInstance) {\n      posthogInstance.reset();\n    }\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Get the PostHog instance for advanced usage (if needed).\n * Returns the instance if initialized, otherwise null.\n * Note: This is async because PostHog is lazily loaded.\n */\nexport async function getPostHogInstance(): Promise<PostHog | null> {\n  if (!isInitialized) {\n    return null;\n  }\n  return posthogInstance;\n}\n"],"mappings":"+EA8BA,IAAM,EAAwB,8BACxB,EAA0B,gCAC1B,EAAwB,8BACxB,EAAwB,eAWxB,EAGA,mDAMA,EACiC,0BAIjC,EACoC,yBAItC,EAAgB,GAChB,EAAkC,KAKtC,SAAS,GAAqB,CAC5B,OAAO,OAAO,OAAW,KAAe,OAAO,aAAiB,IAOlE,eAAe,GAAsC,CACnD,GAAI,CAAC,GAAW,CACd,OAAO,KAGT,GAAI,EACF,OAAO,EAGT,GAAI,CACF,GAAM,CAAE,QAAS,GAAY,MAAA,QAAA,SAAA,CAAA,SAAA,QAAM,6CAAA,CAAA,CACnC,OAAO,OACD,CAEN,OAAO,MAQX,SAAS,GAA+B,CAwBtC,OAdI,OAAO,QAAY,KAAe,QAAQ,KAAK,eAAiB,KAMlE,OAAO,UAAc,MACpB,UAAU,aAAe,KAEvB,OAAO,OAAW,KAAe,OAAO,aAAe,KAc9D,eAAe,EACb,EAAkB,GACO,CACzB,GAAI,EACF,OAAO,EAGT,IAAM,EAAU,MAAM,GAAY,CAsClC,OArCK,GAOL,EAAkB,EAAQ,KACxB,EACA,CACE,SAAU,EAEV,QAAS,EAET,6BAA8B,CAAC,EAE/B,iBAAkB,GAElB,YAAa,GAEb,YAAa,eACb,iBAAkB,EAClB,yBAA0B,GAAG,EAAsB,UAEnD,0BAA2B,GAE3B,OAAS,GAAO,CACd,EAAG,SAAS,CACV,aAAc,EAAA,QAAY,KAC1B,gBAAiB,EAAA,QAAY,QAC9B,CAAC,EAEL,CACD,EACD,CAED,EAAgB,GACT,GApCE,KA0CX,SAAgB,GAAwC,CACtD,GAAI,CAAC,GAAW,CACd,MAAO,UAIT,GAAI,GAAqB,CACvB,MAAO,SAGT,GAAI,CACF,IAAM,EAAU,aAAa,QAAQ,EAAsB,CAC3D,GAAI,IAAY,WAAa,IAAY,SACvC,OAAO,OAEH,EAIR,MAAO,UAMT,eAAsB,EACpB,EACe,CACV,MAAW,CAIhB,GAAI,CACF,aAAa,QAAQ,EAAuB,EAAQ,CAGpD,IAAM,EAAU,MAAM,GAAmB,CACzC,GAAI,CAAC,EACH,OAGE,IAAY,UAEd,EAAQ,kBAAkB,CAG1B,EAAQ,mBAAmB,MAEvB,GAQV,SAAgB,GAA8B,CAC5C,OAAO,GAAqB,GAAK,UAMnC,SAAS,GAA2B,CAClC,GAAI,CAAC,GAAW,CACd,MAAO,GAGT,GAAI,CACF,OAAO,aAAa,QAAQ,EAAwB,GAAK,YACnD,CACN,MAAO,IAOX,SAAS,GAAyB,CAC3B,MAAW,CAIhB,GAAI,CACF,aAAa,QAAQ,EAAyB,OAAO,MAC/C,GAoBV,eAAsB,GAA8B,CAOlD,GALI,GAAqB,EAKrB,GAAiB,CACnB,OAIF,IAAM,EAAU,MAAM,EAAkB,GAAK,CACxC,KAKe,EAAQ,2BAA2B,EAAI,KAEzD,EAAQ,kBAAkB,CAI5B,EAAQ,QAAQ,iBAAkB,CAChC,SAAU,OAAO,UAAc,IAAc,UAAU,SAAW,UAClE,WACE,OAAO,UAAc,IAAc,UAAU,UAAY,UAC3D,SAAU,OAAO,SAAa,IAAc,SAAS,SAAW,GAChE,WAAY,OAAO,OAAW,IAAc,OAAO,SAAS,OAAS,GACrE,SAAU,OAAO,OAAW,KAAe,OAAO,OAAS,OAAO,IACnE,CAAC,CAGF,GAAkB,CAIK,GACnB,GAAmB,WACrB,EAAQ,mBAAmB,EAO/B,SAAS,GAA0B,CACjC,GAAI,CAAC,GAAW,CACd,MAAO,GAGT,GAAI,CACF,OAAO,eAAe,QAAQ,EAAsB,GAAK,YACnD,CACN,MAAO,IAOX,SAAS,GAAwB,CAC1B,MAAW,CAIhB,GAAI,CACF,eAAe,QAAQ,EAAuB,OAAO,MAC/C,GAUV,eAAsB,GAAmC,CAMvD,GALI,CAAC,GAAoB,EAKrB,GAAgB,CAClB,OAIF,IAAM,EAAU,MAAM,GAAmB,CACpC,IAIL,EAAQ,QAAQ,qBAAsB,CACpC,aAAc,CAAC,GAAiB,CACjC,CAAC,CAGF,GAAiB,EAMnB,eAAsB,EACpB,EACA,EAAsC,EAAE,CACzB,CACf,GAAI,CAAC,GAAoB,CACvB,OAIF,IAAM,EAAU,MAAM,GAAmB,CACpC,GAIL,EAAQ,QAAQ,EAAW,EAAW,CAMxC,eAAsB,GAAoC,CACnD,MAAW,CAIhB,GAAI,CACF,aAAa,WAAW,EAAsB,CAC9C,aAAa,WAAW,EAAwB,CAChD,eAAe,WAAW,EAAsB,CAG5C,GAAiB,GACnB,EAAgB,OAAO,MAEnB,GAUV,eAAsB,GAA8C,CAIlE,OAHK,EAGE,EAFE"}
+{"version":3,"file":"telemetry.cjs","names":[],"sources":["../../src/services/telemetry.ts"],"sourcesContent":["/**\n * Telemetry service for tracking library usage.\n *\n * This module handles anonymous telemetry for the @openhands/agent-canvas package\n * using the PostHog SDK for reliable event delivery with batching, retry logic,\n * and offline support.\n *\n * TRACKING PHILOSOPHY:\n * - Install event (canvas_install): Sent immediately on first use, regardless of consent.\n *   This is anonymous and contains no PII - just basic browser info and a random ID.\n * - Session/custom events: Only sent after user grants consent via the consent modal.\n * - Users can opt out of all future tracking by declining consent.\n *\n * AD BLOCKER BYPASS:\n * By default, telemetry is routed through OpenHands' reverse proxy (z.openhands.dev)\n * to avoid being blocked by ad blockers. Library consumers can override this with:\n * - VITE_POSTHOG_HOST: Custom proxy URL or direct PostHog URL\n * - VITE_POSTHOG_UI_HOST: PostHog UI host (defaults to https://us.posthog.com)\n *\n * IMPORTANT: By default, telemetry is sent to the OpenHands PostHog project.\n * Source builds can override this with VITE_POSTHOG_API_KEY. Precompiled\n * library consumers can pass the same settings to configureTelemetry().\n *\n * Users can disable all telemetry (including install tracking) via:\n * - Setting VITE_DO_NOT_TRACK=1 environment variable\n * - Browser's Do Not Track setting\n */\n\nimport type { BootstrapConfig, CaptureResult, PostHog } from \"posthog-js\";\nimport packageJson from \"../../package.json\";\nimport {\n  AGENT_CANVAS_CLIENT_SOURCE,\n  AGENT_CANVAS_CLIENT_VERSION,\n} from \"#/api/client-source\";\n\nconst TELEMETRY_CONSENT_KEY = \"openhands-telemetry-consent\";\nconst TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY =\n  \"openhands-telemetry-consent-pending-cloud-sync\";\nconst TELEMETRY_CONSENT_CHANGE_EVENT = \"openhands-telemetry-consent-change\";\nconst TELEMETRY_FIRST_USE_KEY = \"openhands-telemetry-first-use\";\nconst TELEMETRY_SESSION_KEY = \"openhands-telemetry-session\";\nconst POSTHOG_INSTANCE_NAME = \"agent-canvas\";\n\n// Unconfigured source builds use staging. Production release workflows pass\n// VITE_POSTHOG_API_KEY explicitly for both the app and library artifacts.\nconst POSTHOG_STAGING_KEY = \"phc_kBtz5nKmxVRRQ7HtPwr2QX9eMC5j65zE86QKocVNwb4U\";\nconst DEFAULT_POSTHOG_API_KEY: string =\n  (import.meta.env.VITE_POSTHOG_API_KEY as string | undefined) ||\n  POSTHOG_STAGING_KEY;\n\n// Default to OpenHands' reverse proxy to bypass ad blockers.\n// The proxy at z.openhands.dev routes to PostHog's US region.\n// Library consumers can override this with their own proxy or direct PostHog URL.\nconst DEFAULT_POSTHOG_HOST =\n  import.meta.env.VITE_POSTHOG_HOST || \"https://z.openhands.dev\";\n\n// UI host is needed for PostHog features like toolbar to work correctly\n// when using a reverse proxy. Defaults to US region.\nconst DEFAULT_POSTHOG_UI_HOST =\n  import.meta.env.VITE_POSTHOG_UI_HOST || \"https://us.posthog.com\";\n\nexport interface TelemetryConfig {\n  /** PostHog project key. Useful for precompiled library consumers. */\n  apiKey?: string;\n  /** Event ingestion host or reverse proxy. */\n  apiHost?: string;\n  /** PostHog UI host used by toolbar links and other UI features. */\n  uiHost?: string;\n}\n\nexport type TelemetryConfiguration = TelemetryConfig | false;\n\nexport type TelemetryConsent = \"granted\" | \"denied\" | \"pending\";\nexport type ResolvedTelemetryConsent = Exclude<TelemetryConsent, \"pending\">;\n\nexport interface SetTelemetryConsentOptions {\n  /** Do not persist a value mirrored from backend settings back to Cloud. */\n  syncToCloud?: boolean;\n}\n\nlet posthogInstance: PostHog | null = null;\nlet initializationPromise: Promise<PostHog | null> | null = null;\nlet pendingBootstrap: BootstrapConfig | undefined;\nlet telemetryConfig: TelemetryConfig = {};\nlet telemetryDisabled = false;\n\ninterface TelemetryIdentity {\n  distinctId: string;\n  properties: Record<string, unknown>;\n}\n\n// undefined means that Cloud identity has not resolved yet; null means that it\n// resolved without a user. This distinction prevents startup from resetting a\n// persisted identity while the current account is still loading.\nlet desiredTelemetryIdentity: TelemetryIdentity | null | undefined;\nlet desiredIdentityRevision = 0;\nlet appliedIdentityRevision = -1;\n\nconst CANVAS_EVENT_PROPERTIES = Object.freeze({\n  client_source: AGENT_CANVAS_CLIENT_SOURCE,\n  client_version: AGENT_CANVAS_CLIENT_VERSION,\n  package_name: packageJson.name,\n  package_version: packageJson.version,\n});\n\nfunction addCanvasEventProperties(\n  event: CaptureResult | null,\n): CaptureResult | null {\n  if (!event) return null;\n\n  return {\n    ...event,\n    properties: {\n      ...event.properties,\n      ...CANVAS_EVENT_PROPERTIES,\n    },\n  };\n}\n\nfunction restorePostHogConsent(posthog: PostHog): void {\n  if (telemetryDisabled || getTelemetryConsent() !== \"granted\") {\n    posthog.opt_out_capturing();\n  } else {\n    posthog.opt_in_capturing();\n  }\n}\n\nfunction resetPostHogIdentity(posthog: PostHog, resetDeviceId = false): void {\n  posthog.reset(resetDeviceId);\n  appliedIdentityRevision = -1;\n  // PostHog reset clears its own consent persistence, so immediately restore\n  // the canonical Canvas decision kept in localStorage.\n  restorePostHogConsent(posthog);\n}\n\nfunction applyDesiredTelemetryIdentity(posthog: PostHog): void {\n  if (desiredTelemetryIdentity === undefined || !isTelemetryEnabled()) return;\n\n  const desiredId = desiredTelemetryIdentity?.distinctId;\n  const currentId = posthog.get_property(\"$user_id\");\n  if (currentId != null && currentId !== desiredId) {\n    resetPostHogIdentity(posthog);\n  }\n\n  if (desiredTelemetryIdentity === null) {\n    appliedIdentityRevision = desiredIdentityRevision;\n    return;\n  }\n\n  if (\n    posthog.get_property(\"$user_id\") !== desiredTelemetryIdentity.distinctId ||\n    appliedIdentityRevision !== desiredIdentityRevision\n  ) {\n    posthog.identify(\n      desiredTelemetryIdentity.distinctId,\n      desiredTelemetryIdentity.properties,\n    );\n    appliedIdentityRevision = desiredIdentityRevision;\n  }\n}\n\nfunction propertiesEqual(\n  left: Record<string, unknown>,\n  right: Record<string, unknown>,\n): boolean {\n  const keys = Object.keys(left);\n  return (\n    keys.length === Object.keys(right).length &&\n    keys.every((key) => left[key] === right[key])\n  );\n}\n\n/**\n * Configure the single Canvas telemetry client before its first use.\n * Passing false disables telemetry and install tracking for embedded hosts.\n */\nexport function configureTelemetry(config: TelemetryConfiguration): void {\n  if (config === false) {\n    if (telemetryDisabled) return;\n    telemetryDisabled = true;\n    posthogInstance?.opt_out_capturing();\n    notifyTelemetryConsentListeners();\n    return;\n  }\n\n  const wasDisabled = telemetryDisabled;\n  telemetryDisabled = false;\n\n  if (!posthogInstance && !initializationPromise) {\n    const definedConfig = Object.fromEntries(\n      Object.entries(config).filter(([, value]) => value !== undefined),\n    ) as TelemetryConfig;\n    telemetryConfig = { ...telemetryConfig, ...definedConfig };\n  }\n\n  if (wasDisabled) {\n    if (posthogInstance) {\n      restorePostHogConsent(posthogInstance);\n      applyDesiredTelemetryIdentity(posthogInstance);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\nfunction getResolvedTelemetryConfig(): Required<TelemetryConfig> | null {\n  if (telemetryDisabled) return null;\n\n  return {\n    apiKey: telemetryConfig.apiKey || DEFAULT_POSTHOG_API_KEY,\n    apiHost: telemetryConfig.apiHost || DEFAULT_POSTHOG_HOST,\n    uiHost: telemetryConfig.uiHost || DEFAULT_POSTHOG_UI_HOST,\n  };\n}\n\n/**\n * Check if we're in a browser environment\n */\nfunction isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof localStorage !== \"undefined\";\n}\n\n/**\n * Lazily load PostHog to avoid SSR/Node.js issues.\n * PostHog is a browser-only library, so we dynamically import it only when needed.\n */\nasync function getPostHog(): Promise<PostHog | null> {\n  if (!isBrowser()) {\n    return null;\n  }\n\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  try {\n    const { default: posthog } = await import(\"posthog-js\");\n    return posthog;\n  } catch {\n    // Failed to load PostHog - telemetry will be disabled\n    return null;\n  }\n}\n\n/**\n * Check if telemetry is disabled via environment variable or browser setting.\n * Works in both Node.js and browser (Vite) environments.\n */\nfunction isDoNotTrackEnabled(): boolean {\n  if (telemetryDisabled) {\n    return true;\n  }\n\n  // Check Vite environment variable (browser)\n  if (\n    typeof import.meta !== \"undefined\" &&\n    import.meta.env?.VITE_DO_NOT_TRACK === \"1\"\n  ) {\n    return true;\n  }\n\n  // Check Node.js environment variable (SSR/testing)\n  if (typeof process !== \"undefined\" && process.env?.DO_NOT_TRACK === \"1\") {\n    return true;\n  }\n\n  // Check browser's navigator.doNotTrack standard\n  if (\n    typeof navigator !== \"undefined\" &&\n    (navigator.doNotTrack === \"1\" ||\n      // @ts-expect-error - Some browsers use window.doNotTrack\n      (typeof window !== \"undefined\" && window.doNotTrack === \"1\"))\n  ) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Initialize PostHog SDK.\n *\n * @param enableCapturing - If true, enable capturing immediately (for install tracking).\n *                          If false, start with capturing disabled (for consent-gated tracking).\n */\nexport function configurePostHogBootstrap(\n  bootstrap: BootstrapConfig | undefined,\n): void {\n  if (!posthogInstance) {\n    pendingBootstrap = bootstrap;\n  }\n}\n\nexport async function initializePostHogClient(\n  enableCapturing = false,\n): Promise<PostHog | null> {\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  if (initializationPromise) {\n    return initializationPromise;\n  }\n\n  initializationPromise = (async () => {\n    const config = getResolvedTelemetryConfig();\n    if (!config) {\n      return null;\n    }\n\n    const posthog = await getPostHog();\n    if (!posthog) {\n      return null;\n    }\n\n    // A named instance isolates Canvas configuration, consent, identity, and\n    // persistence from a host application's default PostHog singleton.\n    const initializedPostHog = posthog.init(\n      config.apiKey,\n      {\n        api_host: config.apiHost,\n        ui_host: config.uiHost,\n        opt_out_capturing_by_default: !enableCapturing,\n        capture_pageview: false,\n        autocapture: false,\n        persistence: \"localStorage\",\n        persistence_name: POSTHOG_INSTANCE_NAME,\n        consent_persistence_name: `${POSTHOG_INSTANCE_NAME}-consent`,\n        person_profiles: \"identified_only\",\n        disable_session_recording: true,\n        bootstrap: pendingBootstrap,\n        before_send: addCanvasEventProperties,\n      },\n      POSTHOG_INSTANCE_NAME,\n    );\n    if (!initializedPostHog) return null;\n\n    posthogInstance = initializedPostHog;\n    pendingBootstrap = undefined;\n\n    if (telemetryDisabled) {\n      posthogInstance.opt_out_capturing();\n    } else if (getTelemetryConsent() === \"granted\") {\n      posthogInstance.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthogInstance);\n    } else if (!enableCapturing) {\n      posthogInstance.opt_out_capturing();\n    }\n\n    return posthogInstance;\n  })();\n\n  try {\n    return await initializationPromise;\n  } finally {\n    if (!posthogInstance) {\n      initializationPromise = null;\n    }\n  }\n}\n\n/**\n * Get user's telemetry consent preference\n */\nexport function getTelemetryConsent(): TelemetryConsent {\n  if (!isBrowser()) {\n    return \"pending\";\n  }\n\n  // Check environment variable for opt-out\n  if (isDoNotTrackEnabled()) {\n    return \"denied\";\n  }\n\n  try {\n    const consent = localStorage.getItem(TELEMETRY_CONSENT_KEY);\n    if (consent === \"granted\" || consent === \"denied\") {\n      return consent;\n    }\n  } catch {\n    // Ignore storage errors\n  }\n\n  return \"pending\";\n}\n\n/**\n * Return an explicit browser choice that still needs to survive a Cloud login.\n * It remains pending across local backends so their settings cannot consume a\n * decision that must still be applied after the user connects to Cloud.\n */\nexport function getPendingCloudTelemetryConsent(): ResolvedTelemetryConsent | null {\n  if (!isBrowser()) return null;\n\n  try {\n    const consent = localStorage.getItem(\n      TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY,\n    );\n    return consent === \"granted\" || consent === \"denied\" ? consent : null;\n  } catch {\n    return null;\n  }\n}\n\nexport function subscribeTelemetryConsent(listener: () => void): () => void {\n  if (!isBrowser()) return () => {};\n  const handleStorage = (event: StorageEvent) => {\n    if (\n      event.key === TELEMETRY_CONSENT_KEY ||\n      event.key === TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY\n    ) {\n      listener();\n    }\n  };\n  window.addEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n  window.addEventListener(\"storage\", handleStorage);\n\n  return () => {\n    window.removeEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n    window.removeEventListener(\"storage\", handleStorage);\n  };\n}\n\nfunction notifyTelemetryConsentListeners(): void {\n  if (isBrowser())\n    window.dispatchEvent(new Event(TELEMETRY_CONSENT_CHANGE_EVENT));\n}\n\nfunction markTelemetryConsentForCloudSync(\n  consent: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    localStorage.setItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY, consent);\n  } catch {\n    // Ignore storage errors; the in-browser consent decision still applies.\n  }\n}\n\nexport function clearPendingCloudTelemetryConsent(\n  expected?: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    if (\n      expected !== undefined &&\n      localStorage.getItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY) !==\n        expected\n    ) {\n      return;\n    }\n    localStorage.removeItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY);\n    notifyTelemetryConsentListeners();\n  } catch {\n    // Ignore storage errors.\n  }\n}\n\n/**\n * Set user's telemetry consent preference\n */\nexport async function setTelemetryConsent(\n  consent: ResolvedTelemetryConsent,\n  { syncToCloud = true }: SetTelemetryConsentOptions = {},\n): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_CONSENT_KEY, consent);\n    if (telemetryDisabled) return;\n\n    // Reuse an initialized client synchronously so a same-flush identify()\n    // cannot run before consent is applied. Only the cold path awaits import.\n    const posthog = posthogInstance ?? (await initializePostHogClient());\n    if (!posthog) {\n      return;\n    }\n\n    if (consent === \"granted\") {\n      posthog.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthog);\n    } else {\n      if (posthog.get_property(\"$user_id\") != null) {\n        resetPostHogIdentity(posthog);\n      } else {\n        posthog.opt_out_capturing();\n      }\n    }\n  } catch {\n    // Ignore storage errors\n  } finally {\n    // Notify UI/backend/identity reconcilers only after the browser capture state\n    // reflects this decision. Otherwise a pre-login grant can trigger an\n    // identify while PostHog is still opted out and lose funnel continuity.\n    if (syncToCloud) {\n      markTelemetryConsentForCloudSync(consent);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\n/**\n * Declare the current Cloud identity. The telemetry service applies it only\n * after consent and owns all reset/account-switch semantics.\n */\nexport async function setTelemetryIdentity(\n  distinctId: string | null,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const nextIdentity = distinctId === null ? null : { distinctId, properties };\n  const unchanged =\n    desiredTelemetryIdentity === nextIdentity ||\n    (desiredTelemetryIdentity !== undefined &&\n      desiredTelemetryIdentity !== null &&\n      nextIdentity !== null &&\n      desiredTelemetryIdentity.distinctId === nextIdentity.distinctId &&\n      propertiesEqual(desiredTelemetryIdentity.properties, properties));\n  if (unchanged) return;\n\n  desiredTelemetryIdentity = nextIdentity;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  if (!isTelemetryEnabled()) return;\n  const posthog = posthogInstance ?? (await initializePostHogClient());\n  if (posthog && isTelemetryEnabled()) {\n    // Read the desired identity after the await so a newer account always wins\n    // if identity changes while the SDK is loading.\n    applyDesiredTelemetryIdentity(posthog);\n  }\n}\n\n/**\n * Check if telemetry is enabled (user has granted consent)\n */\nexport function isTelemetryEnabled(): boolean {\n  return getTelemetryConsent() === \"granted\";\n}\n\n/**\n * Check if first use event has already been sent\n */\nfunction hasFirstUseSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return localStorage.getItem(TELEMETRY_FIRST_USE_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark first use event as sent\n */\nfunction markFirstUseSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_FIRST_USE_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Track the initial install of the library.\n *\n * IMPORTANT: This is sent immediately on first use, regardless of consent status.\n * This allows us to track library adoption even if users haven't made a consent choice yet.\n *\n * The event is:\n * - Completely anonymous (no PII, just a random PostHog distinct_id)\n * - Sent only once per installation (tracked via localStorage, persists across sessions)\n * - Still respects DO_NOT_TRACK environment variable and browser setting\n *\n * Users who want complete privacy can:\n * - Set VITE_DO_NOT_TRACK=1 or browser's Do Not Track\n * - Later deny consent to prevent all future tracking\n */\nexport async function trackInstall(): Promise<void> {\n  // Respect hard opt-out via environment variable or browser setting\n  if (isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Already sent install event (persisted in localStorage - survives app relaunches)\n  if (hasFirstUseSent()) {\n    return;\n  }\n\n  // Initialize PostHog with capturing enabled (for this one event)\n  const posthog = await initializePostHogClient(true);\n  if (!posthog || isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Temporarily enable capturing if it was disabled\n  const wasOptedOut = posthog.has_opted_out_capturing?.() ?? false;\n  if (wasOptedOut) {\n    posthog.opt_in_capturing();\n  }\n\n  // Capture the install event\n  posthog.capture(\"canvas_install\", {\n    platform: typeof navigator !== \"undefined\" ? navigator.platform : \"unknown\",\n    user_agent:\n      typeof navigator !== \"undefined\" ? navigator.userAgent : \"unknown\",\n    referrer: typeof document !== \"undefined\" ? document.referrer : \"\",\n    url_origin: typeof window !== \"undefined\" ? window.location.origin : \"\",\n    embedded: typeof window !== \"undefined\" && window.self !== window.top,\n  });\n\n  // Mark as sent (stored in localStorage - persists across browser sessions)\n  markFirstUseSent();\n\n  // Restore opt-out state if user hasn't granted consent yet\n  // This ensures we only send the install event, not subsequent events\n  const currentConsent = getTelemetryConsent();\n  if (currentConsent !== \"granted\") {\n    posthog.opt_out_capturing();\n  }\n}\n\n/**\n * Check if session start event has already been sent (this browser session)\n */\nfunction hasSessionSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return sessionStorage.getItem(TELEMETRY_SESSION_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark session start event as sent (uses sessionStorage so it resets on new tabs/sessions)\n */\nfunction markSessionSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    sessionStorage.setItem(TELEMETRY_SESSION_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/** Return the shared client only when a consented capture is safe to emit. */\nasync function getPostHogForConsentedCapture(): Promise<PostHog | null> {\n  if (!isTelemetryEnabled()) return null;\n\n  const posthog = await initializePostHogClient();\n  if (!posthog || !isTelemetryEnabled()) return null;\n\n  // The browser preference is the canonical capture decision. PostHog may\n  // still carry an older opt-out marker while backend consent is loading or\n  // after a previous backend temporarily reported a stale value. Heal that\n  // drift at the event boundary so capture() cannot silently discard an event\n  // that the user has explicitly allowed.\n  if (posthog.has_opted_out_capturing?.()) {\n    posthog.opt_in_capturing();\n  }\n\n  applyDesiredTelemetryIdentity(posthog);\n\n  return posthog;\n}\n\n/**\n * Track a session start event.\n * Called each time a new browser session starts (respects consent).\n * Uses sessionStorage for deduplication - only sends once per browser session.\n */\nexport async function trackSessionStart(): Promise<void> {\n  // Already sent session event this browser session\n  if (hasSessionSent()) {\n    return;\n  }\n\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(\"canvas_new_session\", {\n    is_first_use: !hasFirstUseSent(),\n  });\n\n  // Mark as sent for this session\n  markSessionSent();\n}\n\n/**\n * Track a custom event (respects consent).\n */\nexport async function trackEvent(\n  eventName: string,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(eventName, properties);\n}\n\n/** Track an exception through the same consent-aware client as custom events. */\nexport async function trackException(\n  error: unknown,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.captureException(error, properties);\n}\n\n/**\n * Clear all telemetry data (for privacy/GDPR requests)\n */\nexport async function clearTelemetryData(): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.removeItem(TELEMETRY_CONSENT_KEY);\n    localStorage.removeItem(TELEMETRY_FIRST_USE_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n  clearPendingCloudTelemetryConsent();\n  try {\n    sessionStorage.removeItem(TELEMETRY_SESSION_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n\n  desiredTelemetryIdentity = null;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  try {\n    if (posthogInstance) {\n      resetPostHogIdentity(posthogInstance, true);\n    }\n  } catch {\n    // A reset failure must not leave capture enabled after a privacy clear.\n    try {\n      posthogInstance?.opt_out_capturing();\n    } catch {\n      // Telemetry failures must not break the application.\n    }\n  }\n}\n"],"mappings":"qHAmCA,IAAM,EAAwB,8BACxB,EACJ,iDACI,EAAiC,qCACjC,EAA0B,gCAC1B,EAAwB,8BACxB,EAAwB,eAKxB,EAAA,mDAOA,EACiC,0BAIjC,EACoC,yBAqBtC,EAAkC,KAClC,EAAwD,KACxD,EACA,EAAmC,EAAE,CACrC,EAAoB,GAUpB,EACA,EAA0B,EAC1B,EAA0B,GAExB,EAA0B,OAAO,OAAO,CAC5C,cAAe,EAAA,2BACf,eAAgB,EAAA,4BAChB,aAAc,EAAA,QAAY,KAC1B,gBAAiB,EAAA,QAAY,QAC9B,CAAC,CAEF,SAAS,EACP,EACsB,CAGtB,OAFK,EAEE,CACL,GAAG,EACH,WAAY,CACV,GAAG,EAAM,WACT,GAAG,EACJ,CACF,CARkB,KAWrB,SAAS,EAAsB,EAAwB,CACjD,GAAqB,GAAqB,GAAK,UACjD,EAAQ,mBAAmB,CAE3B,EAAQ,kBAAkB,CAI9B,SAAS,EAAqB,EAAkB,EAAgB,GAAa,CAC3E,EAAQ,MAAM,EAAc,CAC5B,EAA0B,GAG1B,EAAsB,EAAQ,CAGhC,SAAS,EAA8B,EAAwB,CAC7D,GAAI,IAA6B,IAAA,IAAa,CAAC,GAAoB,CAAE,OAErE,IAAM,EAAY,GAA0B,WACtC,EAAY,EAAQ,aAAa,WAAW,CAKlD,GAJI,GAAa,MAAQ,IAAc,GACrC,EAAqB,EAAQ,CAG3B,IAA6B,KAAM,CACrC,EAA0B,EAC1B,QAIA,EAAQ,aAAa,WAAW,GAAK,EAAyB,YAC9D,IAA4B,KAE5B,EAAQ,SACN,EAAyB,WACzB,EAAyB,WAC1B,CACD,EAA0B,GAmB9B,SAAgB,EAAmB,EAAsC,CACvE,GAAI,IAAW,GAAO,CACpB,GAAI,EAAmB,OACvB,EAAoB,GACpB,GAAiB,mBAAmB,CACpC,GAAiC,CACjC,OAGF,IAAM,EAAc,EAGpB,GAFA,EAAoB,GAEhB,CAAC,GAAmB,CAAC,EAAuB,CAC9C,IAAM,EAAgB,OAAO,YAC3B,OAAO,QAAQ,EAAO,CAAC,QAAQ,EAAG,KAAW,IAAU,IAAA,GAAU,CAClE,CACD,EAAkB,CAAE,GAAG,EAAiB,GAAG,EAAe,CAGxD,IACE,IACF,EAAsB,EAAgB,CACtC,EAA8B,EAAgB,EAEhD,GAAiC,EAIrC,SAAS,GAA+D,CAGtE,OAFI,EAA0B,KAEvB,CACL,OAAQ,EAAgB,QAAU,EAClC,QAAS,EAAgB,SAAW,EACpC,OAAQ,EAAgB,QAAU,EACnC,CAMH,SAAS,GAAqB,CAC5B,OAAO,OAAO,OAAW,KAAe,OAAO,aAAiB,IAOlE,eAAe,GAAsC,CACnD,GAAI,CAAC,GAAW,CACd,OAAO,KAGT,GAAI,EACF,OAAO,EAGT,GAAI,CACF,GAAM,CAAE,QAAS,GAAY,MAAA,QAAA,SAAA,CAAA,SAAA,QAAM,6CAAA,CAAA,CACnC,OAAO,OACD,CAEN,OAAO,MAQX,SAAS,GAA+B,CA4BtC,MATA,GAlBI,GAaA,OAAO,QAAY,KAAe,QAAQ,KAAK,eAAiB,KAMlE,OAAO,UAAc,MACpB,UAAU,aAAe,KAEvB,OAAO,OAAW,KAAe,OAAO,aAAe,MAc9D,SAAgB,EACd,EACM,CACD,IACH,EAAmB,GAIvB,eAAsB,EACpB,EAAkB,GACO,CACzB,GAAI,EACF,OAAO,EAGT,GAAI,EACF,OAAO,EAGT,GAAyB,SAAY,CACnC,IAAM,EAAS,GAA4B,CAC3C,GAAI,CAAC,EACH,OAAO,KAGT,IAAM,EAAU,MAAM,GAAY,CAClC,GAAI,CAAC,EACH,OAAO,KAKT,IAAM,EAAqB,EAAQ,KACjC,EAAO,OACP,CACE,SAAU,EAAO,QACjB,QAAS,EAAO,OAChB,6BAA8B,CAAC,EAC/B,iBAAkB,GAClB,YAAa,GACb,YAAa,eACb,iBAAkB,EAClB,yBAA0B,GAAG,EAAsB,UACnD,gBAAiB,kBACjB,0BAA2B,GAC3B,UAAW,EACX,YAAa,EACd,CACD,EACD,CAeD,OAdK,GAEL,EAAkB,EAClB,EAAmB,IAAA,GAEf,EACF,EAAgB,mBAAmB,CAC1B,GAAqB,GAAK,WACnC,EAAgB,kBAAkB,CAClC,EAA8B,EAAgB,EACpC,GACV,EAAgB,mBAAmB,CAG9B,GAdyB,QAe9B,CAEJ,GAAI,CACF,OAAO,MAAM,SACL,CACH,IACH,EAAwB,OAQ9B,SAAgB,GAAwC,CACtD,GAAI,CAAC,GAAW,CACd,MAAO,UAIT,GAAI,GAAqB,CACvB,MAAO,SAGT,GAAI,CACF,IAAM,EAAU,aAAa,QAAQ,EAAsB,CAC3D,GAAI,IAAY,WAAa,IAAY,SACvC,OAAO,OAEH,EAIR,MAAO,UAqBT,SAAgB,EAA0B,EAAkC,CAC1E,GAAI,CAAC,GAAW,CAAE,UAAa,GAC/B,IAAM,EAAiB,GAAwB,EAE3C,EAAM,MAAQ,GACd,EAAM,MAAQ,IAEd,GAAU,EAMd,OAHA,OAAO,iBAAiB,EAAgC,EAAS,CACjE,OAAO,iBAAiB,UAAW,EAAc,KAEpC,CACX,OAAO,oBAAoB,EAAgC,EAAS,CACpE,OAAO,oBAAoB,UAAW,EAAc,EAIxD,SAAS,GAAwC,CAC3C,GAAW,EACb,OAAO,cAAc,IAAI,MAAM,EAA+B,CAAC,CAGnE,SAAS,EACP,EACM,CACD,MAAW,CAEhB,GAAI,CACF,aAAa,QAAQ,EAA0C,EAAQ,MACjE,GAKV,SAAgB,EACd,EACM,CACD,MAAW,CAEhB,GAAI,CACF,GACE,IAAa,IAAA,IACb,aAAa,QAAQ,EAAyC,GAC5D,EAEF,OAEF,aAAa,WAAW,EAAyC,CACjE,GAAiC,MAC3B,GAQV,eAAsB,EACpB,EACA,CAAE,cAAc,IAAqC,EAAE,CACxC,CACV,MAAW,CAIhB,GAAI,CAEF,GADA,aAAa,QAAQ,EAAuB,EAAQ,CAChD,EAAmB,OAIvB,IAAM,EAAU,GAAoB,MAAM,GAAyB,CACnE,GAAI,CAAC,EACH,OAGE,IAAY,WACd,EAAQ,kBAAkB,CAC1B,EAA8B,EAAQ,EAElC,EAAQ,aAAa,WAAW,EAAI,KAGtC,EAAQ,mBAAmB,CAF3B,EAAqB,EAAQ,MAK3B,SAEE,CAIJ,GACF,EAAiC,EAAQ,CAE3C,GAAiC,EAsCrC,SAAgB,GAA8B,CAC5C,OAAO,GAAqB,GAAK,UAMnC,SAAS,GAA2B,CAClC,GAAI,CAAC,GAAW,CACd,MAAO,GAGT,GAAI,CACF,OAAO,aAAa,QAAQ,EAAwB,GAAK,YACnD,CACN,MAAO,IAOX,SAAS,GAAyB,CAC3B,MAAW,CAIhB,GAAI,CACF,aAAa,QAAQ,EAAyB,OAAO,MAC/C,GAoBV,eAAsB,GAA8B,CAOlD,GALI,GAAqB,EAKrB,GAAiB,CACnB,OAIF,IAAM,EAAU,MAAM,EAAwB,GAAK,CAC/C,CAAC,GAAW,GAAqB,IAKjB,EAAQ,2BAA2B,EAAI,KAEzD,EAAQ,kBAAkB,CAI5B,EAAQ,QAAQ,iBAAkB,CAChC,SAAU,OAAO,UAAc,IAAc,UAAU,SAAW,UAClE,WACE,OAAO,UAAc,IAAc,UAAU,UAAY,UAC3D,SAAU,OAAO,SAAa,IAAc,SAAS,SAAW,GAChE,WAAY,OAAO,OAAW,IAAc,OAAO,SAAS,OAAS,GACrE,SAAU,OAAO,OAAW,KAAe,OAAO,OAAS,OAAO,IACnE,CAAC,CAGF,GAAkB,CAIK,GACnB,GAAmB,WACrB,EAAQ,mBAAmB,EAO/B,SAAS,GAA0B,CACjC,GAAI,CAAC,GAAW,CACd,MAAO,GAGT,GAAI,CACF,OAAO,eAAe,QAAQ,EAAsB,GAAK,YACnD,CACN,MAAO,IAOX,SAAS,GAAwB,CAC1B,MAAW,CAIhB,GAAI,CACF,eAAe,QAAQ,EAAuB,OAAO,MAC/C,GAMV,eAAe,GAAyD,CACtE,GAAI,CAAC,GAAoB,CAAE,OAAO,KAElC,IAAM,EAAU,MAAM,GAAyB,CAc/C,MAbI,CAAC,GAAW,CAAC,GAAoB,CAAS,MAO1C,EAAQ,2BAA2B,EACrC,EAAQ,kBAAkB,CAG5B,EAA8B,EAAQ,CAE/B,GAQT,eAAsB,GAAmC,CAEvD,GAAI,GAAgB,CAClB,OAGF,IAAM,EAAU,MAAM,GAA+B,CAChD,IAEL,EAAQ,QAAQ,qBAAsB,CACpC,aAAc,CAAC,GAAiB,CACjC,CAAC,CAGF,GAAiB,EAMnB,eAAsB,EACpB,EACA,EAAsC,EAAE,CACzB,CACf,IAAM,EAAU,MAAM,GAA+B,CAChD,GAEL,EAAQ,QAAQ,EAAW,EAAW,CAIxC,eAAsB,EACpB,EACA,EAAsC,EAAE,CACzB,CACf,IAAM,EAAU,MAAM,GAA+B,CAChD,GAEL,EAAQ,iBAAiB,EAAO,EAAW,CAM7C,eAAsB,GAAoC,CACnD,MAAW,CAIhB,IAAI,CACF,aAAa,WAAW,EAAsB,CAC9C,aAAa,WAAW,EAAwB,MAC1C,EAGR,GAAmC,CACnC,GAAI,CACF,eAAe,WAAW,EAAsB,MAC1C,EAIR,EAA2B,KAC3B,GAA2B,EAC3B,EAA0B,GAE1B,GAAI,CACE,GACF,EAAqB,EAAiB,GAAK,MAEvC,CAEN,GAAI,CACF,GAAiB,mBAAmB,MAC9B"}

package/dist/services/telemetry.d.ts

@@ -18,22 +18,63 @@
  * - VITE_POSTHOG_UI_HOST: PostHog UI host (defaults to https://us.posthog.com)
  *
  * IMPORTANT: By default, telemetry is sent to the OpenHands PostHog project.
- * Library consumers can override this by setting VITE_POSTHOG_API_KEY.
+ * Source builds can override this with VITE_POSTHOG_API_KEY. Precompiled
+ * library consumers can pass the same settings to configureTelemetry().
  *
  * Users can disable all telemetry (including install tracking) via:
  * - Setting VITE_DO_NOT_TRACK=1 environment variable
  * - Browser's Do Not Track setting
  */
-import type { PostHog } from "posthog-js";
+import type { BootstrapConfig, PostHog } from "posthog-js";
+export interface TelemetryConfig {
+    /** PostHog project key. Useful for precompiled library consumers. */
+    apiKey?: string;
+    /** Event ingestion host or reverse proxy. */
+    apiHost?: string;
+    /** PostHog UI host used by toolbar links and other UI features. */
+    uiHost?: string;
+}
+export type TelemetryConfiguration = TelemetryConfig | false;
 export type TelemetryConsent = "granted" | "denied" | "pending";
+export type ResolvedTelemetryConsent = Exclude<TelemetryConsent, "pending">;
+export interface SetTelemetryConsentOptions {
+    /** Do not persist a value mirrored from backend settings back to Cloud. */
+    syncToCloud?: boolean;
+}
+/**
+ * Configure the single Canvas telemetry client before its first use.
+ * Passing false disables telemetry and install tracking for embedded hosts.
+ */
+export declare function configureTelemetry(config: TelemetryConfiguration): void;
+/**
+ * Initialize PostHog SDK.
+ *
+ * @param enableCapturing - If true, enable capturing immediately (for install tracking).
+ *                          If false, start with capturing disabled (for consent-gated tracking).
+ */
+export declare function configurePostHogBootstrap(bootstrap: BootstrapConfig | undefined): void;
+export declare function initializePostHogClient(enableCapturing?: boolean): Promise<PostHog | null>;
 /**
  * Get user's telemetry consent preference
  */
 export declare function getTelemetryConsent(): TelemetryConsent;
+/**
+ * Return an explicit browser choice that still needs to survive a Cloud login.
+ * It remains pending across local backends so their settings cannot consume a
+ * decision that must still be applied after the user connects to Cloud.
+ */
+export declare function getPendingCloudTelemetryConsent(): ResolvedTelemetryConsent | null;
+export declare function subscribeTelemetryConsent(listener: () => void): () => void;
+export declare function clearPendingCloudTelemetryConsent(expected?: ResolvedTelemetryConsent): void;
 /**
  * Set user's telemetry consent preference
  */
-export declare function setTelemetryConsent(consent: "granted" | "denied"): Promise<void>;
+export declare function setTelemetryConsent(consent: ResolvedTelemetryConsent, { syncToCloud }?: SetTelemetryConsentOptions): Promise<void>;
+/**
+ * Declare the current Cloud identity. The telemetry service applies it only
+ * after consent and owns all reset/account-switch semantics.
+ */
+export declare function setTelemetryIdentity(distinctId: string | null, properties?: Record<string, unknown>): Promise<void>;
 /**
  * Check if telemetry is enabled (user has granted consent)
  */
@@ -64,13 +105,9 @@ export declare function trackSessionStart(): Promise<void>;
  * Track a custom event (respects consent).
  */
 export declare function trackEvent(eventName: string, properties?: Record<string, unknown>): Promise<void>;
+/** Track an exception through the same consent-aware client as custom events. */
+export declare function trackException(error: unknown, properties?: Record<string, unknown>): Promise<void>;
 /**
  * Clear all telemetry data (for privacy/GDPR requests)
  */
 export declare function clearTelemetryData(): Promise<void>;
-/**
- * Get the PostHog instance for advanced usage (if needed).
- * Returns the instance if initialized, otherwise null.
- * Note: This is async because PostHog is lazily loaded.
- */
-export declare function getPostHogInstance(): Promise<PostHog | null>;

package/dist/services/telemetry.js

@@ -1,12 +1,65 @@
 import e from "../package.js";
+import { AGENT_CANVAS_CLIENT_SOURCE as t, AGENT_CANVAS_CLIENT_VERSION as n } from "../api/client-source.js";
 //#region src/services/telemetry.ts
-var t = "openhands-telemetry-consent", n = "openhands-telemetry-first-use", r = "openhands-telemetry-session", i = "agent-canvas", a = "phc_BgzfxKdgsYMLFTmJqt424ZoyVHvKFfrwttLimzdYTKFK", o = "https://z.openhands.dev", s = "https://us.posthog.com", c = !1, l = null;
-function u() {
+var r = "openhands-telemetry-consent", i = "openhands-telemetry-consent-pending-cloud-sync", a = "openhands-telemetry-consent-change", o = "openhands-telemetry-first-use", s = "openhands-telemetry-session", c = "agent-canvas", l = "phc_BgzfxKdgsYMLFTmJqt424ZoyVHvKFfrwttLimzdYTKFK", u = "https://z.openhands.dev", d = "https://us.posthog.com", f = null, p = null, m, h = {}, g = !1, _, v = 0, y = -1, b = Object.freeze({
+	client_source: t,
+	client_version: n,
+	package_name: e.name,
+	package_version: e.version
+});
+function x(e) {
+	return e ? {
+		...e,
+		properties: {
+			...e.properties,
+			...b
+		}
+	} : null;
+}
+function S(e) {
+	g || M() !== "granted" ? e.opt_out_capturing() : e.opt_in_capturing();
+}
+function C(e, t = !1) {
+	e.reset(t), y = -1, S(e);
+}
+function w(e) {
+	if (_ === void 0 || !R()) return;
+	let t = _?.distinctId, n = e.get_property("$user_id");
+	if (n != null && n !== t && C(e), _ === null) {
+		y = v;
+		return;
+	}
+	(e.get_property("$user_id") !== _.distinctId || y !== v) && (e.identify(_.distinctId, _.properties), y = v);
+}
+function T(e) {
+	if (e === !1) {
+		if (g) return;
+		g = !0, f?.opt_out_capturing(), P();
+		return;
+	}
+	let t = g;
+	if (g = !1, !f && !p) {
+		let t = Object.fromEntries(Object.entries(e).filter(([, e]) => e !== void 0));
+		h = {
+			...h,
+			...t
+		};
+	}
+	t && (f && (S(f), w(f)), P());
+}
+function E() {
+	return g ? null : {
+		apiKey: h.apiKey || l,
+		apiHost: h.apiHost || u,
+		uiHost: h.uiHost || d
+	};
+}
+function D() {
 	return typeof window < "u" && typeof localStorage < "u";
 }
-async function d() {
-	if (!u()) return null;
-	if (l) return l;
+async function O() {
+	if (!D()) return null;
+	if (f) return f;
 	try {
 		let { default: e } = await import("../node_modules/posthog-js/dist/module.js");
 		return e;
@@ -14,106 +67,162 @@ async function d() {
 		return null;
 	}
 }
-function f() {
-	return typeof process < "u" && process.env?.DO_NOT_TRACK === "1" || typeof navigator < "u" && (navigator.doNotTrack === "1" || typeof window < "u" && window.doNotTrack === "1");
-}
-async function p(t = !1) {
-	if (c) return l;
-	let n = await d();
-	return n ? (l = n.init(a, {
-		api_host: o,
-		ui_host: s,
-		opt_out_capturing_by_default: !t,
-		capture_pageview: !1,
-		autocapture: !1,
-		persistence: "localStorage",
-		persistence_name: i,
-		consent_persistence_name: `${i}-consent`,
-		disable_session_recording: !0,
-		loaded: (t) => {
-			t.register({
-				package_name: e.name,
-				package_version: e.version
-			});
-		}
-	}, i), c = !0, l) : null;
+function k() {
+	return !!(g || typeof process < "u" && process.env?.DO_NOT_TRACK === "1" || typeof navigator < "u" && (navigator.doNotTrack === "1" || typeof window < "u" && window.doNotTrack === "1"));
+}
+function A(e) {
+	f || (m = e);
+}
+async function j(e = !1) {
+	if (f) return f;
+	if (p) return p;
+	p = (async () => {
+		let t = E();
+		if (!t) return null;
+		let n = await O();
+		if (!n) return null;
+		let r = n.init(t.apiKey, {
+			api_host: t.apiHost,
+			ui_host: t.uiHost,
+			opt_out_capturing_by_default: !e,
+			capture_pageview: !1,
+			autocapture: !1,
+			persistence: "localStorage",
+			persistence_name: c,
+			consent_persistence_name: `${c}-consent`,
+			person_profiles: "identified_only",
+			disable_session_recording: !0,
+			bootstrap: m,
+			before_send: x
+		}, c);
+		return r ? (f = r, m = void 0, g ? f.opt_out_capturing() : M() === "granted" ? (f.opt_in_capturing(), w(f)) : e || f.opt_out_capturing(), f) : null;
+	})();
+	try {
+		return await p;
+	} finally {
+		f || (p = null);
+	}
 }
-function m() {
-	if (!u()) return "pending";
-	if (f()) return "denied";
+function M() {
+	if (!D()) return "pending";
+	if (k()) return "denied";
 	try {
-		let e = localStorage.getItem(t);
+		let e = localStorage.getItem(r);
 		if (e === "granted" || e === "denied") return e;
 	} catch {}
 	return "pending";
 }
-async function h(e) {
-	if (u()) try {
-		localStorage.setItem(t, e);
-		let n = await p();
-		if (!n) return;
-		e === "granted" ? n.opt_in_capturing() : n.opt_out_capturing();
+function N(e) {
+	if (!D()) return () => {};
+	let t = (t) => {
+		(t.key === r || t.key === i) && e();
+	};
+	return window.addEventListener(a, e), window.addEventListener("storage", t), () => {
+		window.removeEventListener(a, e), window.removeEventListener("storage", t);
+	};
+}
+function P() {
+	D() && window.dispatchEvent(new Event(a));
+}
+function F(e) {
+	if (D()) try {
+		localStorage.setItem(i, e);
+	} catch {}
+}
+function I(e) {
+	if (D()) try {
+		if (e !== void 0 && localStorage.getItem(i) !== e) return;
+		localStorage.removeItem(i), P();
 	} catch {}
 }
-function g() {
-	return m() === "granted";
+async function L(e, { syncToCloud: t = !0 } = {}) {
+	if (D()) try {
+		if (localStorage.setItem(r, e), g) return;
+		let t = f ?? await j();
+		if (!t) return;
+		e === "granted" ? (t.opt_in_capturing(), w(t)) : t.get_property("$user_id") == null ? t.opt_out_capturing() : C(t);
+	} catch {} finally {
+		t && F(e), P();
+	}
+}
+function R() {
+	return M() === "granted";
 }
-function _() {
-	if (!u()) return !1;
+function z() {
+	if (!D()) return !1;
 	try {
-		return localStorage.getItem(n) === "true";
+		return localStorage.getItem(o) === "true";
 	} catch {
 		return !1;
 	}
 }
-function v() {
-	if (u()) try {
-		localStorage.setItem(n, "true");
+function B() {
+	if (D()) try {
+		localStorage.setItem(o, "true");
 	} catch {}
 }
-async function y() {
-	if (f() || _()) return;
-	let e = await p(!0);
-	e && ((e.has_opted_out_capturing?.() ?? !1) && e.opt_in_capturing(), e.capture("canvas_install", {
+async function V() {
+	if (k() || z()) return;
+	let e = await j(!0);
+	!e || k() || ((e.has_opted_out_capturing?.() ?? !1) && e.opt_in_capturing(), e.capture("canvas_install", {
 		platform: typeof navigator < "u" ? navigator.platform : "unknown",
 		user_agent: typeof navigator < "u" ? navigator.userAgent : "unknown",
 		referrer: typeof document < "u" ? document.referrer : "",
 		url_origin: typeof window < "u" ? window.location.origin : "",
 		embedded: typeof window < "u" && window.self !== window.top
-	}), v(), m() !== "granted" && e.opt_out_capturing());
+	}), B(), M() !== "granted" && e.opt_out_capturing());
 }
-function b() {
-	if (!u()) return !1;
+function H() {
+	if (!D()) return !1;
 	try {
-		return sessionStorage.getItem(r) === "true";
+		return sessionStorage.getItem(s) === "true";
 	} catch {
 		return !1;
 	}
 }
-function x() {
-	if (u()) try {
-		sessionStorage.setItem(r, "true");
+function U() {
+	if (D()) try {
+		sessionStorage.setItem(s, "true");
 	} catch {}
 }
-async function S() {
-	if (!g() || b()) return;
-	let e = await p();
-	e && (e.capture("canvas_new_session", { is_first_use: !_() }), x());
+async function W() {
+	if (!R()) return null;
+	let e = await j();
+	return !e || !R() ? null : (e.has_opted_out_capturing?.() && e.opt_in_capturing(), w(e), e);
 }
-async function C(e, t = {}) {
-	if (!g()) return;
-	let n = await p();
-	n && n.capture(e, t);
+async function G() {
+	if (H()) return;
+	let e = await W();
+	e && (e.capture("canvas_new_session", { is_first_use: !z() }), U());
 }
-async function w() {
-	if (u()) try {
-		localStorage.removeItem(t), localStorage.removeItem(n), sessionStorage.removeItem(r), c && l && l.reset();
-	} catch {}
+async function K(e, t = {}) {
+	let n = await W();
+	n && n.capture(e, t);
 }
-async function T() {
-	return c ? l : null;
+async function q(e, t = {}) {
+	let n = await W();
+	n && n.captureException(e, t);
+}
+async function J() {
+	if (D()) {
+		try {
+			localStorage.removeItem(r), localStorage.removeItem(o);
+		} catch {}
+		I();
+		try {
+			sessionStorage.removeItem(s);
+		} catch {}
+		_ = null, v += 1, y = -1;
+		try {
+			f && C(f, !0);
+		} catch {
+			try {
+				f?.opt_out_capturing();
+			} catch {}
+		}
+	}
 }
 //#endregion
-export { w as clearTelemetryData, T as getPostHogInstance, m as getTelemetryConsent, g as isTelemetryEnabled, h as setTelemetryConsent, C as trackEvent, y as trackInstall, S as trackSessionStart };
+export { J as clearTelemetryData, A as configurePostHogBootstrap, T as configureTelemetry, M as getTelemetryConsent, j as initializePostHogClient, R as isTelemetryEnabled, L as setTelemetryConsent, N as subscribeTelemetryConsent, K as trackEvent, q as trackException, V as trackInstall, G as trackSessionStart };
 
 //# sourceMappingURL=telemetry.js.map

package/dist/services/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","names":[],"sources":["../../src/services/telemetry.ts"],"sourcesContent":["/**\n * Telemetry service for tracking library usage.\n *\n * This module handles anonymous telemetry for the @openhands/agent-canvas package\n * using the PostHog SDK for reliable event delivery with batching, retry logic,\n * and offline support.\n *\n * TRACKING PHILOSOPHY:\n * - Install event (canvas_install): Sent immediately on first use, regardless of consent.\n *   This is anonymous and contains no PII - just basic browser info and a random ID.\n * - Session/custom events: Only sent after user grants consent via the consent modal.\n * - Users can opt out of all future tracking by declining consent.\n *\n * AD BLOCKER BYPASS:\n * By default, telemetry is routed through OpenHands' reverse proxy (z.openhands.dev)\n * to avoid being blocked by ad blockers. Library consumers can override this with:\n * - VITE_POSTHOG_HOST: Custom proxy URL or direct PostHog URL\n * - VITE_POSTHOG_UI_HOST: PostHog UI host (defaults to https://us.posthog.com)\n *\n * IMPORTANT: By default, telemetry is sent to the OpenHands PostHog project.\n * Library consumers can override this by setting VITE_POSTHOG_API_KEY.\n *\n * Users can disable all telemetry (including install tracking) via:\n * - Setting VITE_DO_NOT_TRACK=1 environment variable\n * - Browser's Do Not Track setting\n */\n\nimport type { PostHog } from \"posthog-js\";\nimport packageJson from \"../../package.json\";\n\nconst TELEMETRY_CONSENT_KEY = \"openhands-telemetry-consent\";\nconst TELEMETRY_FIRST_USE_KEY = \"openhands-telemetry-first-use\";\nconst TELEMETRY_SESSION_KEY = \"openhands-telemetry-session\";\nconst POSTHOG_INSTANCE_NAME = \"agent-canvas\";\n\n// PostHog project keys — one per deployment environment, hardcoded so they\n// are baked into the static bundle at build time and cannot drift at runtime.\n// Replace POSTHOG_STAGING_KEY with a dedicated project key once provisioned.\nconst POSTHOG_PROD_KEY = \"phc_BgzfxKdgsYMLFTmJqt424ZoyVHvKFfrwttLimzdYTKFK\";\nconst POSTHOG_STAGING_KEY = \"phc_kBtz5nKmxVRRQ7HtPwr2QX9eMC5j65zE86QKocVNwb4U\";\n\n// Always use the staging key unless VITE_APP_ENV is explicitly set to\n// \"production\" at bundle time (hardcoded in build:lib and production CI).\n// Library consumers can always override with VITE_POSTHOG_API_KEY.\nconst POSTHOG_API_KEY: string =\n  (import.meta.env.VITE_POSTHOG_API_KEY as string | undefined) ||\n  (import.meta.env.VITE_APP_ENV === \"production\"\n    ? POSTHOG_PROD_KEY\n    : POSTHOG_STAGING_KEY);\n\n// Default to OpenHands' reverse proxy to bypass ad blockers.\n// The proxy at z.openhands.dev routes to PostHog's US region.\n// Library consumers can override this with their own proxy or direct PostHog URL.\nconst POSTHOG_HOST =\n  import.meta.env.VITE_POSTHOG_HOST || \"https://z.openhands.dev\";\n\n// UI host is needed for PostHog features like toolbar to work correctly\n// when using a reverse proxy. Defaults to US region.\nconst POSTHOG_UI_HOST =\n  import.meta.env.VITE_POSTHOG_UI_HOST || \"https://us.posthog.com\";\n\nexport type TelemetryConsent = \"granted\" | \"denied\" | \"pending\";\n\nlet isInitialized = false;\nlet posthogInstance: PostHog | null = null;\n\n/**\n * Check if we're in a browser environment\n */\nfunction isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof localStorage !== \"undefined\";\n}\n\n/**\n * Lazily load PostHog to avoid SSR/Node.js issues.\n * PostHog is a browser-only library, so we dynamically import it only when needed.\n */\nasync function getPostHog(): Promise<PostHog | null> {\n  if (!isBrowser()) {\n    return null;\n  }\n\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  try {\n    const { default: posthog } = await import(\"posthog-js\");\n    return posthog;\n  } catch {\n    // Failed to load PostHog - telemetry will be disabled\n    return null;\n  }\n}\n\n/**\n * Check if telemetry is disabled via environment variable or browser setting.\n * Works in both Node.js and browser (Vite) environments.\n */\nfunction isDoNotTrackEnabled(): boolean {\n  // Check Vite environment variable (browser)\n  if (\n    typeof import.meta !== \"undefined\" &&\n    import.meta.env?.VITE_DO_NOT_TRACK === \"1\"\n  ) {\n    return true;\n  }\n\n  // Check Node.js environment variable (SSR/testing)\n  if (typeof process !== \"undefined\" && process.env?.DO_NOT_TRACK === \"1\") {\n    return true;\n  }\n\n  // Check browser's navigator.doNotTrack standard\n  if (\n    typeof navigator !== \"undefined\" &&\n    (navigator.doNotTrack === \"1\" ||\n      // @ts-expect-error - Some browsers use window.doNotTrack\n      (typeof window !== \"undefined\" && window.doNotTrack === \"1\"))\n  ) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Initialize PostHog SDK.\n *\n * @param enableCapturing - If true, enable capturing immediately (for install tracking).\n *                          If false, start with capturing disabled (for consent-gated tracking).\n */\nasync function initializePostHog(\n  enableCapturing = false,\n): Promise<PostHog | null> {\n  if (isInitialized) {\n    return posthogInstance;\n  }\n\n  const posthog = await getPostHog();\n  if (!posthog) {\n    return null;\n  }\n\n  // Canvas telemetry must not share PostHog's default singleton with host-app\n  // analytics. A named instance gives it independent configuration, consent,\n  // persistence, and delivery state.\n  posthogInstance = posthog.init(\n    POSTHOG_API_KEY,\n    {\n      api_host: POSTHOG_HOST,\n      // UI host is required when using a reverse proxy so PostHog features work correctly\n      ui_host: POSTHOG_UI_HOST,\n      // Start with capturing disabled by default - we enable it explicitly when needed\n      opt_out_capturing_by_default: !enableCapturing,\n      // Don't auto-capture page views - we control when to track\n      capture_pageview: false,\n      // Don't auto-capture clicks etc.\n      autocapture: false,\n      // Use localStorage for persistence\n      persistence: \"localStorage\",\n      persistence_name: POSTHOG_INSTANCE_NAME,\n      consent_persistence_name: `${POSTHOG_INSTANCE_NAME}-consent`,\n      // Disable session recording\n      disable_session_recording: true,\n      // Set default properties for all events\n      loaded: (ph) => {\n        ph.register({\n          package_name: packageJson.name,\n          package_version: packageJson.version,\n        });\n      },\n    },\n    POSTHOG_INSTANCE_NAME,\n  );\n\n  isInitialized = true;\n  return posthogInstance;\n}\n\n/**\n * Get user's telemetry consent preference\n */\nexport function getTelemetryConsent(): TelemetryConsent {\n  if (!isBrowser()) {\n    return \"pending\";\n  }\n\n  // Check environment variable for opt-out\n  if (isDoNotTrackEnabled()) {\n    return \"denied\";\n  }\n\n  try {\n    const consent = localStorage.getItem(TELEMETRY_CONSENT_KEY);\n    if (consent === \"granted\" || consent === \"denied\") {\n      return consent;\n    }\n  } catch {\n    // Ignore storage errors\n  }\n\n  return \"pending\";\n}\n\n/**\n * Set user's telemetry consent preference\n */\nexport async function setTelemetryConsent(\n  consent: \"granted\" | \"denied\",\n): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_CONSENT_KEY, consent);\n\n    // Initialize PostHog if not already done\n    const posthog = await initializePostHog();\n    if (!posthog) {\n      return;\n    }\n\n    if (consent === \"granted\") {\n      // Enable capturing\n      posthog.opt_in_capturing();\n    } else {\n      // Disable capturing and clear any queued events\n      posthog.opt_out_capturing();\n    }\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Check if telemetry is enabled (user has granted consent)\n */\nexport function isTelemetryEnabled(): boolean {\n  return getTelemetryConsent() === \"granted\";\n}\n\n/**\n * Check if first use event has already been sent\n */\nfunction hasFirstUseSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return localStorage.getItem(TELEMETRY_FIRST_USE_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark first use event as sent\n */\nfunction markFirstUseSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_FIRST_USE_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Track the initial install of the library.\n *\n * IMPORTANT: This is sent immediately on first use, regardless of consent status.\n * This allows us to track library adoption even if users haven't made a consent choice yet.\n *\n * The event is:\n * - Completely anonymous (no PII, just a random PostHog distinct_id)\n * - Sent only once per installation (tracked via localStorage, persists across sessions)\n * - Still respects DO_NOT_TRACK environment variable and browser setting\n *\n * Users who want complete privacy can:\n * - Set VITE_DO_NOT_TRACK=1 or browser's Do Not Track\n * - Later deny consent to prevent all future tracking\n */\nexport async function trackInstall(): Promise<void> {\n  // Respect hard opt-out via environment variable or browser setting\n  if (isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Already sent install event (persisted in localStorage - survives app relaunches)\n  if (hasFirstUseSent()) {\n    return;\n  }\n\n  // Initialize PostHog with capturing enabled (for this one event)\n  const posthog = await initializePostHog(true);\n  if (!posthog) {\n    return;\n  }\n\n  // Temporarily enable capturing if it was disabled\n  const wasOptedOut = posthog.has_opted_out_capturing?.() ?? false;\n  if (wasOptedOut) {\n    posthog.opt_in_capturing();\n  }\n\n  // Capture the install event\n  posthog.capture(\"canvas_install\", {\n    platform: typeof navigator !== \"undefined\" ? navigator.platform : \"unknown\",\n    user_agent:\n      typeof navigator !== \"undefined\" ? navigator.userAgent : \"unknown\",\n    referrer: typeof document !== \"undefined\" ? document.referrer : \"\",\n    url_origin: typeof window !== \"undefined\" ? window.location.origin : \"\",\n    embedded: typeof window !== \"undefined\" && window.self !== window.top,\n  });\n\n  // Mark as sent (stored in localStorage - persists across browser sessions)\n  markFirstUseSent();\n\n  // Restore opt-out state if user hasn't granted consent yet\n  // This ensures we only send the install event, not subsequent events\n  const currentConsent = getTelemetryConsent();\n  if (currentConsent !== \"granted\") {\n    posthog.opt_out_capturing();\n  }\n}\n\n/**\n * Check if session start event has already been sent (this browser session)\n */\nfunction hasSessionSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return sessionStorage.getItem(TELEMETRY_SESSION_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark session start event as sent (uses sessionStorage so it resets on new tabs/sessions)\n */\nfunction markSessionSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    sessionStorage.setItem(TELEMETRY_SESSION_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Track a session start event.\n * Called each time a new browser session starts (respects consent).\n * Uses sessionStorage for deduplication - only sends once per browser session.\n */\nexport async function trackSessionStart(): Promise<void> {\n  if (!isTelemetryEnabled()) {\n    return;\n  }\n\n  // Already sent session event this browser session\n  if (hasSessionSent()) {\n    return;\n  }\n\n  // Initialize PostHog if needed\n  const posthog = await initializePostHog();\n  if (!posthog) {\n    return;\n  }\n\n  posthog.capture(\"canvas_new_session\", {\n    is_first_use: !hasFirstUseSent(),\n  });\n\n  // Mark as sent for this session\n  markSessionSent();\n}\n\n/**\n * Track a custom event (respects consent).\n */\nexport async function trackEvent(\n  eventName: string,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  if (!isTelemetryEnabled()) {\n    return;\n  }\n\n  // Initialize PostHog if needed\n  const posthog = await initializePostHog();\n  if (!posthog) {\n    return;\n  }\n\n  posthog.capture(eventName, properties);\n}\n\n/**\n * Clear all telemetry data (for privacy/GDPR requests)\n */\nexport async function clearTelemetryData(): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.removeItem(TELEMETRY_CONSENT_KEY);\n    localStorage.removeItem(TELEMETRY_FIRST_USE_KEY);\n    sessionStorage.removeItem(TELEMETRY_SESSION_KEY);\n\n    // Reset PostHog if initialized\n    if (isInitialized && posthogInstance) {\n      posthogInstance.reset();\n    }\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Get the PostHog instance for advanced usage (if needed).\n * Returns the instance if initialized, otherwise null.\n * Note: This is async because PostHog is lazily loaded.\n */\nexport async function getPostHogInstance(): Promise<PostHog | null> {\n  if (!isInitialized) {\n    return null;\n  }\n  return posthogInstance;\n}\n"],"mappings":";;AA8BA,IAAM,IAAwB,+BACxB,IAA0B,iCAC1B,IAAwB,+BACxB,IAAwB,gBAWxB,IAGA,oDAMA,IACiC,2BAIjC,IACoC,0BAItC,IAAgB,IAChB,IAAkC;AAKtC,SAAS,IAAqB;AAC5B,QAAO,OAAO,SAAW,OAAe,OAAO,eAAiB;;AAOlE,eAAe,IAAsC;AACnD,KAAI,CAAC,GAAW,CACd,QAAO;AAGT,KAAI,EACF,QAAO;AAGT,KAAI;EACF,IAAM,EAAE,SAAS,MAAY,MAAM,OAAO;AAC1C,SAAO;SACD;AAEN,SAAO;;;AAQX,SAAS,IAA+B;AAwBtC,QAdI,OAAO,UAAY,OAAe,QAAQ,KAAK,iBAAiB,OAMlE,OAAO,YAAc,QACpB,UAAU,eAAe,OAEvB,OAAO,SAAW,OAAe,OAAO,eAAe;;AAc9D,eAAe,EACb,IAAkB,IACO;AACzB,KAAI,EACF,QAAO;CAGT,IAAM,IAAU,MAAM,GAAY;AAsClC,QArCK,KAOL,IAAkB,EAAQ,KACxB,GACA;EACE,UAAU;EAEV,SAAS;EAET,8BAA8B,CAAC;EAE/B,kBAAkB;EAElB,aAAa;EAEb,aAAa;EACb,kBAAkB;EAClB,0BAA0B,GAAG,EAAsB;EAEnD,2BAA2B;EAE3B,SAAS,MAAO;AACd,KAAG,SAAS;IACV,cAAc,EAAY;IAC1B,iBAAiB,EAAY;IAC9B,CAAC;;EAEL,EACD,EACD,EAED,IAAgB,IACT,KApCE;;AA0CX,SAAgB,IAAwC;AACtD,KAAI,CAAC,GAAW,CACd,QAAO;AAIT,KAAI,GAAqB,CACvB,QAAO;AAGT,KAAI;EACF,IAAM,IAAU,aAAa,QAAQ,EAAsB;AAC3D,MAAI,MAAY,aAAa,MAAY,SACvC,QAAO;SAEH;AAIR,QAAO;;AAMT,eAAsB,EACpB,GACe;AACV,QAAW,CAIhB,KAAI;AACF,eAAa,QAAQ,GAAuB,EAAQ;EAGpD,IAAM,IAAU,MAAM,GAAmB;AACzC,MAAI,CAAC,EACH;AAGF,EAAI,MAAY,YAEd,EAAQ,kBAAkB,GAG1B,EAAQ,mBAAmB;SAEvB;;AAQV,SAAgB,IAA8B;AAC5C,QAAO,GAAqB,KAAK;;AAMnC,SAAS,IAA2B;AAClC,KAAI,CAAC,GAAW,CACd,QAAO;AAGT,KAAI;AACF,SAAO,aAAa,QAAQ,EAAwB,KAAK;SACnD;AACN,SAAO;;;AAOX,SAAS,IAAyB;AAC3B,QAAW,CAIhB,KAAI;AACF,eAAa,QAAQ,GAAyB,OAAO;SAC/C;;AAoBV,eAAsB,IAA8B;AAOlD,KALI,GAAqB,IAKrB,GAAiB,CACnB;CAIF,IAAM,IAAU,MAAM,EAAkB,GAAK;AACxC,QAKe,EAAQ,2BAA2B,IAAI,OAEzD,EAAQ,kBAAkB,EAI5B,EAAQ,QAAQ,kBAAkB;EAChC,UAAU,OAAO,YAAc,MAAc,UAAU,WAAW;EAClE,YACE,OAAO,YAAc,MAAc,UAAU,YAAY;EAC3D,UAAU,OAAO,WAAa,MAAc,SAAS,WAAW;EAChE,YAAY,OAAO,SAAW,MAAc,OAAO,SAAS,SAAS;EACrE,UAAU,OAAO,SAAW,OAAe,OAAO,SAAS,OAAO;EACnE,CAAC,EAGF,GAAkB,EAIK,GACnB,KAAmB,aACrB,EAAQ,mBAAmB;;AAO/B,SAAS,IAA0B;AACjC,KAAI,CAAC,GAAW,CACd,QAAO;AAGT,KAAI;AACF,SAAO,eAAe,QAAQ,EAAsB,KAAK;SACnD;AACN,SAAO;;;AAOX,SAAS,IAAwB;AAC1B,QAAW,CAIhB,KAAI;AACF,iBAAe,QAAQ,GAAuB,OAAO;SAC/C;;AAUV,eAAsB,IAAmC;AAMvD,KALI,CAAC,GAAoB,IAKrB,GAAgB,CAClB;CAIF,IAAM,IAAU,MAAM,GAAmB;AACpC,OAIL,EAAQ,QAAQ,sBAAsB,EACpC,cAAc,CAAC,GAAiB,EACjC,CAAC,EAGF,GAAiB;;AAMnB,eAAsB,EACpB,GACA,IAAsC,EAAE,EACzB;AACf,KAAI,CAAC,GAAoB,CACvB;CAIF,IAAM,IAAU,MAAM,GAAmB;AACpC,MAIL,EAAQ,QAAQ,GAAW,EAAW;;AAMxC,eAAsB,IAAoC;AACnD,QAAW,CAIhB,KAAI;AAMF,EALA,aAAa,WAAW,EAAsB,EAC9C,aAAa,WAAW,EAAwB,EAChD,eAAe,WAAW,EAAsB,EAG5C,KAAiB,KACnB,EAAgB,OAAO;SAEnB;;AAUV,eAAsB,IAA8C;AAIlE,QAHK,IAGE,IAFE"}
+{"version":3,"file":"telemetry.js","names":[],"sources":["../../src/services/telemetry.ts"],"sourcesContent":["/**\n * Telemetry service for tracking library usage.\n *\n * This module handles anonymous telemetry for the @openhands/agent-canvas package\n * using the PostHog SDK for reliable event delivery with batching, retry logic,\n * and offline support.\n *\n * TRACKING PHILOSOPHY:\n * - Install event (canvas_install): Sent immediately on first use, regardless of consent.\n *   This is anonymous and contains no PII - just basic browser info and a random ID.\n * - Session/custom events: Only sent after user grants consent via the consent modal.\n * - Users can opt out of all future tracking by declining consent.\n *\n * AD BLOCKER BYPASS:\n * By default, telemetry is routed through OpenHands' reverse proxy (z.openhands.dev)\n * to avoid being blocked by ad blockers. Library consumers can override this with:\n * - VITE_POSTHOG_HOST: Custom proxy URL or direct PostHog URL\n * - VITE_POSTHOG_UI_HOST: PostHog UI host (defaults to https://us.posthog.com)\n *\n * IMPORTANT: By default, telemetry is sent to the OpenHands PostHog project.\n * Source builds can override this with VITE_POSTHOG_API_KEY. Precompiled\n * library consumers can pass the same settings to configureTelemetry().\n *\n * Users can disable all telemetry (including install tracking) via:\n * - Setting VITE_DO_NOT_TRACK=1 environment variable\n * - Browser's Do Not Track setting\n */\n\nimport type { BootstrapConfig, CaptureResult, PostHog } from \"posthog-js\";\nimport packageJson from \"../../package.json\";\nimport {\n  AGENT_CANVAS_CLIENT_SOURCE,\n  AGENT_CANVAS_CLIENT_VERSION,\n} from \"#/api/client-source\";\n\nconst TELEMETRY_CONSENT_KEY = \"openhands-telemetry-consent\";\nconst TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY =\n  \"openhands-telemetry-consent-pending-cloud-sync\";\nconst TELEMETRY_CONSENT_CHANGE_EVENT = \"openhands-telemetry-consent-change\";\nconst TELEMETRY_FIRST_USE_KEY = \"openhands-telemetry-first-use\";\nconst TELEMETRY_SESSION_KEY = \"openhands-telemetry-session\";\nconst POSTHOG_INSTANCE_NAME = \"agent-canvas\";\n\n// Unconfigured source builds use staging. Production release workflows pass\n// VITE_POSTHOG_API_KEY explicitly for both the app and library artifacts.\nconst POSTHOG_STAGING_KEY = \"phc_kBtz5nKmxVRRQ7HtPwr2QX9eMC5j65zE86QKocVNwb4U\";\nconst DEFAULT_POSTHOG_API_KEY: string =\n  (import.meta.env.VITE_POSTHOG_API_KEY as string | undefined) ||\n  POSTHOG_STAGING_KEY;\n\n// Default to OpenHands' reverse proxy to bypass ad blockers.\n// The proxy at z.openhands.dev routes to PostHog's US region.\n// Library consumers can override this with their own proxy or direct PostHog URL.\nconst DEFAULT_POSTHOG_HOST =\n  import.meta.env.VITE_POSTHOG_HOST || \"https://z.openhands.dev\";\n\n// UI host is needed for PostHog features like toolbar to work correctly\n// when using a reverse proxy. Defaults to US region.\nconst DEFAULT_POSTHOG_UI_HOST =\n  import.meta.env.VITE_POSTHOG_UI_HOST || \"https://us.posthog.com\";\n\nexport interface TelemetryConfig {\n  /** PostHog project key. Useful for precompiled library consumers. */\n  apiKey?: string;\n  /** Event ingestion host or reverse proxy. */\n  apiHost?: string;\n  /** PostHog UI host used by toolbar links and other UI features. */\n  uiHost?: string;\n}\n\nexport type TelemetryConfiguration = TelemetryConfig | false;\n\nexport type TelemetryConsent = \"granted\" | \"denied\" | \"pending\";\nexport type ResolvedTelemetryConsent = Exclude<TelemetryConsent, \"pending\">;\n\nexport interface SetTelemetryConsentOptions {\n  /** Do not persist a value mirrored from backend settings back to Cloud. */\n  syncToCloud?: boolean;\n}\n\nlet posthogInstance: PostHog | null = null;\nlet initializationPromise: Promise<PostHog | null> | null = null;\nlet pendingBootstrap: BootstrapConfig | undefined;\nlet telemetryConfig: TelemetryConfig = {};\nlet telemetryDisabled = false;\n\ninterface TelemetryIdentity {\n  distinctId: string;\n  properties: Record<string, unknown>;\n}\n\n// undefined means that Cloud identity has not resolved yet; null means that it\n// resolved without a user. This distinction prevents startup from resetting a\n// persisted identity while the current account is still loading.\nlet desiredTelemetryIdentity: TelemetryIdentity | null | undefined;\nlet desiredIdentityRevision = 0;\nlet appliedIdentityRevision = -1;\n\nconst CANVAS_EVENT_PROPERTIES = Object.freeze({\n  client_source: AGENT_CANVAS_CLIENT_SOURCE,\n  client_version: AGENT_CANVAS_CLIENT_VERSION,\n  package_name: packageJson.name,\n  package_version: packageJson.version,\n});\n\nfunction addCanvasEventProperties(\n  event: CaptureResult | null,\n): CaptureResult | null {\n  if (!event) return null;\n\n  return {\n    ...event,\n    properties: {\n      ...event.properties,\n      ...CANVAS_EVENT_PROPERTIES,\n    },\n  };\n}\n\nfunction restorePostHogConsent(posthog: PostHog): void {\n  if (telemetryDisabled || getTelemetryConsent() !== \"granted\") {\n    posthog.opt_out_capturing();\n  } else {\n    posthog.opt_in_capturing();\n  }\n}\n\nfunction resetPostHogIdentity(posthog: PostHog, resetDeviceId = false): void {\n  posthog.reset(resetDeviceId);\n  appliedIdentityRevision = -1;\n  // PostHog reset clears its own consent persistence, so immediately restore\n  // the canonical Canvas decision kept in localStorage.\n  restorePostHogConsent(posthog);\n}\n\nfunction applyDesiredTelemetryIdentity(posthog: PostHog): void {\n  if (desiredTelemetryIdentity === undefined || !isTelemetryEnabled()) return;\n\n  const desiredId = desiredTelemetryIdentity?.distinctId;\n  const currentId = posthog.get_property(\"$user_id\");\n  if (currentId != null && currentId !== desiredId) {\n    resetPostHogIdentity(posthog);\n  }\n\n  if (desiredTelemetryIdentity === null) {\n    appliedIdentityRevision = desiredIdentityRevision;\n    return;\n  }\n\n  if (\n    posthog.get_property(\"$user_id\") !== desiredTelemetryIdentity.distinctId ||\n    appliedIdentityRevision !== desiredIdentityRevision\n  ) {\n    posthog.identify(\n      desiredTelemetryIdentity.distinctId,\n      desiredTelemetryIdentity.properties,\n    );\n    appliedIdentityRevision = desiredIdentityRevision;\n  }\n}\n\nfunction propertiesEqual(\n  left: Record<string, unknown>,\n  right: Record<string, unknown>,\n): boolean {\n  const keys = Object.keys(left);\n  return (\n    keys.length === Object.keys(right).length &&\n    keys.every((key) => left[key] === right[key])\n  );\n}\n\n/**\n * Configure the single Canvas telemetry client before its first use.\n * Passing false disables telemetry and install tracking for embedded hosts.\n */\nexport function configureTelemetry(config: TelemetryConfiguration): void {\n  if (config === false) {\n    if (telemetryDisabled) return;\n    telemetryDisabled = true;\n    posthogInstance?.opt_out_capturing();\n    notifyTelemetryConsentListeners();\n    return;\n  }\n\n  const wasDisabled = telemetryDisabled;\n  telemetryDisabled = false;\n\n  if (!posthogInstance && !initializationPromise) {\n    const definedConfig = Object.fromEntries(\n      Object.entries(config).filter(([, value]) => value !== undefined),\n    ) as TelemetryConfig;\n    telemetryConfig = { ...telemetryConfig, ...definedConfig };\n  }\n\n  if (wasDisabled) {\n    if (posthogInstance) {\n      restorePostHogConsent(posthogInstance);\n      applyDesiredTelemetryIdentity(posthogInstance);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\nfunction getResolvedTelemetryConfig(): Required<TelemetryConfig> | null {\n  if (telemetryDisabled) return null;\n\n  return {\n    apiKey: telemetryConfig.apiKey || DEFAULT_POSTHOG_API_KEY,\n    apiHost: telemetryConfig.apiHost || DEFAULT_POSTHOG_HOST,\n    uiHost: telemetryConfig.uiHost || DEFAULT_POSTHOG_UI_HOST,\n  };\n}\n\n/**\n * Check if we're in a browser environment\n */\nfunction isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof localStorage !== \"undefined\";\n}\n\n/**\n * Lazily load PostHog to avoid SSR/Node.js issues.\n * PostHog is a browser-only library, so we dynamically import it only when needed.\n */\nasync function getPostHog(): Promise<PostHog | null> {\n  if (!isBrowser()) {\n    return null;\n  }\n\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  try {\n    const { default: posthog } = await import(\"posthog-js\");\n    return posthog;\n  } catch {\n    // Failed to load PostHog - telemetry will be disabled\n    return null;\n  }\n}\n\n/**\n * Check if telemetry is disabled via environment variable or browser setting.\n * Works in both Node.js and browser (Vite) environments.\n */\nfunction isDoNotTrackEnabled(): boolean {\n  if (telemetryDisabled) {\n    return true;\n  }\n\n  // Check Vite environment variable (browser)\n  if (\n    typeof import.meta !== \"undefined\" &&\n    import.meta.env?.VITE_DO_NOT_TRACK === \"1\"\n  ) {\n    return true;\n  }\n\n  // Check Node.js environment variable (SSR/testing)\n  if (typeof process !== \"undefined\" && process.env?.DO_NOT_TRACK === \"1\") {\n    return true;\n  }\n\n  // Check browser's navigator.doNotTrack standard\n  if (\n    typeof navigator !== \"undefined\" &&\n    (navigator.doNotTrack === \"1\" ||\n      // @ts-expect-error - Some browsers use window.doNotTrack\n      (typeof window !== \"undefined\" && window.doNotTrack === \"1\"))\n  ) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Initialize PostHog SDK.\n *\n * @param enableCapturing - If true, enable capturing immediately (for install tracking).\n *                          If false, start with capturing disabled (for consent-gated tracking).\n */\nexport function configurePostHogBootstrap(\n  bootstrap: BootstrapConfig | undefined,\n): void {\n  if (!posthogInstance) {\n    pendingBootstrap = bootstrap;\n  }\n}\n\nexport async function initializePostHogClient(\n  enableCapturing = false,\n): Promise<PostHog | null> {\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  if (initializationPromise) {\n    return initializationPromise;\n  }\n\n  initializationPromise = (async () => {\n    const config = getResolvedTelemetryConfig();\n    if (!config) {\n      return null;\n    }\n\n    const posthog = await getPostHog();\n    if (!posthog) {\n      return null;\n    }\n\n    // A named instance isolates Canvas configuration, consent, identity, and\n    // persistence from a host application's default PostHog singleton.\n    const initializedPostHog = posthog.init(\n      config.apiKey,\n      {\n        api_host: config.apiHost,\n        ui_host: config.uiHost,\n        opt_out_capturing_by_default: !enableCapturing,\n        capture_pageview: false,\n        autocapture: false,\n        persistence: \"localStorage\",\n        persistence_name: POSTHOG_INSTANCE_NAME,\n        consent_persistence_name: `${POSTHOG_INSTANCE_NAME}-consent`,\n        person_profiles: \"identified_only\",\n        disable_session_recording: true,\n        bootstrap: pendingBootstrap,\n        before_send: addCanvasEventProperties,\n      },\n      POSTHOG_INSTANCE_NAME,\n    );\n    if (!initializedPostHog) return null;\n\n    posthogInstance = initializedPostHog;\n    pendingBootstrap = undefined;\n\n    if (telemetryDisabled) {\n      posthogInstance.opt_out_capturing();\n    } else if (getTelemetryConsent() === \"granted\") {\n      posthogInstance.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthogInstance);\n    } else if (!enableCapturing) {\n      posthogInstance.opt_out_capturing();\n    }\n\n    return posthogInstance;\n  })();\n\n  try {\n    return await initializationPromise;\n  } finally {\n    if (!posthogInstance) {\n      initializationPromise = null;\n    }\n  }\n}\n\n/**\n * Get user's telemetry consent preference\n */\nexport function getTelemetryConsent(): TelemetryConsent {\n  if (!isBrowser()) {\n    return \"pending\";\n  }\n\n  // Check environment variable for opt-out\n  if (isDoNotTrackEnabled()) {\n    return \"denied\";\n  }\n\n  try {\n    const consent = localStorage.getItem(TELEMETRY_CONSENT_KEY);\n    if (consent === \"granted\" || consent === \"denied\") {\n      return consent;\n    }\n  } catch {\n    // Ignore storage errors\n  }\n\n  return \"pending\";\n}\n\n/**\n * Return an explicit browser choice that still needs to survive a Cloud login.\n * It remains pending across local backends so their settings cannot consume a\n * decision that must still be applied after the user connects to Cloud.\n */\nexport function getPendingCloudTelemetryConsent(): ResolvedTelemetryConsent | null {\n  if (!isBrowser()) return null;\n\n  try {\n    const consent = localStorage.getItem(\n      TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY,\n    );\n    return consent === \"granted\" || consent === \"denied\" ? consent : null;\n  } catch {\n    return null;\n  }\n}\n\nexport function subscribeTelemetryConsent(listener: () => void): () => void {\n  if (!isBrowser()) return () => {};\n  const handleStorage = (event: StorageEvent) => {\n    if (\n      event.key === TELEMETRY_CONSENT_KEY ||\n      event.key === TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY\n    ) {\n      listener();\n    }\n  };\n  window.addEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n  window.addEventListener(\"storage\", handleStorage);\n\n  return () => {\n    window.removeEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n    window.removeEventListener(\"storage\", handleStorage);\n  };\n}\n\nfunction notifyTelemetryConsentListeners(): void {\n  if (isBrowser())\n    window.dispatchEvent(new Event(TELEMETRY_CONSENT_CHANGE_EVENT));\n}\n\nfunction markTelemetryConsentForCloudSync(\n  consent: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    localStorage.setItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY, consent);\n  } catch {\n    // Ignore storage errors; the in-browser consent decision still applies.\n  }\n}\n\nexport function clearPendingCloudTelemetryConsent(\n  expected?: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    if (\n      expected !== undefined &&\n      localStorage.getItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY) !==\n        expected\n    ) {\n      return;\n    }\n    localStorage.removeItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY);\n    notifyTelemetryConsentListeners();\n  } catch {\n    // Ignore storage errors.\n  }\n}\n\n/**\n * Set user's telemetry consent preference\n */\nexport async function setTelemetryConsent(\n  consent: ResolvedTelemetryConsent,\n  { syncToCloud = true }: SetTelemetryConsentOptions = {},\n): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_CONSENT_KEY, consent);\n    if (telemetryDisabled) return;\n\n    // Reuse an initialized client synchronously so a same-flush identify()\n    // cannot run before consent is applied. Only the cold path awaits import.\n    const posthog = posthogInstance ?? (await initializePostHogClient());\n    if (!posthog) {\n      return;\n    }\n\n    if (consent === \"granted\") {\n      posthog.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthog);\n    } else {\n      if (posthog.get_property(\"$user_id\") != null) {\n        resetPostHogIdentity(posthog);\n      } else {\n        posthog.opt_out_capturing();\n      }\n    }\n  } catch {\n    // Ignore storage errors\n  } finally {\n    // Notify UI/backend/identity reconcilers only after the browser capture state\n    // reflects this decision. Otherwise a pre-login grant can trigger an\n    // identify while PostHog is still opted out and lose funnel continuity.\n    if (syncToCloud) {\n      markTelemetryConsentForCloudSync(consent);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\n/**\n * Declare the current Cloud identity. The telemetry service applies it only\n * after consent and owns all reset/account-switch semantics.\n */\nexport async function setTelemetryIdentity(\n  distinctId: string | null,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const nextIdentity = distinctId === null ? null : { distinctId, properties };\n  const unchanged =\n    desiredTelemetryIdentity === nextIdentity ||\n    (desiredTelemetryIdentity !== undefined &&\n      desiredTelemetryIdentity !== null &&\n      nextIdentity !== null &&\n      desiredTelemetryIdentity.distinctId === nextIdentity.distinctId &&\n      propertiesEqual(desiredTelemetryIdentity.properties, properties));\n  if (unchanged) return;\n\n  desiredTelemetryIdentity = nextIdentity;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  if (!isTelemetryEnabled()) return;\n  const posthog = posthogInstance ?? (await initializePostHogClient());\n  if (posthog && isTelemetryEnabled()) {\n    // Read the desired identity after the await so a newer account always wins\n    // if identity changes while the SDK is loading.\n    applyDesiredTelemetryIdentity(posthog);\n  }\n}\n\n/**\n * Check if telemetry is enabled (user has granted consent)\n */\nexport function isTelemetryEnabled(): boolean {\n  return getTelemetryConsent() === \"granted\";\n}\n\n/**\n * Check if first use event has already been sent\n */\nfunction hasFirstUseSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return localStorage.getItem(TELEMETRY_FIRST_USE_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark first use event as sent\n */\nfunction markFirstUseSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_FIRST_USE_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Track the initial install of the library.\n *\n * IMPORTANT: This is sent immediately on first use, regardless of consent status.\n * This allows us to track library adoption even if users haven't made a consent choice yet.\n *\n * The event is:\n * - Completely anonymous (no PII, just a random PostHog distinct_id)\n * - Sent only once per installation (tracked via localStorage, persists across sessions)\n * - Still respects DO_NOT_TRACK environment variable and browser setting\n *\n * Users who want complete privacy can:\n * - Set VITE_DO_NOT_TRACK=1 or browser's Do Not Track\n * - Later deny consent to prevent all future tracking\n */\nexport async function trackInstall(): Promise<void> {\n  // Respect hard opt-out via environment variable or browser setting\n  if (isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Already sent install event (persisted in localStorage - survives app relaunches)\n  if (hasFirstUseSent()) {\n    return;\n  }\n\n  // Initialize PostHog with capturing enabled (for this one event)\n  const posthog = await initializePostHogClient(true);\n  if (!posthog || isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Temporarily enable capturing if it was disabled\n  const wasOptedOut = posthog.has_opted_out_capturing?.() ?? false;\n  if (wasOptedOut) {\n    posthog.opt_in_capturing();\n  }\n\n  // Capture the install event\n  posthog.capture(\"canvas_install\", {\n    platform: typeof navigator !== \"undefined\" ? navigator.platform : \"unknown\",\n    user_agent:\n      typeof navigator !== \"undefined\" ? navigator.userAgent : \"unknown\",\n    referrer: typeof document !== \"undefined\" ? document.referrer : \"\",\n    url_origin: typeof window !== \"undefined\" ? window.location.origin : \"\",\n    embedded: typeof window !== \"undefined\" && window.self !== window.top,\n  });\n\n  // Mark as sent (stored in localStorage - persists across browser sessions)\n  markFirstUseSent();\n\n  // Restore opt-out state if user hasn't granted consent yet\n  // This ensures we only send the install event, not subsequent events\n  const currentConsent = getTelemetryConsent();\n  if (currentConsent !== \"granted\") {\n    posthog.opt_out_capturing();\n  }\n}\n\n/**\n * Check if session start event has already been sent (this browser session)\n */\nfunction hasSessionSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return sessionStorage.getItem(TELEMETRY_SESSION_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark session start event as sent (uses sessionStorage so it resets on new tabs/sessions)\n */\nfunction markSessionSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    sessionStorage.setItem(TELEMETRY_SESSION_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/** Return the shared client only when a consented capture is safe to emit. */\nasync function getPostHogForConsentedCapture(): Promise<PostHog | null> {\n  if (!isTelemetryEnabled()) return null;\n\n  const posthog = await initializePostHogClient();\n  if (!posthog || !isTelemetryEnabled()) return null;\n\n  // The browser preference is the canonical capture decision. PostHog may\n  // still carry an older opt-out marker while backend consent is loading or\n  // after a previous backend temporarily reported a stale value. Heal that\n  // drift at the event boundary so capture() cannot silently discard an event\n  // that the user has explicitly allowed.\n  if (posthog.has_opted_out_capturing?.()) {\n    posthog.opt_in_capturing();\n  }\n\n  applyDesiredTelemetryIdentity(posthog);\n\n  return posthog;\n}\n\n/**\n * Track a session start event.\n * Called each time a new browser session starts (respects consent).\n * Uses sessionStorage for deduplication - only sends once per browser session.\n */\nexport async function trackSessionStart(): Promise<void> {\n  // Already sent session event this browser session\n  if (hasSessionSent()) {\n    return;\n  }\n\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(\"canvas_new_session\", {\n    is_first_use: !hasFirstUseSent(),\n  });\n\n  // Mark as sent for this session\n  markSessionSent();\n}\n\n/**\n * Track a custom event (respects consent).\n */\nexport async function trackEvent(\n  eventName: string,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(eventName, properties);\n}\n\n/** Track an exception through the same consent-aware client as custom events. */\nexport async function trackException(\n  error: unknown,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.captureException(error, properties);\n}\n\n/**\n * Clear all telemetry data (for privacy/GDPR requests)\n */\nexport async function clearTelemetryData(): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.removeItem(TELEMETRY_CONSENT_KEY);\n    localStorage.removeItem(TELEMETRY_FIRST_USE_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n  clearPendingCloudTelemetryConsent();\n  try {\n    sessionStorage.removeItem(TELEMETRY_SESSION_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n\n  desiredTelemetryIdentity = null;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  try {\n    if (posthogInstance) {\n      resetPostHogIdentity(posthogInstance, true);\n    }\n  } catch {\n    // A reset failure must not leave capture enabled after a privacy clear.\n    try {\n      posthogInstance?.opt_out_capturing();\n    } catch {\n      // Telemetry failures must not break the application.\n    }\n  }\n}\n"],"mappings":";;;AAmCA,IAAM,IAAwB,+BACxB,IACJ,kDACI,IAAiC,sCACjC,IAA0B,iCAC1B,IAAwB,+BACxB,IAAwB,gBAKxB,IAAA,oDAOA,IACiC,2BAIjC,IACoC,0BAqBtC,IAAkC,MAClC,IAAwD,MACxD,GACA,IAAmC,EAAE,EACrC,IAAoB,IAUpB,GACA,IAA0B,GAC1B,IAA0B,IAExB,IAA0B,OAAO,OAAO;CAC5C,eAAe;CACf,gBAAgB;CAChB,cAAc,EAAY;CAC1B,iBAAiB,EAAY;CAC9B,CAAC;AAEF,SAAS,EACP,GACsB;AAGtB,QAFK,IAEE;EACL,GAAG;EACH,YAAY;GACV,GAAG,EAAM;GACT,GAAG;GACJ;EACF,GARkB;;AAWrB,SAAS,EAAsB,GAAwB;AACrD,CAAI,KAAqB,GAAqB,KAAK,YACjD,EAAQ,mBAAmB,GAE3B,EAAQ,kBAAkB;;AAI9B,SAAS,EAAqB,GAAkB,IAAgB,IAAa;AAK3E,CAJA,EAAQ,MAAM,EAAc,EAC5B,IAA0B,IAG1B,EAAsB,EAAQ;;AAGhC,SAAS,EAA8B,GAAwB;AAC7D,KAAI,MAA6B,KAAA,KAAa,CAAC,GAAoB,CAAE;CAErE,IAAM,IAAY,GAA0B,YACtC,IAAY,EAAQ,aAAa,WAAW;AAKlD,KAJI,KAAa,QAAQ,MAAc,KACrC,EAAqB,EAAQ,EAG3B,MAA6B,MAAM;AACrC,MAA0B;AAC1B;;AAGF,EACE,EAAQ,aAAa,WAAW,KAAK,EAAyB,cAC9D,MAA4B,OAE5B,EAAQ,SACN,EAAyB,YACzB,EAAyB,WAC1B,EACD,IAA0B;;AAmB9B,SAAgB,EAAmB,GAAsC;AACvE,KAAI,MAAW,IAAO;AACpB,MAAI,EAAmB;AAGvB,EAFA,IAAoB,IACpB,GAAiB,mBAAmB,EACpC,GAAiC;AACjC;;CAGF,IAAM,IAAc;AAGpB,KAFA,IAAoB,IAEhB,CAAC,KAAmB,CAAC,GAAuB;EAC9C,IAAM,IAAgB,OAAO,YAC3B,OAAO,QAAQ,EAAO,CAAC,QAAQ,GAAG,OAAW,MAAU,KAAA,EAAU,CAClE;AACD,MAAkB;GAAE,GAAG;GAAiB,GAAG;GAAe;;AAG5D,CAAI,MACE,MACF,EAAsB,EAAgB,EACtC,EAA8B,EAAgB,GAEhD,GAAiC;;AAIrC,SAAS,IAA+D;AAGtE,QAFI,IAA0B,OAEvB;EACL,QAAQ,EAAgB,UAAU;EAClC,SAAS,EAAgB,WAAW;EACpC,QAAQ,EAAgB,UAAU;EACnC;;AAMH,SAAS,IAAqB;AAC5B,QAAO,OAAO,SAAW,OAAe,OAAO,eAAiB;;AAOlE,eAAe,IAAsC;AACnD,KAAI,CAAC,GAAW,CACd,QAAO;AAGT,KAAI,EACF,QAAO;AAGT,KAAI;EACF,IAAM,EAAE,SAAS,MAAY,MAAM,OAAO;AAC1C,SAAO;SACD;AAEN,SAAO;;;AAQX,SAAS,IAA+B;AA4BtC,QATA,GAlBI,KAaA,OAAO,UAAY,OAAe,QAAQ,KAAK,iBAAiB,OAMlE,OAAO,YAAc,QACpB,UAAU,eAAe,OAEvB,OAAO,SAAW,OAAe,OAAO,eAAe;;AAc9D,SAAgB,EACd,GACM;AACN,CAAK,MACH,IAAmB;;AAIvB,eAAsB,EACpB,IAAkB,IACO;AACzB,KAAI,EACF,QAAO;AAGT,KAAI,EACF,QAAO;AAGT,MAAyB,YAAY;EACnC,IAAM,IAAS,GAA4B;AAC3C,MAAI,CAAC,EACH,QAAO;EAGT,IAAM,IAAU,MAAM,GAAY;AAClC,MAAI,CAAC,EACH,QAAO;EAKT,IAAM,IAAqB,EAAQ,KACjC,EAAO,QACP;GACE,UAAU,EAAO;GACjB,SAAS,EAAO;GAChB,8BAA8B,CAAC;GAC/B,kBAAkB;GAClB,aAAa;GACb,aAAa;GACb,kBAAkB;GAClB,0BAA0B,GAAG,EAAsB;GACnD,iBAAiB;GACjB,2BAA2B;GAC3B,WAAW;GACX,aAAa;GACd,EACD,EACD;AAeD,SAdK,KAEL,IAAkB,GAClB,IAAmB,KAAA,GAEf,IACF,EAAgB,mBAAmB,GAC1B,GAAqB,KAAK,aACnC,EAAgB,kBAAkB,EAClC,EAA8B,EAAgB,IACpC,KACV,EAAgB,mBAAmB,EAG9B,KAdyB;KAe9B;AAEJ,KAAI;AACF,SAAO,MAAM;WACL;AACR,EAAK,MACH,IAAwB;;;AAQ9B,SAAgB,IAAwC;AACtD,KAAI,CAAC,GAAW,CACd,QAAO;AAIT,KAAI,GAAqB,CACvB,QAAO;AAGT,KAAI;EACF,IAAM,IAAU,aAAa,QAAQ,EAAsB;AAC3D,MAAI,MAAY,aAAa,MAAY,SACvC,QAAO;SAEH;AAIR,QAAO;;AAqBT,SAAgB,EAA0B,GAAkC;AAC1E,KAAI,CAAC,GAAW,CAAE,cAAa;CAC/B,IAAM,KAAiB,MAAwB;AAC7C,GACE,EAAM,QAAQ,KACd,EAAM,QAAQ,MAEd,GAAU;;AAMd,QAHA,OAAO,iBAAiB,GAAgC,EAAS,EACjE,OAAO,iBAAiB,WAAW,EAAc,QAEpC;AAEX,EADA,OAAO,oBAAoB,GAAgC,EAAS,EACpE,OAAO,oBAAoB,WAAW,EAAc;;;AAIxD,SAAS,IAAwC;AAC/C,CAAI,GAAW,IACb,OAAO,cAAc,IAAI,MAAM,EAA+B,CAAC;;AAGnE,SAAS,EACP,GACM;AACD,QAAW,CAEhB,KAAI;AACF,eAAa,QAAQ,GAA0C,EAAQ;SACjE;;AAKV,SAAgB,EACd,GACM;AACD,QAAW,CAEhB,KAAI;AACF,MACE,MAAa,KAAA,KACb,aAAa,QAAQ,EAAyC,KAC5D,EAEF;AAGF,EADA,aAAa,WAAW,EAAyC,EACjE,GAAiC;SAC3B;;AAQV,eAAsB,EACpB,GACA,EAAE,iBAAc,OAAqC,EAAE,EACxC;AACV,QAAW,CAIhB,KAAI;AAEF,MADA,aAAa,QAAQ,GAAuB,EAAQ,EAChD,EAAmB;EAIvB,IAAM,IAAU,KAAoB,MAAM,GAAyB;AACnE,MAAI,CAAC,EACH;AAGF,EAAI,MAAY,aACd,EAAQ,kBAAkB,EAC1B,EAA8B,EAAQ,IAElC,EAAQ,aAAa,WAAW,IAAI,OAGtC,EAAQ,mBAAmB,GAF3B,EAAqB,EAAQ;SAK3B,WAEE;AAOR,EAHI,KACF,EAAiC,EAAQ,EAE3C,GAAiC;;;AAsCrC,SAAgB,IAA8B;AAC5C,QAAO,GAAqB,KAAK;;AAMnC,SAAS,IAA2B;AAClC,KAAI,CAAC,GAAW,CACd,QAAO;AAGT,KAAI;AACF,SAAO,aAAa,QAAQ,EAAwB,KAAK;SACnD;AACN,SAAO;;;AAOX,SAAS,IAAyB;AAC3B,QAAW,CAIhB,KAAI;AACF,eAAa,QAAQ,GAAyB,OAAO;SAC/C;;AAoBV,eAAsB,IAA8B;AAOlD,KALI,GAAqB,IAKrB,GAAiB,CACnB;CAIF,IAAM,IAAU,MAAM,EAAwB,GAAK;AAC/C,EAAC,KAAW,GAAqB,MAKjB,EAAQ,2BAA2B,IAAI,OAEzD,EAAQ,kBAAkB,EAI5B,EAAQ,QAAQ,kBAAkB;EAChC,UAAU,OAAO,YAAc,MAAc,UAAU,WAAW;EAClE,YACE,OAAO,YAAc,MAAc,UAAU,YAAY;EAC3D,UAAU,OAAO,WAAa,MAAc,SAAS,WAAW;EAChE,YAAY,OAAO,SAAW,MAAc,OAAO,SAAS,SAAS;EACrE,UAAU,OAAO,SAAW,OAAe,OAAO,SAAS,OAAO;EACnE,CAAC,EAGF,GAAkB,EAIK,GACnB,KAAmB,aACrB,EAAQ,mBAAmB;;AAO/B,SAAS,IAA0B;AACjC,KAAI,CAAC,GAAW,CACd,QAAO;AAGT,KAAI;AACF,SAAO,eAAe,QAAQ,EAAsB,KAAK;SACnD;AACN,SAAO;;;AAOX,SAAS,IAAwB;AAC1B,QAAW,CAIhB,KAAI;AACF,iBAAe,QAAQ,GAAuB,OAAO;SAC/C;;AAMV,eAAe,IAAyD;AACtE,KAAI,CAAC,GAAoB,CAAE,QAAO;CAElC,IAAM,IAAU,MAAM,GAAyB;AAc/C,QAbI,CAAC,KAAW,CAAC,GAAoB,GAAS,QAO1C,EAAQ,2BAA2B,IACrC,EAAQ,kBAAkB,EAG5B,EAA8B,EAAQ,EAE/B;;AAQT,eAAsB,IAAmC;AAEvD,KAAI,GAAgB,CAClB;CAGF,IAAM,IAAU,MAAM,GAA+B;AAChD,OAEL,EAAQ,QAAQ,sBAAsB,EACpC,cAAc,CAAC,GAAiB,EACjC,CAAC,EAGF,GAAiB;;AAMnB,eAAsB,EACpB,GACA,IAAsC,EAAE,EACzB;CACf,IAAM,IAAU,MAAM,GAA+B;AAChD,MAEL,EAAQ,QAAQ,GAAW,EAAW;;AAIxC,eAAsB,EACpB,GACA,IAAsC,EAAE,EACzB;CACf,IAAM,IAAU,MAAM,GAA+B;AAChD,MAEL,EAAQ,iBAAiB,GAAO,EAAW;;AAM7C,eAAsB,IAAoC;AACnD,QAAW,EAIhB;MAAI;AAEF,GADA,aAAa,WAAW,EAAsB,EAC9C,aAAa,WAAW,EAAwB;UAC1C;AAGR,KAAmC;AACnC,MAAI;AACF,kBAAe,WAAW,EAAsB;UAC1C;AAMR,EAFA,IAA2B,MAC3B,KAA2B,GAC3B,IAA0B;AAE1B,MAAI;AACF,GAAI,KACF,EAAqB,GAAiB,GAAK;UAEvC;AAEN,OAAI;AACF,OAAiB,mBAAmB;WAC9B"}