@posthog/wizard 2.21.0 → 2.22.0

package/dist/{start-tui-BRvm5VP9.js → start-tui-DaQiY_EB.js}

@@ -1,20 +1,20 @@
-import { M as POSTHOG_DOCS_URL, O as Integration, R as REMOTE_SKILLS_BASE_URL, U as WIZARD_TOOLS_MENU_FLAG_KEY, _ as SIGNUP_WIZARD_READINESS_CONFIG, d as relativeToInstallDir, k as OAUTH_PORTS, l as WIZARD_LOG_FILE, m as setUI, q as getSkillsBaseUrl, s as logToFile, y as getBlockingServiceKeys } from "./debug-h7Z9zEbD.js";
-import { t as analytics } from "./analytics-Bl5DPj_0.js";
-import { o as extractOAuthCode, t as getOrAskForProjectData } from "./setup-utils-BfV4pydt.js";
-import { a as getUiHostFromHost } from "./urls-B66Ib2jT.js";
-import { t as ApiError } from "./api-DuA0_88V.js";
+import { A as OAUTH_PORTS, J as WIZARD_TOOLS_MENU_FLAG_KEY, L as POSTHOG_ORG_AI_SETTINGS_URL, P as POSTHOG_DOCS_URL, R as POSTHOG_PRIVACY_URL, U as REMOTE_SKILLS_BASE_URL, V as POSTHOG_TERMS_URL, _ as SIGNUP_WIZARD_READINESS_CONFIG, d as relativeToInstallDir, j as OAUTH_TIMEOUT_MS, k as Integration, l as WIZARD_LOG_FILE, m as setUI, s as logToFile, y as getBlockingServiceKeys } from "./debug-D8QAez2V.js";
+import { t as analytics } from "./analytics-C_lVPZQT.js";
+import { o as extractOAuthCode, t as getOrAskForProjectData } from "./setup-utils-DmhPyWkp.js";
+import { a as getUiHostFromHost } from "./urls-BNFpfcN8.js";
+import { t as ApiError } from "./api-QI1lO_Bz.js";
 import { t as ADDITIONAL_FEATURE_LABELS } from "./wizard-session-G3VWD6hv.js";
-import { i as wizardAbort } from "./wizard-abort-D1_DnFjm.js";
-import { _ as AUDIT_CHECKS_KEY, b as coerceAuditChecks, g as AUDIT_CHECKS_FILE, m as fetchSkillMenu, p as downloadSkill, x as getAuditChecks, y as AUDIT_SEVERITY_STYLE } from "./agent-interface-DE7txTqh.js";
-import { f as Colors, p as Icons, t as EVENT_PLAN_FILE } from "./posthog-integration-ChdwFPMj.js";
+import { i as wizardAbort } from "./wizard-abort-BmYb0bG2.js";
+import { _ as AUDIT_CHECKS_KEY, b as coerceAuditChecks, g as AUDIT_CHECKS_FILE, m as fetchSkillMenu, p as downloadSkill, x as getAuditChecks, y as AUDIT_SEVERITY_STYLE } from "./agent-interface-DZmVoik2.js";
+import { f as Colors, p as Icons, t as EVENT_PLAN_FILE } from "./posthog-integration-mrMF-2IP.js";
 import { a as getProgramConfig, d as getContentBlocks, f as POSTHOG_SDKS, i as Program, o as DISPLAY_NAME, p as STRIPE_SDKS, s as SOURCE_MAPS_CONTEXT_KEYS, u as fetchHealthIssues } from "./bin.js";
-import { A as SplitView, C as ConfirmationInput, D as useKeyBindings, E as PickerMenu, M as WizardStore, O as ProgressList, S as ModalOverlay, T as useStdoutDimensions, _ as HNViewer, a as VisualBox, b as EventPlanViewer, d as SEVERITY_LABEL, f as SEVERITY_ORDER, h as LearnCard, i as AUDIT_AREA_SLIDES, k as LoadingBox, l as McpScreen, m as TipsCard, n as SlackConnectScreen, o as AuditChecksViewer, p as ServiceHealthList, r as AUDIT_3000_AREA_SLIDES, s as McpSuggestedPromptsScreen, t as OutroScreen, u as IssueTable, v as TabContainer, x as LogViewer, y as ScreenContainer } from "./OutroScreen-CqF6SdBo.js";
+import { A as useKeyBindings, C as EventPlanViewer, E as ConfirmationInput, F as WizardStore, M as LoadingBox, N as SplitView, O as useStdoutDimensions, S as ScreenContainer, T as ModalOverlay, _ as TipsCard, a as SlackConnectScreen, b as HNViewer, c as VisualBox, f as McpScreen, g as ServiceHealthList, h as SEVERITY_ORDER, i as OutroScreen, j as ProgressList, k as PickerMenu, l as AuditChecksViewer, m as SEVERITY_LABEL, n as SkillSourceInfo, o as AUDIT_3000_AREA_SLIDES, p as IssueTable, r as useSkillEntry, s as AUDIT_AREA_SLIDES, t as AiOptInRequiredScreen, u as McpSuggestedPromptsScreen, v as LearnCard, w as LogViewer, x as TabContainer } from "./AiOptInRequiredScreen-N6L80szR.js";
 import { t as ALL_FEATURE_VALUES } from "./defaults-BNWIWzjc.js";
-import { a as getSupportedClients, c as removeMCPServer, i as getInstalledClients, o as getSupportedPluginClients, s as installPlugins, u as isPluginCapable } from "./add-mcp-server-to-clients-DQHGhzt6.js";
-import { spawn, spawnSync } from "node:child_process";
-import { join } from "node:path";
+import { a as getSupportedClients, c as removeMCPServer, i as getInstalledClients, o as getSupportedPluginClients, s as installPlugins, u as isPluginCapable } from "./add-mcp-server-to-clients-DqHCkHqM.js";
 import * as fs$1 from "fs";
 import path from "path";
+import { join as join$1 } from "node:path";
+import { spawn, spawnSync } from "node:child_process";
 import { Box, Text, render, useInput } from "ink";
 import { Fragment, createElement, useEffect, useMemo, useState, useSyncExternalStore } from "react";
 import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
@@ -67,6 +67,9 @@ var InkUI = class {
 	setApiUser(user) {
 		this.store.setApiUser(user);
 	}
+	waitForAiOptIn() {
+		return this.store.getGate("ai-opt-in");
+	}
 	setDetectedFramework(label) {
 		this.store.setDetectedFramework(label);
 	}
@@ -98,6 +101,9 @@ var InkUI = class {
 	showAuthError(detail) {
 		this.store.showAuthError(detail);
 	}
+	showSessionTimeout() {
+		this.store.showSessionTimeout();
+	}
 	requestQuestion(question) {
 		return this.store.requestQuestion(question);
 	}
@@ -837,7 +843,7 @@ const WizardTitle = ({ title }) => /* @__PURE__ */ jsxs(Text, {
 		title
 	]
 });
-const IntroScreenLayout = ({ installDir, title = "PostHog Wizard 🦔", showSubtitle = true, body, showDetection = true, detectionRows, children, menuOptions, onSelect, programLabel, skillId, errorView }) => {
+const IntroScreenLayout = ({ installDir, title = "PostHog Wizard 🦔", showSubtitle = true, body, showDetection = true, detectionRows, children, menuOptions, menuAlign = "center", onSelect, programLabel, skillId, errorView }) => {
 	const resolvedMenuOptions = menuOptions === void 0 ? [{
 		label: "Continue",
 		value: "continue"
@@ -933,9 +939,10 @@ const IntroScreenLayout = ({ installDir, title = "PostHog Wizard 🦔", showSubt
 				]
 			}),
 			/* @__PURE__ */ jsx(Box, {
-				width: 24,
+				width: menuAlign === "left" ? 64 : 24,
+				marginTop: 1,
 				children: resolvedMenuOptions && onSelect && /* @__PURE__ */ jsx(Box, {
-					justifyContent: "center",
+					justifyContent: menuAlign === "left" ? "flex-start" : "center",
 					children: /* @__PURE__ */ jsx(PickerMenu, {
 						options: resolvedMenuOptions,
 						onSelect: (value) => {
@@ -948,68 +955,51 @@ const IntroScreenLayout = ({ installDir, title = "PostHog Wizard 🦔", showSubt
 	}) });
 };
 //#endregion
-//#region src/ui/tui/screens/SkillSourceInfo.tsx
+//#region src/ui/tui/components/PrivacyPanel.tsx
 /**
-* Shared "Skill: <id> / URL: <downloadUrl>" block for intro screens.
+* PrivacyPanel — Shared disclosure component.
 *
-* `useSkillEntry` fetches the entry from the skill menu and re-runs when
-* `skillId` or `local` change. The previous fetch is cancelled (its result
-* is ignored) so a session that flips `local=false → true` mid-mount picks
-* up the right base URL.
+* Single source of truth for the wizard's privacy disclosure, rendered
+* identically from the intro screen ("Privacy & data usage" menu option)
+* and as an overlay from the auth screen ([I] keystroke).
 *
-* `<SkillSourceInfo>` renders the block, taking the entry as a prop so the
-* caller can reuse the same hook result for additional UI (e.g. showing
-* `skillEntry.name`) without invoking the hook twice.
+* Must fit in a default-sized macOS Terminal (~24 rows). Two condensed
+* paragraphs carry the top-level disclosure; the link footer follows.
+* Users who want the full legal text follow the Terms / Privacy URLs to
+* their browser.
 */
-function useSkillEntry(skillId, local) {
-	const [skillEntry, setSkillEntry] = useState(null);
-	const [fetchFailed, setFetchFailed] = useState(false);
-	useEffect(() => {
-		if (!skillId) {
-			setFetchFailed(true);
-			return;
-		}
-		let cancelled = false;
-		setSkillEntry(null);
-		setFetchFailed(false);
-		fetchSkillMenu(getSkillsBaseUrl(local)).then((menu) => {
-			if (cancelled) return;
-			if (!menu) {
-				setFetchFailed(true);
-				return;
-			}
-			const match = Object.values(menu.categories).flat().find((s) => s.id === skillId);
-			if (match) setSkillEntry(match);
-			else setFetchFailed(true);
-		});
-		return () => {
-			cancelled = true;
-		};
-	}, [skillId, local]);
-	return {
-		skillEntry,
-		fetchFailed
-	};
-}
-const SkillSourceInfo = ({ skillId, skillEntry, fetchFailed }) => /* @__PURE__ */ jsxs(Box, {
-	flexDirection: "column",
-	children: [/* @__PURE__ */ jsxs(Text, { children: [
-		"Skill:",
-		" ",
-		/* @__PURE__ */ jsx(Text, {
-			italic: true,
-			color: "cyan",
-			children: skillId ?? "unknown"
-		})
-	] }), /* @__PURE__ */ jsxs(Text, { children: [
-		"URL:",
-		" ",
-		/* @__PURE__ */ jsx(Text, {
-			color: "cyan",
-			children: skillEntry?.downloadUrl ?? (fetchFailed ? "unavailable" : "Loading...")
-		})
-	] })]
-});
+const PrivacyPanel = () => {
+	return /* @__PURE__ */ jsxs(Box, {
+		flexDirection: "column",
+		width: 64,
+		flexShrink: 0,
+		children: [
+			/* @__PURE__ */ jsx(Text, { children: "We use Anthropic's Claude via the PostHog LLM gateway to read your source files as AI context. .env* files, secrets, and anything matched by the security scanner stay on your machine." }),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(Text, { children: "To use the wizard, AI features must be enabled in your organization's settings." })
+			}),
+			/* @__PURE__ */ jsxs(Box, {
+				marginTop: 1,
+				flexDirection: "column",
+				children: [
+					/* @__PURE__ */ jsxs(Text, { children: ["Terms: ", /* @__PURE__ */ jsx(Text, {
+						color: "cyan",
+						children: POSTHOG_TERMS_URL
+					})] }),
+					/* @__PURE__ */ jsxs(Text, { children: ["Privacy: ", /* @__PURE__ */ jsx(Text, {
+						color: "cyan",
+						children: POSTHOG_PRIVACY_URL
+					})] }),
+					/* @__PURE__ */ jsxs(Text, { children: ["AI settings: ", /* @__PURE__ */ jsx(Text, {
+						color: "cyan",
+						children: POSTHOG_ORG_AI_SETTINGS_URL
+					})] })
+				]
+			})
+		]
+	});
+};
 //#endregion
 //#region src/ui/tui/screens/PostHogIntegrationIntroScreen.tsx
 /**
@@ -1046,7 +1036,7 @@ const FrameworkPicker = ({ store, onComplete }) => {
 		})),
 		onSelect: (value) => {
 			const integration = Array.isArray(value) ? value[0] : value;
-			import("./registry-VSSRH3sU.js").then((n) => n.n).then(({ FRAMEWORK_REGISTRY }) => {
+			import("./registry-BGUo4PlM.js").then((n) => n.n).then(({ FRAMEWORK_REGISTRY }) => {
 				const config = FRAMEWORK_REGISTRY[integration];
 				store.setFrameworkConfig(integration, config);
 				store.setDetectedFramework(config.metadata.name);
@@ -1079,7 +1069,7 @@ const PostHogIntegrationIntroScreen = ({ store }) => {
 	const needsFrameworkPick = session.detectionComplete && !session.frameworkConfig;
 	const unsupported = session.unsupportedVersion;
 	const showContinue = session.frameworkConfig !== null && !detecting && !pickingFramework && view === "default" && !unsupported;
-	const title = detecting ? "PostHog Wizard starting up" : "PostHog Wizard 🦔";
+	const title = view === "privacy" ? "Wizard privacy & usage" : detecting ? "PostHog Wizard starting up" : "PostHog Wizard 🦔";
 	let body = null;
 	if (detecting) body = /* @__PURE__ */ jsx(Box, {
 		marginY: 1,
@@ -1101,7 +1091,7 @@ const PostHogIntegrationIntroScreen = ({ store }) => {
 	});
 	else if (view === "more-info") body = /* @__PURE__ */ jsxs(Box, {
 		flexDirection: "column",
-		width: 56,
+		width: 64,
 		flexShrink: 0,
 		children: [
 			/* @__PURE__ */ jsxs(Text, { children: ["The wizard is an agent that executes PostHog tasks. Its code is open source: ", /* @__PURE__ */ jsx(Text, {
@@ -1128,10 +1118,10 @@ const PostHogIntegrationIntroScreen = ({ store }) => {
 				marginTop: 1,
 				paddingLeft: 4,
 				children: [
-					/* @__PURE__ */ jsxs(Text, { children: [`\u2022`, " Product Analytics"] }),
-					/* @__PURE__ */ jsxs(Text, { children: [`\u2022`, " Web Analytics"] }),
-					/* @__PURE__ */ jsxs(Text, { children: [`\u2022`, " Session Replay"] }),
-					/* @__PURE__ */ jsxs(Text, { children: [`\u2022`, " Error Tracking"] })
+					/* @__PURE__ */ jsxs(Text, { children: [`•`, " Product Analytics"] }),
+					/* @__PURE__ */ jsxs(Text, { children: [`•`, " Web Analytics"] }),
+					/* @__PURE__ */ jsxs(Text, { children: [`•`, " Session Replay"] }),
+					/* @__PURE__ */ jsxs(Text, { children: [`•`, " Error Tracking"] })
 				]
 			}),
 			/* @__PURE__ */ jsxs(Box, {
@@ -1148,6 +1138,7 @@ const PostHogIntegrationIntroScreen = ({ store }) => {
 			})
 		]
 	});
+	else if (view === "privacy") body = /* @__PURE__ */ jsx(PrivacyPanel, {});
 	else if (showContinue) body = /* @__PURE__ */ jsx(Fragment$1, { children: /* @__PURE__ */ jsx(Box, { children: /* @__PURE__ */ jsx(Text, { children: "Let's do two hours of work in eight minutes." }) }) });
 	const detectionRows = [];
 	if (frameworkLabel) {
@@ -1218,6 +1209,13 @@ const PostHogIntegrationIntroScreen = ({ store }) => {
 	else if (view === "more-info") menuOptions = [{
 		label: "Back",
 		value: "back"
+	}, {
+		label: "Privacy & data usage",
+		value: "privacy"
+	}];
+	else if (view === "privacy") menuOptions = [{
+		label: "Back",
+		value: "back"
 	}];
 	else if (showContinue) menuOptions = [
 		{
@@ -1252,8 +1250,9 @@ const PostHogIntegrationIntroScreen = ({ store }) => {
 			setPickingFramework(true);
 			setManuallySelected(true);
 		} else if (value === "more-info") setView("more-info");
+		else if (value === "privacy") setView("privacy");
 		else if (value === "tools") setView("tools");
-		else if (value === "back") setView("default");
+		else if (value === "back") setView(view === "privacy" ? "more-info" : "default");
 		else store.completeSetup();
 	};
 	return /* @__PURE__ */ jsx(IntroScreenLayout, {
@@ -1264,6 +1263,7 @@ const PostHogIntegrationIntroScreen = ({ store }) => {
 		showDetection: showContinue,
 		detectionRows,
 		menuOptions: unsupported ? null : menuOptions,
+		menuAlign: "center",
 		onSelect: handleSelect,
 		programLabel: session.programLabel,
 		skillId: session.skillId,
@@ -1582,6 +1582,7 @@ const MigrationIntroScreen = ({ store }) => {
 */
 const SourceMapsIntroScreen = ({ store }) => {
 	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	const [view, setView] = useState("default");
 	const { session } = store;
 	const detectError = session.frameworkContext[SOURCE_MAPS_CONTEXT_KEYS.detectError];
 	const variant = session.frameworkContext[SOURCE_MAPS_CONTEXT_KEYS.skillVariant];
@@ -1596,7 +1597,54 @@ const SourceMapsIntroScreen = ({ store }) => {
 		label: "Skill",
 		value: `error-tracking-upload-source-maps-${variant}`
 	});
-	const body = /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsxs(Box, {
+	const body = view === "more-info" ? /* @__PURE__ */ jsxs(Box, {
+		flexDirection: "column",
+		width: 56,
+		flexShrink: 0,
+		children: [
+			/* @__PURE__ */ jsxs(Text, { children: [
+				"The wizard is an agent that executes PostHog tasks. Its code is open source: ",
+				/* @__PURE__ */ jsx(Text, {
+					color: "cyan",
+					children: "https://github.com/PostHog/wizard"
+				}),
+				"."
+			] }),
+			/* @__PURE__ */ jsx(Box, {
+				flexDirection: "column",
+				marginTop: 1,
+				children: /* @__PURE__ */ jsxs(Text, { children: [
+					"The",
+					" ",
+					/* @__PURE__ */ jsx(Text, {
+						italic: true,
+						color: "cyan",
+						children: session.programLabel
+					}),
+					" ",
+					"program sets up your project to upload source maps to PostHog, so Error Tracking shows production stack traces in your original source instead of minified bundles. It will:"
+				] })
+			}),
+			/* @__PURE__ */ jsxs(Box, {
+				flexDirection: "column",
+				marginTop: 1,
+				paddingLeft: 4,
+				children: [
+					/* @__PURE__ */ jsxs(Text, { children: ["•", " Ask for a personal API key to authorize uploads"] }),
+					/* @__PURE__ */ jsxs(Text, { children: ["•", " Wire map generation + upload into your build"] }),
+					/* @__PURE__ */ jsxs(Text, { children: ["•", " Write the upload credentials to your .env"] }),
+					/* @__PURE__ */ jsxs(Text, { children: ["•", " Wire CI for deploys and offer a local test run"] })
+				]
+			}),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(Text, {
+					dimColor: true,
+					children: "Maps upload to PostHog during the production build and never need to be served publicly."
+				})
+			})
+		]
+	}) : view === "privacy" ? /* @__PURE__ */ jsx(PrivacyPanel, {}) : /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsxs(Box, {
 		flexDirection: "column",
 		alignItems: "center",
 		children: [/* @__PURE__ */ jsx(Text, { children: "Upload source maps for accurate error stack traces." }), /* @__PURE__ */ jsx(Box, {
@@ -1643,23 +1691,46 @@ const SourceMapsIntroScreen = ({ store }) => {
 		}],
 		onSelect: () => process.exit(1)
 	})] }) : void 0;
+	const menuOptions = view === "more-info" ? [{
+		label: "Back",
+		value: "back"
+	}, {
+		label: "Privacy & data usage",
+		value: "privacy"
+	}] : view === "privacy" ? [{
+		label: "Back",
+		value: "back"
+	}] : [
+		{
+			label: "Continue",
+			value: "continue"
+		},
+		{
+			label: "More info",
+			value: "more-info"
+		},
+		{
+			label: "Cancel",
+			value: "cancel"
+		}
+	];
+	const title = view === "privacy" ? "Wizard privacy & usage" : "PostHog Wizard 🦔";
 	return /* @__PURE__ */ jsx(IntroScreenLayout, {
 		installDir: session.installDir,
+		title,
+		showSubtitle: view === "default",
 		body,
-		showDetection: true,
+		showDetection: view === "default",
 		detectionRows,
 		errorView,
 		programLabel: session.programLabel,
 		skillId: session.skillId,
-		menuOptions: [{
-			label: "Continue",
-			value: "continue"
-		}, {
-			label: "Cancel",
-			value: "cancel"
-		}],
+		menuOptions,
 		onSelect: (value) => {
 			if (value === "cancel") process.exit(0);
+			else if (value === "more-info") setView("more-info");
+			else if (value === "privacy") setView("privacy");
+			else if (value === "back") setView(view === "privacy" ? "more-info" : "default");
 			else store.completeSetup();
 		}
 	});
@@ -1832,7 +1903,7 @@ const DetectErrorBody = ({ error }) => {
 * Unlike the generic OutroScreen, this spells out the operational facts a user
 * needs to actually get de-minified stack traces: that packages were installed
 * and upload credentials written to .env, plus the three gotchas (builds
-* upload, run the build, mirror the env vars in CI). All static guidance —
+* upload, run the build, give CI the same credentials). All static guidance —
 * driven only by the program's `buildOutroData` (kind / message / report /
 * docs), no per-run data.
 */
@@ -1899,12 +1970,7 @@ const SourceMapsOutroScreen = ({ store }) => {
 									bold: true,
 									children: "CI"
 								}),
-								", make sure the build job exposes the same env vars the wizard added to your ",
-								/* @__PURE__ */ jsx(Text, {
-									bold: true,
-									children: ".env"
-								}),
-								"."
+								", the build job needs the same upload credentials. If the wizard wired your pipeline, add the referenced secrets to your CI provider (e.g. GitHub repo secrets) before your next deploy."
 							] })
 						]
 					}),
@@ -1915,7 +1981,7 @@ const SourceMapsOutroScreen = ({ store }) => {
 							" ",
 							/* @__PURE__ */ jsx(Text, {
 								bold: true,
-								children: join(store.session.installDir, outroData.reportFile)
+								children: join$1(store.session.installDir, outroData.reportFile)
 							})
 						] })
 					}),
@@ -2797,7 +2863,7 @@ const PendingChecksList = ({ checks }) => {
 //#region src/ui/tui/screens/audit/AuditRunScreen.tsx
 const AuditRunScreen = ({ store }) => {
 	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
-	useFileWatcher(join(store.session.installDir, AUDIT_CHECKS_FILE), (parsed) => store.setFrameworkContext(AUDIT_CHECKS_KEY, coerceAuditChecks(parsed)));
+	useFileWatcher(join$1(store.session.installDir, AUDIT_CHECKS_FILE), (parsed) => store.setFrameworkContext(AUDIT_CHECKS_KEY, coerceAuditChecks(parsed)));
 	const statuses = store.statusMessages.length > 0 ? store.statusMessages : void 0;
 	const [columns] = useStdoutDimensions();
 	const checks = getAuditChecks(store.session);
@@ -2983,7 +3049,7 @@ const AuditOutroScreen = ({ store }) => {
 								bold: true,
 								children: "Report saved to:"
 							}),
-							/* @__PURE__ */ jsx(Text, { children: join(store.session.installDir, outroData.reportFile) }),
+							/* @__PURE__ */ jsx(Text, { children: join$1(store.session.installDir, outroData.reportFile) }),
 							/* @__PURE__ */ jsx(Text, {
 								dimColor: true,
 								children: "A markdown file in your project folder. Open it in any editor to read the full audit."
@@ -3747,7 +3813,7 @@ const PlayfieldRow = ({ row, state }) => {
 const AUDIT_3000_REPORT_FILE_FALLBACK = "posthog-audit-3000-report.md";
 const Audit3000RunScreen = ({ store }) => {
 	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
-	useFileWatcher(join(store.session.installDir, AUDIT_CHECKS_FILE), (parsed) => store.setFrameworkContext(AUDIT_CHECKS_KEY, coerceAuditChecks(parsed)));
+	useFileWatcher(join$1(store.session.installDir, AUDIT_CHECKS_FILE), (parsed) => store.setFrameworkContext(AUDIT_CHECKS_KEY, coerceAuditChecks(parsed)));
 	const statuses = store.statusMessages.length > 0 ? store.statusMessages : void 0;
 	const [columns] = useStdoutDimensions();
 	const [gameState, setGameState] = useState(() => initialState());
@@ -3967,7 +4033,7 @@ const Audit3000OutroScreen = ({ store }) => {
 								color: "cyan",
 								children: "High-score reel saved to:"
 							}),
-							/* @__PURE__ */ jsx(Text, { children: join(store.session.installDir, outroData.reportFile) }),
+							/* @__PURE__ */ jsx(Text, { children: join$1(store.session.installDir, outroData.reportFile) }),
 							/* @__PURE__ */ jsx(Text, {
 								dimColor: true,
 								children: "A markdown file in your project folder — open it in any editor to read the full audit."
@@ -4100,19 +4166,47 @@ const SetupScreen = ({ store }) => {
 /**
 * AuthScreen — Shown while waiting for OAuth authentication.
 *
-* Displays framework detection results, beta/disclosure notices,
-* a waiting spinner, and the login URL when available.
+* Displays framework detection, a compressed privacy summary, a waiting
+* spinner, and the login URL when available. [I] opens the full
+* PrivacyPanel as an overlay. [P] (when loginUrl is set) lets the user
+* paste the callback URL by hand.
+*
 * The router resolves past this screen once session.credentials is set.
 */
 const AuthScreen = ({ store }) => {
 	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	const [showPrivacy, setShowPrivacy] = useState(false);
 	const { session } = store;
-	useKeyBindings("auth", Boolean(session.loginUrl) ? [{
-		match: ["p", "P"],
-		label: "P",
-		action: "paste auth code",
-		handler: () => store.showManualAuthCode()
-	}] : []);
+	const canPasteCode = Boolean(session.loginUrl);
+	const bindings = [];
+	if (!showPrivacy) {
+		if (canPasteCode) bindings.push({
+			match: ["p", "P"],
+			label: "P",
+			action: "paste auth code",
+			handler: () => store.showManualAuthCode()
+		});
+		bindings.push({
+			match: ["i", "I"],
+			label: "I",
+			action: "privacy info",
+			handler: () => setShowPrivacy(true)
+		});
+	}
+	useKeyBindings("auth", bindings);
+	if (showPrivacy) return /* @__PURE__ */ jsx(IntroScreenLayout, {
+		installDir: session.installDir,
+		title: "Wizard privacy & usage",
+		showSubtitle: false,
+		showDetection: false,
+		body: /* @__PURE__ */ jsx(PrivacyPanel, {}),
+		menuOptions: [{
+			label: "Back",
+			value: "back"
+		}],
+		menuAlign: "left",
+		onSelect: () => setShowPrivacy(false)
+	});
 	const config = session.frameworkConfig;
 	const frameworkLabel = session.detectedFrameworkLabel ?? config?.metadata.name;
 	return /* @__PURE__ */ jsxs(Box, {
@@ -4146,6 +4240,37 @@ const AuthScreen = ({ store }) => {
 					})
 				]
 			}),
+			/* @__PURE__ */ jsxs(Box, {
+				flexDirection: "column",
+				marginBottom: 1,
+				children: [
+					/* @__PURE__ */ jsx(Text, {
+						bold: true,
+						dimColor: true,
+						children: "How does the wizard use your data?"
+					}),
+					/* @__PURE__ */ jsxs(Text, {
+						dimColor: true,
+						children: ["•", " Source files are read by Claude for AI context"]
+					}),
+					/* @__PURE__ */ jsxs(Text, {
+						dimColor: true,
+						children: ["•", " .env* and secrets stay on your machine"]
+					}),
+					/* @__PURE__ */ jsxs(Text, {
+						dimColor: true,
+						children: [
+							"•",
+							" Press ",
+							/* @__PURE__ */ jsx(Text, {
+								color: Colors.accent,
+								children: "[I]"
+							}),
+							" for full privacy & usage info"
+						]
+					})
+				]
+			}),
 			/* @__PURE__ */ jsx(LoadingBox, { message: "Waiting for authentication..." }),
 			session.loginUrl && /* @__PURE__ */ jsxs(Box, {
 				marginTop: 1,
@@ -4191,7 +4316,7 @@ const AuthScreen = ({ store }) => {
 */
 const RunScreen = ({ store }) => {
 	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
-	useFileWatcher(join(store.session.installDir, EVENT_PLAN_FILE), (parsed) => {
+	useFileWatcher(join$1(store.session.installDir, EVENT_PLAN_FILE), (parsed) => {
 		if (!Array.isArray(parsed)) return;
 		store.setEventPlan(parsed.map((e) => ({
 			name: e.name ?? e.event ?? "",
@@ -4277,7 +4402,7 @@ const KeepSkillsScreen = ({ store }) => {
 	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
 	const [phase, setPhase] = useState("loading");
 	const [skills, setSkills] = useState([]);
-	const skillsDir = join(store.session.installDir, ".claude", "skills");
+	const skillsDir = join$1(store.session.installDir, ".claude", "skills");
 	useEffect(() => {
 		(async () => {
 			try {
@@ -4285,11 +4410,11 @@ const KeepSkillsScreen = ({ store }) => {
 				const result = [];
 				for (const dir of dirs) {
 					try {
-						await access(join(skillsDir, dir.name, WIZARD_MARKER));
+						await access(join$1(skillsDir, dir.name, WIZARD_MARKER));
 					} catch {
 						continue;
 					}
-					const children = (await readdir(join(skillsDir, dir.name))).filter((c) => c !== WIZARD_MARKER);
+					const children = (await readdir(join$1(skillsDir, dir.name))).filter((c) => c !== WIZARD_MARKER);
 					result.push({
 						name: dir.name,
 						children
@@ -4314,7 +4439,7 @@ const KeepSkillsScreen = ({ store }) => {
 	const handleRemove = async () => {
 		setPhase("removing");
 		for (const skill of skills) try {
-			await rm(join(skillsDir, skill.name), {
+			await rm(join$1(skillsDir, skill.name), {
 				recursive: true,
 				force: true
 			});
@@ -4559,6 +4684,53 @@ const AuthErrorScreen = ({ store }) => {
 	});
 };
 //#endregion
+//#region src/ui/tui/screens/SessionTimeoutScreen.tsx
+/**
+* SessionTimeoutScreen — shown when the OAuth login window expires before the
+* user completes authorization.
+*
+* Pushed as an overlay so it takes priority over the gated AuthScreen (which
+* never completes without credentials). Terminal state: any key exits, since
+* the only way forward is to re-run the wizard for a fresh login window.
+*/
+const TIMEOUT_MINUTES = Math.round(OAUTH_TIMEOUT_MS / 6e4);
+const SessionTimeoutScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	useInput(() => {
+		process.exit(1);
+	});
+	return /* @__PURE__ */ jsxs(Box, {
+		flexDirection: "column",
+		flexGrow: 1,
+		children: [
+			/* @__PURE__ */ jsxs(Text, {
+				color: "red",
+				bold: true,
+				children: ["✘", " Login timed out"]
+			}),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsxs(Text, { children: [
+					"The OAuth link timed out after ",
+					TIMEOUT_MINUTES,
+					" minutes."
+				] })
+			}),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(Text, { children: "Re-run the wizard to get a fresh link and try again." })
+			}),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(Text, {
+					color: Colors.muted,
+					children: "Press any key to exit"
+				})
+			})
+		]
+	});
+};
+//#endregion
 //#region src/ui/tui/screens/WizardAskScreen.tsx
 /**
 * WizardAskScreen — Overlay for the `wizard_ask` MCP tool.
@@ -4763,14 +4935,14 @@ function createMcpSuggestedPromptsServices(_store) {
 			};
 		},
 		checkSlackConnected: async (credentials, signal) => {
-			const { fetchSlackConnected } = await import("./api-DuA0_88V.js").then((n) => n.n);
+			const { fetchSlackConnected } = await import("./api-QI1lO_Bz.js").then((n) => n.n);
 			return fetchSlackConnected(credentials.accessToken, credentials.projectId, credentials.host, signal);
 		},
 		runPromptStreaming: (args) => runProductionPromptStreaming(args)
 	};
 }
 async function* runProductionPromptStreaming(args) {
-	const { runMcpPromptViaSdk } = await import("./mcp-prompt-streaming-DMDwaark.js");
+	const { runMcpPromptViaSdk } = await import("./mcp-prompt-streaming-mYw2LPZZ.js");
 	yield* runMcpPromptViaSdk(args);
 }
 //#endregion
@@ -4788,6 +4960,7 @@ function createScreens(store, services) {
 		["port-conflict"]: /* @__PURE__ */ jsx(PortConflictScreen, { store }),
 		["manual-auth-code"]: /* @__PURE__ */ jsx(ManualAuthCodeScreen, { store }),
 		["auth-error"]: /* @__PURE__ */ jsx(AuthErrorScreen, { store }),
+		["session-timeout"]: /* @__PURE__ */ jsx(SessionTimeoutScreen, { store }),
 		["wizard-ask"]: /* @__PURE__ */ jsx(WizardAskScreen, { store }),
 		["intro"]: /* @__PURE__ */ jsx(PostHogIntegrationIntroScreen, { store }),
 		["revenue-intro"]: /* @__PURE__ */ jsx(RevenueIntroScreen, { store }),
@@ -4806,6 +4979,7 @@ function createScreens(store, services) {
 		["doctor-report"]: /* @__PURE__ */ jsx(DoctorReportScreen, { store }),
 		["setup"]: /* @__PURE__ */ jsx(SetupScreen, { store }),
 		["auth"]: /* @__PURE__ */ jsx(AuthScreen, { store }),
+		["ai-opt-in"]: /* @__PURE__ */ jsx(AiOptInRequiredScreen, { store }),
 		["run"]: /* @__PURE__ */ jsx(RunScreen, { store }),
 		["mcp"]: /* @__PURE__ */ jsx(McpScreen, {
 			store,
@@ -4840,6 +5014,23 @@ const App = ({ store }) => {
 	});
 };
 //#endregion
+//#region src/ui/tui/exit-line.ts
+const RESET_ATTRS$1 = "\x1B[0m";
+const GREEN = "\x1B[32m";
+const BOLD = "\x1B[1m";
+const DIM = "\x1B[2m";
+function getExitLine(store) {
+	const outro = store.session.outroData;
+	const label = store.session.programLabel ?? "Wizard";
+	if (outro?.kind === "success") {
+		const message = outro.message ?? `${label} completed successfully.`;
+		const headline = `${GREEN}${BOLD}✔${RESET_ATTRS$1} ${message}${outro.reportFile && !message.includes(outro.reportFile) ? ` Check ./${outro.reportFile} for details.` : ""}`;
+		if (outro.handoffPrompt) return `${headline}\n\n${DIM}Hand this to your coding agent to finish up (triple-click to select):${RESET_ATTRS$1}\n` + outro.handoffPrompt;
+		return headline;
+	}
+	return `${DIM}${label} exited.${RESET_ATTRS$1}`;
+}
+//#endregion
 //#region src/ui/tui/start-tui.ts
 /**
 * start-tui.ts — Sets up the Ink TUI renderer and InkUI.
@@ -4854,27 +5045,16 @@ const CURSOR_HOME = "\x1B[H";
 const BG_BLACK = "\x1B[48;2;0;0;0m";
 const ENTER_ALT_SCREEN = "\x1B[?1049h";
 const LEAVE_ALT_SCREEN = "\x1B[?1049l";
-const GREEN = "\x1B[32m";
-const BOLD = "\x1B[1m";
-const DIM = "\x1B[2m";
 function releaseTerminal() {
 	process.stdout.write(RESET_ATTRS + LEAVE_ALT_SCREEN);
 }
-function getExitLine(store) {
-	const outro = store.session.outroData;
-	const label = store.session.programLabel ?? "Wizard";
-	if (outro?.kind === "success") {
-		const message = outro.message ?? `${label} completed successfully.`;
-		return `${GREEN}${BOLD}\u2714${RESET_ATTRS} ${message}${outro.reportFile && !message.includes(outro.reportFile) ? ` Check ./${outro.reportFile} for details.` : ""}`;
-	}
-	return `${DIM}${label} exited.${RESET_ATTRS}`;
-}
 function startTUI(version, program = Program.PostHogIntegration) {
 	process.stdout.write(ENTER_ALT_SCREEN + BG_BLACK + CLEAR_SCREEN + CURSOR_HOME);
 	const store = new WizardStore(program);
 	store.version = version;
 	setUI(new InkUI(store));
 	const { unmount: inkUnmount, waitUntilExit } = render(createElement(App, { store }));
+	analytics.wizardCapture("started", { program_id: program });
 	store.runInitHooks();
 	process.stdin.on("error", (err) => {
 		if (err.code !== "EIO") throw err;
@@ -4902,4 +5082,4 @@ function startTUI(version, program = Program.PostHogIntegration) {
 //#endregion
 export { startTUI };
 
-//# sourceMappingURL=start-tui-BRvm5VP9.js.map
+//# sourceMappingURL=start-tui-DaQiY_EB.js.map