@posthog/wizard 2.0.1 → 2.1.0

package/dist/src/lib/middleware/benchmarks/summary.js.map

@@ -1 +1 @@
-{"version":3,"file":"summary.js","sourceRoot":"","sources":["../../../../../src/lib/middleware/benchmarks/summary.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAC1B,oCAAwD;AACxD,2DAAqD;AAUrD,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,IAAI,CAAC,IAAI,SAAS;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,IAAI,CAAC,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACnD,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI;QAAE,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9B,CAAC;AAgBD,SAAS,UAAU,CAAC,CAAa;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CACrB,CAAC,EACD,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CACpE,CAAC;IACF,OAAO;QACL,GAAG,eAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,KAClD,CAAC,CAAC,KACJ,iBAAiB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;QAClC,SAAS,MAAM,CAAC,MAAM,CAAC,UAAU,MAAM,CACrC,CAAC,CAAC,YAAY,CACf,iBAAiB,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,MAAM,CACxD,CAAC,CAAC,eAAe,CAClB,eAAe,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE;QAC3C,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,gBAAgB,CAAC,CAAC,CAAC,IAAI;QAC7D,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;KACzE;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,CAAS,EAAE,GAAsB;IACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAe,UAAU,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAY,QAAQ,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAW,OAAO,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAW,MAAM,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAiB,aAAa,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAkB,aAAa,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAY,OAAO,CAAC,CAAC;IAE1C,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC;QAC3C,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,CAAC;QACxD,YAAY,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,CAAC;QAC1D,SAAS,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,IAAI,CAAC;QACzD,eAAe,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,IAAI,CAAC;QAC/D,eAAe,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,IAAI,CAAC;QAC/D,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC;QACpC,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,CAAC;QAC7D,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,gBAAgB;KAC7D,CAAC;AACJ,CAAC;AAED,MAAa,aAAa;IACf,IAAI,GAAG,SAAS,CAAC;IAElB,OAAO,CAAgB;IAE/B,YAAY,OAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,iBAAiB,CACf,SAAiB,EACjB,OAAe,EACf,GAAsB,EACtB,MAAuB;QAEvB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAe,UAAU,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEtC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,GAAG,eAAK,CAAC,IAAI,CAAC,8BAAY,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAC7D,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,eAAK,CAAC,IAAI,CAAC,8BAAY,CAAC,SAAS,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CACd,GAAG,eAAK,CAAC,IAAI,CAAC,8BAAY,CAAC,SAAS,CAAC,oBAAoB,eAAK,CAAC,IAAI,CACjE,OAAO,CACR,EAAE,CACJ,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,OAAO,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,UAAU,CACR,cAAmB,EACnB,eAAuB,EACvB,GAAsB,EACtB,MAAuB;QAEvB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAe,UAAU,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAW,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAY,QAAQ,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAY,OAAO,CAAC,CAAC;QAE1C,MAAM,UAAU,GAAG,QAAQ,EAAE,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,CAAC,CAAC;QAEvC,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrB,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CACd,GAAG,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,eAAK,CAAC,IAAI,CAC/B,8BAAY,CAAC,SAAS,CACvB,IAAI,UAAU,cAAc,WAAW,CACtC,eAAe,CAChB,WAAW,OAAO,CAAC,SAAS,CAAC,EAAE,CACjC,CAAC;QACF,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CACd,eAAe,MAAM,CAAC,MAAM,EAAE,UAAU,IAAI,CAAC,CAAC,UAAU,MAAM,CAC5D,MAAM,EAAE,WAAW,IAAI,CAAC,CACzB,iBAAiB,MAAM,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,CAAC,eAAe,MAAM,CAClE,KAAK,EAAE,eAAe,IAAI,CAAC,CAC5B,eAAe,MAAM,CAAC,KAAK,EAAE,eAAe,IAAI,CAAC,CAAC,EAAE,CACtD,CAAC;QACF,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrB,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CACd,GAAG,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,eAAK,CAAC,IAAI,CAC9B,8BAAY,CAAC,SAAS,CACvB,oBAAoB,CACtB,CAAC;QAEF,IAAI,QAAQ,EAAE,cAAc,EAAE,CAAC;YAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACpC,IAAI,KAAK,EAAE,CAAC;oBACV,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;CACF;AAlFD,sCAkFC","sourcesContent":["import chalk from 'chalk';\nimport { getUI, type SpinnerHandle } from '../../../ui';\nimport { AgentSignals } from '../../agent-interface';\nimport type { Middleware, MiddlewareContext, MiddlewareStore } from '../types';\nimport type { TokenData } from './token-tracker';\nimport type { TurnData } from './turn-counter';\nimport type { CostData } from './cost-tracker';\nimport type { DurationData } from './duration-tracker';\nimport type { CompactionData } from './compaction-tracker';\nimport type { ContextSizeData } from './context-size-tracker';\nimport type { CacheData } from './cache-tracker';\n\nfunction fmtDuration(ms: number): string {\n  const s = Math.round(ms / 1000);\n  const m = Math.floor(s / 60);\n  return m > 0 ? `${m}m ${s % 60}s` : `${s}s`;\n}\n\nfunction fmtTok(n: number): string {\n  if (n >= 1_000_000) return `${(n / 1_000_000).toFixed(1)}M`;\n  if (n >= 1_000) return `${(n / 1000).toFixed(1)}K`;\n  return n.toLocaleString();\n}\n\nfunction fmtCost(usd: number): string {\n  if (usd > 0 && usd < 0.01) return `$${usd.toFixed(4)}`;\n  return `$${usd.toFixed(2)}`;\n}\n\ninterface PhaseStats {\n  phase: string;\n  durationMs: number;\n  turns: number;\n  inputTokens: number;\n  outputTokens: number;\n  cacheRead: number;\n  cacheCreation5m: number;\n  cacheCreation1h: number;\n  cost: number;\n  compactions: number;\n  contextOut: number | undefined;\n}\n\nfunction printPhase(s: PhaseStats): string {\n  const baseIn = Math.max(\n    0,\n    s.inputTokens - s.cacheRead - s.cacheCreation5m - s.cacheCreation1h,\n  );\n  return [\n    `${chalk.bold(s.phase)}: ${fmtDuration(s.durationMs)}, ${\n      s.turns\n    } turns, cost: ${fmtCost(s.cost)}`,\n    `  in: ${fmtTok(baseIn)}, out: ${fmtTok(\n      s.outputTokens,\n    )}, cache_read: ${fmtTok(s.cacheRead)}, cache_5m: ${fmtTok(\n      s.cacheCreation5m,\n    )}, cache_1h: ${fmtTok(s.cacheCreation1h)}`,\n    s.compactions > 0 ? `  ${s.compactions} compaction(s)` : null,\n    s.contextOut !== undefined ? `  ctx_out: ${fmtTok(s.contextOut)}` : null,\n  ]\n    .filter(Boolean)\n    .join('\\n');\n}\n\nfunction getPhaseStats(i: number, ctx: MiddlewareContext): PhaseStats | null {\n  const duration = ctx.get<DurationData>('duration');\n  const dur = duration?.phaseSnapshots[i];\n  if (!dur) return null;\n\n  const tokens = ctx.get<TokenData>('tokens');\n  const turns = ctx.get<TurnData>('turns');\n  const cost = ctx.get<CostData>('cost');\n  const compactions = ctx.get<CompactionData>('compactions');\n  const contextSize = ctx.get<ContextSizeData>('contextSize');\n  const cache = ctx.get<CacheData>('cache');\n\n  return {\n    phase: dur.phase,\n    durationMs: dur.durationMs,\n    turns: turns?.phaseSnapshots[i]?.turns ?? 0,\n    inputTokens: tokens?.phaseSnapshots[i]?.inputTokens ?? 0,\n    outputTokens: tokens?.phaseSnapshots[i]?.outputTokens ?? 0,\n    cacheRead: cache?.phaseSnapshots[i]?.cacheReadTokens ?? 0,\n    cacheCreation5m: cache?.phaseSnapshots[i]?.cacheCreation5m ?? 0,\n    cacheCreation1h: cache?.phaseSnapshots[i]?.cacheCreation1h ?? 0,\n    cost: cost?.phaseCosts[i]?.cost ?? 0,\n    compactions: compactions?.phaseSnapshots[i]?.compactions ?? 0,\n    contextOut: contextSize?.phaseSnapshots[i]?.contextTokensOut,\n  };\n}\n\nexport class SummaryPlugin implements Middleware {\n  readonly name = 'summary';\n\n  private spinner: SpinnerHandle;\n\n  constructor(spinner: SpinnerHandle) {\n    this.spinner = spinner;\n  }\n\n  onPhaseTransition(\n    fromPhase: string,\n    toPhase: string,\n    ctx: MiddlewareContext,\n    _store: MiddlewareStore,\n  ): void {\n    const duration = ctx.get<DurationData>('duration');\n    const idx = (duration?.phaseSnapshots.length ?? 1) - 1;\n    const stats = getPhaseStats(idx, ctx);\n\n    if (stats) {\n      this.spinner.stop(\n        `${chalk.cyan(AgentSignals.BENCHMARK)} ${printPhase(stats)}`,\n      );\n    } else {\n      this.spinner.stop(`${chalk.cyan(AgentSignals.BENCHMARK)} ${fromPhase}`);\n    }\n\n    getUI().log.info(\n      `${chalk.cyan(AgentSignals.BENCHMARK)} Starting phase: ${chalk.bold(\n        toPhase,\n      )}`,\n    );\n    this.spinner.start(`Integrating PostHog (${toPhase})...`);\n  }\n\n  onFinalize(\n    _resultMessage: any,\n    totalDurationMs: number,\n    ctx: MiddlewareContext,\n    _store: MiddlewareStore,\n  ): void {\n    const duration = ctx.get<DurationData>('duration');\n    const cost = ctx.get<CostData>('cost');\n    const tokens = ctx.get<TokenData>('tokens');\n    const cache = ctx.get<CacheData>('cache');\n\n    const phaseCount = duration?.phaseSnapshots.length ?? 0;\n    const totalCost = cost?.totalCost ?? 0;\n\n    getUI().log.info('');\n    getUI().log.info(\n      `${chalk.green('◇')} ${chalk.cyan(\n        AgentSignals.BENCHMARK,\n      )} ${phaseCount} phases in ${fmtDuration(\n        totalDurationMs,\n      )}, cost: ${fmtCost(totalCost)}`,\n    );\n    getUI().log.info(\n      `  total in: ${fmtTok(tokens?.totalInput ?? 0)}, out: ${fmtTok(\n        tokens?.totalOutput ?? 0,\n      )}, cache_read: ${fmtTok(cache?.totalRead ?? 0)}, cache_5m: ${fmtTok(\n        cache?.totalCreation5m ?? 0,\n      )}, cache_1h: ${fmtTok(cache?.totalCreation1h ?? 0)}`,\n    );\n    getUI().log.info('');\n    getUI().log.info(\n      `${chalk.blue('●')} ${chalk.cyan(\n        AgentSignals.BENCHMARK,\n      )} Summary by phase:`,\n    );\n\n    if (duration?.phaseSnapshots) {\n      for (let i = 0; i < duration.phaseSnapshots.length; i++) {\n        const stats = getPhaseStats(i, ctx);\n        if (stats) {\n          getUI().log.info(printPhase(stats));\n        }\n      }\n    }\n\n    getUI().log.info('');\n  }\n}\n"]}
+{"version":3,"file":"summary.js","sourceRoot":"","sources":["../../../../../src/lib/middleware/benchmarks/summary.ts"],"names":[],"mappings":";;;AAAA,oCAAwD;AACxD,2DAAqD;AAUrD,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,IAAI,CAAC,IAAI,SAAS;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,IAAI,CAAC,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACnD,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI;QAAE,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9B,CAAC;AAgBD,SAAS,UAAU,CAAC,CAAa;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CACrB,CAAC,EACD,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CACpE,CAAC;IACF,OAAO;QACL,GAAG,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,KACtC,CAAC,CAAC,KACJ,iBAAiB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;QAClC,SAAS,MAAM,CAAC,MAAM,CAAC,UAAU,MAAM,CACrC,CAAC,CAAC,YAAY,CACf,iBAAiB,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,MAAM,CACxD,CAAC,CAAC,eAAe,CAClB,eAAe,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE;QAC3C,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,gBAAgB,CAAC,CAAC,CAAC,IAAI;QAC7D,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;KACzE;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,CAAS,EAAE,GAAsB;IACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAe,UAAU,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAY,QAAQ,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAW,OAAO,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAW,MAAM,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAiB,aAAa,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAkB,aAAa,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAY,OAAO,CAAC,CAAC;IAE1C,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC;QAC3C,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,CAAC;QACxD,YAAY,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,CAAC;QAC1D,SAAS,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,IAAI,CAAC;QACzD,eAAe,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,IAAI,CAAC;QAC/D,eAAe,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,IAAI,CAAC;QAC/D,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC;QACpC,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,CAAC;QAC7D,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,gBAAgB;KAC7D,CAAC;AACJ,CAAC;AAED,MAAa,aAAa;IACf,IAAI,GAAG,SAAS,CAAC;IAElB,OAAO,CAAgB;IAE/B,YAAY,OAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,iBAAiB,CACf,SAAiB,EACjB,OAAe,EACf,GAAsB,EACtB,MAAuB;QAEvB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAe,UAAU,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEtC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,8BAAY,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,8BAAY,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,8BAAY,CAAC,SAAS,oBAAoB,OAAO,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,OAAO,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,UAAU,CACR,cAAmB,EACnB,eAAuB,EACvB,GAAsB,EACtB,MAAuB;QAEvB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAe,UAAU,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAW,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAY,QAAQ,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAY,OAAO,CAAC,CAAC;QAE1C,MAAM,UAAU,GAAG,QAAQ,EAAE,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,CAAC,CAAC;QAEvC,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrB,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CACd,KAAK,8BAAY,CAAC,SAAS,IAAI,UAAU,cAAc,WAAW,CAChE,eAAe,CAChB,WAAW,OAAO,CAAC,SAAS,CAAC,EAAE,CACjC,CAAC;QACF,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CACd,eAAe,MAAM,CAAC,MAAM,EAAE,UAAU,IAAI,CAAC,CAAC,UAAU,MAAM,CAC5D,MAAM,EAAE,WAAW,IAAI,CAAC,CACzB,iBAAiB,MAAM,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,CAAC,eAAe,MAAM,CAClE,KAAK,EAAE,eAAe,IAAI,CAAC,CAC5B,eAAe,MAAM,CAAC,KAAK,EAAE,eAAe,IAAI,CAAC,CAAC,EAAE,CACtD,CAAC;QACF,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrB,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,8BAAY,CAAC,SAAS,oBAAoB,CAAC,CAAC;QAElE,IAAI,QAAQ,EAAE,cAAc,EAAE,CAAC;YAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACpC,IAAI,KAAK,EAAE,CAAC;oBACV,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;CACF;AAtED,sCAsEC","sourcesContent":["import { getUI, type SpinnerHandle } from '../../../ui';\nimport { AgentSignals } from '../../agent-interface';\nimport type { Middleware, MiddlewareContext, MiddlewareStore } from '../types';\nimport type { TokenData } from './token-tracker';\nimport type { TurnData } from './turn-counter';\nimport type { CostData } from './cost-tracker';\nimport type { DurationData } from './duration-tracker';\nimport type { CompactionData } from './compaction-tracker';\nimport type { ContextSizeData } from './context-size-tracker';\nimport type { CacheData } from './cache-tracker';\n\nfunction fmtDuration(ms: number): string {\n  const s = Math.round(ms / 1000);\n  const m = Math.floor(s / 60);\n  return m > 0 ? `${m}m ${s % 60}s` : `${s}s`;\n}\n\nfunction fmtTok(n: number): string {\n  if (n >= 1_000_000) return `${(n / 1_000_000).toFixed(1)}M`;\n  if (n >= 1_000) return `${(n / 1000).toFixed(1)}K`;\n  return n.toLocaleString();\n}\n\nfunction fmtCost(usd: number): string {\n  if (usd > 0 && usd < 0.01) return `$${usd.toFixed(4)}`;\n  return `$${usd.toFixed(2)}`;\n}\n\ninterface PhaseStats {\n  phase: string;\n  durationMs: number;\n  turns: number;\n  inputTokens: number;\n  outputTokens: number;\n  cacheRead: number;\n  cacheCreation5m: number;\n  cacheCreation1h: number;\n  cost: number;\n  compactions: number;\n  contextOut: number | undefined;\n}\n\nfunction printPhase(s: PhaseStats): string {\n  const baseIn = Math.max(\n    0,\n    s.inputTokens - s.cacheRead - s.cacheCreation5m - s.cacheCreation1h,\n  );\n  return [\n    `${s.phase}: ${fmtDuration(s.durationMs)}, ${\n      s.turns\n    } turns, cost: ${fmtCost(s.cost)}`,\n    `  in: ${fmtTok(baseIn)}, out: ${fmtTok(\n      s.outputTokens,\n    )}, cache_read: ${fmtTok(s.cacheRead)}, cache_5m: ${fmtTok(\n      s.cacheCreation5m,\n    )}, cache_1h: ${fmtTok(s.cacheCreation1h)}`,\n    s.compactions > 0 ? `  ${s.compactions} compaction(s)` : null,\n    s.contextOut !== undefined ? `  ctx_out: ${fmtTok(s.contextOut)}` : null,\n  ]\n    .filter(Boolean)\n    .join('\\n');\n}\n\nfunction getPhaseStats(i: number, ctx: MiddlewareContext): PhaseStats | null {\n  const duration = ctx.get<DurationData>('duration');\n  const dur = duration?.phaseSnapshots[i];\n  if (!dur) return null;\n\n  const tokens = ctx.get<TokenData>('tokens');\n  const turns = ctx.get<TurnData>('turns');\n  const cost = ctx.get<CostData>('cost');\n  const compactions = ctx.get<CompactionData>('compactions');\n  const contextSize = ctx.get<ContextSizeData>('contextSize');\n  const cache = ctx.get<CacheData>('cache');\n\n  return {\n    phase: dur.phase,\n    durationMs: dur.durationMs,\n    turns: turns?.phaseSnapshots[i]?.turns ?? 0,\n    inputTokens: tokens?.phaseSnapshots[i]?.inputTokens ?? 0,\n    outputTokens: tokens?.phaseSnapshots[i]?.outputTokens ?? 0,\n    cacheRead: cache?.phaseSnapshots[i]?.cacheReadTokens ?? 0,\n    cacheCreation5m: cache?.phaseSnapshots[i]?.cacheCreation5m ?? 0,\n    cacheCreation1h: cache?.phaseSnapshots[i]?.cacheCreation1h ?? 0,\n    cost: cost?.phaseCosts[i]?.cost ?? 0,\n    compactions: compactions?.phaseSnapshots[i]?.compactions ?? 0,\n    contextOut: contextSize?.phaseSnapshots[i]?.contextTokensOut,\n  };\n}\n\nexport class SummaryPlugin implements Middleware {\n  readonly name = 'summary';\n\n  private spinner: SpinnerHandle;\n\n  constructor(spinner: SpinnerHandle) {\n    this.spinner = spinner;\n  }\n\n  onPhaseTransition(\n    fromPhase: string,\n    toPhase: string,\n    ctx: MiddlewareContext,\n    _store: MiddlewareStore,\n  ): void {\n    const duration = ctx.get<DurationData>('duration');\n    const idx = (duration?.phaseSnapshots.length ?? 1) - 1;\n    const stats = getPhaseStats(idx, ctx);\n\n    if (stats) {\n      this.spinner.stop(`${AgentSignals.BENCHMARK} ${printPhase(stats)}`);\n    } else {\n      this.spinner.stop(`${AgentSignals.BENCHMARK} ${fromPhase}`);\n    }\n\n    getUI().log.info(`${AgentSignals.BENCHMARK} Starting phase: ${toPhase}`);\n    this.spinner.start(`Integrating PostHog (${toPhase})...`);\n  }\n\n  onFinalize(\n    _resultMessage: any,\n    totalDurationMs: number,\n    ctx: MiddlewareContext,\n    _store: MiddlewareStore,\n  ): void {\n    const duration = ctx.get<DurationData>('duration');\n    const cost = ctx.get<CostData>('cost');\n    const tokens = ctx.get<TokenData>('tokens');\n    const cache = ctx.get<CacheData>('cache');\n\n    const phaseCount = duration?.phaseSnapshots.length ?? 0;\n    const totalCost = cost?.totalCost ?? 0;\n\n    getUI().log.info('');\n    getUI().log.info(\n      `◇ ${AgentSignals.BENCHMARK} ${phaseCount} phases in ${fmtDuration(\n        totalDurationMs,\n      )}, cost: ${fmtCost(totalCost)}`,\n    );\n    getUI().log.info(\n      `  total in: ${fmtTok(tokens?.totalInput ?? 0)}, out: ${fmtTok(\n        tokens?.totalOutput ?? 0,\n      )}, cache_read: ${fmtTok(cache?.totalRead ?? 0)}, cache_5m: ${fmtTok(\n        cache?.totalCreation5m ?? 0,\n      )}, cache_1h: ${fmtTok(cache?.totalCreation1h ?? 0)}`,\n    );\n    getUI().log.info('');\n    getUI().log.info(`● ${AgentSignals.BENCHMARK} Summary by phase:`);\n\n    if (duration?.phaseSnapshots) {\n      for (let i = 0; i < duration.phaseSnapshots.length; i++) {\n        const stats = getPhaseStats(i, ctx);\n        if (stats) {\n          getUI().log.info(printPhase(stats));\n        }\n      }\n    }\n\n    getUI().log.info('');\n  }\n}\n"]}

package/dist/src/lib/skill-install.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Check if command is a PostHog skill installation from MCP.
+ * We control the MCP server, so we only need to verify:
+ * 1. It installs to .claude/skills/
+ * 2. It downloads from our GitHub releases or localhost (dev)
+ *
+ * Extracted to its own module to avoid a circular dependency
+ * between agent-interface.ts and yara-hooks.ts.
+ */
+export declare function isSkillInstallCommand(command: string): boolean;

package/dist/src/lib/skill-install.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSkillInstallCommand = isSkillInstallCommand;
+/**
+ * Check if command is a PostHog skill installation from MCP.
+ * We control the MCP server, so we only need to verify:
+ * 1. It installs to .claude/skills/
+ * 2. It downloads from our GitHub releases or localhost (dev)
+ *
+ * Extracted to its own module to avoid a circular dependency
+ * between agent-interface.ts and yara-hooks.ts.
+ */
+function isSkillInstallCommand(command) {
+    if (!command.startsWith('mkdir -p .claude/skills/'))
+        return false;
+    const urlMatch = command.match(/curl -sL ['"]([^'"]+)['"]/);
+    if (!urlMatch)
+        return false;
+    const url = urlMatch[1];
+    return (url.startsWith('https://github.com/PostHog/context-mill/releases/') ||
+        /^http:\/\/localhost:\d+\//.test(url));
+}
+//# sourceMappingURL=skill-install.js.map

package/dist/src/lib/skill-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-install.js","sourceRoot":"","sources":["../../../src/lib/skill-install.ts"],"names":[],"mappings":";;AASA,sDAWC;AApBD;;;;;;;;GAQG;AACH,SAAgB,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,0BAA0B,CAAC;QAAE,OAAO,KAAK,CAAC;IAElE,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5B,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,CACL,GAAG,CAAC,UAAU,CAAC,mDAAmD,CAAC;QACnE,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CACtC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Check if command is a PostHog skill installation from MCP.\n * We control the MCP server, so we only need to verify:\n * 1. It installs to .claude/skills/\n * 2. It downloads from our GitHub releases or localhost (dev)\n *\n * Extracted to its own module to avoid a circular dependency\n * between agent-interface.ts and yara-hooks.ts.\n */\nexport function isSkillInstallCommand(command: string): boolean {\n  if (!command.startsWith('mkdir -p .claude/skills/')) return false;\n\n  const urlMatch = command.match(/curl -sL ['\"]([^'\"]+)['\"]/);\n  if (!urlMatch) return false;\n\n  const url = urlMatch[1];\n  return (\n    url.startsWith('https://github.com/PostHog/context-mill/releases/') ||\n    /^http:\\/\\/localhost:\\d+\\//.test(url)\n  );\n}\n"]}

package/dist/src/lib/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "2.0.1";
+export declare const VERSION = "2.1.0";

package/dist/src/lib/version.js

@@ -2,5 +2,5 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
 // Auto-generated by scripts/generate-version.js — do not edit
-exports.VERSION = '2.0.1';
+exports.VERSION = '2.1.0';
 //# sourceMappingURL=version.js.map

package/dist/src/lib/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../../../src/lib/version.ts"],"names":[],"mappings":";;;AAAA,8DAA8D;AACjD,QAAA,OAAO,GAAG,OAAO,CAAC","sourcesContent":["// Auto-generated by scripts/generate-version.js — do not edit\nexport const VERSION = '2.0.1';\n"]}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../../src/lib/version.ts"],"names":[],"mappings":";;;AAAA,8DAA8D;AACjD,QAAA,OAAO,GAAG,OAAO,CAAC","sourcesContent":["// Auto-generated by scripts/generate-version.js — do not edit\nexport const VERSION = '2.1.0';\n"]}

package/dist/src/lib/wizard-session.d.ts

@@ -66,6 +66,7 @@ export interface WizardSession {
     apiKey?: string;
     menu: boolean;
     benchmark: boolean;
+    yaraReport: boolean;
     projectId?: number;
     setupConfirmed: boolean;
     integration: Integration | null;
@@ -75,6 +76,12 @@ export interface WizardSession {
     detectedFrameworkLabel: string | null;
     /** True once framework detection has run (whether it found something or not) */
     detectionComplete: boolean;
+    /** Set when the detected framework version is too old for the wizard */
+    unsupportedVersion: {
+        current: string;
+        minimum: string;
+        docsUrl: string;
+    } | null;
     credentials: {
         accessToken: string;
         projectApiKey: string;
@@ -93,6 +100,11 @@ export interface WizardSession {
         statusPageUrl: string;
     } | null;
     settingsOverrideKeys: string[] | null;
+    portConflictProcess: {
+        command: string;
+        pid: string;
+        user: string;
+    } | null;
     outroData: OutroData | null;
     additionalFeatureQueue: AdditionalFeature[];
     frameworkConfig: FrameworkConfig | null;
@@ -111,5 +123,6 @@ export declare function buildSession(args: {
     menu?: boolean;
     integration?: Integration;
     benchmark?: boolean;
+    yaraReport?: boolean;
     projectId?: string;
 }): WizardSession;

package/dist/src/lib/wizard-session.js

@@ -79,6 +79,7 @@ function buildSession(args) {
         apiKey: args.apiKey,
         menu: args.menu ?? false,
         benchmark: args.benchmark ?? false,
+        yaraReport: args.yaraReport ?? false,
         projectId: parseProjectIdArg(args.projectId),
         setupConfirmed: false,
         integration: args.integration ?? null,
@@ -86,6 +87,7 @@ function buildSession(args) {
         typescript: false,
         detectedFrameworkLabel: null,
         detectionComplete: false,
+        unsupportedVersion: null,
         runPhase: RunPhase.Idle,
         discoveredFeatures: [],
         llmOptIn: false,
@@ -96,6 +98,7 @@ function buildSession(args) {
         credentials: null,
         serviceStatus: null,
         settingsOverrideKeys: null,
+        portConflictProcess: null,
         outroData: null,
         additionalFeatureQueue: [],
         frameworkConfig: null,

package/dist/src/lib/wizard-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"wizard-session.js","sourceRoot":"","sources":["../../../src/lib/wizard-session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAkIH,oCA8CC;AA3KD,SAAS,iBAAiB,CAAC,KAAyB;IAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAID,sEAAsE;AACtE,IAAY,QASX;AATD,WAAY,QAAQ;IAClB,mDAAmD;IACnD,yBAAa,CAAA;IACb,+BAA+B;IAC/B,+BAAmB,CAAA;IACnB,sCAAsC;IACtC,mCAAuB,CAAA;IACvB,uCAAuC;IACvC,2BAAe,CAAA;AACjB,CAAC,EATW,QAAQ,wBAAR,QAAQ,QASnB;AAED,4DAA4D;AAC5D,IAAY,iBAGX;AAHD,WAAY,iBAAiB;IAC3B,sCAAiB,CAAA;IACjB,gCAAW,CAAA;AACb,CAAC,EAHW,iBAAiB,iCAAjB,iBAAiB,QAG5B;AAED,uEAAuE;AACvE,IAAY,iBAEX;AAFD,WAAY,iBAAiB;IAC3B,gCAAW,CAAA;AACb,CAAC,EAFW,iBAAiB,iCAAjB,iBAAiB,QAE5B;AAED,2EAA2E;AAC9D,QAAA,yBAAyB,GAAsC;IAC1E,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,eAAe;CACzC,CAAC;AAEF,4EAA4E;AAC/D,QAAA,0BAA0B,GAAsC;IAC3E,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,kRAAkR;CAC5S,CAAC;AAEF,kDAAkD;AAClD,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,sCAAwB,CAAA;IACxB,iCAAmB,CAAA;IACnB,qCAAuB,CAAA;IACvB,+BAAiB,CAAA;AACnB,CAAC,EALW,UAAU,0BAAV,UAAU,QAKrB;AAED,wCAAwC;AACxC,IAAY,SAIX;AAJD,WAAY,SAAS;IACnB,gCAAmB,CAAA;IACnB,4BAAe,CAAA;IACf,8BAAiB,CAAA;AACnB,CAAC,EAJW,SAAS,yBAAT,SAAS,QAIpB;AAoED;;GAEG;AACH,SAAgB,YAAY,CAAC,IAY5B;IACC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK;QAC1B,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,KAAK;QACxC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE;QAC5C,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK;QACpB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;QAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;QAChC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;QACxB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK;QAClC,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;QAE5C,cAAc,EAAE,KAAK;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,gBAAgB,EAAE,EAAE;QACpB,UAAU,EAAE,KAAK;QACjB,sBAAsB,EAAE,IAAI;QAC5B,iBAAiB,EAAE,KAAK;QAExB,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,kBAAkB,EAAE,EAAE;QACtB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,IAAI;QAChB,mBAAmB,EAAE,EAAE;QACvB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,IAAI;QACnB,oBAAoB,EAAE,IAAI;QAC1B,SAAS,EAAE,IAAI;QACf,sBAAsB,EAAE,EAAE;QAC1B,eAAe,EAAE,IAAI;KACtB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * WizardSession — single source of truth for every decision the wizard needs.\n *\n * Populated in layers:\n *   CLI args / env vars  →  populate fields directly\n *   Auto-detection       →  framework, typescript, package manager\n *   TUI screens          →  region, framework disambiguation, etc.\n *   OAuth                →  credentials\n *\n * Business logic reads from the session. Never calls a prompt.\n */\n\nimport type { Integration } from './constants';\nimport type { FrameworkConfig } from './framework-config';\n\nfunction parseProjectIdArg(value: string | undefined): number | undefined {\n  if (value === undefined || value === '') return undefined;\n  const n = Number(value);\n  return Number.isInteger(n) && n > 0 ? n : undefined;\n}\n\nexport type CloudRegion = 'us' | 'eu';\n\n/** Lifecycle phase of the main work (agent run, MCP install, etc.) */\nexport enum RunPhase {\n  /** Still gathering input (intro, setup screens) */\n  Idle = 'idle',\n  /** Main work is in progress */\n  Running = 'running',\n  /** Main work finished successfully */\n  Completed = 'completed',\n  /** Main work finished with an error */\n  Error = 'error',\n}\n\n/** Features discovered by the feature-discovery subagent */\nexport enum DiscoveredFeature {\n  Stripe = 'stripe',\n  LLM = 'llm',\n}\n\n/** Additional features the agent can integrate after the main setup */\nexport enum AdditionalFeature {\n  LLM = 'llm',\n}\n\n/** Human-readable labels for additional features (used in TUI progress) */\nexport const ADDITIONAL_FEATURE_LABELS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: 'LLM analytics',\n};\n\n/** Agent prompts for each additional feature, injected via the stop hook */\nexport const ADDITIONAL_FEATURE_PROMPTS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: `Now integrate LLM analytics with PostHog. Use the PostHog MCP server to find the appropriate LLM analytics skill, install it, and follow its workflow. PostHog basics are already installed. Update the setup report markdown file when complete with additions from this task. `,\n};\n\n/** Outcome of the MCP server installation step */\nexport enum McpOutcome {\n  NoClients = 'no_clients',\n  Skipped = 'skipped',\n  Installed = 'installed',\n  Failed = 'failed',\n}\n\n/** Outcome kind for the outro screen */\nexport enum OutroKind {\n  Success = 'success',\n  Error = 'error',\n  Cancel = 'cancel',\n}\n\nexport interface OutroData {\n  kind: OutroKind;\n  message?: string;\n  changes?: string[];\n  docsUrl?: string;\n  continueUrl?: string;\n}\n\nexport interface WizardSession {\n  // From CLI args\n  debug: boolean;\n  forceInstall: boolean;\n  installDir: string;\n  ci: boolean;\n  signup: boolean;\n  localMcp: boolean;\n  apiKey?: string;\n  menu: boolean;\n  benchmark: boolean;\n  projectId?: number;\n\n  // From detection + screens\n  setupConfirmed: boolean;\n  integration: Integration | null;\n  frameworkContext: Record<string, unknown>;\n  typescript: boolean;\n\n  /** Human-readable label for the detected framework variant (e.g., \"Django with Wagtail CMS\") */\n  detectedFrameworkLabel: string | null;\n\n  /** True once framework detection has run (whether it found something or not) */\n  detectionComplete: boolean;\n\n  // From OAuth\n  credentials: {\n    accessToken: string;\n    projectApiKey: string;\n    host: string;\n    projectId: number;\n  } | null;\n\n  // Lifecycle\n  runPhase: RunPhase;\n  loginUrl: string | null;\n\n  // Feature discovery\n  discoveredFeatures: DiscoveredFeature[];\n  llmOptIn: boolean;\n\n  // Screen completion\n  mcpComplete: boolean;\n  mcpOutcome: McpOutcome | null;\n  mcpInstalledClients: string[];\n\n  // Runtime\n  serviceStatus: { description: string; statusPageUrl: string } | null;\n  settingsOverrideKeys: string[] | null;\n  outroData: OutroData | null;\n\n  // Additional features queue (drained via stop hook after main integration)\n  additionalFeatureQueue: AdditionalFeature[];\n\n  // Resolved framework config (set after integration is known)\n  frameworkConfig: FrameworkConfig | null;\n}\n\n/**\n * Build a WizardSession from CLI args, pre-populating whatever is known.\n */\nexport function buildSession(args: {\n  debug?: boolean;\n  forceInstall?: boolean;\n  installDir?: string;\n  ci?: boolean;\n  signup?: boolean;\n  localMcp?: boolean;\n  apiKey?: string;\n  menu?: boolean;\n  integration?: Integration;\n  benchmark?: boolean;\n  projectId?: string;\n}): WizardSession {\n  return {\n    debug: args.debug ?? false,\n    forceInstall: args.forceInstall ?? false,\n    installDir: args.installDir ?? process.cwd(),\n    ci: args.ci ?? false,\n    signup: args.signup ?? false,\n    localMcp: args.localMcp ?? false,\n    apiKey: args.apiKey,\n    menu: args.menu ?? false,\n    benchmark: args.benchmark ?? false,\n    projectId: parseProjectIdArg(args.projectId),\n\n    setupConfirmed: false,\n    integration: args.integration ?? null,\n    frameworkContext: {},\n    typescript: false,\n    detectedFrameworkLabel: null,\n    detectionComplete: false,\n\n    runPhase: RunPhase.Idle,\n    discoveredFeatures: [],\n    llmOptIn: false,\n    mcpComplete: false,\n    mcpOutcome: null,\n    mcpInstalledClients: [],\n    loginUrl: null,\n    credentials: null,\n    serviceStatus: null,\n    settingsOverrideKeys: null,\n    outroData: null,\n    additionalFeatureQueue: [],\n    frameworkConfig: null,\n  };\n}\n"]}
+{"version":3,"file":"wizard-session.js","sourceRoot":"","sources":["../../../src/lib/wizard-session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AA2IH,oCAkDC;AAxLD,SAAS,iBAAiB,CAAC,KAAyB;IAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAID,sEAAsE;AACtE,IAAY,QASX;AATD,WAAY,QAAQ;IAClB,mDAAmD;IACnD,yBAAa,CAAA;IACb,+BAA+B;IAC/B,+BAAmB,CAAA;IACnB,sCAAsC;IACtC,mCAAuB,CAAA;IACvB,uCAAuC;IACvC,2BAAe,CAAA;AACjB,CAAC,EATW,QAAQ,wBAAR,QAAQ,QASnB;AAED,4DAA4D;AAC5D,IAAY,iBAGX;AAHD,WAAY,iBAAiB;IAC3B,sCAAiB,CAAA;IACjB,gCAAW,CAAA;AACb,CAAC,EAHW,iBAAiB,iCAAjB,iBAAiB,QAG5B;AAED,uEAAuE;AACvE,IAAY,iBAEX;AAFD,WAAY,iBAAiB;IAC3B,gCAAW,CAAA;AACb,CAAC,EAFW,iBAAiB,iCAAjB,iBAAiB,QAE5B;AAED,2EAA2E;AAC9D,QAAA,yBAAyB,GAAsC;IAC1E,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,eAAe;CACzC,CAAC;AAEF,4EAA4E;AAC/D,QAAA,0BAA0B,GAAsC;IAC3E,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,kRAAkR;CAC5S,CAAC;AAEF,kDAAkD;AAClD,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,sCAAwB,CAAA;IACxB,iCAAmB,CAAA;IACnB,qCAAuB,CAAA;IACvB,+BAAiB,CAAA;AACnB,CAAC,EALW,UAAU,0BAAV,UAAU,QAKrB;AAED,wCAAwC;AACxC,IAAY,SAIX;AAJD,WAAY,SAAS;IACnB,gCAAmB,CAAA;IACnB,4BAAe,CAAA;IACf,8BAAiB,CAAA;AACnB,CAAC,EAJW,SAAS,yBAAT,SAAS,QAIpB;AA6ED;;GAEG;AACH,SAAgB,YAAY,CAAC,IAa5B;IACC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK;QAC1B,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,KAAK;QACxC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE;QAC5C,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK;QACpB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;QAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;QAChC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;QACxB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK;QAClC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK;QACpC,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;QAE5C,cAAc,EAAE,KAAK;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,gBAAgB,EAAE,EAAE;QACpB,UAAU,EAAE,KAAK;QACjB,sBAAsB,EAAE,IAAI;QAC5B,iBAAiB,EAAE,KAAK;QACxB,kBAAkB,EAAE,IAAI;QAExB,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,kBAAkB,EAAE,EAAE;QACtB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,IAAI;QAChB,mBAAmB,EAAE,EAAE;QACvB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,IAAI;QACnB,oBAAoB,EAAE,IAAI;QAC1B,mBAAmB,EAAE,IAAI;QACzB,SAAS,EAAE,IAAI;QACf,sBAAsB,EAAE,EAAE;QAC1B,eAAe,EAAE,IAAI;KACtB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * WizardSession — single source of truth for every decision the wizard needs.\n *\n * Populated in layers:\n *   CLI args / env vars  →  populate fields directly\n *   Auto-detection       →  framework, typescript, package manager\n *   TUI screens          →  region, framework disambiguation, etc.\n *   OAuth                →  credentials\n *\n * Business logic reads from the session. Never calls a prompt.\n */\n\nimport type { Integration } from './constants';\nimport type { FrameworkConfig } from './framework-config';\n\nfunction parseProjectIdArg(value: string | undefined): number | undefined {\n  if (value === undefined || value === '') return undefined;\n  const n = Number(value);\n  return Number.isInteger(n) && n > 0 ? n : undefined;\n}\n\nexport type CloudRegion = 'us' | 'eu';\n\n/** Lifecycle phase of the main work (agent run, MCP install, etc.) */\nexport enum RunPhase {\n  /** Still gathering input (intro, setup screens) */\n  Idle = 'idle',\n  /** Main work is in progress */\n  Running = 'running',\n  /** Main work finished successfully */\n  Completed = 'completed',\n  /** Main work finished with an error */\n  Error = 'error',\n}\n\n/** Features discovered by the feature-discovery subagent */\nexport enum DiscoveredFeature {\n  Stripe = 'stripe',\n  LLM = 'llm',\n}\n\n/** Additional features the agent can integrate after the main setup */\nexport enum AdditionalFeature {\n  LLM = 'llm',\n}\n\n/** Human-readable labels for additional features (used in TUI progress) */\nexport const ADDITIONAL_FEATURE_LABELS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: 'LLM analytics',\n};\n\n/** Agent prompts for each additional feature, injected via the stop hook */\nexport const ADDITIONAL_FEATURE_PROMPTS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: `Now integrate LLM analytics with PostHog. Use the PostHog MCP server to find the appropriate LLM analytics skill, install it, and follow its workflow. PostHog basics are already installed. Update the setup report markdown file when complete with additions from this task. `,\n};\n\n/** Outcome of the MCP server installation step */\nexport enum McpOutcome {\n  NoClients = 'no_clients',\n  Skipped = 'skipped',\n  Installed = 'installed',\n  Failed = 'failed',\n}\n\n/** Outcome kind for the outro screen */\nexport enum OutroKind {\n  Success = 'success',\n  Error = 'error',\n  Cancel = 'cancel',\n}\n\nexport interface OutroData {\n  kind: OutroKind;\n  message?: string;\n  changes?: string[];\n  docsUrl?: string;\n  continueUrl?: string;\n}\n\nexport interface WizardSession {\n  // From CLI args\n  debug: boolean;\n  forceInstall: boolean;\n  installDir: string;\n  ci: boolean;\n  signup: boolean;\n  localMcp: boolean;\n  apiKey?: string;\n  menu: boolean;\n  benchmark: boolean;\n  yaraReport: boolean;\n  projectId?: number;\n\n  // From detection + screens\n  setupConfirmed: boolean;\n  integration: Integration | null;\n  frameworkContext: Record<string, unknown>;\n  typescript: boolean;\n\n  /** Human-readable label for the detected framework variant (e.g., \"Django with Wagtail CMS\") */\n  detectedFrameworkLabel: string | null;\n\n  /** True once framework detection has run (whether it found something or not) */\n  detectionComplete: boolean;\n\n  /** Set when the detected framework version is too old for the wizard */\n  unsupportedVersion: {\n    current: string;\n    minimum: string;\n    docsUrl: string;\n  } | null;\n\n  // From OAuth\n  credentials: {\n    accessToken: string;\n    projectApiKey: string;\n    host: string;\n    projectId: number;\n  } | null;\n\n  // Lifecycle\n  runPhase: RunPhase;\n  loginUrl: string | null;\n\n  // Feature discovery\n  discoveredFeatures: DiscoveredFeature[];\n  llmOptIn: boolean;\n\n  // Screen completion\n  mcpComplete: boolean;\n  mcpOutcome: McpOutcome | null;\n  mcpInstalledClients: string[];\n\n  // Runtime\n  serviceStatus: { description: string; statusPageUrl: string } | null;\n  settingsOverrideKeys: string[] | null;\n  portConflictProcess: { command: string; pid: string; user: string } | null;\n  outroData: OutroData | null;\n\n  // Additional features queue (drained via stop hook after main integration)\n  additionalFeatureQueue: AdditionalFeature[];\n\n  // Resolved framework config (set after integration is known)\n  frameworkConfig: FrameworkConfig | null;\n}\n\n/**\n * Build a WizardSession from CLI args, pre-populating whatever is known.\n */\nexport function buildSession(args: {\n  debug?: boolean;\n  forceInstall?: boolean;\n  installDir?: string;\n  ci?: boolean;\n  signup?: boolean;\n  localMcp?: boolean;\n  apiKey?: string;\n  menu?: boolean;\n  integration?: Integration;\n  benchmark?: boolean;\n  yaraReport?: boolean;\n  projectId?: string;\n}): WizardSession {\n  return {\n    debug: args.debug ?? false,\n    forceInstall: args.forceInstall ?? false,\n    installDir: args.installDir ?? process.cwd(),\n    ci: args.ci ?? false,\n    signup: args.signup ?? false,\n    localMcp: args.localMcp ?? false,\n    apiKey: args.apiKey,\n    menu: args.menu ?? false,\n    benchmark: args.benchmark ?? false,\n    yaraReport: args.yaraReport ?? false,\n    projectId: parseProjectIdArg(args.projectId),\n\n    setupConfirmed: false,\n    integration: args.integration ?? null,\n    frameworkContext: {},\n    typescript: false,\n    detectedFrameworkLabel: null,\n    detectionComplete: false,\n    unsupportedVersion: null,\n\n    runPhase: RunPhase.Idle,\n    discoveredFeatures: [],\n    llmOptIn: false,\n    mcpComplete: false,\n    mcpOutcome: null,\n    mcpInstalledClients: [],\n    loginUrl: null,\n    credentials: null,\n    serviceStatus: null,\n    settingsOverrideKeys: null,\n    portConflictProcess: null,\n    outroData: null,\n    additionalFeatureQueue: [],\n    frameworkConfig: null,\n  };\n}\n"]}

package/dist/src/lib/yara-hooks.d.ts

@@ -0,0 +1,44 @@
+/**
+ * YARA hook wiring for the Claude Agent SDK.
+ *
+ * Creates PreToolUse and PostToolUse hook callback arrays that
+ * integrate the YARA scanner into the wizard's agent loop. These
+ * hooks are registered in the SDK's query() options alongside the
+ * existing Stop hook.
+ *
+ * PreToolUse hooks block dangerous commands before execution.
+ * PostToolUse hooks detect violations in written code and prompt
+ * injection in read content, and scan context-mill skill downloads.
+ */
+type HookInput = Record<string, unknown>;
+type HookOutput = Record<string, unknown>;
+type HookCallback = (input: HookInput, toolUseID: string | undefined, options: {
+    signal: AbortSignal;
+}) => Promise<HookOutput>;
+export interface HookCallbackMatcher {
+    matcher?: string;
+    hooks: HookCallback[];
+    timeout?: number;
+}
+/** Reset counters (for testing) */
+export declare function resetScanReport(): void;
+/** Format the scan report summary. Returns null if no scans occurred */
+export declare function formatScanReport(): string | null;
+/** Write the scan report to a JSON file. Returns the file path, or null if no scans occurred. */
+export declare function writeScanReport(): string | null;
+/**
+ * Create PreToolUse hook matchers for YARA scanning.
+ * Scans Bash commands before execution for exfiltration,
+ * destructive operations, and supply chain violations.
+ */
+export declare function createPreToolUseYaraHooks(): HookCallbackMatcher[];
+/**
+ * Create PostToolUse hook matchers for YARA scanning.
+ *
+ * Three matchers:
+ * 1. Write/Edit — scan written content for PII, secrets, config violations
+ * 2. Read/Grep — scan read content for prompt injection
+ * 3. Bash (skill install) — scan downloaded skill files for poisoned content
+ */
+export declare function createPostToolUseYaraHooks(): HookCallbackMatcher[];
+export {};

package/dist/src/lib/yara-hooks.js

@@ -0,0 +1,377 @@
+"use strict";
+/**
+ * YARA hook wiring for the Claude Agent SDK.
+ *
+ * Creates PreToolUse and PostToolUse hook callback arrays that
+ * integrate the YARA scanner into the wizard's agent loop. These
+ * hooks are registered in the SDK's query() options alongside the
+ * existing Stop hook.
+ *
+ * PreToolUse hooks block dangerous commands before execution.
+ * PostToolUse hooks detect violations in written code and prompt
+ * injection in read content, and scan context-mill skill downloads.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetScanReport = resetScanReport;
+exports.formatScanReport = formatScanReport;
+exports.writeScanReport = writeScanReport;
+exports.createPreToolUseYaraHooks = createPreToolUseYaraHooks;
+exports.createPostToolUseYaraHooks = createPostToolUseYaraHooks;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const fast_glob_1 = __importDefault(require("fast-glob"));
+const yara_scanner_1 = require("./yara-scanner");
+const debug_1 = require("../utils/debug");
+const analytics_1 = require("../utils/analytics");
+const skill_install_1 = require("./skill-install");
+let scanCount = 0;
+const scanViolations = [];
+function recordScan() {
+    scanCount++;
+}
+function recordViolation(entry) {
+    scanViolations.push(entry);
+}
+/** Reset counters (for testing) */
+function resetScanReport() {
+    scanCount = 0;
+    scanViolations.length = 0;
+}
+/** Format the scan report summary. Returns null if no scans occurred */
+function formatScanReport() {
+    if (scanCount === 0)
+        return null;
+    const lines = ['', '— YARA Scanner Summary —'];
+    const violationCount = scanViolations.length;
+    const cleanCount = scanCount - violationCount;
+    lines.push(`✓ ${scanCount} tool calls scanned, ${violationCount} violation${violationCount !== 1 ? 's' : ''} detected`);
+    if (violationCount > 0) {
+        lines.push('');
+        for (const v of scanViolations) {
+            const tag = v.action.toUpperCase();
+            lines.push(`  [${tag}] ${v.rule} (${v.severity.toUpperCase()}) — ${v.phase}:${v.tool}`);
+        }
+    }
+    if (cleanCount > 0) {
+        lines.push('');
+        lines.push(`No violations: ✓ ${cleanCount} clean scan${cleanCount !== 1 ? 's' : ''}`);
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+const YARA_REPORT_PATH = '/tmp/posthog-wizard-yara-report.json';
+/** Write the scan report to a JSON file. Returns the file path, or null if no scans occurred. */
+function writeScanReport() {
+    if (scanCount === 0)
+        return null;
+    const report = {
+        summary: {
+            totalScans: scanCount,
+            violations: scanViolations.length,
+            clean: scanCount - scanViolations.length,
+        },
+        violations: scanViolations,
+    };
+    try {
+        fs_1.default.writeFileSync(YARA_REPORT_PATH, JSON.stringify(report, null, 2));
+    }
+    catch (err) {
+        (0, debug_1.logToFile)('[YARA] Failed to write scan report:', err);
+        return null;
+    }
+    return YARA_REPORT_PATH;
+}
+// ─── Hook Timeouts (ms) ─────────────────────────────────────────
+/** Timeout for synchronous scan hooks (PreToolUse, PostToolUse Write/Edit/Read) */
+const HOOK_TIMEOUT_MS = 60;
+/** Timeout for skill install hook (involves filesystem I/O) */
+const SKILL_SCAN_HOOK_TIMEOUT_MS = 120;
+// ─── Logging ─────────────────────────────────────────────────────
+function logYaraMatch(phase, tool, match, action) {
+    (0, debug_1.logToFile)(`[YARA] ${phase}:${tool} [${action.toUpperCase()}] rule "${match.rule.name}" ` +
+        `(severity: ${match.rule.severity}, category: ${match.rule.category})\n` +
+        `  Description: ${match.rule.description}\n` +
+        `  Matched text: "${match.matchedText.substring(0, 200)}"`);
+    analytics_1.analytics.wizardCapture('yara rule matched', {
+        rule: match.rule.name,
+        severity: match.rule.severity,
+        category: match.rule.category,
+        action,
+        phase,
+        tool,
+    });
+}
+// ─── Severity helpers ────────────────────────────────────────────
+const SEVERITY_RANK = {
+    critical: 4,
+    high: 3,
+    medium: 2,
+    low: 1,
+};
+/** Return the highest-severity match from a list of matches. */
+function highestSeverityMatch(matches) {
+    return matches.reduce((worst, m) => (SEVERITY_RANK[m.rule.severity] ?? 0) >
+        (SEVERITY_RANK[worst.rule.severity] ?? 0)
+        ? m
+        : worst);
+}
+// ─── PreToolUse Hooks ────────────────────────────────────────────
+/**
+ * Create PreToolUse hook matchers for YARA scanning.
+ * Scans Bash commands before execution for exfiltration,
+ * destructive operations, and supply chain violations.
+ */
+function createPreToolUseYaraHooks() {
+    return [
+        {
+            hooks: [
+                (input) => {
+                    try {
+                        const toolName = input.tool_name;
+                        if (toolName !== 'Bash')
+                            return Promise.resolve({});
+                        const toolInput = input.tool_input;
+                        const command = typeof toolInput?.command === 'string' ? toolInput.command : '';
+                        if (!command)
+                            return Promise.resolve({});
+                        recordScan();
+                        const result = (0, yara_scanner_1.scan)(command, 'PreToolUse', 'Bash');
+                        if (!result.matched)
+                            return Promise.resolve({});
+                        const match = highestSeverityMatch(result.matches);
+                        logYaraMatch('PreToolUse', 'Bash', match, 'blocked');
+                        recordViolation({
+                            rule: match.rule.name,
+                            severity: match.rule.severity,
+                            action: 'blocked',
+                            phase: 'PreToolUse',
+                            tool: 'Bash',
+                        });
+                        return Promise.resolve({
+                            decision: 'block',
+                            reason: `[YARA] ${match.rule.name}: ${match.rule.description}. Command blocked for security.`,
+                        });
+                    }
+                    catch (error) {
+                        (0, debug_1.logToFile)('[YARA] PreToolUse hook error:', error);
+                        // Fail closed: block the command if scanning fails
+                        return Promise.resolve({
+                            decision: 'block',
+                            reason: '[YARA] Scanner error — command blocked as a precaution.',
+                        });
+                    }
+                },
+            ],
+            timeout: HOOK_TIMEOUT_MS,
+        },
+    ];
+}
+// ─── PostToolUse Hooks ───────────────────────────────────────────
+/**
+ * Create PostToolUse hook matchers for YARA scanning.
+ *
+ * Three matchers:
+ * 1. Write/Edit — scan written content for PII, secrets, config violations
+ * 2. Read/Grep — scan read content for prompt injection
+ * 3. Bash (skill install) — scan downloaded skill files for poisoned content
+ */
+function createPostToolUseYaraHooks() {
+    return [
+        // ── Write/Edit content scanning ──
+        {
+            hooks: [
+                (input) => {
+                    try {
+                        const toolName = input.tool_name;
+                        if (toolName !== 'Write' && toolName !== 'Edit')
+                            return Promise.resolve({});
+                        const toolInput = input.tool_input;
+                        // For Write, scan the content being written
+                        // For Edit, scan the new_str (replacement text)
+                        const content = toolName === 'Write'
+                            ? toolInput?.content ?? ''
+                            : toolInput?.new_str ?? '';
+                        if (!content)
+                            return Promise.resolve({});
+                        recordScan();
+                        const tool = toolName;
+                        const result = (0, yara_scanner_1.scan)(content, 'PostToolUse', tool);
+                        if (!result.matched)
+                            return Promise.resolve({});
+                        const match = highestSeverityMatch(result.matches);
+                        logYaraMatch('PostToolUse', tool, match, 'reverted');
+                        recordViolation({
+                            rule: match.rule.name,
+                            severity: match.rule.severity,
+                            action: 'reverted',
+                            phase: 'PostToolUse',
+                            tool,
+                        });
+                        return Promise.resolve({
+                            hookSpecificOutput: {
+                                hookEventName: 'PostToolUse',
+                                additionalContext: `[YARA VIOLATION] ${match.rule.name}: ${match.rule.description}. ` +
+                                    `You MUST revert this change immediately. The content you just wrote violates security policy.`,
+                            },
+                        });
+                    }
+                    catch (error) {
+                        (0, debug_1.logToFile)('[YARA] PostToolUse Write/Edit hook error:', error);
+                        // Fail closed: instruct the agent to revert if scanning fails
+                        return Promise.resolve({
+                            hookSpecificOutput: {
+                                hookEventName: 'PostToolUse',
+                                additionalContext: '[YARA] Scanner error — you MUST revert this change as a precaution.',
+                            },
+                        });
+                    }
+                },
+            ],
+            timeout: HOOK_TIMEOUT_MS,
+        },
+        // ── Read/Grep prompt injection scanning ──
+        {
+            hooks: [
+                (input) => {
+                    try {
+                        const toolName = input.tool_name;
+                        if (toolName !== 'Read' && toolName !== 'Grep')
+                            return Promise.resolve({});
+                        const toolResponse = input.tool_response;
+                        const content = typeof toolResponse === 'string'
+                            ? toolResponse
+                            : JSON.stringify(toolResponse ?? '');
+                        if (!content)
+                            return Promise.resolve({});
+                        recordScan();
+                        const tool = toolName;
+                        const result = (0, yara_scanner_1.scan)(content, 'PostToolUse', tool);
+                        if (!result.matched)
+                            return Promise.resolve({});
+                        const match = highestSeverityMatch(result.matches);
+                        if (match.rule.severity === 'critical') {
+                            logYaraMatch('PostToolUse', tool, match, 'aborted');
+                            recordViolation({
+                                rule: match.rule.name,
+                                severity: match.rule.severity,
+                                action: 'aborted',
+                                phase: 'PostToolUse',
+                                tool,
+                            });
+                            // Prompt injection: abort the session — context is poisoned
+                            return Promise.resolve({
+                                stopReason: `[YARA CRITICAL] ${match.rule.name}: Prompt injection detected in file content. ` +
+                                    `Agent context is potentially poisoned. Session terminated for safety.`,
+                            });
+                        }
+                        logYaraMatch('PostToolUse', tool, match, 'warned');
+                        recordViolation({
+                            rule: match.rule.name,
+                            severity: match.rule.severity,
+                            action: 'warned',
+                            phase: 'PostToolUse',
+                            tool,
+                        });
+                        return Promise.resolve({
+                            hookSpecificOutput: {
+                                hookEventName: 'PostToolUse',
+                                additionalContext: `[YARA WARNING] ${match.rule.name}: ${match.rule.description}`,
+                            },
+                        });
+                    }
+                    catch (error) {
+                        (0, debug_1.logToFile)('[YARA] PostToolUse Read/Grep hook error:', error);
+                        // Fail closed: terminate session if scanning fails on read content
+                        return Promise.resolve({
+                            stopReason: '[YARA] Scanner error while scanning read content — session terminated as a precaution.',
+                        });
+                    }
+                },
+            ],
+            timeout: HOOK_TIMEOUT_MS,
+        },
+        // ── Context-mill skill install scanning ──
+        {
+            hooks: [
+                async (input) => {
+                    try {
+                        const toolName = input.tool_name;
+                        if (toolName !== 'Bash')
+                            return {};
+                        const toolInput = input.tool_input;
+                        const command = typeof toolInput?.command === 'string' ? toolInput.command : '';
+                        // Only scan after skill install commands
+                        if (!(0, skill_install_1.isSkillInstallCommand)(command))
+                            return {};
+                        // Extract skill directory from command
+                        const dirMatch = command.match(/mkdir -p (.claude\/skills\/[^\s&]+)/);
+                        if (!dirMatch)
+                            return {};
+                        const skillDir = dirMatch[1];
+                        const cwd = input.cwd ?? process.cwd();
+                        recordScan();
+                        const result = await scanSkillFiles(cwd, skillDir);
+                        if (!result.matched)
+                            return {};
+                        const match = highestSeverityMatch(result.matches);
+                        logYaraMatch('PostToolUse', 'Bash (skill install)', match, 'aborted');
+                        recordViolation({
+                            rule: match.rule.name,
+                            severity: match.rule.severity,
+                            action: 'aborted',
+                            phase: 'PostToolUse',
+                            tool: 'Bash (skill)',
+                        });
+                        return {
+                            stopReason: `[YARA CRITICAL] Poisoned skill detected in ${skillDir}: ${match.rule.name}. ` +
+                                `The downloaded skill contains potential prompt injection. Session terminated for safety.`,
+                        };
+                    }
+                    catch (error) {
+                        (0, debug_1.logToFile)('[YARA] PostToolUse skill install hook error:', error);
+                        // Fail closed: terminate if skill scanning fails
+                        return {
+                            stopReason: '[YARA] Scanner error while scanning skill files — session terminated as a precaution.',
+                        };
+                    }
+                },
+            ],
+            timeout: SKILL_SCAN_HOOK_TIMEOUT_MS,
+        },
+    ];
+}
+// ─── Skill File Scanner ──────────────────────────────────────────
+/**
+ * Read and scan all text files in a skill directory for prompt injection.
+ */
+async function scanSkillFiles(cwd, skillDir) {
+    const absoluteDir = path_1.default.resolve(cwd, skillDir);
+    if (!fs_1.default.existsSync(absoluteDir)) {
+        (0, debug_1.logToFile)(`[YARA] Skill directory does not exist: ${absoluteDir}`);
+        return { matched: false };
+    }
+    const files = await (0, fast_glob_1.default)('**/*.{md,txt,yaml,yml,json,js,ts,py,rb,sh}', {
+        cwd: absoluteDir,
+        absolute: true,
+    });
+    const fileContents = [];
+    for (const filePath of files) {
+        try {
+            const content = fs_1.default.readFileSync(filePath, 'utf-8');
+            fileContents.push({ path: filePath, content });
+        }
+        catch (err) {
+            (0, debug_1.logToFile)(`[YARA] Could not read skill file ${filePath}:`, err);
+        }
+    }
+    if (fileContents.length === 0) {
+        (0, debug_1.logToFile)(`[YARA] No text files found in skill directory: ${absoluteDir}`);
+        return { matched: false };
+    }
+    (0, debug_1.logToFile)(`[YARA] Scanning ${fileContents.length} files in skill directory: ${skillDir}`);
+    return (0, yara_scanner_1.scanSkillDirectory)(fileContents);
+}
+//# sourceMappingURL=yara-hooks.js.map