@openhands/agent-canvas 1.7.2 → 1.9.0

package/dist/services/telemetry.js

@@ -1,67 +1,79 @@
 import { getLockedCloudAuthMode as e } from "../api/agent-server-config.js";
-import t from "../config/defaults.js";
-import n from "../package.js";
-import { AGENT_CANVAS_CLIENT_SOURCE as r, AGENT_CANVAS_CLIENT_VERSION as i } from "../api/client-source.js";
-import { getBackendTelemetryProperties as a, getCloudTelemetryProperties as o } from "./telemetry-context.js";
+import t from "../package.js";
+import { AGENT_CANVAS_CLIENT_SOURCE as n, AGENT_CANVAS_CLIENT_VERSION as r } from "../api/client-source.js";
+import { getBackendTelemetryProperties as i, getCloudTelemetryProperties as a } from "./telemetry-context.js";
 //#region src/services/telemetry.ts
-var s = "openhands-telemetry-consent", c = "openhands-telemetry-consent-pending-cloud-sync", l = "openhands-telemetry-consent-change", u = "openhands-telemetry-first-use", d = "openhands-telemetry-session", f = "agent-canvas", p = "history_change", m = t.telemetry.posthogApiKey, h = "https://z.openhands.dev", g = "https://us.posthog.com", _ = null, v = null, y, b = {}, x = !1, S = Object.freeze({
-	client_source: r,
-	client_version: i,
-	package_name: n.name,
-	package_version: n.version
-}), C = a({}), w = o();
-function T(e) {
-	C = a(e);
-}
-function E(e) {
+var o = "openhands-telemetry-consent", s = "openhands-telemetry-consent-pending-cloud-sync", c = "openhands-telemetry-consent-pending-local-revocation", l = "openhands-telemetry-consent-change", u = "openhands-telemetry-first-use", d = "openhands-telemetry-session", f = "agent-canvas", p = "history_change", ee = "phc_BgzfxKdgsYMLFTmJqt424ZoyVHvKFfrwttLimzdYTKFK", m = "https://z.openhands.dev", h = "https://us.posthog.com", g = null, _ = null, v, y = {}, b = !1, x, S = 0, C = -1, w = Object.freeze({
+	client_source: n,
+	client_version: r,
+	package_name: t.name,
+	package_version: t.version
+}), T = i({}), E = a();
+function D(e) {
+	T = i(e);
+}
+function O(e) {
+	E = a(e);
+}
+function k(e) {
 	return e ? {
 		...e,
 		properties: {
-			...C,
-			...w,
+			...T,
+			...E,
 			...e.properties,
-			...S
+			...w
 		}
 	} : null;
 }
-function D(e) {
-	x || L() !== "granted" ? e.opt_out_capturing() : e.opt_in_capturing();
+function A(e) {
+	b || V() !== "granted" ? e.opt_out_capturing() : e.opt_in_capturing();
 }
-function O(e, t = !1) {
-	e.reset(t), D(e);
+function j(e, t = !1) {
+	e.reset(t), C = -1, A(e);
 }
-function k(e) {
-	e.get_property?.("$user_id") != null && O(e);
+function M(e) {
+	if (x === void 0 || !Z()) return;
+	let t = x?.distinctId, n = e.get_property("$user_id");
+	if (n != null && n !== t && j(e), x === null) {
+		C = S;
+		return;
+	}
+	(e.get_property("$user_id") !== x.distinctId || C !== S) && (e.identify(x.distinctId, x.properties), C = S);
 }
-function A(e) {
+function N(e, t) {
+	let n = Object.keys(e);
+	return n.length === Object.keys(t).length && n.every((n) => e[n] === t[n]);
+}
+function P(e) {
 	if (e === !1) {
-		if (x) return;
-		x = !0, _?.opt_out_capturing(), z();
+		if (b) return;
+		b = !0, g?.opt_out_capturing(), W();
 		return;
 	}
-	let t = x;
-	if (x = !1, !_ && !v) {
+	let t = b;
+	if (b = !1, !g && !_) {
 		let t = Object.fromEntries(Object.entries(e).filter(([, e]) => e !== void 0));
-		b = {
-			...b,
+		y = {
+			...y,
 			...t
 		};
 	}
-	t && (_ && D(_), z());
+	t && (g && (A(g), M(g)), W());
 }
-function j() {
-	return x ? null : {
-		apiKey: b.apiKey || m,
-		apiHost: b.apiHost || h,
-		uiHost: b.uiHost || g
+function F() {
+	return b ? null : {
+		apiKey: y.apiKey || ee,
+		apiHost: y.apiHost || m,
+		uiHost: y.uiHost || h
 	};
 }
-function M() {
+function I() {
 	return typeof window < "u" && typeof localStorage < "u";
 }
-async function N() {
-	if (!M()) return null;
-	if (_) return _;
+async function L() {
+	if (!I()) return null;
+	if (g) return g;
 	try {
 		let { default: e } = await import("../node_modules/posthog-js/dist/module.js");
 		return e;
@@ -69,21 +81,21 @@ async function N() {
 		return null;
 	}
 }
-function P() {
-	return !!(x || typeof process < "u" && process.env?.DO_NOT_TRACK === "1" || typeof navigator < "u" && (navigator.doNotTrack === "1" || typeof window < "u" && window.doNotTrack === "1"));
+function R() {
+	return !!(b || typeof process < "u" && process.env?.DO_NOT_TRACK === "1" || typeof navigator < "u" && (navigator.doNotTrack === "1" || typeof window < "u" && window.doNotTrack === "1"));
 }
-function F(e) {
-	_ || (y = e);
+function z(e) {
+	g || (v = e);
 }
-async function I(e = !1) {
+async function B(e = !1) {
+	if (g) return g;
 	if (_) return _;
-	if (v) return v;
-	v = (async () => {
-		let t = j();
+	_ = (async () => {
+		let t = F();
 		if (!t) return null;
-		let n = await N();
+		let n = await L();
 		if (!n) return null;
-		let r = y, i = n.init(t.apiKey, {
+		let r = n.init(t.apiKey, {
 			api_host: t.apiHost,
 			ui_host: t.uiHost,
 			opt_out_capturing_by_default: !e,
@@ -94,145 +106,180 @@ async function I(e = !1) {
 			capture_pageview: p,
 			autocapture: !0,
 			disable_session_recording: !0,
-			bootstrap: r,
-			before_send: E
+			bootstrap: v,
+			before_send: k
 		}, f);
-		return i ? (_ = i, y = void 0, r || k(_), x ? _.opt_out_capturing() : L() === "granted" ? _.opt_in_capturing() : e || _.opt_out_capturing(), _) : null;
+		return r ? (g = r, v = void 0, b ? g.opt_out_capturing() : V() === "granted" ? (g.opt_in_capturing(), M(g)) : e || g.opt_out_capturing(), g) : null;
 	})();
 	try {
-		return await v;
+		return await _;
 	} finally {
-		_ || (v = null);
+		g || (_ = null);
 	}
 }
-function L() {
-	if (!M()) return "pending";
-	if (P()) return "denied";
+function V() {
+	if (!I()) return "pending";
+	if (R()) return "denied";
 	if (e() === "cookie") return "granted";
 	try {
-		let e = localStorage.getItem(s);
+		let e = localStorage.getItem(o);
 		if (e === "granted" || e === "denied") return e;
 	} catch {}
 	return "pending";
 }
-function R(e) {
-	if (!M()) return () => {};
+function H() {
+	if (!I()) return null;
+	try {
+		return localStorage.getItem(c);
+	} catch {
+		return null;
+	}
+}
+function U(e) {
+	if (!I()) return () => {};
 	let t = (t) => {
-		(t.key === s || t.key === c) && e();
+		(t.key === o || t.key === s) && e();
 	};
 	return window.addEventListener(l, e), window.addEventListener("storage", t), () => {
 		window.removeEventListener(l, e), window.removeEventListener("storage", t);
 	};
 }
-function z() {
-	M() && window.dispatchEvent(new Event(l));
+function W() {
+	I() && window.dispatchEvent(new Event(l));
+}
+function G(e) {
+	if (I()) try {
+		localStorage.setItem(s, e);
+	} catch {}
 }
-function B(e) {
-	if (M()) try {
+function K(e) {
+	if (!(!I() || !e)) try {
 		localStorage.setItem(c, e);
 	} catch {}
 }
-function V(e) {
-	if (M()) try {
-		if (e !== void 0 && localStorage.getItem(c) !== e) return;
-		localStorage.removeItem(c), z();
+function q(e) {
+	if (I()) try {
+		if (localStorage.getItem(c) !== e) return;
+		localStorage.removeItem(c);
 	} catch {}
 }
-async function H(e, { syncToCloud: t = !0 } = {}) {
-	if (M()) try {
-		let t = L() === e;
-		if (localStorage.setItem(s, e), x || t) return;
-		let n = _ ?? await I();
+function J(e) {
+	if (I()) try {
+		if (e !== void 0 && localStorage.getItem(s) !== e) return;
+		localStorage.removeItem(s), W();
+	} catch {}
+}
+async function Y(e, { syncToCloud: t = !0 } = {}) {
+	if (I()) try {
+		let t = V() === e;
+		if (localStorage.setItem(o, e), b || t) return;
+		let n = g ?? await B();
 		if (!n) return;
-		e === "granted" ? n.opt_in_capturing() : n.get_property?.("$user_id") == null ? n.opt_out_capturing() : O(n);
+		e === "granted" ? (n.opt_in_capturing(), M(n)) : (K(n.get_distinct_id?.() ?? null), n.get_property?.("$user_id") == null ? n.opt_out_capturing() : j(n));
 	} catch {} finally {
-		t && B(e), z();
+		t && G(e), W();
 	}
 }
-function U() {
-	return L() === "granted";
+async function X(e, t = {}) {
+	let n = e === null ? null : {
+		distinctId: e,
+		properties: t
+	};
+	if (x === n || x != null && n !== null && x.distinctId === n.distinctId && N(x.properties, t) || (x = n, S += 1, C = -1, !Z())) return;
+	let r = g ?? await B();
+	r && Z() && M(r);
+}
+function Z() {
+	return V() === "granted";
 }
-function W() {
-	if (!M()) return !1;
+function Q() {
+	if (!I()) return !1;
 	try {
 		return localStorage.getItem(u) === "true";
 	} catch {
 		return !1;
 	}
 }
-function G() {
-	if (M()) try {
+function te() {
+	if (I()) try {
 		localStorage.setItem(u, "true");
 	} catch {}
 }
-async function K() {
-	if (P() || W()) return;
-	let e = await I(!0);
-	!e || P() || ((e.has_opted_out_capturing?.() ?? !1) && e.opt_in_capturing(), e.capture("canvas_install", {
+async function ne() {
+	if (R() || Q()) return;
+	let e = await B(!0);
+	!e || R() || ((e.has_opted_out_capturing?.() ?? !1) && e.opt_in_capturing(), e.capture("canvas_install", {
 		platform: typeof navigator < "u" ? navigator.platform : "unknown",
 		user_agent: typeof navigator < "u" ? navigator.userAgent : "unknown",
 		referrer: typeof document < "u" ? document.referrer : "",
 		url_origin: typeof window < "u" ? window.location.origin : "",
 		embedded: typeof window < "u" && window.self !== window.top
-	}), G(), L() !== "granted" && e.opt_out_capturing());
+	}), te(), V() !== "granted" && e.opt_out_capturing());
 }
-function q() {
-	if (!M()) return !1;
+function re() {
+	if (!I()) return !1;
 	try {
 		return sessionStorage.getItem(d) === "true";
 	} catch {
 		return !1;
 	}
 }
-function J() {
-	if (M()) try {
+function ie() {
+	if (I()) try {
 		sessionStorage.setItem(d, "true");
 	} catch {}
 }
-async function Y() {
-	if (!U() || L() !== "granted") return null;
-	let e = await I();
-	return !e || !U() ? null : (e.has_opted_out_capturing?.() && e.opt_in_capturing(), e);
+async function $() {
+	if (!Z() || V() !== "granted") return null;
+	let e = await B();
+	return !e || !Z() ? null : (e.has_opted_out_capturing?.() && e.opt_in_capturing(), M(e), e);
 }
-async function X() {
-	if (q()) return;
-	let e = await Y();
-	e && (e.capture("canvas_new_session", { is_first_use: !W() }), J());
+async function ae() {
+	if (re()) return;
+	let e = await $();
+	e && (e.capture("canvas_new_session", { is_first_use: !Q() }), ie());
 }
-async function Z() {
-	return (await Y())?.get_distinct_id?.() ?? null;
+async function oe() {
+	return (await $())?.get_distinct_id?.() ?? null;
 }
-async function Q() {
-	return !M() || x || P() ? null : (await I())?.get_distinct_id?.() ?? null;
+async function se() {
+	if (!I()) return null;
+	if (V() !== "granted") {
+		let e = H();
+		if (e) return e;
+	}
+	return b || R() ? null : (await B())?.get_distinct_id?.() ?? null;
 }
-async function $(e, t = {}) {
-	let n = await Y();
+async function ce(e, t = {}) {
+	let n = await $();
 	n && n.capture(e, t);
 }
-async function ee(e, t = {}) {
-	let n = await Y();
+async function le(e, t = {}) {
+	let n = await $();
 	n && n.captureException(e, t);
 }
-async function te() {
-	if (M()) {
+async function ue() {
+	if (I()) {
 		try {
-			localStorage.removeItem(s), localStorage.removeItem(u);
+			K(g?.get_distinct_id?.() ?? null), localStorage.removeItem(o), localStorage.removeItem(u);
 		} catch {}
-		V();
+		J();
 		try {
 			sessionStorage.removeItem(d);
 		} catch {}
-		C = a({}), w = o();
+		T = i({}), E = a(), x = null, S += 1, C = -1;
 		try {
-			_ && O(_, !0);
+			g && j(g, !0);
 		} catch {
 			try {
-				_?.opt_out_capturing();
+				g?.opt_out_capturing();
 			} catch {}
+		} finally {
+			W();
 		}
 	}
 }
 //#endregion
-export { te as clearTelemetryData, F as configurePostHogBootstrap, A as configureTelemetry, L as getTelemetryConsent, Z as getTelemetryDistinctId, Q as getTelemetryDistinctIdForConsentSync, I as initializePostHogClient, U as isTelemetryEnabled, T as setTelemetryBackendContext, H as setTelemetryConsent, R as subscribeTelemetryConsent, $ as trackEvent, ee as trackException, K as trackInstall, X as trackSessionStart };
+export { q as clearPendingLocalTelemetryRevocation, ue as clearTelemetryData, z as configurePostHogBootstrap, P as configureTelemetry, V as getTelemetryConsent, oe as getTelemetryDistinctId, se as getTelemetryDistinctIdForConsentSync, B as initializePostHogClient, Z as isTelemetryEnabled, D as setTelemetryBackendContext, O as setTelemetryCloudContext, Y as setTelemetryConsent, X as setTelemetryIdentity, U as subscribeTelemetryConsent, ce as trackEvent, le as trackException, ne as trackInstall, ae as trackSessionStart };
 
 //# sourceMappingURL=telemetry.js.map

package/dist/services/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","names":[],"sources":["../../src/services/telemetry.ts"],"sourcesContent":["/**\n * Telemetry service for tracking library usage.\n *\n * This module handles anonymous telemetry for the @openhands/agent-canvas package\n * using the PostHog SDK for reliable event delivery with batching, retry logic,\n * and offline support.\n *\n * TRACKING PHILOSOPHY:\n * - Install event (canvas_install): Sent immediately on first use, regardless of consent.\n *   This is anonymous and contains no PII - just basic browser info and a random ID.\n * - Session/custom events: Only sent after user grants consent via the consent modal.\n * - Users can opt out of all future tracking by declining consent.\n *\n * AD BLOCKER BYPASS:\n * By default, telemetry is routed through OpenHands' reverse proxy (z.openhands.dev)\n * to avoid being blocked by ad blockers. Library consumers can override this with:\n * - VITE_POSTHOG_HOST: Custom proxy URL or direct PostHog URL\n * - VITE_POSTHOG_UI_HOST: PostHog UI host (defaults to https://us.posthog.com)\n *\n * IMPORTANT: By default, telemetry is sent to the OpenHands PostHog project.\n * Source builds can override this with VITE_POSTHOG_API_KEY. Precompiled\n * library consumers can pass the same settings to configureTelemetry().\n *\n * Users can disable all telemetry (including install tracking) via:\n * - Setting VITE_DO_NOT_TRACK=1 environment variable\n * - Browser's Do Not Track setting\n */\n\nimport type { BootstrapConfig, CaptureResult, PostHog } from \"posthog-js\";\nimport { getLockedCloudAuthMode } from \"#/api/agent-server-config\";\nimport defaults from \"../../config/defaults.json\";\n\nimport packageJson from \"../../package.json\";\nimport {\n  AGENT_CANVAS_CLIENT_SOURCE,\n  AGENT_CANVAS_CLIENT_VERSION,\n} from \"#/api/client-source\";\nimport {\n  getBackendTelemetryProperties,\n  getCloudTelemetryProperties,\n  type BackendTelemetryContextInput,\n  type CloudTelemetryContextInput,\n} from \"#/services/telemetry-context\";\n\nconst TELEMETRY_CONSENT_KEY = \"openhands-telemetry-consent\";\nconst TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY =\n  \"openhands-telemetry-consent-pending-cloud-sync\";\nconst TELEMETRY_CONSENT_CHANGE_EVENT = \"openhands-telemetry-consent-change\";\nconst TELEMETRY_FIRST_USE_KEY = \"openhands-telemetry-first-use\";\nconst TELEMETRY_SESSION_KEY = \"openhands-telemetry-session\";\nconst POSTHOG_INSTANCE_NAME = \"agent-canvas\";\nconst POSTHOG_PAGEVIEW_CAPTURE_MODE = \"history_change\";\n\n// Unconfigured source builds use staging. Production release workflows pass\n// VITE_POSTHOG_API_KEY explicitly for both the app and library artifacts.\nconst DEFAULT_POSTHOG_API_KEY: string =\n  (import.meta.env.VITE_POSTHOG_API_KEY as string | undefined) ||\n  defaults.telemetry.posthogApiKey;\n\n// Default to OpenHands' reverse proxy to bypass ad blockers.\n// The proxy at z.openhands.dev routes to PostHog's US region.\n// Library consumers can override this with their own proxy or direct PostHog URL.\nconst DEFAULT_POSTHOG_HOST =\n  import.meta.env.VITE_POSTHOG_HOST || \"https://z.openhands.dev\";\n\n// UI host is needed for PostHog features like toolbar to work correctly\n// when using a reverse proxy. Defaults to US region.\nconst DEFAULT_POSTHOG_UI_HOST =\n  import.meta.env.VITE_POSTHOG_UI_HOST || \"https://us.posthog.com\";\n\nexport interface TelemetryConfig {\n  /** PostHog project key. Useful for precompiled library consumers. */\n  apiKey?: string;\n  /** Event ingestion host or reverse proxy. */\n  apiHost?: string;\n  /** PostHog UI host used by toolbar links and other UI features. */\n  uiHost?: string;\n}\n\nexport type TelemetryConfiguration = TelemetryConfig | false;\n\nexport type TelemetryConsent = \"granted\" | \"denied\" | \"pending\";\nexport type ResolvedTelemetryConsent = Exclude<TelemetryConsent, \"pending\">;\n\nexport interface SetTelemetryConsentOptions {\n  /** Do not persist a value mirrored from backend settings back to Cloud. */\n  syncToCloud?: boolean;\n}\n\nlet posthogInstance: PostHog | null = null;\nlet initializationPromise: Promise<PostHog | null> | null = null;\nlet pendingBootstrap: BootstrapConfig | undefined;\nlet telemetryConfig: TelemetryConfig = {};\nlet telemetryDisabled = false;\n\nconst CANVAS_EVENT_PROPERTIES = Object.freeze({\n  client_source: AGENT_CANVAS_CLIENT_SOURCE,\n  client_version: AGENT_CANVAS_CLIENT_VERSION,\n  package_name: packageJson.name,\n  package_version: packageJson.version,\n});\n\nlet telemetryBackendContext = getBackendTelemetryProperties({});\nlet telemetryCloudContext = getCloudTelemetryProperties();\n\nexport function setTelemetryBackendContext(\n  context: BackendTelemetryContextInput,\n): void {\n  telemetryBackendContext = getBackendTelemetryProperties(context);\n}\n\nexport function setTelemetryCloudContext(\n  context: CloudTelemetryContextInput | null,\n): void {\n  telemetryCloudContext = getCloudTelemetryProperties(context);\n}\n\nfunction addCanvasEventProperties(\n  event: CaptureResult | null,\n): CaptureResult | null {\n  if (!event) return null;\n\n  return {\n    ...event,\n    properties: {\n      ...telemetryBackendContext,\n      ...telemetryCloudContext,\n      ...event.properties,\n      ...CANVAS_EVENT_PROPERTIES,\n    },\n  };\n}\n\nfunction restorePostHogConsent(posthog: PostHog): void {\n  if (telemetryDisabled || getTelemetryConsent() !== \"granted\") {\n    posthog.opt_out_capturing();\n  } else {\n    posthog.opt_in_capturing();\n  }\n}\n\nfunction resetPostHogIdentity(posthog: PostHog, resetDeviceId = false): void {\n  posthog.reset(resetDeviceId);\n  // PostHog reset clears its own consent persistence, so immediately restore\n  // the canonical Canvas decision kept in localStorage.\n  restorePostHogConsent(posthog);\n}\n\nfunction clearLegacyIdentifiedUser(posthog: PostHog): void {\n  if (posthog.get_property?.(\"$user_id\") != null) {\n    resetPostHogIdentity(posthog);\n  }\n}\n\n/**\n * Configure the single Canvas telemetry client before its first use.\n * Passing false disables telemetry and install tracking for embedded hosts.\n */\nexport function configureTelemetry(config: TelemetryConfiguration): void {\n  if (config === false) {\n    if (telemetryDisabled) return;\n    telemetryDisabled = true;\n    posthogInstance?.opt_out_capturing();\n    notifyTelemetryConsentListeners();\n    return;\n  }\n\n  const wasDisabled = telemetryDisabled;\n  telemetryDisabled = false;\n\n  if (!posthogInstance && !initializationPromise) {\n    const definedConfig = Object.fromEntries(\n      Object.entries(config).filter(([, value]) => value !== undefined),\n    ) as TelemetryConfig;\n    telemetryConfig = { ...telemetryConfig, ...definedConfig };\n  }\n\n  if (wasDisabled) {\n    if (posthogInstance) {\n      restorePostHogConsent(posthogInstance);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\nfunction getResolvedTelemetryConfig(): Required<TelemetryConfig> | null {\n  if (telemetryDisabled) return null;\n\n  return {\n    apiKey: telemetryConfig.apiKey || DEFAULT_POSTHOG_API_KEY,\n    apiHost: telemetryConfig.apiHost || DEFAULT_POSTHOG_HOST,\n    uiHost: telemetryConfig.uiHost || DEFAULT_POSTHOG_UI_HOST,\n  };\n}\n\n/**\n * Check if we're in a browser environment\n */\nfunction isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof localStorage !== \"undefined\";\n}\n\n/**\n * Lazily load PostHog to avoid SSR/Node.js issues.\n * PostHog is a browser-only library, so we dynamically import it only when needed.\n */\nasync function getPostHog(): Promise<PostHog | null> {\n  if (!isBrowser()) {\n    return null;\n  }\n\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  try {\n    const { default: posthog } = await import(\"posthog-js\");\n    return posthog;\n  } catch {\n    // Failed to load PostHog - telemetry will be disabled\n    return null;\n  }\n}\n\n/**\n * Check if telemetry is disabled via environment variable or browser setting.\n * Works in both Node.js and browser (Vite) environments.\n */\nfunction isDoNotTrackEnabled(): boolean {\n  if (telemetryDisabled) {\n    return true;\n  }\n\n  // Check Vite environment variable (browser)\n  if (\n    typeof import.meta !== \"undefined\" &&\n    import.meta.env?.VITE_DO_NOT_TRACK === \"1\"\n  ) {\n    return true;\n  }\n\n  // Check Node.js environment variable (SSR/testing)\n  if (typeof process !== \"undefined\" && process.env?.DO_NOT_TRACK === \"1\") {\n    return true;\n  }\n\n  // Check browser's navigator.doNotTrack standard\n  if (\n    typeof navigator !== \"undefined\" &&\n    (navigator.doNotTrack === \"1\" ||\n      // @ts-expect-error - Some browsers use window.doNotTrack\n      (typeof window !== \"undefined\" && window.doNotTrack === \"1\"))\n  ) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Initialize PostHog SDK.\n *\n * @param enableCapturing - If true, enable capturing immediately (for install tracking).\n *                          If false, start with capturing disabled (for consent-gated tracking).\n */\nexport function configurePostHogBootstrap(\n  bootstrap: BootstrapConfig | undefined,\n): void {\n  if (!posthogInstance) {\n    pendingBootstrap = bootstrap;\n  }\n}\n\nexport async function initializePostHogClient(\n  enableCapturing = false,\n): Promise<PostHog | null> {\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  if (initializationPromise) {\n    return initializationPromise;\n  }\n\n  initializationPromise = (async () => {\n    const config = getResolvedTelemetryConfig();\n    if (!config) {\n      return null;\n    }\n\n    const posthog = await getPostHog();\n    if (!posthog) {\n      return null;\n    }\n\n    // A named instance isolates Canvas configuration, consent, identity, and\n    // persistence from a host application's default PostHog singleton.\n    const bootstrap = pendingBootstrap;\n    const initializedPostHog = posthog.init(\n      config.apiKey,\n      {\n        api_host: config.apiHost,\n        ui_host: config.uiHost,\n        opt_out_capturing_by_default: !enableCapturing,\n        persistence: \"localStorage\",\n        persistence_name: POSTHOG_INSTANCE_NAME,\n        consent_persistence_name: `${POSTHOG_INSTANCE_NAME}-consent`,\n        person_profiles: \"always\",\n        capture_pageview: POSTHOG_PAGEVIEW_CAPTURE_MODE,\n        autocapture: true,\n        disable_session_recording: true,\n        bootstrap,\n        before_send: addCanvasEventProperties,\n      },\n      POSTHOG_INSTANCE_NAME,\n    );\n    if (!initializedPostHog) return null;\n\n    posthogInstance = initializedPostHog;\n    pendingBootstrap = undefined;\n    if (!bootstrap) {\n      clearLegacyIdentifiedUser(posthogInstance);\n    }\n\n    if (telemetryDisabled) {\n      posthogInstance.opt_out_capturing();\n    } else if (getTelemetryConsent() === \"granted\") {\n      posthogInstance.opt_in_capturing();\n    } else if (!enableCapturing) {\n      posthogInstance.opt_out_capturing();\n    }\n\n    return posthogInstance;\n  })();\n\n  try {\n    return await initializationPromise;\n  } finally {\n    if (!posthogInstance) {\n      initializationPromise = null;\n    }\n  }\n}\n\n/**\n * Get user's telemetry consent preference\n */\nexport function getTelemetryConsent(): TelemetryConsent {\n  if (!isBrowser()) {\n    return \"pending\";\n  }\n\n  // Check environment variable for opt-out\n  if (isDoNotTrackEnabled()) {\n    return \"denied\";\n  }\n\n  if (getLockedCloudAuthMode() === \"cookie\") {\n    return \"granted\";\n  }\n\n  try {\n    const consent = localStorage.getItem(TELEMETRY_CONSENT_KEY);\n    if (consent === \"granted\" || consent === \"denied\") {\n      return consent;\n    }\n  } catch {\n    // Ignore storage errors\n  }\n\n  return \"pending\";\n}\n\n/**\n * Return an explicit browser choice that still needs to survive a Cloud login.\n * It remains pending across local backends so their settings cannot consume a\n * decision that must still be applied after the user connects to Cloud.\n */\nexport function getPendingCloudTelemetryConsent(): ResolvedTelemetryConsent | null {\n  if (!isBrowser()) return null;\n\n  try {\n    const consent = localStorage.getItem(\n      TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY,\n    );\n    return consent === \"granted\" || consent === \"denied\" ? consent : null;\n  } catch {\n    return null;\n  }\n}\n\nexport function subscribeTelemetryConsent(listener: () => void): () => void {\n  if (!isBrowser()) return () => {};\n  const handleStorage = (event: StorageEvent) => {\n    if (\n      event.key === TELEMETRY_CONSENT_KEY ||\n      event.key === TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY\n    ) {\n      listener();\n    }\n  };\n  window.addEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n  window.addEventListener(\"storage\", handleStorage);\n\n  return () => {\n    window.removeEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n    window.removeEventListener(\"storage\", handleStorage);\n  };\n}\n\nfunction notifyTelemetryConsentListeners(): void {\n  if (isBrowser())\n    window.dispatchEvent(new Event(TELEMETRY_CONSENT_CHANGE_EVENT));\n}\n\nfunction markTelemetryConsentForCloudSync(\n  consent: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    localStorage.setItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY, consent);\n  } catch {\n    // Ignore storage errors; the in-browser consent decision still applies.\n  }\n}\n\nexport function clearPendingCloudTelemetryConsent(\n  expected?: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    if (\n      expected !== undefined &&\n      localStorage.getItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY) !==\n        expected\n    ) {\n      return;\n    }\n    localStorage.removeItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY);\n    notifyTelemetryConsentListeners();\n  } catch {\n    // Ignore storage errors.\n  }\n}\n\n/**\n * Set user's telemetry consent preference\n */\nexport async function setTelemetryConsent(\n  consent: ResolvedTelemetryConsent,\n  { syncToCloud = true }: SetTelemetryConsentOptions = {},\n): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    const previousConsent = getTelemetryConsent();\n    const unchanged = previousConsent === consent;\n    localStorage.setItem(TELEMETRY_CONSENT_KEY, consent);\n    if (telemetryDisabled) return;\n    if (unchanged) return;\n\n    // Reuse an initialized client synchronously so a same-flush identify()\n    // cannot run before consent is applied. Only the cold path awaits import.\n    const posthog = posthogInstance ?? (await initializePostHogClient());\n    if (!posthog) {\n      return;\n    }\n\n    if (consent === \"granted\") {\n      posthog.opt_in_capturing();\n    } else {\n      if (posthog.get_property?.(\"$user_id\") != null) {\n        resetPostHogIdentity(posthog);\n      } else {\n        posthog.opt_out_capturing();\n      }\n    }\n  } catch {\n    // Ignore storage errors\n  } finally {\n    // Notify UI/backend/identity reconcilers only after the browser capture state\n    // reflects this decision. Otherwise a pre-login grant can trigger an\n    // identify while PostHog is still opted out and lose funnel continuity.\n    if (syncToCloud) {\n      markTelemetryConsentForCloudSync(consent);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\n/**\n * Check if telemetry is enabled (user has granted consent)\n */\nexport function isTelemetryEnabled(): boolean {\n  return getTelemetryConsent() === \"granted\";\n}\n\n/**\n * Check if first use event has already been sent\n */\nfunction hasFirstUseSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return localStorage.getItem(TELEMETRY_FIRST_USE_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark first use event as sent\n */\nfunction markFirstUseSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_FIRST_USE_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Track the initial install of the library.\n *\n * IMPORTANT: This is sent immediately on first use, regardless of consent status.\n * This allows us to track library adoption even if users haven't made a consent choice yet.\n *\n * The event is:\n * - Completely anonymous (no PII, just a random PostHog distinct_id)\n * - Sent only once per installation (tracked via localStorage, persists across sessions)\n * - Still respects DO_NOT_TRACK environment variable and browser setting\n *\n * Users who want complete privacy can:\n * - Set VITE_DO_NOT_TRACK=1 or browser's Do Not Track\n * - Later deny consent to prevent all future tracking\n */\nexport async function trackInstall(): Promise<void> {\n  // Respect hard opt-out via environment variable or browser setting\n  if (isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Already sent install event (persisted in localStorage - survives app relaunches)\n  if (hasFirstUseSent()) {\n    return;\n  }\n\n  // Initialize PostHog with capturing enabled (for this one event)\n  const posthog = await initializePostHogClient(true);\n  if (!posthog || isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Temporarily enable capturing if it was disabled\n  const wasOptedOut = posthog.has_opted_out_capturing?.() ?? false;\n  if (wasOptedOut) {\n    posthog.opt_in_capturing();\n  }\n\n  // Capture the install event\n  posthog.capture(\"canvas_install\", {\n    platform: typeof navigator !== \"undefined\" ? navigator.platform : \"unknown\",\n    user_agent:\n      typeof navigator !== \"undefined\" ? navigator.userAgent : \"unknown\",\n    referrer: typeof document !== \"undefined\" ? document.referrer : \"\",\n    url_origin: typeof window !== \"undefined\" ? window.location.origin : \"\",\n    embedded: typeof window !== \"undefined\" && window.self !== window.top,\n  });\n\n  // Mark as sent (stored in localStorage - persists across browser sessions)\n  markFirstUseSent();\n\n  // Restore opt-out state if user hasn't granted consent yet\n  // This ensures we only send the install event, not subsequent events\n  const currentConsent = getTelemetryConsent();\n  if (currentConsent !== \"granted\") {\n    posthog.opt_out_capturing();\n  }\n}\n\n/**\n * Check if session start event has already been sent (this browser session)\n */\nfunction hasSessionSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return sessionStorage.getItem(TELEMETRY_SESSION_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark session start event as sent (uses sessionStorage so it resets on new tabs/sessions)\n */\nfunction markSessionSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    sessionStorage.setItem(TELEMETRY_SESSION_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/** Return the shared client only when a consented capture is safe to emit. */\nasync function getPostHogForConsentedCapture(): Promise<PostHog | null> {\n  if (!isTelemetryEnabled() || getTelemetryConsent() !== \"granted\") return null;\n\n  const posthog = await initializePostHogClient();\n  if (!posthog || !isTelemetryEnabled()) return null;\n\n  // The browser preference is the canonical capture decision. PostHog may\n  // still carry an older opt-out marker while backend consent is loading or\n  // after a previous backend temporarily reported a stale value. Heal that\n  // drift at the event boundary so capture() cannot silently discard an event\n  // that the user has explicitly allowed.\n  if (posthog.has_opted_out_capturing?.()) {\n    posthog.opt_in_capturing();\n  }\n\n  return posthog;\n}\n\n/**\n * Track a session start event.\n * Called each time a new browser session starts (respects consent).\n * Uses sessionStorage for deduplication - only sends once per browser session.\n */\nexport async function trackSessionStart(): Promise<void> {\n  // Already sent session event this browser session\n  if (hasSessionSent()) {\n    return;\n  }\n\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(\"canvas_new_session\", {\n    is_first_use: !hasFirstUseSent(),\n  });\n\n  // Mark as sent for this session\n  markSessionSent();\n}\n\n/** Return the active PostHog distinct ID when consent allows capture. */\nexport async function getTelemetryDistinctId(): Promise<string | null> {\n  const posthog = await getPostHogForConsentedCapture();\n  return posthog?.get_distinct_id?.() ?? null;\n}\n\n/** Return the PostHog distinct ID for local consent sync without emitting capture. */\nexport async function getTelemetryDistinctIdForConsentSync(): Promise<\n  string | null\n> {\n  if (!isBrowser() || telemetryDisabled || isDoNotTrackEnabled()) return null;\n\n  const posthog = await initializePostHogClient();\n  return posthog?.get_distinct_id?.() ?? null;\n}\n\n/**\n * Track a custom event (respects consent).\n */\nexport async function trackEvent(\n  eventName: string,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(eventName, properties);\n}\n\n/** Track an exception through the same consent-aware client as custom events. */\nexport async function trackException(\n  error: unknown,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.captureException(error, properties);\n}\n\n/**\n * Clear all telemetry data (for privacy/GDPR requests)\n */\nexport async function clearTelemetryData(): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.removeItem(TELEMETRY_CONSENT_KEY);\n    localStorage.removeItem(TELEMETRY_FIRST_USE_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n  clearPendingCloudTelemetryConsent();\n  try {\n    sessionStorage.removeItem(TELEMETRY_SESSION_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n\n  telemetryBackendContext = getBackendTelemetryProperties({});\n  telemetryCloudContext = getCloudTelemetryProperties();\n\n  try {\n    if (posthogInstance) {\n      resetPostHogIdentity(posthogInstance, true);\n    }\n  } catch {\n    // A reset failure must not leave capture enabled after a privacy clear.\n    try {\n      posthogInstance?.opt_out_capturing();\n    } catch {\n      // Telemetry failures must not break the application.\n    }\n  }\n}\n"],"mappings":";;;;;;AA4CA,IAAM,IAAwB,+BACxB,IACJ,kDACI,IAAiC,sCACjC,IAA0B,iCAC1B,IAAwB,+BACxB,IAAwB,gBACxB,IAAgC,kBAIhC,IAEJ,EAAS,UAAU,eAKf,IACiC,2BAIjC,IACoC,0BAqBtC,IAAkC,MAClC,IAAwD,MACxD,GACA,IAAmC,CAAC,GACpC,IAAoB,IAElB,IAA0B,OAAO,OAAO;CAC5C,eAAe;CACf,gBAAgB;CAChB,cAAc,EAAY;CAC1B,iBAAiB,EAAY;AAC/B,CAAC,GAEG,IAA0B,EAA8B,CAAC,CAAC,GAC1D,IAAwB,EAA4B;AAExD,SAAgB,EACd,GACM;CACN,IAA0B,EAA8B,CAAO;AACjE;AAQA,SAAS,EACP,GACsB;CAGtB,OAFK,IAEE;EACL,GAAG;EACH,YAAY;GACV,GAAG;GACH,GAAG;GACH,GAAG,EAAM;GACT,GAAG;EACL;CACF,IAVmB;AAWrB;AAEA,SAAS,EAAsB,GAAwB;CACrD,AAAI,KAAqB,EAAoB,MAAM,YACjD,EAAQ,kBAAkB,IAE1B,EAAQ,iBAAiB;AAE7B;AAEA,SAAS,EAAqB,GAAkB,IAAgB,IAAa;CAI3E,AAHA,EAAQ,MAAM,CAAa,GAG3B,EAAsB,CAAO;AAC/B;AAEA,SAAS,EAA0B,GAAwB;CACzD,AAAI,EAAQ,eAAe,UAAU,KAAK,QACxC,EAAqB,CAAO;AAEhC;AAMA,SAAgB,EAAmB,GAAsC;CACvE,IAAI,MAAW,IAAO;EACpB,IAAI,GAAmB;EAGvB,AAFA,IAAoB,IACpB,GAAiB,kBAAkB,GACnC,EAAgC;EAChC;CACF;CAEA,IAAM,IAAc;CAGpB,IAFA,IAAoB,IAEhB,CAAC,KAAmB,CAAC,GAAuB;EAC9C,IAAM,IAAgB,OAAO,YAC3B,OAAO,QAAQ,CAAM,EAAE,QAAQ,GAAG,OAAW,MAAU,KAAA,CAAS,CAClE;EACA,IAAkB;GAAE,GAAG;GAAiB,GAAG;EAAc;CAC3D;CAEA,AAAI,MACE,KACF,EAAsB,CAAe,GAEvC,EAAgC;AAEpC;AAEA,SAAS,IAA+D;CAGtE,OAFI,IAA0B,OAEvB;EACL,QAAQ,EAAgB,UAAU;EAClC,SAAS,EAAgB,WAAW;EACpC,QAAQ,EAAgB,UAAU;CACpC;AACF;AAKA,SAAS,IAAqB;CAC5B,OAAO,OAAO,SAAW,OAAe,OAAO,eAAiB;AAClE;AAMA,eAAe,IAAsC;CACnD,IAAI,CAAC,EAAU,GACb,OAAO;CAGT,IAAI,GACF,OAAO;CAGT,IAAI;EACF,IAAM,EAAE,SAAS,MAAY,MAAM,OAAO;EAC1C,OAAO;CACT,QAAQ;EAEN,OAAO;CACT;AACF;AAMA,SAAS,IAA+B;CA4BtC,OATA,GAlBI,KAaA,OAAO,UAAY,OAAe,QAAQ,KAAK,iBAAiB,OAMlE,OAAO,YAAc,QACpB,UAAU,eAAe,OAEvB,OAAO,SAAW,OAAe,OAAO,eAAe;AAM9D;AAQA,SAAgB,EACd,GACM;CACN,AAAK,MACH,IAAmB;AAEvB;AAEA,eAAsB,EACpB,IAAkB,IACO;CACzB,IAAI,GACF,OAAO;CAGT,IAAI,GACF,OAAO;CAGT,KAAyB,YAAY;EACnC,IAAM,IAAS,EAA2B;EAC1C,IAAI,CAAC,GACH,OAAO;EAGT,IAAM,IAAU,MAAM,EAAW;EACjC,IAAI,CAAC,GACH,OAAO;EAKT,IAAM,IAAY,GACZ,IAAqB,EAAQ,KACjC,EAAO,QACP;GACE,UAAU,EAAO;GACjB,SAAS,EAAO;GAChB,8BAA8B,CAAC;GAC/B,aAAa;GACb,kBAAkB;GAClB,0BAA0B,GAAG,EAAsB;GACnD,iBAAiB;GACjB,kBAAkB;GAClB,aAAa;GACb,2BAA2B;GAC3B;GACA,aAAa;EACf,GACA,CACF;EAiBA,OAhBK,KAEL,IAAkB,GAClB,IAAmB,KAAA,GACd,KACH,EAA0B,CAAe,GAGvC,IACF,EAAgB,kBAAkB,IACzB,EAAoB,MAAM,YACnC,EAAgB,iBAAiB,IACvB,KACV,EAAgB,kBAAkB,GAG7B,KAhByB;CAiBlC,GAAG;CAEH,IAAI;EACF,OAAO,MAAM;CACf,UAAU;EACR,AAAK,MACH,IAAwB;CAE5B;AACF;AAKA,SAAgB,IAAwC;CACtD,IAAI,CAAC,EAAU,GACb,OAAO;CAIT,IAAI,EAAoB,GACtB,OAAO;CAGT,IAAI,EAAuB,MAAM,UAC/B,OAAO;CAGT,IAAI;EACF,IAAM,IAAU,aAAa,QAAQ,CAAqB;EAC1D,IAAI,MAAY,aAAa,MAAY,UACvC,OAAO;CAEX,QAAQ,CAER;CAEA,OAAO;AACT;AAoBA,SAAgB,EAA0B,GAAkC;CAC1E,IAAI,CAAC,EAAU,GAAG,aAAa,CAAC;CAChC,IAAM,KAAiB,MAAwB;EAC7C,CACE,EAAM,QAAQ,KACd,EAAM,QAAQ,MAEd,EAAS;CAEb;CAIA,OAHA,OAAO,iBAAiB,GAAgC,CAAQ,GAChE,OAAO,iBAAiB,WAAW,CAAa,SAEnC;EAEX,AADA,OAAO,oBAAoB,GAAgC,CAAQ,GACnE,OAAO,oBAAoB,WAAW,CAAa;CACrD;AACF;AAEA,SAAS,IAAwC;CAC/C,AAAI,EAAU,KACZ,OAAO,cAAc,IAAI,MAAM,CAA8B,CAAC;AAClE;AAEA,SAAS,EACP,GACM;CACD,MAAU,GAEf,IAAI;EACF,aAAa,QAAQ,GAA0C,CAAO;CACxE,QAAQ,CAER;AACF;AAEA,SAAgB,EACd,GACM;CACD,MAAU,GAEf,IAAI;EACF,IACE,MAAa,KAAA,KACb,aAAa,QAAQ,CAAwC,MAC3D,GAEF;EAGF,AADA,aAAa,WAAW,CAAwC,GAChE,EAAgC;CAClC,QAAQ,CAER;AACF;AAKA,eAAsB,EACpB,GACA,EAAE,iBAAc,OAAqC,CAAC,GACvC;CACV,MAAU,GAIf,IAAI;EAEF,IAAM,IADkB,EACN,MAAoB;EAGtC,IAFA,aAAa,QAAQ,GAAuB,CAAO,GAC/C,KACA,GAAW;EAIf,IAAM,IAAU,KAAoB,MAAM,EAAwB;EAClE,IAAI,CAAC,GACH;EAGF,AAAI,MAAY,YACd,EAAQ,iBAAiB,IAErB,EAAQ,eAAe,UAAU,KAAK,OAGxC,EAAQ,kBAAkB,IAF1B,EAAqB,CAAO;CAKlC,QAAQ,CAER,UAAU;EAOR,AAHI,KACF,EAAiC,CAAO,GAE1C,EAAgC;CAClC;AACF;AAKA,SAAgB,IAA8B;CAC5C,OAAO,EAAoB,MAAM;AACnC;AAKA,SAAS,IAA2B;CAClC,IAAI,CAAC,EAAU,GACb,OAAO;CAGT,IAAI;EACF,OAAO,aAAa,QAAQ,CAAuB,MAAM;CAC3D,QAAQ;EACN,OAAO;CACT;AACF;AAKA,SAAS,IAAyB;CAC3B,MAAU,GAIf,IAAI;EACF,aAAa,QAAQ,GAAyB,MAAM;CACtD,QAAQ,CAER;AACF;AAiBA,eAAsB,IAA8B;CAOlD,IALI,EAAoB,KAKpB,EAAgB,GAClB;CAIF,IAAM,IAAU,MAAM,EAAwB,EAAI;CAC9C,CAAC,KAAW,EAAoB,OAKhB,EAAQ,0BAA0B,KAAK,OAEzD,EAAQ,iBAAiB,GAI3B,EAAQ,QAAQ,kBAAkB;EAChC,UAAU,OAAO,YAAc,MAAc,UAAU,WAAW;EAClE,YACE,OAAO,YAAc,MAAc,UAAU,YAAY;EAC3D,UAAU,OAAO,WAAa,MAAc,SAAS,WAAW;EAChE,YAAY,OAAO,SAAW,MAAc,OAAO,SAAS,SAAS;EACrE,UAAU,OAAO,SAAW,OAAe,OAAO,SAAS,OAAO;CACpE,CAAC,GAGD,EAAiB,GAIM,EACnB,MAAmB,aACrB,EAAQ,kBAAkB;AAE9B;AAKA,SAAS,IAA0B;CACjC,IAAI,CAAC,EAAU,GACb,OAAO;CAGT,IAAI;EACF,OAAO,eAAe,QAAQ,CAAqB,MAAM;CAC3D,QAAQ;EACN,OAAO;CACT;AACF;AAKA,SAAS,IAAwB;CAC1B,MAAU,GAIf,IAAI;EACF,eAAe,QAAQ,GAAuB,MAAM;CACtD,QAAQ,CAER;AACF;AAGA,eAAe,IAAyD;CACtE,IAAI,CAAC,EAAmB,KAAK,EAAoB,MAAM,WAAW,OAAO;CAEzE,IAAM,IAAU,MAAM,EAAwB;CAY9C,OAXI,CAAC,KAAW,CAAC,EAAmB,IAAU,QAO1C,EAAQ,0BAA0B,KACpC,EAAQ,iBAAiB,GAGpB;AACT;AAOA,eAAsB,IAAmC;CAEvD,IAAI,EAAe,GACjB;CAGF,IAAM,IAAU,MAAM,EAA8B;CAC/C,MAEL,EAAQ,QAAQ,sBAAsB,EACpC,cAAc,CAAC,EAAgB,EACjC,CAAC,GAGD,EAAgB;AAClB;AAGA,eAAsB,IAAiD;CAErE,QAAO,MADe,EAA8B,IACpC,kBAAkB,KAAK;AACzC;AAGA,eAAsB,IAEpB;CAIA,OAHI,CAAC,EAAU,KAAK,KAAqB,EAAoB,IAAU,QAGhE,MADe,EAAwB,IAC9B,kBAAkB,KAAK;AACzC;AAKA,eAAsB,EACpB,GACA,IAAsC,CAAC,GACxB;CACf,IAAM,IAAU,MAAM,EAA8B;CAC/C,KAEL,EAAQ,QAAQ,GAAW,CAAU;AACvC;AAGA,eAAsB,GACpB,GACA,IAAsC,CAAC,GACxB;CACf,IAAM,IAAU,MAAM,EAA8B;CAC/C,KAEL,EAAQ,iBAAiB,GAAO,CAAU;AAC5C;AAKA,eAAsB,KAAoC;CACnD,MAAU,GAIf;MAAI;GAEF,AADA,aAAa,WAAW,CAAqB,GAC7C,aAAa,WAAW,CAAuB;EACjD,QAAQ,CAER;EACA,EAAkC;EAClC,IAAI;GACF,eAAe,WAAW,CAAqB;EACjD,QAAQ,CAER;EAGA,AADA,IAA0B,EAA8B,CAAC,CAAC,GAC1D,IAAwB,EAA4B;EAEpD,IAAI;GACF,AAAI,KACF,EAAqB,GAAiB,EAAI;EAE9C,QAAQ;GAEN,IAAI;IACF,GAAiB,kBAAkB;GACrC,QAAQ,CAER;EACF;CAtBA;AAuBF"}
+{"version":3,"file":"telemetry.js","names":[],"sources":["../../src/services/telemetry.ts"],"sourcesContent":["/**\n * Telemetry service for tracking library usage.\n *\n * This module handles anonymous telemetry for the @openhands/agent-canvas package\n * using the PostHog SDK for reliable event delivery with batching, retry logic,\n * and offline support.\n *\n * TRACKING PHILOSOPHY:\n * - Install event (canvas_install): Sent immediately on first use, regardless of consent.\n *   This is anonymous and contains no PII - just basic browser info and a random ID.\n * - Session/custom events: Only sent after user grants consent via the consent modal.\n * - Users can opt out of all future tracking by declining consent.\n *\n * AD BLOCKER BYPASS:\n * By default, telemetry is routed through OpenHands' reverse proxy (z.openhands.dev)\n * to avoid being blocked by ad blockers. Library consumers can override this with:\n * - VITE_POSTHOG_HOST: Custom proxy URL or direct PostHog URL\n * - VITE_POSTHOG_UI_HOST: PostHog UI host (defaults to https://us.posthog.com)\n *\n * IMPORTANT: By default, telemetry is sent to the OpenHands PostHog project.\n * Source builds can override this with VITE_POSTHOG_API_KEY. Precompiled\n * library consumers can pass the same settings to configureTelemetry().\n *\n * Users can disable all telemetry (including install tracking) via:\n * - Setting VITE_DO_NOT_TRACK=1 environment variable\n * - Browser's Do Not Track setting\n */\n\nimport type { BootstrapConfig, CaptureResult, PostHog } from \"posthog-js\";\nimport { getLockedCloudAuthMode } from \"#/api/agent-server-config\";\nimport defaults from \"../../config/defaults.json\";\n\nimport packageJson from \"../../package.json\";\nimport {\n  AGENT_CANVAS_CLIENT_SOURCE,\n  AGENT_CANVAS_CLIENT_VERSION,\n} from \"#/api/client-source\";\nimport {\n  getBackendTelemetryProperties,\n  getCloudTelemetryProperties,\n  type BackendTelemetryContextInput,\n  type CloudTelemetryContextInput,\n} from \"#/services/telemetry-context\";\n\nconst TELEMETRY_CONSENT_KEY = \"openhands-telemetry-consent\";\nconst TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY =\n  \"openhands-telemetry-consent-pending-cloud-sync\";\nconst TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY =\n  \"openhands-telemetry-consent-pending-local-revocation\";\nconst TELEMETRY_CONSENT_CHANGE_EVENT = \"openhands-telemetry-consent-change\";\nconst TELEMETRY_FIRST_USE_KEY = \"openhands-telemetry-first-use\";\nconst TELEMETRY_SESSION_KEY = \"openhands-telemetry-session\";\nconst POSTHOG_INSTANCE_NAME = \"agent-canvas\";\nconst POSTHOG_PAGEVIEW_CAPTURE_MODE = \"history_change\";\n\n// Unconfigured source builds use staging. Production release workflows pass\n// VITE_POSTHOG_API_KEY explicitly for both the app and library artifacts.\nconst DEFAULT_POSTHOG_API_KEY: string =\n  (import.meta.env.VITE_POSTHOG_API_KEY as string | undefined) ||\n  defaults.telemetry.posthogApiKey;\n\n// Default to OpenHands' reverse proxy to bypass ad blockers.\n// The proxy at z.openhands.dev routes to PostHog's US region.\n// Library consumers can override this with their own proxy or direct PostHog URL.\nconst DEFAULT_POSTHOG_HOST =\n  import.meta.env.VITE_POSTHOG_HOST || \"https://z.openhands.dev\";\n\n// UI host is needed for PostHog features like toolbar to work correctly\n// when using a reverse proxy. Defaults to US region.\nconst DEFAULT_POSTHOG_UI_HOST =\n  import.meta.env.VITE_POSTHOG_UI_HOST || \"https://us.posthog.com\";\n\nexport interface TelemetryConfig {\n  /** PostHog project key. Useful for precompiled library consumers. */\n  apiKey?: string;\n  /** Event ingestion host or reverse proxy. */\n  apiHost?: string;\n  /** PostHog UI host used by toolbar links and other UI features. */\n  uiHost?: string;\n}\n\nexport type TelemetryConfiguration = TelemetryConfig | false;\n\nexport type TelemetryConsent = \"granted\" | \"denied\" | \"pending\";\nexport type ResolvedTelemetryConsent = Exclude<TelemetryConsent, \"pending\">;\n\nexport interface SetTelemetryConsentOptions {\n  /** Do not persist a value mirrored from backend settings back to Cloud. */\n  syncToCloud?: boolean;\n}\n\nlet posthogInstance: PostHog | null = null;\nlet initializationPromise: Promise<PostHog | null> | null = null;\nlet pendingBootstrap: BootstrapConfig | undefined;\nlet telemetryConfig: TelemetryConfig = {};\nlet telemetryDisabled = false;\n\ninterface TelemetryIdentity {\n  distinctId: string;\n  properties: Record<string, unknown>;\n}\n\n// undefined means that Cloud identity has not resolved yet; null means that it\n// resolved without a user. This distinction prevents startup from resetting a\n// persisted identity while the current account is still loading.\nlet desiredTelemetryIdentity: TelemetryIdentity | null | undefined;\nlet desiredIdentityRevision = 0;\nlet appliedIdentityRevision = -1;\n\nconst CANVAS_EVENT_PROPERTIES = Object.freeze({\n  client_source: AGENT_CANVAS_CLIENT_SOURCE,\n  client_version: AGENT_CANVAS_CLIENT_VERSION,\n  package_name: packageJson.name,\n  package_version: packageJson.version,\n});\n\nlet telemetryBackendContext = getBackendTelemetryProperties({});\nlet telemetryCloudContext = getCloudTelemetryProperties();\n\nexport function setTelemetryBackendContext(\n  context: BackendTelemetryContextInput,\n): void {\n  telemetryBackendContext = getBackendTelemetryProperties(context);\n}\n\nexport function setTelemetryCloudContext(\n  context: CloudTelemetryContextInput | null,\n): void {\n  telemetryCloudContext = getCloudTelemetryProperties(context);\n}\n\nfunction addCanvasEventProperties(\n  event: CaptureResult | null,\n): CaptureResult | null {\n  if (!event) return null;\n\n  return {\n    ...event,\n    properties: {\n      ...telemetryBackendContext,\n      ...telemetryCloudContext,\n      ...event.properties,\n      ...CANVAS_EVENT_PROPERTIES,\n    },\n  };\n}\n\nfunction restorePostHogConsent(posthog: PostHog): void {\n  if (telemetryDisabled || getTelemetryConsent() !== \"granted\") {\n    posthog.opt_out_capturing();\n  } else {\n    posthog.opt_in_capturing();\n  }\n}\n\nfunction resetPostHogIdentity(posthog: PostHog, resetDeviceId = false): void {\n  posthog.reset(resetDeviceId);\n  appliedIdentityRevision = -1;\n  // PostHog reset clears its own consent persistence, so immediately restore\n  // the canonical Canvas decision kept in localStorage.\n  restorePostHogConsent(posthog);\n}\n\nfunction applyDesiredTelemetryIdentity(posthog: PostHog): void {\n  if (desiredTelemetryIdentity === undefined || !isTelemetryEnabled()) return;\n\n  const desiredId = desiredTelemetryIdentity?.distinctId;\n  const currentId = posthog.get_property(\"$user_id\");\n  if (currentId != null && currentId !== desiredId) {\n    resetPostHogIdentity(posthog);\n  }\n\n  if (desiredTelemetryIdentity === null) {\n    appliedIdentityRevision = desiredIdentityRevision;\n    return;\n  }\n\n  if (\n    posthog.get_property(\"$user_id\") !== desiredTelemetryIdentity.distinctId ||\n    appliedIdentityRevision !== desiredIdentityRevision\n  ) {\n    posthog.identify(\n      desiredTelemetryIdentity.distinctId,\n      desiredTelemetryIdentity.properties,\n    );\n    appliedIdentityRevision = desiredIdentityRevision;\n  }\n}\n\nfunction propertiesEqual(\n  left: Record<string, unknown>,\n  right: Record<string, unknown>,\n): boolean {\n  const keys = Object.keys(left);\n  return (\n    keys.length === Object.keys(right).length &&\n    keys.every((key) => left[key] === right[key])\n  );\n}\n\n/**\n * Configure the single Canvas telemetry client before its first use.\n * Passing false disables telemetry and install tracking for embedded hosts.\n */\nexport function configureTelemetry(config: TelemetryConfiguration): void {\n  if (config === false) {\n    if (telemetryDisabled) return;\n    telemetryDisabled = true;\n    posthogInstance?.opt_out_capturing();\n    notifyTelemetryConsentListeners();\n    return;\n  }\n\n  const wasDisabled = telemetryDisabled;\n  telemetryDisabled = false;\n\n  if (!posthogInstance && !initializationPromise) {\n    const definedConfig = Object.fromEntries(\n      Object.entries(config).filter(([, value]) => value !== undefined),\n    ) as TelemetryConfig;\n    telemetryConfig = { ...telemetryConfig, ...definedConfig };\n  }\n\n  if (wasDisabled) {\n    if (posthogInstance) {\n      restorePostHogConsent(posthogInstance);\n      applyDesiredTelemetryIdentity(posthogInstance);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\nfunction getResolvedTelemetryConfig(): Required<TelemetryConfig> | null {\n  if (telemetryDisabled) return null;\n\n  return {\n    apiKey: telemetryConfig.apiKey || DEFAULT_POSTHOG_API_KEY,\n    apiHost: telemetryConfig.apiHost || DEFAULT_POSTHOG_HOST,\n    uiHost: telemetryConfig.uiHost || DEFAULT_POSTHOG_UI_HOST,\n  };\n}\n\n/**\n * Check if we're in a browser environment\n */\nfunction isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof localStorage !== \"undefined\";\n}\n\n/**\n * Lazily load PostHog to avoid SSR/Node.js issues.\n * PostHog is a browser-only library, so we dynamically import it only when needed.\n */\nasync function getPostHog(): Promise<PostHog | null> {\n  if (!isBrowser()) {\n    return null;\n  }\n\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  try {\n    const { default: posthog } = await import(\"posthog-js\");\n    return posthog;\n  } catch {\n    // Failed to load PostHog - telemetry will be disabled\n    return null;\n  }\n}\n\n/**\n * Check if telemetry is disabled via environment variable or browser setting.\n * Works in both Node.js and browser (Vite) environments.\n */\nfunction isDoNotTrackEnabled(): boolean {\n  if (telemetryDisabled) {\n    return true;\n  }\n\n  // Check Vite environment variable (browser)\n  if (\n    typeof import.meta !== \"undefined\" &&\n    import.meta.env?.VITE_DO_NOT_TRACK === \"1\"\n  ) {\n    return true;\n  }\n\n  // Check Node.js environment variable (SSR/testing)\n  if (typeof process !== \"undefined\" && process.env?.DO_NOT_TRACK === \"1\") {\n    return true;\n  }\n\n  // Check browser's navigator.doNotTrack standard\n  if (\n    typeof navigator !== \"undefined\" &&\n    (navigator.doNotTrack === \"1\" ||\n      // @ts-expect-error - Some browsers use window.doNotTrack\n      (typeof window !== \"undefined\" && window.doNotTrack === \"1\"))\n  ) {\n    return true;\n  }\n\n  return false;\n}\n\n/**\n * Initialize PostHog SDK.\n *\n * @param enableCapturing - If true, enable capturing immediately (for install tracking).\n *                          If false, start with capturing disabled (for consent-gated tracking).\n */\nexport function configurePostHogBootstrap(\n  bootstrap: BootstrapConfig | undefined,\n): void {\n  if (!posthogInstance) {\n    pendingBootstrap = bootstrap;\n  }\n}\n\nexport async function initializePostHogClient(\n  enableCapturing = false,\n): Promise<PostHog | null> {\n  if (posthogInstance) {\n    return posthogInstance;\n  }\n\n  if (initializationPromise) {\n    return initializationPromise;\n  }\n\n  initializationPromise = (async () => {\n    const config = getResolvedTelemetryConfig();\n    if (!config) {\n      return null;\n    }\n\n    const posthog = await getPostHog();\n    if (!posthog) {\n      return null;\n    }\n\n    // A named instance isolates Canvas configuration, consent, identity, and\n    // persistence from a host application's default PostHog singleton.\n    const initializedPostHog = posthog.init(\n      config.apiKey,\n      {\n        api_host: config.apiHost,\n        ui_host: config.uiHost,\n        opt_out_capturing_by_default: !enableCapturing,\n        persistence: \"localStorage\",\n        persistence_name: POSTHOG_INSTANCE_NAME,\n        consent_persistence_name: `${POSTHOG_INSTANCE_NAME}-consent`,\n        person_profiles: \"always\",\n        capture_pageview: POSTHOG_PAGEVIEW_CAPTURE_MODE,\n        autocapture: true,\n        disable_session_recording: true,\n        bootstrap: pendingBootstrap,\n        before_send: addCanvasEventProperties,\n      },\n      POSTHOG_INSTANCE_NAME,\n    );\n    if (!initializedPostHog) return null;\n\n    posthogInstance = initializedPostHog;\n    pendingBootstrap = undefined;\n\n    if (telemetryDisabled) {\n      posthogInstance.opt_out_capturing();\n    } else if (getTelemetryConsent() === \"granted\") {\n      posthogInstance.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthogInstance);\n    } else if (!enableCapturing) {\n      posthogInstance.opt_out_capturing();\n    }\n\n    return posthogInstance;\n  })();\n\n  try {\n    return await initializationPromise;\n  } finally {\n    if (!posthogInstance) {\n      initializationPromise = null;\n    }\n  }\n}\n\n/**\n * Get user's telemetry consent preference\n */\nexport function getTelemetryConsent(): TelemetryConsent {\n  if (!isBrowser()) {\n    return \"pending\";\n  }\n\n  // Check environment variable for opt-out\n  if (isDoNotTrackEnabled()) {\n    return \"denied\";\n  }\n\n  if (getLockedCloudAuthMode() === \"cookie\") {\n    return \"granted\";\n  }\n\n  try {\n    const consent = localStorage.getItem(TELEMETRY_CONSENT_KEY);\n    if (consent === \"granted\" || consent === \"denied\") {\n      return consent;\n    }\n  } catch {\n    // Ignore storage errors\n  }\n\n  return \"pending\";\n}\n\n/**\n * Return an explicit browser choice that still needs to survive a Cloud login.\n * It remains pending across local backends so their settings cannot consume a\n * decision that must still be applied after the user connects to Cloud.\n */\nexport function getPendingCloudTelemetryConsent(): ResolvedTelemetryConsent | null {\n  if (!isBrowser()) return null;\n\n  try {\n    const consent = localStorage.getItem(\n      TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY,\n    );\n    return consent === \"granted\" || consent === \"denied\" ? consent : null;\n  } catch {\n    return null;\n  }\n}\n\n/** Return the pre-reset actor whose local Automation consent must be revoked. */\nexport function getPendingLocalTelemetryRevocationId(): string | null {\n  if (!isBrowser()) return null;\n\n  try {\n    return localStorage.getItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY);\n  } catch {\n    return null;\n  }\n}\n\nexport function subscribeTelemetryConsent(listener: () => void): () => void {\n  if (!isBrowser()) return () => {};\n  const handleStorage = (event: StorageEvent) => {\n    if (\n      event.key === TELEMETRY_CONSENT_KEY ||\n      event.key === TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY\n    ) {\n      listener();\n    }\n  };\n  window.addEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n  window.addEventListener(\"storage\", handleStorage);\n\n  return () => {\n    window.removeEventListener(TELEMETRY_CONSENT_CHANGE_EVENT, listener);\n    window.removeEventListener(\"storage\", handleStorage);\n  };\n}\n\nfunction notifyTelemetryConsentListeners(): void {\n  if (isBrowser())\n    window.dispatchEvent(new Event(TELEMETRY_CONSENT_CHANGE_EVENT));\n}\n\nfunction markTelemetryConsentForCloudSync(\n  consent: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    localStorage.setItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY, consent);\n  } catch {\n    // Ignore storage errors; the in-browser consent decision still applies.\n  }\n}\n\nfunction markPendingLocalTelemetryRevocation(distinctId: string | null): void {\n  if (!isBrowser() || !distinctId) return;\n\n  try {\n    localStorage.setItem(\n      TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY,\n      distinctId,\n    );\n  } catch {\n    // Ignore storage errors; browser capture is still disabled below.\n  }\n}\n\nexport function clearPendingLocalTelemetryRevocation(\n  expectedDistinctId: string,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    if (\n      localStorage.getItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY) !==\n      expectedDistinctId\n    ) {\n      return;\n    }\n    localStorage.removeItem(TELEMETRY_CONSENT_PENDING_LOCAL_REVOCATION_KEY);\n  } catch {\n    // Ignore storage errors.\n  }\n}\n\nexport function clearPendingCloudTelemetryConsent(\n  expected?: ResolvedTelemetryConsent,\n): void {\n  if (!isBrowser()) return;\n\n  try {\n    if (\n      expected !== undefined &&\n      localStorage.getItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY) !==\n        expected\n    ) {\n      return;\n    }\n    localStorage.removeItem(TELEMETRY_CONSENT_PENDING_CLOUD_SYNC_KEY);\n    notifyTelemetryConsentListeners();\n  } catch {\n    // Ignore storage errors.\n  }\n}\n\n/**\n * Set user's telemetry consent preference\n */\nexport async function setTelemetryConsent(\n  consent: ResolvedTelemetryConsent,\n  { syncToCloud = true }: SetTelemetryConsentOptions = {},\n): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    const previousConsent = getTelemetryConsent();\n    const unchanged = previousConsent === consent;\n    localStorage.setItem(TELEMETRY_CONSENT_KEY, consent);\n    if (telemetryDisabled) return;\n    if (unchanged) return;\n\n    // Reuse an initialized client synchronously so a same-flush identify()\n    // cannot run before consent is applied. Only the cold path awaits import.\n    const posthog = posthogInstance ?? (await initializePostHogClient());\n    if (!posthog) {\n      return;\n    }\n\n    if (consent === \"granted\") {\n      posthog.opt_in_capturing();\n      applyDesiredTelemetryIdentity(posthog);\n    } else {\n      markPendingLocalTelemetryRevocation(posthog.get_distinct_id?.() ?? null);\n      if (posthog.get_property?.(\"$user_id\") != null) {\n        resetPostHogIdentity(posthog);\n      } else {\n        posthog.opt_out_capturing();\n      }\n    }\n  } catch {\n    // Ignore storage errors\n  } finally {\n    // Notify UI/backend/identity reconcilers only after the browser capture state\n    // reflects this decision. Otherwise a pre-login grant can trigger an\n    // identify while PostHog is still opted out and lose funnel continuity.\n    if (syncToCloud) {\n      markTelemetryConsentForCloudSync(consent);\n    }\n    notifyTelemetryConsentListeners();\n  }\n}\n\n/**\n * Declare the current Cloud identity. The telemetry service applies it only\n * after consent and owns all reset/account-switch semantics.\n */\nexport async function setTelemetryIdentity(\n  distinctId: string | null,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const nextIdentity = distinctId === null ? null : { distinctId, properties };\n  const unchanged =\n    desiredTelemetryIdentity === nextIdentity ||\n    (desiredTelemetryIdentity !== undefined &&\n      desiredTelemetryIdentity !== null &&\n      nextIdentity !== null &&\n      desiredTelemetryIdentity.distinctId === nextIdentity.distinctId &&\n      propertiesEqual(desiredTelemetryIdentity.properties, properties));\n  if (unchanged) return;\n\n  desiredTelemetryIdentity = nextIdentity;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  if (!isTelemetryEnabled()) return;\n  const posthog = posthogInstance ?? (await initializePostHogClient());\n  if (posthog && isTelemetryEnabled()) {\n    // Read the desired identity after the await so a newer account always wins\n    // if identity changes while the SDK is loading.\n    applyDesiredTelemetryIdentity(posthog);\n  }\n}\n\n/**\n * Check if telemetry is enabled (user has granted consent)\n */\nexport function isTelemetryEnabled(): boolean {\n  return getTelemetryConsent() === \"granted\";\n}\n\n/**\n * Check if first use event has already been sent\n */\nfunction hasFirstUseSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return localStorage.getItem(TELEMETRY_FIRST_USE_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark first use event as sent\n */\nfunction markFirstUseSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    localStorage.setItem(TELEMETRY_FIRST_USE_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/**\n * Track the initial install of the library.\n *\n * IMPORTANT: This is sent immediately on first use, regardless of consent status.\n * This allows us to track library adoption even if users haven't made a consent choice yet.\n *\n * The event is:\n * - Completely anonymous (no PII, just a random PostHog distinct_id)\n * - Sent only once per installation (tracked via localStorage, persists across sessions)\n * - Still respects DO_NOT_TRACK environment variable and browser setting\n *\n * Users who want complete privacy can:\n * - Set VITE_DO_NOT_TRACK=1 or browser's Do Not Track\n * - Later deny consent to prevent all future tracking\n */\nexport async function trackInstall(): Promise<void> {\n  // Respect hard opt-out via environment variable or browser setting\n  if (isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Already sent install event (persisted in localStorage - survives app relaunches)\n  if (hasFirstUseSent()) {\n    return;\n  }\n\n  // Initialize PostHog with capturing enabled (for this one event)\n  const posthog = await initializePostHogClient(true);\n  if (!posthog || isDoNotTrackEnabled()) {\n    return;\n  }\n\n  // Temporarily enable capturing if it was disabled\n  const wasOptedOut = posthog.has_opted_out_capturing?.() ?? false;\n  if (wasOptedOut) {\n    posthog.opt_in_capturing();\n  }\n\n  // Capture the install event\n  posthog.capture(\"canvas_install\", {\n    platform: typeof navigator !== \"undefined\" ? navigator.platform : \"unknown\",\n    user_agent:\n      typeof navigator !== \"undefined\" ? navigator.userAgent : \"unknown\",\n    referrer: typeof document !== \"undefined\" ? document.referrer : \"\",\n    url_origin: typeof window !== \"undefined\" ? window.location.origin : \"\",\n    embedded: typeof window !== \"undefined\" && window.self !== window.top,\n  });\n\n  // Mark as sent (stored in localStorage - persists across browser sessions)\n  markFirstUseSent();\n\n  // Restore opt-out state if user hasn't granted consent yet\n  // This ensures we only send the install event, not subsequent events\n  const currentConsent = getTelemetryConsent();\n  if (currentConsent !== \"granted\") {\n    posthog.opt_out_capturing();\n  }\n}\n\n/**\n * Check if session start event has already been sent (this browser session)\n */\nfunction hasSessionSent(): boolean {\n  if (!isBrowser()) {\n    return false;\n  }\n\n  try {\n    return sessionStorage.getItem(TELEMETRY_SESSION_KEY) === \"true\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Mark session start event as sent (uses sessionStorage so it resets on new tabs/sessions)\n */\nfunction markSessionSent(): void {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    sessionStorage.setItem(TELEMETRY_SESSION_KEY, \"true\");\n  } catch {\n    // Ignore storage errors\n  }\n}\n\n/** Return the shared client only when a consented capture is safe to emit. */\nasync function getPostHogForConsentedCapture(): Promise<PostHog | null> {\n  if (!isTelemetryEnabled() || getTelemetryConsent() !== \"granted\") return null;\n\n  const posthog = await initializePostHogClient();\n  if (!posthog || !isTelemetryEnabled()) return null;\n\n  // The browser preference is the canonical capture decision. PostHog may\n  // still carry an older opt-out marker while backend consent is loading or\n  // after a previous backend temporarily reported a stale value. Heal that\n  // drift at the event boundary so capture() cannot silently discard an event\n  // that the user has explicitly allowed.\n  if (posthog.has_opted_out_capturing?.()) {\n    posthog.opt_in_capturing();\n  }\n\n  applyDesiredTelemetryIdentity(posthog);\n\n  return posthog;\n}\n\n/**\n * Track a session start event.\n * Called each time a new browser session starts (respects consent).\n * Uses sessionStorage for deduplication - only sends once per browser session.\n */\nexport async function trackSessionStart(): Promise<void> {\n  // Already sent session event this browser session\n  if (hasSessionSent()) {\n    return;\n  }\n\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(\"canvas_new_session\", {\n    is_first_use: !hasFirstUseSent(),\n  });\n\n  // Mark as sent for this session\n  markSessionSent();\n}\n\n/** Return the active PostHog distinct ID when consent allows capture. */\nexport async function getTelemetryDistinctId(): Promise<string | null> {\n  const posthog = await getPostHogForConsentedCapture();\n  return posthog?.get_distinct_id?.() ?? null;\n}\n\n/** Return the PostHog distinct ID for local consent sync without emitting capture. */\nexport async function getTelemetryDistinctIdForConsentSync(): Promise<\n  string | null\n> {\n  if (!isBrowser()) return null;\n\n  if (getTelemetryConsent() !== \"granted\") {\n    const pendingRevocationId = getPendingLocalTelemetryRevocationId();\n    if (pendingRevocationId) return pendingRevocationId;\n  }\n\n  if (telemetryDisabled || isDoNotTrackEnabled()) return null;\n\n  const posthog = await initializePostHogClient();\n  return posthog?.get_distinct_id?.() ?? null;\n}\n\n/**\n * Track a custom event (respects consent).\n */\nexport async function trackEvent(\n  eventName: string,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.capture(eventName, properties);\n}\n\n/** Track an exception through the same consent-aware client as custom events. */\nexport async function trackException(\n  error: unknown,\n  properties: Record<string, unknown> = {},\n): Promise<void> {\n  const posthog = await getPostHogForConsentedCapture();\n  if (!posthog) return;\n\n  posthog.captureException(error, properties);\n}\n\n/**\n * Clear all telemetry data (for privacy/GDPR requests)\n */\nexport async function clearTelemetryData(): Promise<void> {\n  if (!isBrowser()) {\n    return;\n  }\n\n  try {\n    markPendingLocalTelemetryRevocation(\n      posthogInstance?.get_distinct_id?.() ?? null,\n    );\n    localStorage.removeItem(TELEMETRY_CONSENT_KEY);\n    localStorage.removeItem(TELEMETRY_FIRST_USE_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n  clearPendingCloudTelemetryConsent();\n  try {\n    sessionStorage.removeItem(TELEMETRY_SESSION_KEY);\n  } catch {\n    // Continue clearing the in-memory and SDK identity if storage is blocked.\n  }\n\n  telemetryBackendContext = getBackendTelemetryProperties({});\n  telemetryCloudContext = getCloudTelemetryProperties();\n  desiredTelemetryIdentity = null;\n  desiredIdentityRevision += 1;\n  appliedIdentityRevision = -1;\n\n  try {\n    if (posthogInstance) {\n      resetPostHogIdentity(posthogInstance, true);\n    }\n  } catch {\n    // A reset failure must not leave capture enabled after a privacy clear.\n    try {\n      posthogInstance?.opt_out_capturing();\n    } catch {\n      // Telemetry failures must not break the application.\n    }\n  } finally {\n    notifyTelemetryConsentListeners();\n  }\n}\n"],"mappings":";;;;;AA4CA,IAAM,IAAwB,+BACxB,IACJ,kDACI,IACJ,wDACI,IAAiC,sCACjC,IAA0B,iCAC1B,IAAwB,+BACxB,IAAwB,gBACxB,IAAgC,kBAIhC,KAAA,oDAOA,IACiC,2BAIjC,IACoC,0BAqBtC,IAAkC,MAClC,IAAwD,MACxD,GACA,IAAmC,CAAC,GACpC,IAAoB,IAUpB,GACA,IAA0B,GAC1B,IAA0B,IAExB,IAA0B,OAAO,OAAO;CAC5C,eAAe;CACf,gBAAgB;CAChB,cAAc,EAAY;CAC1B,iBAAiB,EAAY;AAC/B,CAAC,GAEG,IAA0B,EAA8B,CAAC,CAAC,GAC1D,IAAwB,EAA4B;AAExD,SAAgB,EACd,GACM;CACN,IAA0B,EAA8B,CAAO;AACjE;AAEA,SAAgB,EACd,GACM;CACN,IAAwB,EAA4B,CAAO;AAC7D;AAEA,SAAS,EACP,GACsB;CAGtB,OAFK,IAEE;EACL,GAAG;EACH,YAAY;GACV,GAAG;GACH,GAAG;GACH,GAAG,EAAM;GACT,GAAG;EACL;CACF,IAVmB;AAWrB;AAEA,SAAS,EAAsB,GAAwB;CACrD,AAAI,KAAqB,EAAoB,MAAM,YACjD,EAAQ,kBAAkB,IAE1B,EAAQ,iBAAiB;AAE7B;AAEA,SAAS,EAAqB,GAAkB,IAAgB,IAAa;CAK3E,AAJA,EAAQ,MAAM,CAAa,GAC3B,IAA0B,IAG1B,EAAsB,CAAO;AAC/B;AAEA,SAAS,EAA8B,GAAwB;CAC7D,IAAI,MAA6B,KAAA,KAAa,CAAC,EAAmB,GAAG;CAErE,IAAM,IAAY,GAA0B,YACtC,IAAY,EAAQ,aAAa,UAAU;CAKjD,IAJI,KAAa,QAAQ,MAAc,KACrC,EAAqB,CAAO,GAG1B,MAA6B,MAAM;EACrC,IAA0B;EAC1B;CACF;CAEA,CACE,EAAQ,aAAa,UAAU,MAAM,EAAyB,cAC9D,MAA4B,OAE5B,EAAQ,SACN,EAAyB,YACzB,EAAyB,UAC3B,GACA,IAA0B;AAE9B;AAEA,SAAS,EACP,GACA,GACS;CACT,IAAM,IAAO,OAAO,KAAK,CAAI;CAC7B,OACE,EAAK,WAAW,OAAO,KAAK,CAAK,EAAE,UACnC,EAAK,OAAO,MAAQ,EAAK,OAAS,EAAM,EAAI;AAEhD;AAMA,SAAgB,EAAmB,GAAsC;CACvE,IAAI,MAAW,IAAO;EACpB,IAAI,GAAmB;EAGvB,AAFA,IAAoB,IACpB,GAAiB,kBAAkB,GACnC,EAAgC;EAChC;CACF;CAEA,IAAM,IAAc;CAGpB,IAFA,IAAoB,IAEhB,CAAC,KAAmB,CAAC,GAAuB;EAC9C,IAAM,IAAgB,OAAO,YAC3B,OAAO,QAAQ,CAAM,EAAE,QAAQ,GAAG,OAAW,MAAU,KAAA,CAAS,CAClE;EACA,IAAkB;GAAE,GAAG;GAAiB,GAAG;EAAc;CAC3D;CAEA,AAAI,MACE,MACF,EAAsB,CAAe,GACrC,EAA8B,CAAe,IAE/C,EAAgC;AAEpC;AAEA,SAAS,IAA+D;CAGtE,OAFI,IAA0B,OAEvB;EACL,QAAQ,EAAgB,UAAU;EAClC,SAAS,EAAgB,WAAW;EACpC,QAAQ,EAAgB,UAAU;CACpC;AACF;AAKA,SAAS,IAAqB;CAC5B,OAAO,OAAO,SAAW,OAAe,OAAO,eAAiB;AAClE;AAMA,eAAe,IAAsC;CACnD,IAAI,CAAC,EAAU,GACb,OAAO;CAGT,IAAI,GACF,OAAO;CAGT,IAAI;EACF,IAAM,EAAE,SAAS,MAAY,MAAM,OAAO;EAC1C,OAAO;CACT,QAAQ;EAEN,OAAO;CACT;AACF;AAMA,SAAS,IAA+B;CA4BtC,OATA,GAlBI,KAaA,OAAO,UAAY,OAAe,QAAQ,KAAK,iBAAiB,OAMlE,OAAO,YAAc,QACpB,UAAU,eAAe,OAEvB,OAAO,SAAW,OAAe,OAAO,eAAe;AAM9D;AAQA,SAAgB,EACd,GACM;CACN,AAAK,MACH,IAAmB;AAEvB;AAEA,eAAsB,EACpB,IAAkB,IACO;CACzB,IAAI,GACF,OAAO;CAGT,IAAI,GACF,OAAO;CAGT,KAAyB,YAAY;EACnC,IAAM,IAAS,EAA2B;EAC1C,IAAI,CAAC,GACH,OAAO;EAGT,IAAM,IAAU,MAAM,EAAW;EACjC,IAAI,CAAC,GACH,OAAO;EAKT,IAAM,IAAqB,EAAQ,KACjC,EAAO,QACP;GACE,UAAU,EAAO;GACjB,SAAS,EAAO;GAChB,8BAA8B,CAAC;GAC/B,aAAa;GACb,kBAAkB;GAClB,0BAA0B,GAAG,EAAsB;GACnD,iBAAiB;GACjB,kBAAkB;GAClB,aAAa;GACb,2BAA2B;GAC3B,WAAW;GACX,aAAa;EACf,GACA,CACF;EAeA,OAdK,KAEL,IAAkB,GAClB,IAAmB,KAAA,GAEf,IACF,EAAgB,kBAAkB,IACzB,EAAoB,MAAM,aACnC,EAAgB,iBAAiB,GACjC,EAA8B,CAAe,KACnC,KACV,EAAgB,kBAAkB,GAG7B,KAdyB;CAelC,GAAG;CAEH,IAAI;EACF,OAAO,MAAM;CACf,UAAU;EACR,AAAK,MACH,IAAwB;CAE5B;AACF;AAKA,SAAgB,IAAwC;CACtD,IAAI,CAAC,EAAU,GACb,OAAO;CAIT,IAAI,EAAoB,GACtB,OAAO;CAGT,IAAI,EAAuB,MAAM,UAC/B,OAAO;CAGT,IAAI;EACF,IAAM,IAAU,aAAa,QAAQ,CAAqB;EAC1D,IAAI,MAAY,aAAa,MAAY,UACvC,OAAO;CAEX,QAAQ,CAER;CAEA,OAAO;AACT;AAqBA,SAAgB,IAAsD;CACpE,IAAI,CAAC,EAAU,GAAG,OAAO;CAEzB,IAAI;EACF,OAAO,aAAa,QAAQ,CAA8C;CAC5E,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,EAA0B,GAAkC;CAC1E,IAAI,CAAC,EAAU,GAAG,aAAa,CAAC;CAChC,IAAM,KAAiB,MAAwB;EAC7C,CACE,EAAM,QAAQ,KACd,EAAM,QAAQ,MAEd,EAAS;CAEb;CAIA,OAHA,OAAO,iBAAiB,GAAgC,CAAQ,GAChE,OAAO,iBAAiB,WAAW,CAAa,SAEnC;EAEX,AADA,OAAO,oBAAoB,GAAgC,CAAQ,GACnE,OAAO,oBAAoB,WAAW,CAAa;CACrD;AACF;AAEA,SAAS,IAAwC;CAC/C,AAAI,EAAU,KACZ,OAAO,cAAc,IAAI,MAAM,CAA8B,CAAC;AAClE;AAEA,SAAS,EACP,GACM;CACD,MAAU,GAEf,IAAI;EACF,aAAa,QAAQ,GAA0C,CAAO;CACxE,QAAQ,CAER;AACF;AAEA,SAAS,EAAoC,GAAiC;CACxE,OAAC,EAAU,KAAK,CAAC,IAErB,IAAI;EACF,aAAa,QACX,GACA,CACF;CACF,QAAQ,CAER;AACF;AAEA,SAAgB,EACd,GACM;CACD,MAAU,GAEf,IAAI;EACF,IACE,aAAa,QAAQ,CAA8C,MACnE,GAEA;EAEF,aAAa,WAAW,CAA8C;CACxE,QAAQ,CAER;AACF;AAEA,SAAgB,EACd,GACM;CACD,MAAU,GAEf,IAAI;EACF,IACE,MAAa,KAAA,KACb,aAAa,QAAQ,CAAwC,MAC3D,GAEF;EAGF,AADA,aAAa,WAAW,CAAwC,GAChE,EAAgC;CAClC,QAAQ,CAER;AACF;AAKA,eAAsB,EACpB,GACA,EAAE,iBAAc,OAAqC,CAAC,GACvC;CACV,MAAU,GAIf,IAAI;EAEF,IAAM,IADkB,EACN,MAAoB;EAGtC,IAFA,aAAa,QAAQ,GAAuB,CAAO,GAC/C,KACA,GAAW;EAIf,IAAM,IAAU,KAAoB,MAAM,EAAwB;EAClE,IAAI,CAAC,GACH;EAGF,AAAI,MAAY,aACd,EAAQ,iBAAiB,GACzB,EAA8B,CAAO,MAErC,EAAoC,EAAQ,kBAAkB,KAAK,IAAI,GACnE,EAAQ,eAAe,UAAU,KAAK,OAGxC,EAAQ,kBAAkB,IAF1B,EAAqB,CAAO;CAKlC,QAAQ,CAER,UAAU;EAOR,AAHI,KACF,EAAiC,CAAO,GAE1C,EAAgC;CAClC;AACF;AAMA,eAAsB,EACpB,GACA,IAAsC,CAAC,GACxB;CACf,IAAM,IAAe,MAAe,OAAO,OAAO;EAAE;EAAY;CAAW;CAc3E,IAZE,MAA6B,KAC5B,KAC8B,QAC7B,MAAiB,QACjB,EAAyB,eAAe,EAAa,cACrD,EAAgB,EAAyB,YAAY,CAAU,MAGnE,IAA2B,GAC3B,KAA2B,GAC3B,IAA0B,IAEtB,CAAC,EAAmB,IAAG;CAC3B,IAAM,IAAU,KAAoB,MAAM,EAAwB;CAClE,AAAI,KAAW,EAAmB,KAGhC,EAA8B,CAAO;AAEzC;AAKA,SAAgB,IAA8B;CAC5C,OAAO,EAAoB,MAAM;AACnC;AAKA,SAAS,IAA2B;CAClC,IAAI,CAAC,EAAU,GACb,OAAO;CAGT,IAAI;EACF,OAAO,aAAa,QAAQ,CAAuB,MAAM;CAC3D,QAAQ;EACN,OAAO;CACT;AACF;AAKA,SAAS,KAAyB;CAC3B,MAAU,GAIf,IAAI;EACF,aAAa,QAAQ,GAAyB,MAAM;CACtD,QAAQ,CAER;AACF;AAiBA,eAAsB,KAA8B;CAOlD,IALI,EAAoB,KAKpB,EAAgB,GAClB;CAIF,IAAM,IAAU,MAAM,EAAwB,EAAI;CAC9C,CAAC,KAAW,EAAoB,OAKhB,EAAQ,0BAA0B,KAAK,OAEzD,EAAQ,iBAAiB,GAI3B,EAAQ,QAAQ,kBAAkB;EAChC,UAAU,OAAO,YAAc,MAAc,UAAU,WAAW;EAClE,YACE,OAAO,YAAc,MAAc,UAAU,YAAY;EAC3D,UAAU,OAAO,WAAa,MAAc,SAAS,WAAW;EAChE,YAAY,OAAO,SAAW,MAAc,OAAO,SAAS,SAAS;EACrE,UAAU,OAAO,SAAW,OAAe,OAAO,SAAS,OAAO;CACpE,CAAC,GAGD,GAAiB,GAIM,EACnB,MAAmB,aACrB,EAAQ,kBAAkB;AAE9B;AAKA,SAAS,KAA0B;CACjC,IAAI,CAAC,EAAU,GACb,OAAO;CAGT,IAAI;EACF,OAAO,eAAe,QAAQ,CAAqB,MAAM;CAC3D,QAAQ;EACN,OAAO;CACT;AACF;AAKA,SAAS,KAAwB;CAC1B,MAAU,GAIf,IAAI;EACF,eAAe,QAAQ,GAAuB,MAAM;CACtD,QAAQ,CAER;AACF;AAGA,eAAe,IAAyD;CACtE,IAAI,CAAC,EAAmB,KAAK,EAAoB,MAAM,WAAW,OAAO;CAEzE,IAAM,IAAU,MAAM,EAAwB;CAc9C,OAbI,CAAC,KAAW,CAAC,EAAmB,IAAU,QAO1C,EAAQ,0BAA0B,KACpC,EAAQ,iBAAiB,GAG3B,EAA8B,CAAO,GAE9B;AACT;AAOA,eAAsB,KAAmC;CAEvD,IAAI,GAAe,GACjB;CAGF,IAAM,IAAU,MAAM,EAA8B;CAC/C,MAEL,EAAQ,QAAQ,sBAAsB,EACpC,cAAc,CAAC,EAAgB,EACjC,CAAC,GAGD,GAAgB;AAClB;AAGA,eAAsB,KAAiD;CAErE,QAAO,MADe,EAA8B,IACpC,kBAAkB,KAAK;AACzC;AAGA,eAAsB,KAEpB;CACA,IAAI,CAAC,EAAU,GAAG,OAAO;CAEzB,IAAI,EAAoB,MAAM,WAAW;EACvC,IAAM,IAAsB,EAAqC;EACjE,IAAI,GAAqB,OAAO;CAClC;CAKA,OAHI,KAAqB,EAAoB,IAAU,QAGhD,MADe,EAAwB,IAC9B,kBAAkB,KAAK;AACzC;AAKA,eAAsB,GACpB,GACA,IAAsC,CAAC,GACxB;CACf,IAAM,IAAU,MAAM,EAA8B;CAC/C,KAEL,EAAQ,QAAQ,GAAW,CAAU;AACvC;AAGA,eAAsB,GACpB,GACA,IAAsC,CAAC,GACxB;CACf,IAAM,IAAU,MAAM,EAA8B;CAC/C,KAEL,EAAQ,iBAAiB,GAAO,CAAU;AAC5C;AAKA,eAAsB,KAAoC;CACnD,MAAU,GAIf;MAAI;GAKF,AAJA,EACE,GAAiB,kBAAkB,KAAK,IAC1C,GACA,aAAa,WAAW,CAAqB,GAC7C,aAAa,WAAW,CAAuB;EACjD,QAAQ,CAER;EACA,EAAkC;EAClC,IAAI;GACF,eAAe,WAAW,CAAqB;EACjD,QAAQ,CAER;EAMA,AAJA,IAA0B,EAA8B,CAAC,CAAC,GAC1D,IAAwB,EAA4B,GACpD,IAA2B,MAC3B,KAA2B,GAC3B,IAA0B;EAE1B,IAAI;GACF,AAAI,KACF,EAAqB,GAAiB,EAAI;EAE9C,QAAQ;GAEN,IAAI;IACF,GAAiB,kBAAkB;GACrC,QAAQ,CAER;EACF,UAAU;GACR,EAAgC;EAClC;CA3BA;AA4BF"}

package/dist/types/agent-server/core/events/conversation-state-event.d.ts

@@ -1,5 +1,7 @@
 import { BaseEvent } from "../base/event";
 import { ExecutionStatus } from "../base/common";
+import type { ConversationErrorEvent } from "@openhands/typescript-client";
+export type { ConversationErrorEvent };
 /**
  * Token usage metrics for LLM calls
  */
@@ -122,24 +124,6 @@ export interface ConversationStateUpdateEventGoal extends ConversationStateUpdat
     value: GoalStatus;
 }
 export type ConversationStateUpdateEvent = ConversationStateUpdateEventFullState | ConversationStateUpdateEventAgentStatus | ConversationStateUpdateEventStats | ConversationStateUpdateEventGoal;
-export interface ConversationErrorEvent extends BaseEvent {
-    /**
-     * Discriminator field for type guards
-     */
-    kind: "ConversationErrorEvent";
-    /**
-     * The source is always "environment" for conversation error events
-     */
-    source: "environment";
-    /**
-     * Error code (e.g., "AuthenticationError")
-     */
-    code: string;
-    /**
-     * Detailed error message
-     */
-    detail: string;
-}
 export interface ServerErrorEvent extends BaseEvent {
     /**
      * Discriminator field for type guards
@@ -158,4 +142,3 @@ export interface ServerErrorEvent extends BaseEvent {
      */
     detail: string;
 }
-export {};

package/dist/types/agent-server/core/events/observation-event.d.ts

@@ -1,6 +1,8 @@
 import { EventID, ToolCallID } from "../base/common";
 import { BaseEvent } from "../base/event";
 import { Observation } from "../base/observation";
+import type { AgentErrorEvent } from "@openhands/typescript-client";
+export type { AgentErrorEvent };
 export interface ObservationBaseEvent extends BaseEvent {
     /**
      * The source is always "environment" for observation events
@@ -35,21 +37,3 @@ export interface UserRejectObservation extends ObservationBaseEvent {
      */
     action_id: EventID;
 }
-export interface AgentErrorEvent extends BaseEvent {
-    /**
-     * The source is always "agent" for agent error events
-     */
-    source: "agent";
-    /**
-     * The tool name that this observation is responding to
-     */
-    tool_name: string;
-    /**
-     * The tool call id that this observation is responding to
-     */
-    tool_call_id: ToolCallID;
-    /**
-     * The error message from the scaffold
-     */
-    error: string;
-}

package/dist/types/automation.d.ts

@@ -43,20 +43,24 @@ export interface Automation {
     last_triggered_at?: string | null;
 }
 export type AutomationSpec = Omit<Automation, "id" | "created_at" | "updated_at" | "last_triggered_at">;
+/** The envelope constants come from the interface manifest's import/export spec. */
 export interface AutomationExportFile {
-    version: 1;
-    kind: "automation";
+    version: number;
+    kind: string;
     spec: AutomationSpec;
 }
 export interface AutomationsResponse {
     automations: Automation[];
     total: number;
 }
+/** Mirrors `RunStatus` in the automation service's OpenAPI schema. */
 export declare enum AutomationRunStatus {
     PENDING = "PENDING",
     RUNNING = "RUNNING",
     COMPLETED = "COMPLETED",
-    FAILED = "FAILED"
+    FAILED = "FAILED",
+    CANCELLED = "CANCELLED",
+    SKIPPED = "SKIPPED"
 }
 export interface AutomationRun {
     id: string;