@posthog/wizard 2.0.2 → 2.1.0

package/dist/src/lib/agent-runner.js

@@ -37,6 +37,7 @@ exports.runAgentWizard = runAgentWizard;
 const framework_config_1 = require("./framework-config");
 const wizard_session_1 = require("./wizard-session");
 const setup_utils_1 = require("../utils/setup-utils");
+const constants_1 = require("./constants");
 const analytics_1 = require("../utils/analytics");
 const ui_1 = require("../ui");
 const agent_interface_1 = require("./agent-interface");
@@ -46,6 +47,7 @@ const anthropic_status_1 = require("../utils/anthropic-status");
 const debug_1 = require("../utils/debug");
 const benchmark_1 = require("./middleware/benchmark");
 const wizard_abort_1 = require("../utils/wizard-abort");
+const yara_hooks_1 = require("./yara-hooks");
 /**
  * Build a WizardOptions bag from a WizardSession (for code that still expects WizardOptions).
  */
@@ -62,6 +64,7 @@ function sessionToOptions(session) {
         benchmark: session.benchmark,
         projectId: session.projectId,
         apiKey: session.apiKey,
+        yaraReport: session.yaraReport,
     };
 }
 /**
@@ -176,9 +179,22 @@ async function runAgentWizard(config, session) {
     // Determine MCP URL: CLI flag > env var > production default
     const mcpUrl = session.localMcp
         ? 'http://localhost:8787/mcp'
-        : process.env.MCP_URL || 'https://mcp.posthog.com/mcp';
+        : process.env.MCP_URL ||
+            (cloudRegion === 'eu'
+                ? 'https://mcp-eu.posthog.com/mcp'
+                : 'https://mcp.posthog.com/mcp');
     const restoreSettings = () => (0, agent_interface_1.restoreClaudeSettings)(session.installDir);
     (0, ui_1.getUI)().onEnterScreen('outro', restoreSettings);
+    // Register YARA report as cleanup so it fires on any exit path (including wizardAbort)
+    if (session.yaraReport) {
+        (0, wizard_abort_1.registerCleanup)(() => {
+            const reportPath = (0, yara_hooks_1.writeScanReport)();
+            if (reportPath) {
+                const summary = (0, yara_hooks_1.formatScanReport)();
+                (0, ui_1.getUI)().log.info(`YARA scan report: ${reportPath}${summary ?? ''}`);
+            }
+        });
+    }
     (0, ui_1.getUI)().startRun();
     const agent = await (0, agent_interface_1.initializeAgent)({
         workingDirectory: session.installDir,
@@ -221,6 +237,15 @@ async function runAgentWizard(config, session) {
             }),
         });
     }
+    if (agentResult.error === agent_interface_1.AgentErrorType.YARA_VIOLATION) {
+        await (0, wizard_abort_1.wizardAbort)({
+            message: 'Security violation detected\n\nThe YARA scanner terminated the session after detecting a security violation.\nThis may indicate prompt injection, poisoned skill files, or a policy breach.\n\nPlease report this to: wizard@posthog.com',
+            error: new wizard_abort_1.WizardError('YARA scanner terminated session', {
+                integration: config.metadata.integration,
+                error_type: agent_interface_1.AgentErrorType.YARA_VIOLATION,
+            }),
+        });
+    }
     if (agentResult.error === agent_interface_1.AgentErrorType.RATE_LIMIT ||
         agentResult.error === agent_interface_1.AgentErrorType.API_ERROR) {
         analytics_1.analytics.wizardCapture('agent api error', {
@@ -246,6 +271,14 @@ async function runAgentWizard(config, session) {
             integration: config.metadata.integration,
             session,
         });
+        if (uploadedEnvVars.length > 0) {
+            analytics_1.analytics.capture(constants_1.WIZARD_INTERACTION_EVENT_NAME, {
+                action: 'wizard_env_vars_uploaded',
+                integration: config.metadata.integration,
+                variable_count: uploadedEnvVars.length,
+                variable_keys: uploadedEnvVars,
+            });
+        }
     }
     // MCP installation is handled by McpScreen — no prompt here
     // Build outro data and store it for OutroScreen

package/dist/src/lib/agent-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-runner.js","sourceRoot":"","sources":["../../../src/lib/agent-runner.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0DA,wCA+QC;AAzUD,yDAI4B;AAC5B,qDAAiE;AACjE,sDAI8B;AAG9B,kDAA+C;AAC/C,8BAA8B;AAC9B,uDAS2B;AAC3B,wCAAsD;AAEtD,+CAAiC;AACjC,gEAAiE;AACjE,0CAAyE;AACzE,sDAAiE;AACjE,wDAAiE;AAEjE;;GAEG;AACH,SAAS,gBAAgB,CAAC,OAAsB;IAC9C,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAClC,MAAuB,EACvB,OAAsB;IAEtB,IAAA,mBAAW,GAAE,CAAC;IACd,IAAA,iBAAS,EAAC,oCAAoC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAE7E,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IAAA,uBAAe,GAAE,CAAC;IACpB,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,IAAI,MAAM,CAAC,SAAS,CAAC,mBAAmB,EAAE,CAAC;QAC5E,IAAA,iBAAS,EAAC,iCAAiC,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,mBAAmB,CACxD,gBAAgB,CAAC,OAAO,CAAC,CAC1B,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAA,iBAAS,EACP,0BAA0B,OAAO,YAAY,MAAM,CAAC,SAAS,CAAC,cAAc,EAAE,CAC/E,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;gBACnE,MAAM,OAAO,GACX,MAAM,CAAC,QAAQ,CAAC,yBAAyB,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACvE,MAAM,IAAA,0BAAW,EAAC;oBAChB,OAAO,EACL,yCAAyC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,IAAI;wBAC5E,cAAc,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,aAAa;wBAClF,0CAA0C;wBAC1C,SAAS,MAAM,CAAC,QAAQ,CAAC,IAAI,cAAc,OAAO,EAAE;iBACvD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,IAAA,iBAAS,EAAC,0CAA0C,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,MAAM,IAAA,uCAAoB,GAAE,CAAC;IAClD,IAAA,iBAAS,EAAC,mCAAmC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM,IAAI,YAAY,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACzE,IAAA,UAAK,GAAE,CAAC,iBAAiB,CAAC;YACxB,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,aAAa,EAAE,2BAA2B;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,MAAM,oBAAoB,GAAG,IAAA,8CAA4B,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9E,IAAA,iBAAS,EACP,sCACE,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MACtE,EAAE,CACH,CAAC;IACF,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAA,UAAK,GAAE,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAC5D,IAAA,4CAA0B,EAAC,OAAO,CAAC,UAAU,CAAC,CAC/C,CAAC;QACF,IAAA,iBAAS,EAAC,2CAA2C,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,kBAAkB,GAAG,IAAA,+BAAiB,EAAC;QAC3C,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,OAAO,CAAC,UAAU,GAAG,kBAAkB,CAAC;IAExC,kCAAkC;IAClC,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,eAAe,KAAK,KAAK,CAAC;IACnE,IAAI,WAAW,GAA0B,IAAI,CAAC;IAC9C,IAAI,gBAAoC,CAAC;IAEzC,IAAI,eAAe,EAAE,CAAC;QACpB,WAAW,GAAG,MAAM,IAAA,+BAAiB,EAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1E,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACzE,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;gBACpE,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CACd,GAAG,MAAM,CAAC,SAAS,CAAC,kBAAkB,+EAA+E,CACtH,CAAC;YACJ,CAAC;YACD,gBAAgB,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CACd,4EAA4E,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,gBAAgB,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,2CAA2C;IAC3C,IAAI,gBAAgB,IAAI,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;QAC1D,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC1E,qBAAS,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,UAAU,EAAE,aAAa,CAAC,CAAC;IAC5E,CAAC;IAED,qBAAS,CAAC,aAAa,CAAC,eAAe,EAAE;QACvC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;KACzC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,IAAA,iBAAS,EAAC,+BAA+B,CAAC,CAAC;IAC3C,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,GAChE,MAAM,IAAA,oCAAsB,EAAC;QAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IAEL,OAAO,CAAC,WAAW,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAEtE,uEAAuE;IACvE,IAAA,UAAK,GAAE,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAE5C,oEAAoE;IACpE,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAElD,4CAA4C;IAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/D,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACnD,qBAAS,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,sBAAsB,CAC9C,MAAM,EACN;QACE,gBAAgB,EAAE,gBAAgB,IAAI,QAAQ;QAC9C,UAAU,EAAE,kBAAkB;QAC9B,aAAa;QACb,IAAI;QACJ,SAAS;KACV,EACD,gBAAgB,CACjB,CAAC;IAEF,2BAA2B;IAC3B,MAAM,OAAO,GAAG,IAAA,UAAK,GAAE,CAAC,OAAO,EAAE,CAAC;IAElC,4FAA4F;IAC5F,MAAM,WAAW,GAAG,MAAM,qBAAS,CAAC,oBAAoB,EAAE,CAAC;IAC3D,MAAM,cAAc,GAAG,IAAA,qCAAmB,EAAC,WAAW,CAAC,CAAC;IAExD,6DAA6D;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ;QAC7B,CAAC,CAAC,2BAA2B;QAC7B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,6BAA6B,CAAC;IAEzD,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,IAAA,uCAAqB,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxE,IAAA,UAAK,GAAE,CAAC,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAChD,IAAA,UAAK,GAAE,CAAC,QAAQ,EAAE,CAAC;IAEnB,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAe,EACjC;QACE,gBAAgB,EAAE,OAAO,CAAC,UAAU;QACpC,aAAa,EAAE,MAAM;QACrB,aAAa,EAAE,WAAW;QAC1B,cAAc,EAAE,IAAI;QACpB,oBAAoB,EAAE,MAAM,CAAC,QAAQ,CAAC,oBAAoB;QAC1D,oBAAoB,EAAE,MAAM,CAAC,SAAS,CAAC,oBAAoB;QAC3D,WAAW;QACX,cAAc;KACf,EACD,gBAAgB,CAAC,OAAO,CAAC,CAC1B,CAAC;IAEF,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS;QAClC,CAAC,CAAC,IAAA,mCAAuB,EAAC,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC7D,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,WAAW,GAAG,MAAM,IAAA,0BAAQ,EAChC,KAAK,EACL,iBAAiB,EACjB,gBAAgB,CAAC,OAAO,CAAC,EACzB,OAAO,EACP;QACE,wBAAwB,EAAE,MAAM,CAAC,EAAE,CAAC,wBAAwB;QAC5D,cAAc,EAAE,kCAAe;QAC/B,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,cAAc;QACxC,YAAY,EAAE,oBAAoB;QAClC,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;KACvD,EACD,UAAU,CACX,CAAC;IAEF,8CAA8C;IAC9C,IAAI,WAAW,CAAC,KAAK,KAAK,gCAAc,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,IAAA,0BAAW,EAAC;YAChB,OAAO,EAAE,2MAA2M,MAAM,CAAC,QAAQ,CAAC,IAAI,8CAA8C,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE;YAC/S,KAAK,EAAE,IAAI,0BAAW,CAAC,2CAA2C,EAAE;gBAClE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;gBACxC,UAAU,EAAE,gCAAc,CAAC,WAAW;gBACtC,MAAM,EAAE,8BAAY,CAAC,iBAAiB;aACvC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,IAAI,WAAW,CAAC,KAAK,KAAK,gCAAc,CAAC,gBAAgB,EAAE,CAAC;QAC1D,MAAM,IAAA,0BAAW,EAAC;YAChB,OAAO,EAAE,4LAA4L,MAAM,CAAC,QAAQ,CAAC,IAAI,8CAA8C,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE;YAChS,KAAK,EAAE,IAAI,0BAAW,CAAC,uCAAuC,EAAE;gBAC9D,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;gBACxC,UAAU,EAAE,gCAAc,CAAC,gBAAgB;gBAC3C,MAAM,EAAE,8BAAY,CAAC,sBAAsB;aAC5C,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,IACE,WAAW,CAAC,KAAK,KAAK,gCAAc,CAAC,UAAU;QAC/C,WAAW,CAAC,KAAK,KAAK,gCAAc,CAAC,SAAS,EAC9C,CAAC;QACD,qBAAS,CAAC,aAAa,CAAC,iBAAiB,EAAE;YACzC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;YACxC,UAAU,EAAE,WAAW,CAAC,KAAK;YAC7B,aAAa,EAAE,WAAW,CAAC,OAAO;SACnC,CAAC,CAAC;QAEH,MAAM,IAAA,0BAAW,EAAC;YAChB,OAAO,EAAE,gBACP,WAAW,CAAC,OAAO,IAAI,eACzB,qDAAqD;YACrD,KAAK,EAAE,IAAI,0BAAW,CAAC,cAAc,WAAW,CAAC,OAAO,EAAE,EAAE;gBAC1D,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;gBACxC,UAAU,EAAE,WAAW,CAAC,KAAK;aAC9B,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,qDAAqD;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAEnE,kEAAkE;IAClE,IAAI,eAAe,GAAa,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;QACvC,MAAM,EAAE,8BAA8B,EAAE,GAAG,MAAM,MAAM,CACrD,mBAAmB,CACpB,CAAC;QACF,eAAe,GAAG,MAAM,8BAA8B,CAAC,OAAO,EAAE;YAC9D,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;YACxC,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,4DAA4D;IAE5D,gDAAgD;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM;QAChC,CAAC,CAAC,GAAG,IAAA,4BAAqB,EAAC,WAAW,CAAC,yBAAyB;QAChE,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,OAAO,GAAG;QACd,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,gBAAgB,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YAC7B,CAAC,CAAC,0CAA0C;YAC5C,CAAC,CAAC,EAAE;QACN,eAAe,CAAC,MAAM,GAAG,CAAC;YACxB,CAAC,CAAC,yDAAyD;YAC3D,CAAC,CAAC,EAAE;KACP,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAElB,OAAO,CAAC,SAAS,GAAG;QAClB,IAAI,EAAE,0BAAS,CAAC,OAAO;QACvB,OAAO;QACP,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;QAChC,WAAW;KACZ,CAAC;IAEF,IAAA,UAAK,GAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAEjD,MAAM,qBAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAC7B,MAAuB,EACvB,OAMC,EACD,gBAAyC;IAEzC,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,yBAAyB;QAC9D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,gBAAgB,CAAC;QAC5D,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,iBAAiB,GACrB,eAAe,CAAC,MAAM,GAAG,CAAC;QACxB,CAAC,CAAC,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9D,CAAC,CAAC,EAAE,CAAC;IAET,OAAO,kGACL,MAAM,CAAC,QAAQ,CAAC,IAClB;;;wBAGsB,OAAO,CAAC,SAAS;eAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,gBAAgB;gBAC/C,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;0BACvB,OAAO,CAAC,aAAa;kBAC7B,OAAO,CAAC,IAAI;kBACZ,MAAM,CAAC,OAAO,CAAC,oBAAoB;0BAEjD,MAAM,CAAC,OAAO,CAAC,mBAAmB,IAAI,+CACxC,GAAG,iBAAiB;;;;0KAKlB,8BAAY,CAAC,iBACf;;;mFAIG,8BAAY,CAAC,sBACf;;;;;;;;;;;;;;;kJAgBE,MAAM,CAAC,QAAQ,CAAC,IAClB;;;;;;CAMF,CAAC;AACF,CAAC","sourcesContent":["import {\n  DEFAULT_PACKAGE_INSTALLATION,\n  SPINNER_MESSAGE,\n  type FrameworkConfig,\n} from './framework-config';\nimport { type WizardSession, OutroKind } from './wizard-session';\nimport {\n  tryGetPackageJson,\n  isUsingTypeScript,\n  getOrAskForProjectData,\n} from '../utils/setup-utils';\nimport type { PackageDotJson } from '../utils/package-json';\nimport type { WizardOptions } from '../utils/types';\nimport { analytics } from '../utils/analytics';\nimport { getUI } from '../ui';\nimport {\n  initializeAgent,\n  runAgent,\n  AgentSignals,\n  AgentErrorType,\n  buildWizardMetadata,\n  checkClaudeSettingsOverrides,\n  backupAndFixClaudeSettings,\n  restoreClaudeSettings,\n} from './agent-interface';\nimport { getCloudUrlFromRegion } from '../utils/urls';\n\nimport * as semver from 'semver';\nimport { checkAnthropicStatus } from '../utils/anthropic-status';\nimport { enableDebugLogs, initLogFile, logToFile } from '../utils/debug';\nimport { createBenchmarkPipeline } from './middleware/benchmark';\nimport { wizardAbort, WizardError } from '../utils/wizard-abort';\n\n/**\n * Build a WizardOptions bag from a WizardSession (for code that still expects WizardOptions).\n */\nfunction sessionToOptions(session: WizardSession): WizardOptions {\n  return {\n    installDir: session.installDir,\n    debug: session.debug,\n    forceInstall: session.forceInstall,\n    default: false,\n    signup: session.signup,\n    localMcp: session.localMcp,\n    ci: session.ci,\n    menu: session.menu,\n    benchmark: session.benchmark,\n    projectId: session.projectId,\n    apiKey: session.apiKey,\n  };\n}\n\n/**\n * Universal agent-powered wizard runner.\n * Handles the complete flow for any framework using PostHog MCP integration.\n *\n * All user decisions come from the session — no UI prompts.\n */\nexport async function runAgentWizard(\n  config: FrameworkConfig,\n  session: WizardSession,\n): Promise<void> {\n  initLogFile();\n  logToFile(`[agent-runner] START integration=${config.metadata.integration}`);\n\n  if (session.debug) {\n    enableDebugLogs();\n  }\n\n  // Version check\n  if (config.detection.minimumVersion && config.detection.getInstalledVersion) {\n    logToFile('[agent-runner] checking version');\n    const version = await config.detection.getInstalledVersion(\n      sessionToOptions(session),\n    );\n    if (version) {\n      logToFile(\n        `[agent-runner] version=${version} minimum=${config.detection.minimumVersion}`,\n      );\n      const coerced = semver.coerce(version);\n      if (coerced && semver.lt(coerced, config.detection.minimumVersion)) {\n        const docsUrl =\n          config.metadata.unsupportedVersionDocsUrl ?? config.metadata.docsUrl;\n        await wizardAbort({\n          message:\n            `Sorry: the wizard can't help you with ${config.metadata.name} ${version}. ` +\n            `Upgrade to ${config.metadata.name} ${config.detection.minimumVersion} or later, ` +\n            `or check out the manual setup guide.\\n\\n` +\n            `Setup ${config.metadata.name} manually: ${docsUrl}`,\n        });\n      }\n    }\n  }\n\n  // Check Anthropic/Claude service status (pure — no prompt)\n  logToFile('[agent-runner] checking anthropic status');\n  const statusResult = await checkAnthropicStatus();\n  logToFile(`[agent-runner] anthropic status=${statusResult.status}`);\n  if (statusResult.status === 'down' || statusResult.status === 'degraded') {\n    getUI().showServiceStatus({\n      description: statusResult.description,\n      statusPageUrl: 'https://status.claude.com',\n    });\n  }\n\n  // Check for blocking env overrides in .claude/settings.json before login.\n  const blockingOverrideKeys = checkClaudeSettingsOverrides(session.installDir);\n  logToFile(\n    `[agent-runner] settings overrides: ${\n      blockingOverrideKeys.length > 0 ? blockingOverrideKeys.join(', ') : 'none'\n    }`,\n  );\n  if (blockingOverrideKeys.length > 0) {\n    await getUI().showSettingsOverride(blockingOverrideKeys, () =>\n      backupAndFixClaudeSettings(session.installDir),\n    );\n    logToFile('[agent-runner] settings override resolved');\n  }\n\n  const typeScriptDetected = isUsingTypeScript({\n    installDir: session.installDir,\n  });\n  session.typescript = typeScriptDetected;\n\n  // Framework detection and version\n  const usesPackageJson = config.detection.usesPackageJson !== false;\n  let packageJson: PackageDotJson | null = null;\n  let frameworkVersion: string | undefined;\n\n  if (usesPackageJson) {\n    packageJson = await tryGetPackageJson({ installDir: session.installDir });\n    if (packageJson) {\n      const { hasPackageInstalled } = await import('../utils/package-json.js');\n      if (!hasPackageInstalled(config.detection.packageName, packageJson)) {\n        getUI().log.warn(\n          `${config.detection.packageDisplayName} does not seem to be installed. Continuing anyway — the agent will handle it.`,\n        );\n      }\n      frameworkVersion = config.detection.getVersion(packageJson);\n    } else {\n      getUI().log.warn(\n        'Could not find package.json. Continuing anyway — the agent will handle it.',\n      );\n    }\n  } else {\n    frameworkVersion = config.detection.getVersion(null);\n  }\n\n  // Set analytics tags for framework version\n  if (frameworkVersion && config.detection.getVersionBucket) {\n    const versionBucket = config.detection.getVersionBucket(frameworkVersion);\n    analytics.setTag(`${config.metadata.integration}-version`, versionBucket);\n  }\n\n  analytics.wizardCapture('agent started', {\n    integration: config.metadata.integration,\n  });\n\n  // Get PostHog credentials (region auto-detected from token)\n  logToFile('[agent-runner] starting OAuth');\n  const { projectApiKey, host, accessToken, projectId, cloudRegion } =\n    await getOrAskForProjectData({\n      signup: session.signup,\n      ci: session.ci,\n      apiKey: session.apiKey,\n      projectId: session.projectId,\n    });\n\n  session.credentials = { accessToken, projectApiKey, host, projectId };\n\n  // Notify TUI that credentials are available (resolves past AuthScreen)\n  getUI().setCredentials(session.credentials);\n\n  // Framework context was already gathered by SetupScreen + detection\n  const frameworkContext = session.frameworkContext;\n\n  // Set analytics tags from framework context\n  const contextTags = config.analytics.getTags(frameworkContext);\n  Object.entries(contextTags).forEach(([key, value]) => {\n    analytics.setTag(key, value);\n  });\n\n  const integrationPrompt = buildIntegrationPrompt(\n    config,\n    {\n      frameworkVersion: frameworkVersion || 'latest',\n      typescript: typeScriptDetected,\n      projectApiKey,\n      host,\n      projectId,\n    },\n    frameworkContext,\n  );\n\n  // Initialize and run agent\n  const spinner = getUI().spinner();\n\n  // Evaluate all feature flags at the start of the run so they can be sent to the LLM gateway\n  const wizardFlags = await analytics.getAllFlagsForWizard();\n  const wizardMetadata = buildWizardMetadata(wizardFlags);\n\n  // Determine MCP URL: CLI flag > env var > production default\n  const mcpUrl = session.localMcp\n    ? 'http://localhost:8787/mcp'\n    : process.env.MCP_URL || 'https://mcp.posthog.com/mcp';\n\n  const restoreSettings = () => restoreClaudeSettings(session.installDir);\n  getUI().onEnterScreen('outro', restoreSettings);\n  getUI().startRun();\n\n  const agent = await initializeAgent(\n    {\n      workingDirectory: session.installDir,\n      posthogMcpUrl: mcpUrl,\n      posthogApiKey: accessToken,\n      posthogApiHost: host,\n      additionalMcpServers: config.metadata.additionalMcpServers,\n      detectPackageManager: config.detection.detectPackageManager,\n      wizardFlags,\n      wizardMetadata,\n    },\n    sessionToOptions(session),\n  );\n\n  const middleware = session.benchmark\n    ? createBenchmarkPipeline(spinner, sessionToOptions(session))\n    : undefined;\n\n  const agentResult = await runAgent(\n    agent,\n    integrationPrompt,\n    sessionToOptions(session),\n    spinner,\n    {\n      estimatedDurationMinutes: config.ui.estimatedDurationMinutes,\n      spinnerMessage: SPINNER_MESSAGE,\n      successMessage: config.ui.successMessage,\n      errorMessage: 'Integration failed',\n      additionalFeatureQueue: session.additionalFeatureQueue,\n    },\n    middleware,\n  );\n\n  // Handle error cases detected in agent output\n  if (agentResult.error === AgentErrorType.MCP_MISSING) {\n    await wizardAbort({\n      message: `Could not access the PostHog MCP server\\n\\nThe wizard was unable to connect to the PostHog MCP server.\\nThis could be due to a network issue or a configuration problem.\\n\\nPlease try again, or set up ${config.metadata.name} manually by following our documentation:\\n${config.metadata.docsUrl}`,\n      error: new WizardError('Agent could not access PostHog MCP server', {\n        integration: config.metadata.integration,\n        error_type: AgentErrorType.MCP_MISSING,\n        signal: AgentSignals.ERROR_MCP_MISSING,\n      }),\n    });\n  }\n\n  if (agentResult.error === AgentErrorType.RESOURCE_MISSING) {\n    await wizardAbort({\n      message: `Could not access the setup resource\\n\\nThe wizard could not access the setup resource. This may indicate a version mismatch or a temporary service issue.\\n\\nPlease try again, or set up ${config.metadata.name} manually by following our documentation:\\n${config.metadata.docsUrl}`,\n      error: new WizardError('Agent could not access setup resource', {\n        integration: config.metadata.integration,\n        error_type: AgentErrorType.RESOURCE_MISSING,\n        signal: AgentSignals.ERROR_RESOURCE_MISSING,\n      }),\n    });\n  }\n\n  if (\n    agentResult.error === AgentErrorType.RATE_LIMIT ||\n    agentResult.error === AgentErrorType.API_ERROR\n  ) {\n    analytics.wizardCapture('agent api error', {\n      integration: config.metadata.integration,\n      error_type: agentResult.error,\n      error_message: agentResult.message,\n    });\n\n    await wizardAbort({\n      message: `API Error\\n\\n${\n        agentResult.message || 'Unknown error'\n      }\\n\\nPlease report this error to: wizard@posthog.com`,\n      error: new WizardError(`API error: ${agentResult.message}`, {\n        integration: config.metadata.integration,\n        error_type: agentResult.error,\n      }),\n    });\n  }\n\n  // Build environment variables from OAuth credentials\n  const envVars = config.environment.getEnvVars(projectApiKey, host);\n\n  // Upload environment variables to hosting providers (auto-accept)\n  let uploadedEnvVars: string[] = [];\n  if (config.environment.uploadToHosting) {\n    const { uploadEnvironmentVariablesStep } = await import(\n      '../steps/index.js'\n    );\n    uploadedEnvVars = await uploadEnvironmentVariablesStep(envVars, {\n      integration: config.metadata.integration,\n      session,\n    });\n  }\n\n  // MCP installation is handled by McpScreen — no prompt here\n\n  // Build outro data and store it for OutroScreen\n  const continueUrl = session.signup\n    ? `${getCloudUrlFromRegion(cloudRegion)}/products?source=wizard`\n    : undefined;\n\n  const changes = [\n    ...config.ui.getOutroChanges(frameworkContext),\n    Object.keys(envVars).length > 0\n      ? `Added environment variables to .env file`\n      : '',\n    uploadedEnvVars.length > 0\n      ? `Uploaded environment variables to your hosting provider`\n      : '',\n  ].filter(Boolean);\n\n  session.outroData = {\n    kind: OutroKind.Success,\n    changes,\n    docsUrl: config.metadata.docsUrl,\n    continueUrl,\n  };\n\n  getUI().outro(`Successfully installed PostHog!`);\n\n  await analytics.shutdown('success');\n}\n\n/**\n * Build the integration prompt for the agent.\n */\nfunction buildIntegrationPrompt(\n  config: FrameworkConfig,\n  context: {\n    frameworkVersion: string;\n    typescript: boolean;\n    projectApiKey: string;\n    host: string;\n    projectId: number;\n  },\n  frameworkContext: Record<string, unknown>,\n): string {\n  const additionalLines = config.prompts.getAdditionalContextLines\n    ? config.prompts.getAdditionalContextLines(frameworkContext)\n    : [];\n\n  const additionalContext =\n    additionalLines.length > 0\n      ? '\\n' + additionalLines.map((line) => `- ${line}`).join('\\n')\n      : '';\n\n  return `You have access to the PostHog MCP server which provides skills to integrate PostHog into this ${\n    config.metadata.name\n  } project.\n\nProject context:\n- PostHog Project ID: ${context.projectId}\n- Framework: ${config.metadata.name} ${context.frameworkVersion}\n- TypeScript: ${context.typescript ? 'Yes' : 'No'}\n- PostHog public token: ${context.projectApiKey}\n- PostHog Host: ${context.host}\n- Project type: ${config.prompts.projectTypeDetection}\n- Package installation: ${\n    config.prompts.packageInstallation ?? DEFAULT_PACKAGE_INSTALLATION\n  }${additionalContext}\n\nInstructions (follow these steps IN ORDER - do not skip or reorder):\n\nSTEP 1: List available skills from the PostHog MCP server using ListMcpResourcesTool. If this tool is not available or you cannot access the MCP server, you must emit: ${\n    AgentSignals.ERROR_MCP_MISSING\n  } Could not access the PostHog MCP server and halt.\n\n   Review the skill descriptions and choose the one that best matches this project's framework and configuration.\n   If no suitable skill is found, or you cannot access the MCP server, you emit: ${\n     AgentSignals.ERROR_RESOURCE_MISSING\n   } Could not find a suitable skill for this project.\n\nSTEP 2: Fetch the chosen skill resource (e.g., posthog://skills/{skill-id}).\n   The resource returns a shell command to install the skill.\n\nSTEP 3: Run the installation command using Bash:\n   - Execute the EXACT command returned by the resource (do not modify it)\n   - This will download and extract the skill to .claude/skills/{skill-id}/\n\nSTEP 4: Load the installed skill's SKILL.md file to understand what references are available.\n\nSTEP 5: Follow the skill's workflow files in sequence. Look for numbered workflow files in the references (e.g., files with patterns like \"1.0-\", \"1.1-\", \"1.2-\"). Start with the first one and proceed through each step until completion. Each workflow file will tell you what to do and which file comes next. Never directly write PostHog tokens directly to code files; always use environment variables.\n\nSTEP 6: Set up environment variables for PostHog using the wizard-tools MCP server (this runs locally — secret values never leave the machine):\n   - Use check_env_keys to see which keys already exist in the project's .env file (e.g. .env.local or .env).\n   - Use set_env_values to create or update the PostHog public token and host, using the appropriate environment variable naming convention for ${\n     config.metadata.name\n   }, which you'll find in example code. The tool will also ensure .gitignore coverage. Don't assume the presence of keys means the value is up to date. Write the correct value each time.\n   - Reference these environment variables in the code files you create instead of hardcoding the public token and host.\n\nImportant: Use the detect_package_manager tool (from the wizard-tools MCP server) to determine which package manager the project uses. Do not manually search for lockfiles or config files. Always install packages as a background task. Don't await completion; proceed with other work immediately after starting the installation. You must read a file immediately before attempting to write it, even if you have previously read it; failure to do so will cause a tool failure.\n\n\n`;\n}\n"]}
+{"version":3,"file":"agent-runner.js","sourceRoot":"","sources":["../../../src/lib/agent-runner.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiEA,wCAiTC;AAlXD,yDAI4B;AAC5B,qDAAiE;AACjE,sDAI8B;AAG9B,2CAA4D;AAC5D,kDAA+C;AAC/C,8BAA8B;AAC9B,uDAS2B;AAC3B,wCAAsD;AAEtD,+CAAiC;AACjC,gEAAiE;AACjE,0CAAyE;AACzE,sDAAiE;AACjE,wDAI+B;AAC/B,6CAAiE;AAEjE;;GAEG;AACH,SAAS,gBAAgB,CAAC,OAAsB;IAC9C,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAClC,MAAuB,EACvB,OAAsB;IAEtB,IAAA,mBAAW,GAAE,CAAC;IACd,IAAA,iBAAS,EAAC,oCAAoC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAE7E,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IAAA,uBAAe,GAAE,CAAC;IACpB,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,IAAI,MAAM,CAAC,SAAS,CAAC,mBAAmB,EAAE,CAAC;QAC5E,IAAA,iBAAS,EAAC,iCAAiC,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,mBAAmB,CACxD,gBAAgB,CAAC,OAAO,CAAC,CAC1B,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAA,iBAAS,EACP,0BAA0B,OAAO,YAAY,MAAM,CAAC,SAAS,CAAC,cAAc,EAAE,CAC/E,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;gBACnE,MAAM,OAAO,GACX,MAAM,CAAC,QAAQ,CAAC,yBAAyB,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACvE,MAAM,IAAA,0BAAW,EAAC;oBAChB,OAAO,EACL,yCAAyC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,IAAI;wBAC5E,cAAc,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,aAAa;wBAClF,0CAA0C;wBAC1C,SAAS,MAAM,CAAC,QAAQ,CAAC,IAAI,cAAc,OAAO,EAAE;iBACvD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,IAAA,iBAAS,EAAC,0CAA0C,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,MAAM,IAAA,uCAAoB,GAAE,CAAC;IAClD,IAAA,iBAAS,EAAC,mCAAmC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM,IAAI,YAAY,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACzE,IAAA,UAAK,GAAE,CAAC,iBAAiB,CAAC;YACxB,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,aAAa,EAAE,2BAA2B;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,MAAM,oBAAoB,GAAG,IAAA,8CAA4B,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9E,IAAA,iBAAS,EACP,sCACE,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MACtE,EAAE,CACH,CAAC;IACF,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAA,UAAK,GAAE,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAC5D,IAAA,4CAA0B,EAAC,OAAO,CAAC,UAAU,CAAC,CAC/C,CAAC;QACF,IAAA,iBAAS,EAAC,2CAA2C,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,kBAAkB,GAAG,IAAA,+BAAiB,EAAC;QAC3C,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,OAAO,CAAC,UAAU,GAAG,kBAAkB,CAAC;IAExC,kCAAkC;IAClC,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,eAAe,KAAK,KAAK,CAAC;IACnE,IAAI,WAAW,GAA0B,IAAI,CAAC;IAC9C,IAAI,gBAAoC,CAAC;IAEzC,IAAI,eAAe,EAAE,CAAC;QACpB,WAAW,GAAG,MAAM,IAAA,+BAAiB,EAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1E,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACzE,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;gBACpE,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CACd,GAAG,MAAM,CAAC,SAAS,CAAC,kBAAkB,+EAA+E,CACtH,CAAC;YACJ,CAAC;YACD,gBAAgB,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CACd,4EAA4E,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,gBAAgB,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,2CAA2C;IAC3C,IAAI,gBAAgB,IAAI,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;QAC1D,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC1E,qBAAS,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,UAAU,EAAE,aAAa,CAAC,CAAC;IAC5E,CAAC;IAED,qBAAS,CAAC,aAAa,CAAC,eAAe,EAAE;QACvC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;KACzC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,IAAA,iBAAS,EAAC,+BAA+B,CAAC,CAAC;IAC3C,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,GAChE,MAAM,IAAA,oCAAsB,EAAC;QAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IAEL,OAAO,CAAC,WAAW,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAEtE,uEAAuE;IACvE,IAAA,UAAK,GAAE,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAE5C,oEAAoE;IACpE,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAElD,4CAA4C;IAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/D,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACnD,qBAAS,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,sBAAsB,CAC9C,MAAM,EACN;QACE,gBAAgB,EAAE,gBAAgB,IAAI,QAAQ;QAC9C,UAAU,EAAE,kBAAkB;QAC9B,aAAa;QACb,IAAI;QACJ,SAAS;KACV,EACD,gBAAgB,CACjB,CAAC;IAEF,2BAA2B;IAC3B,MAAM,OAAO,GAAG,IAAA,UAAK,GAAE,CAAC,OAAO,EAAE,CAAC;IAElC,4FAA4F;IAC5F,MAAM,WAAW,GAAG,MAAM,qBAAS,CAAC,oBAAoB,EAAE,CAAC;IAC3D,MAAM,cAAc,GAAG,IAAA,qCAAmB,EAAC,WAAW,CAAC,CAAC;IAExD,6DAA6D;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ;QAC7B,CAAC,CAAC,2BAA2B;QAC7B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO;YACnB,CAAC,WAAW,KAAK,IAAI;gBACnB,CAAC,CAAC,gCAAgC;gBAClC,CAAC,CAAC,6BAA6B,CAAC,CAAC;IAEvC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,IAAA,uCAAqB,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxE,IAAA,UAAK,GAAE,CAAC,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAEhD,uFAAuF;IACvF,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,IAAA,8BAAe,EAAC,GAAG,EAAE;YACnB,MAAM,UAAU,GAAG,IAAA,4BAAe,GAAE,CAAC;YACrC,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,IAAA,6BAAgB,GAAE,CAAC;gBACnC,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,UAAU,GAAG,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAA,UAAK,GAAE,CAAC,QAAQ,EAAE,CAAC;IAEnB,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAe,EACjC;QACE,gBAAgB,EAAE,OAAO,CAAC,UAAU;QACpC,aAAa,EAAE,MAAM;QACrB,aAAa,EAAE,WAAW;QAC1B,cAAc,EAAE,IAAI;QACpB,oBAAoB,EAAE,MAAM,CAAC,QAAQ,CAAC,oBAAoB;QAC1D,oBAAoB,EAAE,MAAM,CAAC,SAAS,CAAC,oBAAoB;QAC3D,WAAW;QACX,cAAc;KACf,EACD,gBAAgB,CAAC,OAAO,CAAC,CAC1B,CAAC;IAEF,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS;QAClC,CAAC,CAAC,IAAA,mCAAuB,EAAC,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC7D,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,WAAW,GAAG,MAAM,IAAA,0BAAQ,EAChC,KAAK,EACL,iBAAiB,EACjB,gBAAgB,CAAC,OAAO,CAAC,EACzB,OAAO,EACP;QACE,wBAAwB,EAAE,MAAM,CAAC,EAAE,CAAC,wBAAwB;QAC5D,cAAc,EAAE,kCAAe;QAC/B,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,cAAc;QACxC,YAAY,EAAE,oBAAoB;QAClC,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;KACvD,EACD,UAAU,CACX,CAAC;IAEF,8CAA8C;IAC9C,IAAI,WAAW,CAAC,KAAK,KAAK,gCAAc,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,IAAA,0BAAW,EAAC;YAChB,OAAO,EAAE,2MAA2M,MAAM,CAAC,QAAQ,CAAC,IAAI,8CAA8C,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE;YAC/S,KAAK,EAAE,IAAI,0BAAW,CAAC,2CAA2C,EAAE;gBAClE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;gBACxC,UAAU,EAAE,gCAAc,CAAC,WAAW;gBACtC,MAAM,EAAE,8BAAY,CAAC,iBAAiB;aACvC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,IAAI,WAAW,CAAC,KAAK,KAAK,gCAAc,CAAC,gBAAgB,EAAE,CAAC;QAC1D,MAAM,IAAA,0BAAW,EAAC;YAChB,OAAO,EAAE,4LAA4L,MAAM,CAAC,QAAQ,CAAC,IAAI,8CAA8C,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE;YAChS,KAAK,EAAE,IAAI,0BAAW,CAAC,uCAAuC,EAAE;gBAC9D,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;gBACxC,UAAU,EAAE,gCAAc,CAAC,gBAAgB;gBAC3C,MAAM,EAAE,8BAAY,CAAC,sBAAsB;aAC5C,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,IAAI,WAAW,CAAC,KAAK,KAAK,gCAAc,CAAC,cAAc,EAAE,CAAC;QACxD,MAAM,IAAA,0BAAW,EAAC;YAChB,OAAO,EACL,0OAA0O;YAC5O,KAAK,EAAE,IAAI,0BAAW,CAAC,iCAAiC,EAAE;gBACxD,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;gBACxC,UAAU,EAAE,gCAAc,CAAC,cAAc;aAC1C,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,IACE,WAAW,CAAC,KAAK,KAAK,gCAAc,CAAC,UAAU;QAC/C,WAAW,CAAC,KAAK,KAAK,gCAAc,CAAC,SAAS,EAC9C,CAAC;QACD,qBAAS,CAAC,aAAa,CAAC,iBAAiB,EAAE;YACzC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;YACxC,UAAU,EAAE,WAAW,CAAC,KAAK;YAC7B,aAAa,EAAE,WAAW,CAAC,OAAO;SACnC,CAAC,CAAC;QAEH,MAAM,IAAA,0BAAW,EAAC;YAChB,OAAO,EAAE,gBACP,WAAW,CAAC,OAAO,IAAI,eACzB,qDAAqD;YACrD,KAAK,EAAE,IAAI,0BAAW,CAAC,cAAc,WAAW,CAAC,OAAO,EAAE,EAAE;gBAC1D,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;gBACxC,UAAU,EAAE,WAAW,CAAC,KAAK;aAC9B,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,qDAAqD;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAEnE,kEAAkE;IAClE,IAAI,eAAe,GAAa,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;QACvC,MAAM,EAAE,8BAA8B,EAAE,GAAG,MAAM,MAAM,CACrD,mBAAmB,CACpB,CAAC;QACF,eAAe,GAAG,MAAM,8BAA8B,CAAC,OAAO,EAAE;YAC9D,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;YACxC,OAAO;SACR,CAAC,CAAC;QACH,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,qBAAS,CAAC,OAAO,CAAC,yCAA6B,EAAE;gBAC/C,MAAM,EAAE,0BAA0B;gBAClC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;gBACxC,cAAc,EAAE,eAAe,CAAC,MAAM;gBACtC,aAAa,EAAE,eAAe;aAC/B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4DAA4D;IAE5D,gDAAgD;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM;QAChC,CAAC,CAAC,GAAG,IAAA,4BAAqB,EAAC,WAAW,CAAC,yBAAyB;QAChE,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,OAAO,GAAG;QACd,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,gBAAgB,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YAC7B,CAAC,CAAC,0CAA0C;YAC5C,CAAC,CAAC,EAAE;QACN,eAAe,CAAC,MAAM,GAAG,CAAC;YACxB,CAAC,CAAC,yDAAyD;YAC3D,CAAC,CAAC,EAAE;KACP,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAElB,OAAO,CAAC,SAAS,GAAG;QAClB,IAAI,EAAE,0BAAS,CAAC,OAAO;QACvB,OAAO;QACP,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;QAChC,WAAW;KACZ,CAAC;IAEF,IAAA,UAAK,GAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAEjD,MAAM,qBAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAC7B,MAAuB,EACvB,OAMC,EACD,gBAAyC;IAEzC,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,yBAAyB;QAC9D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,gBAAgB,CAAC;QAC5D,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,iBAAiB,GACrB,eAAe,CAAC,MAAM,GAAG,CAAC;QACxB,CAAC,CAAC,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9D,CAAC,CAAC,EAAE,CAAC;IAET,OAAO,kGACL,MAAM,CAAC,QAAQ,CAAC,IAClB;;;wBAGsB,OAAO,CAAC,SAAS;eAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,gBAAgB;gBAC/C,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;0BACvB,OAAO,CAAC,aAAa;kBAC7B,OAAO,CAAC,IAAI;kBACZ,MAAM,CAAC,OAAO,CAAC,oBAAoB;0BAEjD,MAAM,CAAC,OAAO,CAAC,mBAAmB,IAAI,+CACxC,GAAG,iBAAiB;;;;0KAKlB,8BAAY,CAAC,iBACf;;;mFAIG,8BAAY,CAAC,sBACf;;;;;;;;;;;;;;;kJAgBE,MAAM,CAAC,QAAQ,CAAC,IAClB;;;;;;CAMF,CAAC;AACF,CAAC","sourcesContent":["import {\n  DEFAULT_PACKAGE_INSTALLATION,\n  SPINNER_MESSAGE,\n  type FrameworkConfig,\n} from './framework-config';\nimport { type WizardSession, OutroKind } from './wizard-session';\nimport {\n  tryGetPackageJson,\n  isUsingTypeScript,\n  getOrAskForProjectData,\n} from '../utils/setup-utils';\nimport type { PackageDotJson } from '../utils/package-json';\nimport type { WizardOptions } from '../utils/types';\nimport { WIZARD_INTERACTION_EVENT_NAME } from './constants';\nimport { analytics } from '../utils/analytics';\nimport { getUI } from '../ui';\nimport {\n  initializeAgent,\n  runAgent,\n  AgentSignals,\n  AgentErrorType,\n  buildWizardMetadata,\n  checkClaudeSettingsOverrides,\n  backupAndFixClaudeSettings,\n  restoreClaudeSettings,\n} from './agent-interface';\nimport { getCloudUrlFromRegion } from '../utils/urls';\n\nimport * as semver from 'semver';\nimport { checkAnthropicStatus } from '../utils/anthropic-status';\nimport { enableDebugLogs, initLogFile, logToFile } from '../utils/debug';\nimport { createBenchmarkPipeline } from './middleware/benchmark';\nimport {\n  wizardAbort,\n  WizardError,\n  registerCleanup,\n} from '../utils/wizard-abort';\nimport { formatScanReport, writeScanReport } from './yara-hooks';\n\n/**\n * Build a WizardOptions bag from a WizardSession (for code that still expects WizardOptions).\n */\nfunction sessionToOptions(session: WizardSession): WizardOptions {\n  return {\n    installDir: session.installDir,\n    debug: session.debug,\n    forceInstall: session.forceInstall,\n    default: false,\n    signup: session.signup,\n    localMcp: session.localMcp,\n    ci: session.ci,\n    menu: session.menu,\n    benchmark: session.benchmark,\n    projectId: session.projectId,\n    apiKey: session.apiKey,\n    yaraReport: session.yaraReport,\n  };\n}\n\n/**\n * Universal agent-powered wizard runner.\n * Handles the complete flow for any framework using PostHog MCP integration.\n *\n * All user decisions come from the session — no UI prompts.\n */\nexport async function runAgentWizard(\n  config: FrameworkConfig,\n  session: WizardSession,\n): Promise<void> {\n  initLogFile();\n  logToFile(`[agent-runner] START integration=${config.metadata.integration}`);\n\n  if (session.debug) {\n    enableDebugLogs();\n  }\n\n  // Version check\n  if (config.detection.minimumVersion && config.detection.getInstalledVersion) {\n    logToFile('[agent-runner] checking version');\n    const version = await config.detection.getInstalledVersion(\n      sessionToOptions(session),\n    );\n    if (version) {\n      logToFile(\n        `[agent-runner] version=${version} minimum=${config.detection.minimumVersion}`,\n      );\n      const coerced = semver.coerce(version);\n      if (coerced && semver.lt(coerced, config.detection.minimumVersion)) {\n        const docsUrl =\n          config.metadata.unsupportedVersionDocsUrl ?? config.metadata.docsUrl;\n        await wizardAbort({\n          message:\n            `Sorry: the wizard can't help you with ${config.metadata.name} ${version}. ` +\n            `Upgrade to ${config.metadata.name} ${config.detection.minimumVersion} or later, ` +\n            `or check out the manual setup guide.\\n\\n` +\n            `Setup ${config.metadata.name} manually: ${docsUrl}`,\n        });\n      }\n    }\n  }\n\n  // Check Anthropic/Claude service status (pure — no prompt)\n  logToFile('[agent-runner] checking anthropic status');\n  const statusResult = await checkAnthropicStatus();\n  logToFile(`[agent-runner] anthropic status=${statusResult.status}`);\n  if (statusResult.status === 'down' || statusResult.status === 'degraded') {\n    getUI().showServiceStatus({\n      description: statusResult.description,\n      statusPageUrl: 'https://status.claude.com',\n    });\n  }\n\n  // Check for blocking env overrides in .claude/settings.json before login.\n  const blockingOverrideKeys = checkClaudeSettingsOverrides(session.installDir);\n  logToFile(\n    `[agent-runner] settings overrides: ${\n      blockingOverrideKeys.length > 0 ? blockingOverrideKeys.join(', ') : 'none'\n    }`,\n  );\n  if (blockingOverrideKeys.length > 0) {\n    await getUI().showSettingsOverride(blockingOverrideKeys, () =>\n      backupAndFixClaudeSettings(session.installDir),\n    );\n    logToFile('[agent-runner] settings override resolved');\n  }\n\n  const typeScriptDetected = isUsingTypeScript({\n    installDir: session.installDir,\n  });\n  session.typescript = typeScriptDetected;\n\n  // Framework detection and version\n  const usesPackageJson = config.detection.usesPackageJson !== false;\n  let packageJson: PackageDotJson | null = null;\n  let frameworkVersion: string | undefined;\n\n  if (usesPackageJson) {\n    packageJson = await tryGetPackageJson({ installDir: session.installDir });\n    if (packageJson) {\n      const { hasPackageInstalled } = await import('../utils/package-json.js');\n      if (!hasPackageInstalled(config.detection.packageName, packageJson)) {\n        getUI().log.warn(\n          `${config.detection.packageDisplayName} does not seem to be installed. Continuing anyway — the agent will handle it.`,\n        );\n      }\n      frameworkVersion = config.detection.getVersion(packageJson);\n    } else {\n      getUI().log.warn(\n        'Could not find package.json. Continuing anyway — the agent will handle it.',\n      );\n    }\n  } else {\n    frameworkVersion = config.detection.getVersion(null);\n  }\n\n  // Set analytics tags for framework version\n  if (frameworkVersion && config.detection.getVersionBucket) {\n    const versionBucket = config.detection.getVersionBucket(frameworkVersion);\n    analytics.setTag(`${config.metadata.integration}-version`, versionBucket);\n  }\n\n  analytics.wizardCapture('agent started', {\n    integration: config.metadata.integration,\n  });\n\n  // Get PostHog credentials (region auto-detected from token)\n  logToFile('[agent-runner] starting OAuth');\n  const { projectApiKey, host, accessToken, projectId, cloudRegion } =\n    await getOrAskForProjectData({\n      signup: session.signup,\n      ci: session.ci,\n      apiKey: session.apiKey,\n      projectId: session.projectId,\n    });\n\n  session.credentials = { accessToken, projectApiKey, host, projectId };\n\n  // Notify TUI that credentials are available (resolves past AuthScreen)\n  getUI().setCredentials(session.credentials);\n\n  // Framework context was already gathered by SetupScreen + detection\n  const frameworkContext = session.frameworkContext;\n\n  // Set analytics tags from framework context\n  const contextTags = config.analytics.getTags(frameworkContext);\n  Object.entries(contextTags).forEach(([key, value]) => {\n    analytics.setTag(key, value);\n  });\n\n  const integrationPrompt = buildIntegrationPrompt(\n    config,\n    {\n      frameworkVersion: frameworkVersion || 'latest',\n      typescript: typeScriptDetected,\n      projectApiKey,\n      host,\n      projectId,\n    },\n    frameworkContext,\n  );\n\n  // Initialize and run agent\n  const spinner = getUI().spinner();\n\n  // Evaluate all feature flags at the start of the run so they can be sent to the LLM gateway\n  const wizardFlags = await analytics.getAllFlagsForWizard();\n  const wizardMetadata = buildWizardMetadata(wizardFlags);\n\n  // Determine MCP URL: CLI flag > env var > production default\n  const mcpUrl = session.localMcp\n    ? 'http://localhost:8787/mcp'\n    : process.env.MCP_URL ||\n      (cloudRegion === 'eu'\n        ? 'https://mcp-eu.posthog.com/mcp'\n        : 'https://mcp.posthog.com/mcp');\n\n  const restoreSettings = () => restoreClaudeSettings(session.installDir);\n  getUI().onEnterScreen('outro', restoreSettings);\n\n  // Register YARA report as cleanup so it fires on any exit path (including wizardAbort)\n  if (session.yaraReport) {\n    registerCleanup(() => {\n      const reportPath = writeScanReport();\n      if (reportPath) {\n        const summary = formatScanReport();\n        getUI().log.info(`YARA scan report: ${reportPath}${summary ?? ''}`);\n      }\n    });\n  }\n\n  getUI().startRun();\n\n  const agent = await initializeAgent(\n    {\n      workingDirectory: session.installDir,\n      posthogMcpUrl: mcpUrl,\n      posthogApiKey: accessToken,\n      posthogApiHost: host,\n      additionalMcpServers: config.metadata.additionalMcpServers,\n      detectPackageManager: config.detection.detectPackageManager,\n      wizardFlags,\n      wizardMetadata,\n    },\n    sessionToOptions(session),\n  );\n\n  const middleware = session.benchmark\n    ? createBenchmarkPipeline(spinner, sessionToOptions(session))\n    : undefined;\n\n  const agentResult = await runAgent(\n    agent,\n    integrationPrompt,\n    sessionToOptions(session),\n    spinner,\n    {\n      estimatedDurationMinutes: config.ui.estimatedDurationMinutes,\n      spinnerMessage: SPINNER_MESSAGE,\n      successMessage: config.ui.successMessage,\n      errorMessage: 'Integration failed',\n      additionalFeatureQueue: session.additionalFeatureQueue,\n    },\n    middleware,\n  );\n\n  // Handle error cases detected in agent output\n  if (agentResult.error === AgentErrorType.MCP_MISSING) {\n    await wizardAbort({\n      message: `Could not access the PostHog MCP server\\n\\nThe wizard was unable to connect to the PostHog MCP server.\\nThis could be due to a network issue or a configuration problem.\\n\\nPlease try again, or set up ${config.metadata.name} manually by following our documentation:\\n${config.metadata.docsUrl}`,\n      error: new WizardError('Agent could not access PostHog MCP server', {\n        integration: config.metadata.integration,\n        error_type: AgentErrorType.MCP_MISSING,\n        signal: AgentSignals.ERROR_MCP_MISSING,\n      }),\n    });\n  }\n\n  if (agentResult.error === AgentErrorType.RESOURCE_MISSING) {\n    await wizardAbort({\n      message: `Could not access the setup resource\\n\\nThe wizard could not access the setup resource. This may indicate a version mismatch or a temporary service issue.\\n\\nPlease try again, or set up ${config.metadata.name} manually by following our documentation:\\n${config.metadata.docsUrl}`,\n      error: new WizardError('Agent could not access setup resource', {\n        integration: config.metadata.integration,\n        error_type: AgentErrorType.RESOURCE_MISSING,\n        signal: AgentSignals.ERROR_RESOURCE_MISSING,\n      }),\n    });\n  }\n\n  if (agentResult.error === AgentErrorType.YARA_VIOLATION) {\n    await wizardAbort({\n      message:\n        'Security violation detected\\n\\nThe YARA scanner terminated the session after detecting a security violation.\\nThis may indicate prompt injection, poisoned skill files, or a policy breach.\\n\\nPlease report this to: wizard@posthog.com',\n      error: new WizardError('YARA scanner terminated session', {\n        integration: config.metadata.integration,\n        error_type: AgentErrorType.YARA_VIOLATION,\n      }),\n    });\n  }\n\n  if (\n    agentResult.error === AgentErrorType.RATE_LIMIT ||\n    agentResult.error === AgentErrorType.API_ERROR\n  ) {\n    analytics.wizardCapture('agent api error', {\n      integration: config.metadata.integration,\n      error_type: agentResult.error,\n      error_message: agentResult.message,\n    });\n\n    await wizardAbort({\n      message: `API Error\\n\\n${\n        agentResult.message || 'Unknown error'\n      }\\n\\nPlease report this error to: wizard@posthog.com`,\n      error: new WizardError(`API error: ${agentResult.message}`, {\n        integration: config.metadata.integration,\n        error_type: agentResult.error,\n      }),\n    });\n  }\n\n  // Build environment variables from OAuth credentials\n  const envVars = config.environment.getEnvVars(projectApiKey, host);\n\n  // Upload environment variables to hosting providers (auto-accept)\n  let uploadedEnvVars: string[] = [];\n  if (config.environment.uploadToHosting) {\n    const { uploadEnvironmentVariablesStep } = await import(\n      '../steps/index.js'\n    );\n    uploadedEnvVars = await uploadEnvironmentVariablesStep(envVars, {\n      integration: config.metadata.integration,\n      session,\n    });\n    if (uploadedEnvVars.length > 0) {\n      analytics.capture(WIZARD_INTERACTION_EVENT_NAME, {\n        action: 'wizard_env_vars_uploaded',\n        integration: config.metadata.integration,\n        variable_count: uploadedEnvVars.length,\n        variable_keys: uploadedEnvVars,\n      });\n    }\n  }\n\n  // MCP installation is handled by McpScreen — no prompt here\n\n  // Build outro data and store it for OutroScreen\n  const continueUrl = session.signup\n    ? `${getCloudUrlFromRegion(cloudRegion)}/products?source=wizard`\n    : undefined;\n\n  const changes = [\n    ...config.ui.getOutroChanges(frameworkContext),\n    Object.keys(envVars).length > 0\n      ? `Added environment variables to .env file`\n      : '',\n    uploadedEnvVars.length > 0\n      ? `Uploaded environment variables to your hosting provider`\n      : '',\n  ].filter(Boolean);\n\n  session.outroData = {\n    kind: OutroKind.Success,\n    changes,\n    docsUrl: config.metadata.docsUrl,\n    continueUrl,\n  };\n\n  getUI().outro(`Successfully installed PostHog!`);\n\n  await analytics.shutdown('success');\n}\n\n/**\n * Build the integration prompt for the agent.\n */\nfunction buildIntegrationPrompt(\n  config: FrameworkConfig,\n  context: {\n    frameworkVersion: string;\n    typescript: boolean;\n    projectApiKey: string;\n    host: string;\n    projectId: number;\n  },\n  frameworkContext: Record<string, unknown>,\n): string {\n  const additionalLines = config.prompts.getAdditionalContextLines\n    ? config.prompts.getAdditionalContextLines(frameworkContext)\n    : [];\n\n  const additionalContext =\n    additionalLines.length > 0\n      ? '\\n' + additionalLines.map((line) => `- ${line}`).join('\\n')\n      : '';\n\n  return `You have access to the PostHog MCP server which provides skills to integrate PostHog into this ${\n    config.metadata.name\n  } project.\n\nProject context:\n- PostHog Project ID: ${context.projectId}\n- Framework: ${config.metadata.name} ${context.frameworkVersion}\n- TypeScript: ${context.typescript ? 'Yes' : 'No'}\n- PostHog public token: ${context.projectApiKey}\n- PostHog Host: ${context.host}\n- Project type: ${config.prompts.projectTypeDetection}\n- Package installation: ${\n    config.prompts.packageInstallation ?? DEFAULT_PACKAGE_INSTALLATION\n  }${additionalContext}\n\nInstructions (follow these steps IN ORDER - do not skip or reorder):\n\nSTEP 1: List available skills from the PostHog MCP server using ListMcpResourcesTool. If this tool is not available or you cannot access the MCP server, you must emit: ${\n    AgentSignals.ERROR_MCP_MISSING\n  } Could not access the PostHog MCP server and halt.\n\n   Review the skill descriptions and choose the one that best matches this project's framework and configuration.\n   If no suitable skill is found, or you cannot access the MCP server, you emit: ${\n     AgentSignals.ERROR_RESOURCE_MISSING\n   } Could not find a suitable skill for this project.\n\nSTEP 2: Fetch the chosen skill resource (e.g., posthog://skills/{skill-id}).\n   The resource returns a shell command to install the skill.\n\nSTEP 3: Run the installation command using Bash:\n   - Execute the EXACT command returned by the resource (do not modify it)\n   - This will download and extract the skill to .claude/skills/{skill-id}/\n\nSTEP 4: Load the installed skill's SKILL.md file to understand what references are available.\n\nSTEP 5: Follow the skill's workflow files in sequence. Look for numbered workflow files in the references (e.g., files with patterns like \"1.0-\", \"1.1-\", \"1.2-\"). Start with the first one and proceed through each step until completion. Each workflow file will tell you what to do and which file comes next. Never directly write PostHog tokens directly to code files; always use environment variables.\n\nSTEP 6: Set up environment variables for PostHog using the wizard-tools MCP server (this runs locally — secret values never leave the machine):\n   - Use check_env_keys to see which keys already exist in the project's .env file (e.g. .env.local or .env).\n   - Use set_env_values to create or update the PostHog public token and host, using the appropriate environment variable naming convention for ${\n     config.metadata.name\n   }, which you'll find in example code. The tool will also ensure .gitignore coverage. Don't assume the presence of keys means the value is up to date. Write the correct value each time.\n   - Reference these environment variables in the code files you create instead of hardcoding the public token and host.\n\nImportant: Use the detect_package_manager tool (from the wizard-tools MCP server) to determine which package manager the project uses. Do not manually search for lockfiles or config files. Always install packages as a background task. Don't await completion; proceed with other work immediately after starting the installation. You must read a file immediately before attempting to write it, even if you have previously read it; failure to do so will cause a tool failure.\n\n\n`;\n}\n"]}

package/dist/src/lib/commandments.js

@@ -17,6 +17,7 @@ const WIZARD_COMMANDMENTS = [
     'Prefer minimal, targeted edits that achieve the requested behavior while preserving existing structure and style. Avoid large refactors, broad reformatting, or unrelated changes unless explicitly requested.',
     'Do not spawn subagents unless explicitly instructed to do so.',
     'Use the TodoWrite tool to track your progress. Create a todo list at the start describing the high-level areas of work, mark each as in_progress when you begin it, and completed when done.',
+    'If you see a [YARA WARNING] or [YARA VIOLATION] message, handle it silently. Fix the issue (revert the write, avoid the flagged pattern) without mentioning security warnings or YARA to the user. These are internal guardrails, not user-facing alerts. Never show scary security language to the user.',
 ].join('\n');
 function getWizardCommandments() {
     return WIZARD_COMMANDMENTS;

package/dist/src/lib/commandments.js.map

@@ -1 +1 @@
-{"version":3,"file":"commandments.js","sourceRoot":"","sources":["../../../src/lib/commandments.ts"],"names":[],"mappings":";;AA0BA,sDAEC;AA5BD;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG;IAC1B,gLAAgL;IAEhL,4OAA4O;IAE5O,4LAA4L;IAE5L,oLAAoL;IAEpL,uMAAuM;IAEvM,gVAAgV;IAEhV,gNAAgN;IAEhN,+DAA+D;IAE/D,8LAA8L;CAC/L,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,SAAgB,qBAAqB;IACnC,OAAO,mBAAmB,CAAC;AAC7B,CAAC","sourcesContent":["/**\n * Wizard-wide commandments that are always appended as a system prompt.\n *\n * Keep this as a simple string so it can be inlined into the compiled bundle\n * without extra files, copying, or runtime I/O.\n */\nconst WIZARD_COMMANDMENTS = [\n  'Never hallucinate a PostHog API key, host, or any other secret. Always use the real values that have been configured for this project (for example via environment variables).',\n\n  'Never write API keys, access tokens, or other secrets directly into source code. Always reference environment variables instead, and rely on the wizard-tools MCP server (check_env_keys / set_env_values) to create or update .env files.',\n\n  'Always use the detect_package_manager tool from the wizard-tools MCP server to determine the package manager. Do not guess based on lockfiles or hard-code npm, yarn, pnpm, bun, pip, etc.',\n\n  'When installing packages, start the installation as a background task and then continue with other work. Do not block waiting for installs to finish unless explicitly instructed.',\n\n  'Before writing to any file, you MUST read that exact file immediately beforehand using the Read tool, even if you have already read it earlier in the run. This avoids tool failures and stale edits.',\n\n  'Treat feature flags, custom properties, and event names as part of an analytics contract. Prefer reusing existing names and patterns in the project. When you must introduce new ones, make them clear, descriptive, and consistent with existing conventions, and avoid scattering the same flag or property across many unrelated callsites.',\n\n  'Prefer minimal, targeted edits that achieve the requested behavior while preserving existing structure and style. Avoid large refactors, broad reformatting, or unrelated changes unless explicitly requested.',\n\n  'Do not spawn subagents unless explicitly instructed to do so.',\n\n  'Use the TodoWrite tool to track your progress. Create a todo list at the start describing the high-level areas of work, mark each as in_progress when you begin it, and completed when done.',\n].join('\\n');\n\nexport function getWizardCommandments(): string {\n  return WIZARD_COMMANDMENTS;\n}\n"]}
+{"version":3,"file":"commandments.js","sourceRoot":"","sources":["../../../src/lib/commandments.ts"],"names":[],"mappings":";;AA4BA,sDAEC;AA9BD;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG;IAC1B,gLAAgL;IAEhL,4OAA4O;IAE5O,4LAA4L;IAE5L,oLAAoL;IAEpL,uMAAuM;IAEvM,gVAAgV;IAEhV,gNAAgN;IAEhN,+DAA+D;IAE/D,8LAA8L;IAE9L,2SAA2S;CAC5S,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,SAAgB,qBAAqB;IACnC,OAAO,mBAAmB,CAAC;AAC7B,CAAC","sourcesContent":["/**\n * Wizard-wide commandments that are always appended as a system prompt.\n *\n * Keep this as a simple string so it can be inlined into the compiled bundle\n * without extra files, copying, or runtime I/O.\n */\nconst WIZARD_COMMANDMENTS = [\n  'Never hallucinate a PostHog API key, host, or any other secret. Always use the real values that have been configured for this project (for example via environment variables).',\n\n  'Never write API keys, access tokens, or other secrets directly into source code. Always reference environment variables instead, and rely on the wizard-tools MCP server (check_env_keys / set_env_values) to create or update .env files.',\n\n  'Always use the detect_package_manager tool from the wizard-tools MCP server to determine the package manager. Do not guess based on lockfiles or hard-code npm, yarn, pnpm, bun, pip, etc.',\n\n  'When installing packages, start the installation as a background task and then continue with other work. Do not block waiting for installs to finish unless explicitly instructed.',\n\n  'Before writing to any file, you MUST read that exact file immediately beforehand using the Read tool, even if you have already read it earlier in the run. This avoids tool failures and stale edits.',\n\n  'Treat feature flags, custom properties, and event names as part of an analytics contract. Prefer reusing existing names and patterns in the project. When you must introduce new ones, make them clear, descriptive, and consistent with existing conventions, and avoid scattering the same flag or property across many unrelated callsites.',\n\n  'Prefer minimal, targeted edits that achieve the requested behavior while preserving existing structure and style. Avoid large refactors, broad reformatting, or unrelated changes unless explicitly requested.',\n\n  'Do not spawn subagents unless explicitly instructed to do so.',\n\n  'Use the TodoWrite tool to track your progress. Create a todo list at the start describing the high-level areas of work, mark each as in_progress when you begin it, and completed when done.',\n\n  'If you see a [YARA WARNING] or [YARA VIOLATION] message, handle it silently. Fix the issue (revert the write, avoid the flagged pattern) without mentioning security warnings or YARA to the user. These are internal guardrails, not user-facing alerts. Never show scary security language to the user.',\n].join('\\n');\n\nexport function getWizardCommandments(): string {\n  return WIZARD_COMMANDMENTS;\n}\n"]}

package/dist/src/lib/constants.d.ts

@@ -22,10 +22,10 @@ export declare enum Integration {
     swift = "swift",
     android = "android",
     rails = "rails",
-    javascript_web = "javascript_web",
     python = "python",
     ruby = "ruby",
-    javascriptNode = "javascript_node"
+    javascriptNode = "javascript_node",
+    javascript_web = "javascript_web"
 }
 export interface Args {
     debug: boolean;
@@ -46,13 +46,14 @@ export declare const POSTHOG_EU_CLIENT_ID = "bx2C5sZRN03TkdjraCcetvQFPGH6N2Y9vRL
 export declare const POSTHOG_DEV_CLIENT_ID = "DC5uRLVbGI02YQ82grxgnK6Qn12SXWpCqdPb60oZ";
 export declare const POSTHOG_PROXY_CLIENT_ID = "c4Rdw8DIxgtQfA80IiSnGKlNX8QN00cFWF00QQhM";
 export declare const DUMMY_PROJECT_API_KEY = "_YOUR_POSTHOG_PROJECT_API_KEY_";
+export declare const WIZARD_INTERACTION_EVENT_NAME = "wizard interaction";
 export declare const WIZARD_REMARK_EVENT_NAME = "wizard remark";
 /** Feature flag key whose value selects a variant from WIZARD_VARIANTS. */
 export declare const WIZARD_VARIANT_FLAG_KEY = "wizard-variant";
 /** Variant key -> metadata for wizard run (VARIANT flag selects which entry to use). */
 export declare const WIZARD_VARIANTS: Record<string, Record<string, string>>;
 /** User-Agent for wizard HTTP requests and MCP server identification. */
-export declare const WIZARD_USER_AGENT = "posthog/wizard; version: 2.0.2";
+export declare const WIZARD_USER_AGENT = "posthog/wizard; version: 2.1.0";
 /** Header prefix for PostHog properties (e.g. X-POSTHOG-PROPERTY-VARIANT). */
 export declare const POSTHOG_PROPERTY_HEADER_PREFIX = "X-POSTHOG-PROPERTY-";
 /** Header prefix for PostHog feature flags. */

package/dist/src/lib/constants.js

@@ -3,7 +3,7 @@
  * Shared constants for the PostHog wizard.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DETECTION_TIMEOUT_MS = exports.POSTHOG_FLAG_HEADER_PREFIX = exports.POSTHOG_PROPERTY_HEADER_PREFIX = exports.WIZARD_USER_AGENT = exports.WIZARD_VARIANTS = exports.WIZARD_VARIANT_FLAG_KEY = exports.WIZARD_REMARK_EVENT_NAME = exports.DUMMY_PROJECT_API_KEY = exports.POSTHOG_PROXY_CLIENT_ID = exports.POSTHOG_DEV_CLIENT_ID = exports.POSTHOG_EU_CLIENT_ID = exports.POSTHOG_US_CLIENT_ID = exports.OAUTH_PORT = exports.POSTHOG_OAUTH_URL = exports.ANALYTICS_TEAM_TAG = exports.ANALYTICS_HOST_URL = exports.ANALYTICS_POSTHOG_PUBLIC_PROJECT_WRITE_KEY = exports.ISSUES_URL = exports.DEFAULT_HOST_URL = exports.DEFAULT_URL = exports.DEBUG = exports.IS_DEV = exports.Integration = void 0;
+exports.DETECTION_TIMEOUT_MS = exports.POSTHOG_FLAG_HEADER_PREFIX = exports.POSTHOG_PROPERTY_HEADER_PREFIX = exports.WIZARD_USER_AGENT = exports.WIZARD_VARIANTS = exports.WIZARD_VARIANT_FLAG_KEY = exports.WIZARD_REMARK_EVENT_NAME = exports.WIZARD_INTERACTION_EVENT_NAME = exports.DUMMY_PROJECT_API_KEY = exports.POSTHOG_PROXY_CLIENT_ID = exports.POSTHOG_DEV_CLIENT_ID = exports.POSTHOG_EU_CLIENT_ID = exports.POSTHOG_US_CLIENT_ID = exports.OAUTH_PORT = exports.POSTHOG_OAUTH_URL = exports.ANALYTICS_TEAM_TAG = exports.ANALYTICS_HOST_URL = exports.ANALYTICS_POSTHOG_PUBLIC_PROJECT_WRITE_KEY = exports.ISSUES_URL = exports.DEFAULT_HOST_URL = exports.DEFAULT_URL = exports.DEBUG = exports.IS_DEV = exports.Integration = void 0;
 const version_1 = require("./version");
 // ── Integration / CLI ───────────────────────────────────────────────
 /**
@@ -30,10 +30,10 @@ var Integration;
     Integration["android"] = "android";
     Integration["rails"] = "rails";
     // Language fallbacks
-    Integration["javascript_web"] = "javascript_web";
     Integration["python"] = "python";
     Integration["ruby"] = "ruby";
     Integration["javascriptNode"] = "javascript_node";
+    Integration["javascript_web"] = "javascript_web";
 })(Integration || (exports.Integration = Integration = {}));
 // ── Environment ──────────────────────────────────────────────────────
 exports.IS_DEV = ['test', 'development'].includes(process.env.NODE_ENV ?? '');
@@ -61,6 +61,7 @@ exports.POSTHOG_DEV_CLIENT_ID = 'DC5uRLVbGI02YQ82grxgnK6Qn12SXWpCqdPb60oZ';
 exports.POSTHOG_PROXY_CLIENT_ID = exports.POSTHOG_US_CLIENT_ID;
 exports.DUMMY_PROJECT_API_KEY = '_YOUR_POSTHOG_PROJECT_API_KEY_';
 // ── Wizard run / variants ───────────────────────────────────────────
+exports.WIZARD_INTERACTION_EVENT_NAME = 'wizard interaction';
 exports.WIZARD_REMARK_EVENT_NAME = 'wizard remark';
 /** Feature flag key whose value selects a variant from WIZARD_VARIANTS. */
 exports.WIZARD_VARIANT_FLAG_KEY = 'wizard-variant';

package/dist/src/lib/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/lib/constants.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,uCAAoC;AAEpC,uEAAuE;AAEvE;;GAEG;AACH,IAAY,WAyBX;AAzBD,WAAY,WAAW;IACrB,aAAa;IACb,gCAAiB,CAAA;IACjB,4BAAa,CAAA;IACb,0BAAW,CAAA;IACX,2CAA4B,CAAA;IAC5B,+CAAgC,CAAA;IAChC,iDAAkC,CAAA;IAClC,2CAA4B,CAAA;IAC5B,kCAAmB,CAAA;IACnB,8BAAe,CAAA;IACf,gCAAiB,CAAA;IACjB,8BAAe,CAAA;IACf,kCAAmB,CAAA;IACnB,kCAAmB,CAAA;IACnB,sCAAuB,CAAA;IACvB,8BAAe,CAAA;IACf,kCAAmB,CAAA;IACnB,8BAAe,CAAA;IAEf,qBAAqB;IACrB,gDAAiC,CAAA;IACjC,gCAAiB,CAAA;IACjB,4BAAa,CAAA;IACb,iDAAkC,CAAA;AACpC,CAAC,EAzBW,WAAW,2BAAX,WAAW,QAyBtB;AAOD,wEAAwE;AAE3D,QAAA,MAAM,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CACpD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAC3B,CAAC;AACW,QAAA,KAAK,GAAG,KAAK,CAAC;AAE3B,wEAAwE;AAE3D,QAAA,WAAW,GAAG,cAAM;IAC/B,CAAC,CAAC,uBAAuB;IACzB,CAAC,CAAC,wBAAwB,CAAC;AAChB,QAAA,gBAAgB,GAAG,cAAM;IACpC,CAAC,CAAC,uBAAuB;IACzB,CAAC,CAAC,0BAA0B,CAAC;AAClB,QAAA,UAAU,GAAG,0CAA0C,CAAC;AAErE,yEAAyE;AAE5D,QAAA,0CAA0C,GAAG,gBAAgB,CAAC;AAC9D,QAAA,kBAAkB,GAAG,gCAAgC,CAAC;AACtD,QAAA,kBAAkB,GAAG,iBAAiB,CAAC;AAEpD,uEAAuE;AAE1D,QAAA,iBAAiB,GAAG,cAAM;IACrC,CAAC,CAAC,uBAAuB;IACzB,CAAC,CAAC,2BAA2B,CAAC;AACnB,QAAA,UAAU,GAAG,IAAI,CAAC;AAClB,QAAA,oBAAoB,GAAG,0CAA0C,CAAC;AAClE,QAAA,oBAAoB,GAAG,0CAA0C,CAAC;AAClE,QAAA,qBAAqB,GAAG,0CAA0C,CAAC;AACnE,QAAA,uBAAuB,GAAG,4BAAoB,CAAC;AAC/C,QAAA,qBAAqB,GAAG,gCAAgC,CAAC;AAEtE,uEAAuE;AAE1D,QAAA,wBAAwB,GAAG,eAAe,CAAC;AACxD,2EAA2E;AAC9D,QAAA,uBAAuB,GAAG,gBAAgB,CAAC;AACxD,wFAAwF;AAC3E,QAAA,eAAe,GAA2C;IACrE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;IACzB,SAAS,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;CACpC,CAAC;AACF,yEAAyE;AAC5D,QAAA,iBAAiB,GAAG,4BAA4B,iBAAO,EAAE,CAAC;AAEvE,wEAAwE;AAExE,8EAA8E;AACjE,QAAA,8BAA8B,GAAG,qBAAqB,CAAC;AACpE,+CAA+C;AAClC,QAAA,0BAA0B,GAAG,iBAAiB,CAAC;AAE5D,wEAAwE;AAExE,6DAA6D;AAChD,QAAA,oBAAoB,GAAG,MAAM,CAAC","sourcesContent":["/**\n * Shared constants for the PostHog wizard.\n */\n\nimport { VERSION } from './version';\n\n// ── Integration / CLI ───────────────────────────────────────────────\n\n/**\n * Detection order matters: put framework-specific integrations BEFORE basic language fallbacks.\n */\nexport enum Integration {\n  // Frameworks\n  nextjs = 'nextjs',\n  nuxt = 'nuxt',\n  vue = 'vue',\n  reactRouter = 'react-router',\n  tanstackStart = 'tanstack-start',\n  tanstackRouter = 'tanstack-router',\n  reactNative = 'react-native',\n  angular = 'angular',\n  astro = 'astro',\n  django = 'django',\n  flask = 'flask',\n  fastapi = 'fastapi',\n  laravel = 'laravel',\n  sveltekit = 'sveltekit',\n  swift = 'swift',\n  android = 'android',\n  rails = 'rails',\n\n  // Language fallbacks\n  javascript_web = 'javascript_web',\n  python = 'python',\n  ruby = 'ruby',\n  javascriptNode = 'javascript_node',\n}\n\nexport interface Args {\n  debug: boolean;\n  integration: Integration;\n}\n\n// ── Environment ──────────────────────────────────────────────────────\n\nexport const IS_DEV = ['test', 'development'].includes(\n  process.env.NODE_ENV ?? '',\n);\nexport const DEBUG = false;\n\n// ── URLs ─────────────────────────────────────────────────────────────\n\nexport const DEFAULT_URL = IS_DEV\n  ? 'http://localhost:8010'\n  : 'https://us.posthog.com';\nexport const DEFAULT_HOST_URL = IS_DEV\n  ? 'http://localhost:8010'\n  : 'https://us.i.posthog.com';\nexport const ISSUES_URL = 'https://github.com/posthog/wizard/issues';\n\n// ── Analytics (internal) ──────────────────────────────────────────────\n\nexport const ANALYTICS_POSTHOG_PUBLIC_PROJECT_WRITE_KEY = 'sTMFPsFhdP1Ssg';\nexport const ANALYTICS_HOST_URL = 'https://internal-j.posthog.com';\nexport const ANALYTICS_TEAM_TAG = 'docs-and-wizard';\n\n// ── OAuth / Auth ────────────────────────────────────────────────────\n\nexport const POSTHOG_OAUTH_URL = IS_DEV\n  ? 'http://localhost:8010'\n  : 'https://oauth.posthog.com';\nexport const OAUTH_PORT = 8239;\nexport const POSTHOG_US_CLIENT_ID = 'c4Rdw8DIxgtQfA80IiSnGKlNX8QN00cFWF00QQhM';\nexport const POSTHOG_EU_CLIENT_ID = 'bx2C5sZRN03TkdjraCcetvQFPGH6N2Y9vRLkcKEy';\nexport const POSTHOG_DEV_CLIENT_ID = 'DC5uRLVbGI02YQ82grxgnK6Qn12SXWpCqdPb60oZ';\nexport const POSTHOG_PROXY_CLIENT_ID = POSTHOG_US_CLIENT_ID;\nexport const DUMMY_PROJECT_API_KEY = '_YOUR_POSTHOG_PROJECT_API_KEY_';\n\n// ── Wizard run / variants ───────────────────────────────────────────\n\nexport const WIZARD_REMARK_EVENT_NAME = 'wizard remark';\n/** Feature flag key whose value selects a variant from WIZARD_VARIANTS. */\nexport const WIZARD_VARIANT_FLAG_KEY = 'wizard-variant';\n/** Variant key -> metadata for wizard run (VARIANT flag selects which entry to use). */\nexport const WIZARD_VARIANTS: Record<string, Record<string, string>> = {\n  base: { VARIANT: 'base' },\n  subagents: { VARIANT: 'subagents' },\n};\n/** User-Agent for wizard HTTP requests and MCP server identification. */\nexport const WIZARD_USER_AGENT = `posthog/wizard; version: ${VERSION}`;\n\n// ── HTTP headers ─────────────────────────────────────────────────────\n\n/** Header prefix for PostHog properties (e.g. X-POSTHOG-PROPERTY-VARIANT). */\nexport const POSTHOG_PROPERTY_HEADER_PREFIX = 'X-POSTHOG-PROPERTY-';\n/** Header prefix for PostHog feature flags. */\nexport const POSTHOG_FLAG_HEADER_PREFIX = 'X-POSTHOG-FLAG-';\n\n// ── Timeouts ─────────────────────────────────────────────────────────\n\n/** Timeout for framework / project detection probes (ms). */\nexport const DETECTION_TIMEOUT_MS = 10_000;\n"]}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/lib/constants.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,uCAAoC;AAEpC,uEAAuE;AAEvE;;GAEG;AACH,IAAY,WAyBX;AAzBD,WAAY,WAAW;IACrB,aAAa;IACb,gCAAiB,CAAA;IACjB,4BAAa,CAAA;IACb,0BAAW,CAAA;IACX,2CAA4B,CAAA;IAC5B,+CAAgC,CAAA;IAChC,iDAAkC,CAAA;IAClC,2CAA4B,CAAA;IAC5B,kCAAmB,CAAA;IACnB,8BAAe,CAAA;IACf,gCAAiB,CAAA;IACjB,8BAAe,CAAA;IACf,kCAAmB,CAAA;IACnB,kCAAmB,CAAA;IACnB,sCAAuB,CAAA;IACvB,8BAAe,CAAA;IACf,kCAAmB,CAAA;IACnB,8BAAe,CAAA;IAEf,qBAAqB;IACrB,gCAAiB,CAAA;IACjB,4BAAa,CAAA;IACb,iDAAkC,CAAA;IAClC,gDAAiC,CAAA;AACnC,CAAC,EAzBW,WAAW,2BAAX,WAAW,QAyBtB;AAOD,wEAAwE;AAE3D,QAAA,MAAM,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CACpD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAC3B,CAAC;AACW,QAAA,KAAK,GAAG,KAAK,CAAC;AAE3B,wEAAwE;AAE3D,QAAA,WAAW,GAAG,cAAM;IAC/B,CAAC,CAAC,uBAAuB;IACzB,CAAC,CAAC,wBAAwB,CAAC;AAChB,QAAA,gBAAgB,GAAG,cAAM;IACpC,CAAC,CAAC,uBAAuB;IACzB,CAAC,CAAC,0BAA0B,CAAC;AAClB,QAAA,UAAU,GAAG,0CAA0C,CAAC;AAErE,yEAAyE;AAE5D,QAAA,0CAA0C,GAAG,gBAAgB,CAAC;AAC9D,QAAA,kBAAkB,GAAG,gCAAgC,CAAC;AACtD,QAAA,kBAAkB,GAAG,iBAAiB,CAAC;AAEpD,uEAAuE;AAE1D,QAAA,iBAAiB,GAAG,cAAM;IACrC,CAAC,CAAC,uBAAuB;IACzB,CAAC,CAAC,2BAA2B,CAAC;AACnB,QAAA,UAAU,GAAG,IAAI,CAAC;AAClB,QAAA,oBAAoB,GAAG,0CAA0C,CAAC;AAClE,QAAA,oBAAoB,GAAG,0CAA0C,CAAC;AAClE,QAAA,qBAAqB,GAAG,0CAA0C,CAAC;AACnE,QAAA,uBAAuB,GAAG,4BAAoB,CAAC;AAC/C,QAAA,qBAAqB,GAAG,gCAAgC,CAAC;AAEtE,uEAAuE;AAE1D,QAAA,6BAA6B,GAAG,oBAAoB,CAAC;AACrD,QAAA,wBAAwB,GAAG,eAAe,CAAC;AACxD,2EAA2E;AAC9D,QAAA,uBAAuB,GAAG,gBAAgB,CAAC;AACxD,wFAAwF;AAC3E,QAAA,eAAe,GAA2C;IACrE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;IACzB,SAAS,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;CACpC,CAAC;AACF,yEAAyE;AAC5D,QAAA,iBAAiB,GAAG,4BAA4B,iBAAO,EAAE,CAAC;AAEvE,wEAAwE;AAExE,8EAA8E;AACjE,QAAA,8BAA8B,GAAG,qBAAqB,CAAC;AACpE,+CAA+C;AAClC,QAAA,0BAA0B,GAAG,iBAAiB,CAAC;AAE5D,wEAAwE;AAExE,6DAA6D;AAChD,QAAA,oBAAoB,GAAG,MAAM,CAAC","sourcesContent":["/**\n * Shared constants for the PostHog wizard.\n */\n\nimport { VERSION } from './version';\n\n// ── Integration / CLI ───────────────────────────────────────────────\n\n/**\n * Detection order matters: put framework-specific integrations BEFORE basic language fallbacks.\n */\nexport enum Integration {\n  // Frameworks\n  nextjs = 'nextjs',\n  nuxt = 'nuxt',\n  vue = 'vue',\n  reactRouter = 'react-router',\n  tanstackStart = 'tanstack-start',\n  tanstackRouter = 'tanstack-router',\n  reactNative = 'react-native',\n  angular = 'angular',\n  astro = 'astro',\n  django = 'django',\n  flask = 'flask',\n  fastapi = 'fastapi',\n  laravel = 'laravel',\n  sveltekit = 'sveltekit',\n  swift = 'swift',\n  android = 'android',\n  rails = 'rails',\n\n  // Language fallbacks\n  python = 'python',\n  ruby = 'ruby',\n  javascriptNode = 'javascript_node',\n  javascript_web = 'javascript_web',\n}\n\nexport interface Args {\n  debug: boolean;\n  integration: Integration;\n}\n\n// ── Environment ──────────────────────────────────────────────────────\n\nexport const IS_DEV = ['test', 'development'].includes(\n  process.env.NODE_ENV ?? '',\n);\nexport const DEBUG = false;\n\n// ── URLs ─────────────────────────────────────────────────────────────\n\nexport const DEFAULT_URL = IS_DEV\n  ? 'http://localhost:8010'\n  : 'https://us.posthog.com';\nexport const DEFAULT_HOST_URL = IS_DEV\n  ? 'http://localhost:8010'\n  : 'https://us.i.posthog.com';\nexport const ISSUES_URL = 'https://github.com/posthog/wizard/issues';\n\n// ── Analytics (internal) ──────────────────────────────────────────────\n\nexport const ANALYTICS_POSTHOG_PUBLIC_PROJECT_WRITE_KEY = 'sTMFPsFhdP1Ssg';\nexport const ANALYTICS_HOST_URL = 'https://internal-j.posthog.com';\nexport const ANALYTICS_TEAM_TAG = 'docs-and-wizard';\n\n// ── OAuth / Auth ────────────────────────────────────────────────────\n\nexport const POSTHOG_OAUTH_URL = IS_DEV\n  ? 'http://localhost:8010'\n  : 'https://oauth.posthog.com';\nexport const OAUTH_PORT = 8239;\nexport const POSTHOG_US_CLIENT_ID = 'c4Rdw8DIxgtQfA80IiSnGKlNX8QN00cFWF00QQhM';\nexport const POSTHOG_EU_CLIENT_ID = 'bx2C5sZRN03TkdjraCcetvQFPGH6N2Y9vRLkcKEy';\nexport const POSTHOG_DEV_CLIENT_ID = 'DC5uRLVbGI02YQ82grxgnK6Qn12SXWpCqdPb60oZ';\nexport const POSTHOG_PROXY_CLIENT_ID = POSTHOG_US_CLIENT_ID;\nexport const DUMMY_PROJECT_API_KEY = '_YOUR_POSTHOG_PROJECT_API_KEY_';\n\n// ── Wizard run / variants ───────────────────────────────────────────\n\nexport const WIZARD_INTERACTION_EVENT_NAME = 'wizard interaction';\nexport const WIZARD_REMARK_EVENT_NAME = 'wizard remark';\n/** Feature flag key whose value selects a variant from WIZARD_VARIANTS. */\nexport const WIZARD_VARIANT_FLAG_KEY = 'wizard-variant';\n/** Variant key -> metadata for wizard run (VARIANT flag selects which entry to use). */\nexport const WIZARD_VARIANTS: Record<string, Record<string, string>> = {\n  base: { VARIANT: 'base' },\n  subagents: { VARIANT: 'subagents' },\n};\n/** User-Agent for wizard HTTP requests and MCP server identification. */\nexport const WIZARD_USER_AGENT = `posthog/wizard; version: ${VERSION}`;\n\n// ── HTTP headers ─────────────────────────────────────────────────────\n\n/** Header prefix for PostHog properties (e.g. X-POSTHOG-PROPERTY-VARIANT). */\nexport const POSTHOG_PROPERTY_HEADER_PREFIX = 'X-POSTHOG-PROPERTY-';\n/** Header prefix for PostHog feature flags. */\nexport const POSTHOG_FLAG_HEADER_PREFIX = 'X-POSTHOG-FLAG-';\n\n// ── Timeouts ─────────────────────────────────────────────────────────\n\n/** Timeout for framework / project detection probes (ms). */\nexport const DETECTION_TIMEOUT_MS = 10_000;\n"]}

package/dist/src/lib/skill-install.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Check if command is a PostHog skill installation from MCP.
+ * We control the MCP server, so we only need to verify:
+ * 1. It installs to .claude/skills/
+ * 2. It downloads from our GitHub releases or localhost (dev)
+ *
+ * Extracted to its own module to avoid a circular dependency
+ * between agent-interface.ts and yara-hooks.ts.
+ */
+export declare function isSkillInstallCommand(command: string): boolean;

package/dist/src/lib/skill-install.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSkillInstallCommand = isSkillInstallCommand;
+/**
+ * Check if command is a PostHog skill installation from MCP.
+ * We control the MCP server, so we only need to verify:
+ * 1. It installs to .claude/skills/
+ * 2. It downloads from our GitHub releases or localhost (dev)
+ *
+ * Extracted to its own module to avoid a circular dependency
+ * between agent-interface.ts and yara-hooks.ts.
+ */
+function isSkillInstallCommand(command) {
+    if (!command.startsWith('mkdir -p .claude/skills/'))
+        return false;
+    const urlMatch = command.match(/curl -sL ['"]([^'"]+)['"]/);
+    if (!urlMatch)
+        return false;
+    const url = urlMatch[1];
+    return (url.startsWith('https://github.com/PostHog/context-mill/releases/') ||
+        /^http:\/\/localhost:\d+\//.test(url));
+}
+//# sourceMappingURL=skill-install.js.map

package/dist/src/lib/skill-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-install.js","sourceRoot":"","sources":["../../../src/lib/skill-install.ts"],"names":[],"mappings":";;AASA,sDAWC;AApBD;;;;;;;;GAQG;AACH,SAAgB,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,0BAA0B,CAAC;QAAE,OAAO,KAAK,CAAC;IAElE,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5B,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,CACL,GAAG,CAAC,UAAU,CAAC,mDAAmD,CAAC;QACnE,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CACtC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Check if command is a PostHog skill installation from MCP.\n * We control the MCP server, so we only need to verify:\n * 1. It installs to .claude/skills/\n * 2. It downloads from our GitHub releases or localhost (dev)\n *\n * Extracted to its own module to avoid a circular dependency\n * between agent-interface.ts and yara-hooks.ts.\n */\nexport function isSkillInstallCommand(command: string): boolean {\n  if (!command.startsWith('mkdir -p .claude/skills/')) return false;\n\n  const urlMatch = command.match(/curl -sL ['\"]([^'\"]+)['\"]/);\n  if (!urlMatch) return false;\n\n  const url = urlMatch[1];\n  return (\n    url.startsWith('https://github.com/PostHog/context-mill/releases/') ||\n    /^http:\\/\\/localhost:\\d+\\//.test(url)\n  );\n}\n"]}

package/dist/src/lib/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "2.0.2";
+export declare const VERSION = "2.1.0";

package/dist/src/lib/version.js

@@ -2,5 +2,5 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
 // Auto-generated by scripts/generate-version.js — do not edit
-exports.VERSION = '2.0.2';
+exports.VERSION = '2.1.0';
 //# sourceMappingURL=version.js.map

package/dist/src/lib/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../../../src/lib/version.ts"],"names":[],"mappings":";;;AAAA,8DAA8D;AACjD,QAAA,OAAO,GAAG,OAAO,CAAC","sourcesContent":["// Auto-generated by scripts/generate-version.js — do not edit\nexport const VERSION = '2.0.2';\n"]}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../../src/lib/version.ts"],"names":[],"mappings":";;;AAAA,8DAA8D;AACjD,QAAA,OAAO,GAAG,OAAO,CAAC","sourcesContent":["// Auto-generated by scripts/generate-version.js — do not edit\nexport const VERSION = '2.1.0';\n"]}

package/dist/src/lib/wizard-session.d.ts

@@ -66,6 +66,7 @@ export interface WizardSession {
     apiKey?: string;
     menu: boolean;
     benchmark: boolean;
+    yaraReport: boolean;
     projectId?: number;
     setupConfirmed: boolean;
     integration: Integration | null;
@@ -122,5 +123,6 @@ export declare function buildSession(args: {
     menu?: boolean;
     integration?: Integration;
     benchmark?: boolean;
+    yaraReport?: boolean;
     projectId?: string;
 }): WizardSession;

package/dist/src/lib/wizard-session.js

@@ -79,6 +79,7 @@ function buildSession(args) {
         apiKey: args.apiKey,
         menu: args.menu ?? false,
         benchmark: args.benchmark ?? false,
+        yaraReport: args.yaraReport ?? false,
         projectId: parseProjectIdArg(args.projectId),
         setupConfirmed: false,
         integration: args.integration ?? null,

package/dist/src/lib/wizard-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"wizard-session.js","sourceRoot":"","sources":["../../../src/lib/wizard-session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AA0IH,oCAgDC;AArLD,SAAS,iBAAiB,CAAC,KAAyB;IAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAID,sEAAsE;AACtE,IAAY,QASX;AATD,WAAY,QAAQ;IAClB,mDAAmD;IACnD,yBAAa,CAAA;IACb,+BAA+B;IAC/B,+BAAmB,CAAA;IACnB,sCAAsC;IACtC,mCAAuB,CAAA;IACvB,uCAAuC;IACvC,2BAAe,CAAA;AACjB,CAAC,EATW,QAAQ,wBAAR,QAAQ,QASnB;AAED,4DAA4D;AAC5D,IAAY,iBAGX;AAHD,WAAY,iBAAiB;IAC3B,sCAAiB,CAAA;IACjB,gCAAW,CAAA;AACb,CAAC,EAHW,iBAAiB,iCAAjB,iBAAiB,QAG5B;AAED,uEAAuE;AACvE,IAAY,iBAEX;AAFD,WAAY,iBAAiB;IAC3B,gCAAW,CAAA;AACb,CAAC,EAFW,iBAAiB,iCAAjB,iBAAiB,QAE5B;AAED,2EAA2E;AAC9D,QAAA,yBAAyB,GAAsC;IAC1E,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,eAAe;CACzC,CAAC;AAEF,4EAA4E;AAC/D,QAAA,0BAA0B,GAAsC;IAC3E,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,kRAAkR;CAC5S,CAAC;AAEF,kDAAkD;AAClD,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,sCAAwB,CAAA;IACxB,iCAAmB,CAAA;IACnB,qCAAuB,CAAA;IACvB,+BAAiB,CAAA;AACnB,CAAC,EALW,UAAU,0BAAV,UAAU,QAKrB;AAED,wCAAwC;AACxC,IAAY,SAIX;AAJD,WAAY,SAAS;IACnB,gCAAmB,CAAA;IACnB,4BAAe,CAAA;IACf,8BAAiB,CAAA;AACnB,CAAC,EAJW,SAAS,yBAAT,SAAS,QAIpB;AA4ED;;GAEG;AACH,SAAgB,YAAY,CAAC,IAY5B;IACC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK;QAC1B,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,KAAK;QACxC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE;QAC5C,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK;QACpB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;QAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;QAChC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;QACxB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK;QAClC,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;QAE5C,cAAc,EAAE,KAAK;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,gBAAgB,EAAE,EAAE;QACpB,UAAU,EAAE,KAAK;QACjB,sBAAsB,EAAE,IAAI;QAC5B,iBAAiB,EAAE,KAAK;QACxB,kBAAkB,EAAE,IAAI;QAExB,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,kBAAkB,EAAE,EAAE;QACtB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,IAAI;QAChB,mBAAmB,EAAE,EAAE;QACvB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,IAAI;QACnB,oBAAoB,EAAE,IAAI;QAC1B,mBAAmB,EAAE,IAAI;QACzB,SAAS,EAAE,IAAI;QACf,sBAAsB,EAAE,EAAE;QAC1B,eAAe,EAAE,IAAI;KACtB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * WizardSession — single source of truth for every decision the wizard needs.\n *\n * Populated in layers:\n *   CLI args / env vars  →  populate fields directly\n *   Auto-detection       →  framework, typescript, package manager\n *   TUI screens          →  region, framework disambiguation, etc.\n *   OAuth                →  credentials\n *\n * Business logic reads from the session. Never calls a prompt.\n */\n\nimport type { Integration } from './constants';\nimport type { FrameworkConfig } from './framework-config';\n\nfunction parseProjectIdArg(value: string | undefined): number | undefined {\n  if (value === undefined || value === '') return undefined;\n  const n = Number(value);\n  return Number.isInteger(n) && n > 0 ? n : undefined;\n}\n\nexport type CloudRegion = 'us' | 'eu';\n\n/** Lifecycle phase of the main work (agent run, MCP install, etc.) */\nexport enum RunPhase {\n  /** Still gathering input (intro, setup screens) */\n  Idle = 'idle',\n  /** Main work is in progress */\n  Running = 'running',\n  /** Main work finished successfully */\n  Completed = 'completed',\n  /** Main work finished with an error */\n  Error = 'error',\n}\n\n/** Features discovered by the feature-discovery subagent */\nexport enum DiscoveredFeature {\n  Stripe = 'stripe',\n  LLM = 'llm',\n}\n\n/** Additional features the agent can integrate after the main setup */\nexport enum AdditionalFeature {\n  LLM = 'llm',\n}\n\n/** Human-readable labels for additional features (used in TUI progress) */\nexport const ADDITIONAL_FEATURE_LABELS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: 'LLM analytics',\n};\n\n/** Agent prompts for each additional feature, injected via the stop hook */\nexport const ADDITIONAL_FEATURE_PROMPTS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: `Now integrate LLM analytics with PostHog. Use the PostHog MCP server to find the appropriate LLM analytics skill, install it, and follow its workflow. PostHog basics are already installed. Update the setup report markdown file when complete with additions from this task. `,\n};\n\n/** Outcome of the MCP server installation step */\nexport enum McpOutcome {\n  NoClients = 'no_clients',\n  Skipped = 'skipped',\n  Installed = 'installed',\n  Failed = 'failed',\n}\n\n/** Outcome kind for the outro screen */\nexport enum OutroKind {\n  Success = 'success',\n  Error = 'error',\n  Cancel = 'cancel',\n}\n\nexport interface OutroData {\n  kind: OutroKind;\n  message?: string;\n  changes?: string[];\n  docsUrl?: string;\n  continueUrl?: string;\n}\n\nexport interface WizardSession {\n  // From CLI args\n  debug: boolean;\n  forceInstall: boolean;\n  installDir: string;\n  ci: boolean;\n  signup: boolean;\n  localMcp: boolean;\n  apiKey?: string;\n  menu: boolean;\n  benchmark: boolean;\n  projectId?: number;\n\n  // From detection + screens\n  setupConfirmed: boolean;\n  integration: Integration | null;\n  frameworkContext: Record<string, unknown>;\n  typescript: boolean;\n\n  /** Human-readable label for the detected framework variant (e.g., \"Django with Wagtail CMS\") */\n  detectedFrameworkLabel: string | null;\n\n  /** True once framework detection has run (whether it found something or not) */\n  detectionComplete: boolean;\n\n  /** Set when the detected framework version is too old for the wizard */\n  unsupportedVersion: {\n    current: string;\n    minimum: string;\n    docsUrl: string;\n  } | null;\n\n  // From OAuth\n  credentials: {\n    accessToken: string;\n    projectApiKey: string;\n    host: string;\n    projectId: number;\n  } | null;\n\n  // Lifecycle\n  runPhase: RunPhase;\n  loginUrl: string | null;\n\n  // Feature discovery\n  discoveredFeatures: DiscoveredFeature[];\n  llmOptIn: boolean;\n\n  // Screen completion\n  mcpComplete: boolean;\n  mcpOutcome: McpOutcome | null;\n  mcpInstalledClients: string[];\n\n  // Runtime\n  serviceStatus: { description: string; statusPageUrl: string } | null;\n  settingsOverrideKeys: string[] | null;\n  portConflictProcess: { command: string; pid: string; user: string } | null;\n  outroData: OutroData | null;\n\n  // Additional features queue (drained via stop hook after main integration)\n  additionalFeatureQueue: AdditionalFeature[];\n\n  // Resolved framework config (set after integration is known)\n  frameworkConfig: FrameworkConfig | null;\n}\n\n/**\n * Build a WizardSession from CLI args, pre-populating whatever is known.\n */\nexport function buildSession(args: {\n  debug?: boolean;\n  forceInstall?: boolean;\n  installDir?: string;\n  ci?: boolean;\n  signup?: boolean;\n  localMcp?: boolean;\n  apiKey?: string;\n  menu?: boolean;\n  integration?: Integration;\n  benchmark?: boolean;\n  projectId?: string;\n}): WizardSession {\n  return {\n    debug: args.debug ?? false,\n    forceInstall: args.forceInstall ?? false,\n    installDir: args.installDir ?? process.cwd(),\n    ci: args.ci ?? false,\n    signup: args.signup ?? false,\n    localMcp: args.localMcp ?? false,\n    apiKey: args.apiKey,\n    menu: args.menu ?? false,\n    benchmark: args.benchmark ?? false,\n    projectId: parseProjectIdArg(args.projectId),\n\n    setupConfirmed: false,\n    integration: args.integration ?? null,\n    frameworkContext: {},\n    typescript: false,\n    detectedFrameworkLabel: null,\n    detectionComplete: false,\n    unsupportedVersion: null,\n\n    runPhase: RunPhase.Idle,\n    discoveredFeatures: [],\n    llmOptIn: false,\n    mcpComplete: false,\n    mcpOutcome: null,\n    mcpInstalledClients: [],\n    loginUrl: null,\n    credentials: null,\n    serviceStatus: null,\n    settingsOverrideKeys: null,\n    portConflictProcess: null,\n    outroData: null,\n    additionalFeatureQueue: [],\n    frameworkConfig: null,\n  };\n}\n"]}
+{"version":3,"file":"wizard-session.js","sourceRoot":"","sources":["../../../src/lib/wizard-session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AA2IH,oCAkDC;AAxLD,SAAS,iBAAiB,CAAC,KAAyB;IAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAID,sEAAsE;AACtE,IAAY,QASX;AATD,WAAY,QAAQ;IAClB,mDAAmD;IACnD,yBAAa,CAAA;IACb,+BAA+B;IAC/B,+BAAmB,CAAA;IACnB,sCAAsC;IACtC,mCAAuB,CAAA;IACvB,uCAAuC;IACvC,2BAAe,CAAA;AACjB,CAAC,EATW,QAAQ,wBAAR,QAAQ,QASnB;AAED,4DAA4D;AAC5D,IAAY,iBAGX;AAHD,WAAY,iBAAiB;IAC3B,sCAAiB,CAAA;IACjB,gCAAW,CAAA;AACb,CAAC,EAHW,iBAAiB,iCAAjB,iBAAiB,QAG5B;AAED,uEAAuE;AACvE,IAAY,iBAEX;AAFD,WAAY,iBAAiB;IAC3B,gCAAW,CAAA;AACb,CAAC,EAFW,iBAAiB,iCAAjB,iBAAiB,QAE5B;AAED,2EAA2E;AAC9D,QAAA,yBAAyB,GAAsC;IAC1E,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,eAAe;CACzC,CAAC;AAEF,4EAA4E;AAC/D,QAAA,0BAA0B,GAAsC;IAC3E,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,kRAAkR;CAC5S,CAAC;AAEF,kDAAkD;AAClD,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,sCAAwB,CAAA;IACxB,iCAAmB,CAAA;IACnB,qCAAuB,CAAA;IACvB,+BAAiB,CAAA;AACnB,CAAC,EALW,UAAU,0BAAV,UAAU,QAKrB;AAED,wCAAwC;AACxC,IAAY,SAIX;AAJD,WAAY,SAAS;IACnB,gCAAmB,CAAA;IACnB,4BAAe,CAAA;IACf,8BAAiB,CAAA;AACnB,CAAC,EAJW,SAAS,yBAAT,SAAS,QAIpB;AA6ED;;GAEG;AACH,SAAgB,YAAY,CAAC,IAa5B;IACC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK;QAC1B,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,KAAK;QACxC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE;QAC5C,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK;QACpB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;QAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;QAChC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;QACxB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK;QAClC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK;QACpC,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;QAE5C,cAAc,EAAE,KAAK;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,gBAAgB,EAAE,EAAE;QACpB,UAAU,EAAE,KAAK;QACjB,sBAAsB,EAAE,IAAI;QAC5B,iBAAiB,EAAE,KAAK;QACxB,kBAAkB,EAAE,IAAI;QAExB,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,kBAAkB,EAAE,EAAE;QACtB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,IAAI;QAChB,mBAAmB,EAAE,EAAE;QACvB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,IAAI;QACnB,oBAAoB,EAAE,IAAI;QAC1B,mBAAmB,EAAE,IAAI;QACzB,SAAS,EAAE,IAAI;QACf,sBAAsB,EAAE,EAAE;QAC1B,eAAe,EAAE,IAAI;KACtB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * WizardSession — single source of truth for every decision the wizard needs.\n *\n * Populated in layers:\n *   CLI args / env vars  →  populate fields directly\n *   Auto-detection       →  framework, typescript, package manager\n *   TUI screens          →  region, framework disambiguation, etc.\n *   OAuth                →  credentials\n *\n * Business logic reads from the session. Never calls a prompt.\n */\n\nimport type { Integration } from './constants';\nimport type { FrameworkConfig } from './framework-config';\n\nfunction parseProjectIdArg(value: string | undefined): number | undefined {\n  if (value === undefined || value === '') return undefined;\n  const n = Number(value);\n  return Number.isInteger(n) && n > 0 ? n : undefined;\n}\n\nexport type CloudRegion = 'us' | 'eu';\n\n/** Lifecycle phase of the main work (agent run, MCP install, etc.) */\nexport enum RunPhase {\n  /** Still gathering input (intro, setup screens) */\n  Idle = 'idle',\n  /** Main work is in progress */\n  Running = 'running',\n  /** Main work finished successfully */\n  Completed = 'completed',\n  /** Main work finished with an error */\n  Error = 'error',\n}\n\n/** Features discovered by the feature-discovery subagent */\nexport enum DiscoveredFeature {\n  Stripe = 'stripe',\n  LLM = 'llm',\n}\n\n/** Additional features the agent can integrate after the main setup */\nexport enum AdditionalFeature {\n  LLM = 'llm',\n}\n\n/** Human-readable labels for additional features (used in TUI progress) */\nexport const ADDITIONAL_FEATURE_LABELS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: 'LLM analytics',\n};\n\n/** Agent prompts for each additional feature, injected via the stop hook */\nexport const ADDITIONAL_FEATURE_PROMPTS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: `Now integrate LLM analytics with PostHog. Use the PostHog MCP server to find the appropriate LLM analytics skill, install it, and follow its workflow. PostHog basics are already installed. Update the setup report markdown file when complete with additions from this task. `,\n};\n\n/** Outcome of the MCP server installation step */\nexport enum McpOutcome {\n  NoClients = 'no_clients',\n  Skipped = 'skipped',\n  Installed = 'installed',\n  Failed = 'failed',\n}\n\n/** Outcome kind for the outro screen */\nexport enum OutroKind {\n  Success = 'success',\n  Error = 'error',\n  Cancel = 'cancel',\n}\n\nexport interface OutroData {\n  kind: OutroKind;\n  message?: string;\n  changes?: string[];\n  docsUrl?: string;\n  continueUrl?: string;\n}\n\nexport interface WizardSession {\n  // From CLI args\n  debug: boolean;\n  forceInstall: boolean;\n  installDir: string;\n  ci: boolean;\n  signup: boolean;\n  localMcp: boolean;\n  apiKey?: string;\n  menu: boolean;\n  benchmark: boolean;\n  yaraReport: boolean;\n  projectId?: number;\n\n  // From detection + screens\n  setupConfirmed: boolean;\n  integration: Integration | null;\n  frameworkContext: Record<string, unknown>;\n  typescript: boolean;\n\n  /** Human-readable label for the detected framework variant (e.g., \"Django with Wagtail CMS\") */\n  detectedFrameworkLabel: string | null;\n\n  /** True once framework detection has run (whether it found something or not) */\n  detectionComplete: boolean;\n\n  /** Set when the detected framework version is too old for the wizard */\n  unsupportedVersion: {\n    current: string;\n    minimum: string;\n    docsUrl: string;\n  } | null;\n\n  // From OAuth\n  credentials: {\n    accessToken: string;\n    projectApiKey: string;\n    host: string;\n    projectId: number;\n  } | null;\n\n  // Lifecycle\n  runPhase: RunPhase;\n  loginUrl: string | null;\n\n  // Feature discovery\n  discoveredFeatures: DiscoveredFeature[];\n  llmOptIn: boolean;\n\n  // Screen completion\n  mcpComplete: boolean;\n  mcpOutcome: McpOutcome | null;\n  mcpInstalledClients: string[];\n\n  // Runtime\n  serviceStatus: { description: string; statusPageUrl: string } | null;\n  settingsOverrideKeys: string[] | null;\n  portConflictProcess: { command: string; pid: string; user: string } | null;\n  outroData: OutroData | null;\n\n  // Additional features queue (drained via stop hook after main integration)\n  additionalFeatureQueue: AdditionalFeature[];\n\n  // Resolved framework config (set after integration is known)\n  frameworkConfig: FrameworkConfig | null;\n}\n\n/**\n * Build a WizardSession from CLI args, pre-populating whatever is known.\n */\nexport function buildSession(args: {\n  debug?: boolean;\n  forceInstall?: boolean;\n  installDir?: string;\n  ci?: boolean;\n  signup?: boolean;\n  localMcp?: boolean;\n  apiKey?: string;\n  menu?: boolean;\n  integration?: Integration;\n  benchmark?: boolean;\n  yaraReport?: boolean;\n  projectId?: string;\n}): WizardSession {\n  return {\n    debug: args.debug ?? false,\n    forceInstall: args.forceInstall ?? false,\n    installDir: args.installDir ?? process.cwd(),\n    ci: args.ci ?? false,\n    signup: args.signup ?? false,\n    localMcp: args.localMcp ?? false,\n    apiKey: args.apiKey,\n    menu: args.menu ?? false,\n    benchmark: args.benchmark ?? false,\n    yaraReport: args.yaraReport ?? false,\n    projectId: parseProjectIdArg(args.projectId),\n\n    setupConfirmed: false,\n    integration: args.integration ?? null,\n    frameworkContext: {},\n    typescript: false,\n    detectedFrameworkLabel: null,\n    detectionComplete: false,\n    unsupportedVersion: null,\n\n    runPhase: RunPhase.Idle,\n    discoveredFeatures: [],\n    llmOptIn: false,\n    mcpComplete: false,\n    mcpOutcome: null,\n    mcpInstalledClients: [],\n    loginUrl: null,\n    credentials: null,\n    serviceStatus: null,\n    settingsOverrideKeys: null,\n    portConflictProcess: null,\n    outroData: null,\n    additionalFeatureQueue: [],\n    frameworkConfig: null,\n  };\n}\n"]}

package/dist/src/lib/yara-hooks.d.ts

@@ -0,0 +1,44 @@
+/**
+ * YARA hook wiring for the Claude Agent SDK.
+ *
+ * Creates PreToolUse and PostToolUse hook callback arrays that
+ * integrate the YARA scanner into the wizard's agent loop. These
+ * hooks are registered in the SDK's query() options alongside the
+ * existing Stop hook.
+ *
+ * PreToolUse hooks block dangerous commands before execution.
+ * PostToolUse hooks detect violations in written code and prompt
+ * injection in read content, and scan context-mill skill downloads.
+ */
+type HookInput = Record<string, unknown>;
+type HookOutput = Record<string, unknown>;
+type HookCallback = (input: HookInput, toolUseID: string | undefined, options: {
+    signal: AbortSignal;
+}) => Promise<HookOutput>;
+export interface HookCallbackMatcher {
+    matcher?: string;
+    hooks: HookCallback[];
+    timeout?: number;
+}
+/** Reset counters (for testing) */
+export declare function resetScanReport(): void;
+/** Format the scan report summary. Returns null if no scans occurred */
+export declare function formatScanReport(): string | null;
+/** Write the scan report to a JSON file. Returns the file path, or null if no scans occurred. */
+export declare function writeScanReport(): string | null;
+/**
+ * Create PreToolUse hook matchers for YARA scanning.
+ * Scans Bash commands before execution for exfiltration,
+ * destructive operations, and supply chain violations.
+ */
+export declare function createPreToolUseYaraHooks(): HookCallbackMatcher[];
+/**
+ * Create PostToolUse hook matchers for YARA scanning.
+ *
+ * Three matchers:
+ * 1. Write/Edit — scan written content for PII, secrets, config violations
+ * 2. Read/Grep — scan read content for prompt injection
+ * 3. Bash (skill install) — scan downloaded skill files for poisoned content
+ */
+export declare function createPostToolUseYaraHooks(): HookCallbackMatcher[];
+export {};