@posthog/wizard 2.34.0 → 2.35.0

package/dist/{provisioning-wMzPfaaP.js → provisioning-BF2reo5_.js}

@@ -1,6 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-B_-DWIq7.js";
-import { Q as WIZARD_USER_AGENT, W as POSTHOG_US_CLIENT_ID, Y as WIZARD_PROVISIONING_SCOPES, s as logToFile } from "./debug-Cn4L5Ype.js";
-import { t as analytics } from "./analytics-DQ8IS1Hu.js";
+import { F as POSTHOG_DEV_CLIENT_ID, J as WIZARD_PROVISIONING_SCOPES, U as POSTHOG_US_CLIENT_ID, Z as WIZARD_USER_AGENT, s as logToFile } from "./debug-DXWxKT5f.js";
+import { t as analytics } from "./analytics-DP_j88IC.js";
+import { s as resolveBaseUrl } from "./urls-ChWit8SE.js";
 import axios from "axios";
 import * as crypto from "node:crypto";
 import { z } from "zod";
@@ -17,9 +18,26 @@ var provisioning_exports = /* @__PURE__ */ __exportAll({
 	provisionNewAccount: () => provisionNewAccount,
 	requestDeepLink: () => requestDeepLink
 });
-const WIZARD_CLIENT_ID = POSTHOG_US_CLIENT_ID;
 const API_VERSION = "0.1d";
-const PROVISIONING_BASE_URL = "https://us.posthog.com";
+/**
+* Provisioning host. Follows a `--base-url` override (and IS_DEV → localhost),
+* else the region-agnostic prod provisioning host (always US; the target region
+* is passed in the request body).
+*
+* // TODO: Make this work with EU provisioning.
+*/
+const getProvisioningBaseUrl = (baseUrl) => resolveBaseUrl(baseUrl) ?? "https://us.posthog.com";
+/**
+* OAuth client ID for provisioning. A pinned base URL means a dev-seeded stack
+* that registers the dev client; prod uses the US client.
+*
+* TODO: same assumption as `getOAuthClientId` in oauth.ts — a pinned base URL is
+* treated as a dev-seeded instance. Make configurable if we ever point
+* `--base-url` at a non-dev instance with its own OAuth app.
+*
+* TODO: Make this work with EU provisioning.
+*/
+const getProvisioningClientId = (baseUrl) => resolveBaseUrl(baseUrl) ? POSTHOG_DEV_CLIENT_ID : POSTHOG_US_CLIENT_ID;
 function generateCodeVerifier() {
 	return crypto.randomBytes(32).toString("base64url");
 }
@@ -66,12 +84,13 @@ const ResourceResponseSchema = z.object({
 async function provisionNewAccount(email, name, region = "US", opts) {
 	const codeVerifier = generateCodeVerifier();
 	const codeChallenge = generateCodeChallenge(codeVerifier);
+	const provisioningBaseUrl = getProvisioningBaseUrl(opts?.baseUrl);
 	logToFile("[provisioning] starting account creation");
-	const accountRes = await axios.post(`${PROVISIONING_BASE_URL}/api/agentic/provisioning/account_requests`, {
+	const accountRes = await axios.post(`${provisioningBaseUrl}/api/agentic/provisioning/account_requests`, {
 		id: crypto.randomUUID(),
 		email,
 		name,
-		client_id: WIZARD_CLIENT_ID,
+		client_id: getProvisioningClientId(opts?.baseUrl),
 		code_challenge: codeChallenge,
 		code_challenge_method: "S256",
 		scopes: WIZARD_PROVISIONING_SCOPES,
@@ -100,7 +119,7 @@ async function provisionNewAccount(email, name, region = "US", opts) {
 	const code = accountData.oauth?.code;
 	if (!code) throw new Error("No authorization code received from account creation");
 	logToFile("[provisioning] account created, exchanging code for tokens");
-	const tokenRes = await axios.post(`${PROVISIONING_BASE_URL}/api/agentic/oauth/token`, new URLSearchParams({
+	const tokenRes = await axios.post(`${provisioningBaseUrl}/api/agentic/oauth/token`, new URLSearchParams({
 		grant_type: "authorization_code",
 		code,
 		code_verifier: codeVerifier
@@ -114,7 +133,7 @@ async function provisionNewAccount(email, name, region = "US", opts) {
 	});
 	const tokenData = TokenResponseSchema.parse(tokenRes.data);
 	logToFile("[provisioning] tokens received, provisioning resources");
-	const resourceRes = await axios.post(`${PROVISIONING_BASE_URL}/api/agentic/provisioning/resources`, {
+	const resourceRes = await axios.post(`${provisioningBaseUrl}/api/agentic/provisioning/resources`, {
 		service_id: "analytics",
 		...opts?.projectName ? { configuration: { project_name: opts.projectName } } : {}
 	}, {
@@ -172,4 +191,4 @@ async function requestDeepLink(accessToken, host, opts) {
 //#endregion
 export { provisioning_exports as n, requestDeepLink as r, provisionNewAccount as t };
 
-//# sourceMappingURL=provisioning-wMzPfaaP.js.map
+//# sourceMappingURL=provisioning-BF2reo5_.js.map

package/dist/provisioning-BF2reo5_.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning-BF2reo5_.js","names":[],"sources":["../src/utils/provisioning.ts"],"sourcesContent":["/**\n * Provisioning API client for creating new PostHog accounts.\n *\n * Uses the agentic provisioning API with PKCE auth:\n *   1. POST /account_requests  - create account, get auth code\n *   2. POST /oauth/token       - exchange code for tokens (with PKCE)\n *   3. POST /resources         - provision project, get API key\n */\n\nimport * as crypto from 'node:crypto';\nimport axios from 'axios';\nimport { z } from 'zod';\nimport {\n  POSTHOG_DEV_CLIENT_ID,\n  POSTHOG_US_CLIENT_ID,\n  WIZARD_PROVISIONING_SCOPES,\n  WIZARD_USER_AGENT,\n} from '@lib/constants';\nimport { resolveBaseUrl } from './urls';\nimport { logToFile } from './debug';\nimport { analytics } from './analytics';\n\nconst API_VERSION = '0.1d';\n\n/**\n * Provisioning host. Follows a `--base-url` override (and IS_DEV → localhost),\n * else the region-agnostic prod provisioning host (always US; the target region\n * is passed in the request body).\n *\n * // TODO: Make this work with EU provisioning.\n */\nconst getProvisioningBaseUrl = (baseUrl?: string): string =>\n  resolveBaseUrl(baseUrl) ?? 'https://us.posthog.com';\n\n/**\n * OAuth client ID for provisioning. A pinned base URL means a dev-seeded stack\n * that registers the dev client; prod uses the US client.\n *\n * TODO: same assumption as `getOAuthClientId` in oauth.ts — a pinned base URL is\n * treated as a dev-seeded instance. Make configurable if we ever point\n * `--base-url` at a non-dev instance with its own OAuth app.\n *\n * TODO: Make this work with EU provisioning.\n */\nconst getProvisioningClientId = (baseUrl?: string): string =>\n  resolveBaseUrl(baseUrl) ? POSTHOG_DEV_CLIENT_ID : POSTHOG_US_CLIENT_ID;\n\nfunction generateCodeVerifier(): string {\n  return crypto.randomBytes(32).toString('base64url');\n}\n\nfunction generateCodeChallenge(verifier: string): string {\n  return crypto.createHash('sha256').update(verifier).digest('base64url');\n}\n\n// --- Response schemas ---\n\nconst AccountRequestResponseSchema = z.object({\n  id: z.string(),\n  type: z.enum(['oauth', 'requires_auth', 'error']),\n  oauth: z\n    .object({\n      code: z.string(),\n    })\n    .optional(),\n  error: z\n    .object({\n      code: z.string(),\n      message: z.string(),\n    })\n    .optional(),\n});\n\nconst TokenResponseSchema = z.object({\n  token_type: z.string(),\n  access_token: z.string(),\n  refresh_token: z.string(),\n  expires_in: z.number(),\n  account: z\n    .object({\n      id: z.string(),\n    })\n    .optional(),\n});\n\nconst ResourceResponseSchema = z.object({\n  status: z.string(),\n  id: z.string(),\n  service_id: z.string(),\n  complete: z\n    .object({\n      access_configuration: z.object({\n        api_key: z.string(),\n        host: z.string(),\n        personal_api_key: z.string().optional(),\n      }),\n    })\n    .optional(),\n});\n\nexport interface ProvisioningResult {\n  accessToken: string;\n  refreshToken: string;\n  projectApiKey: string;\n  host: string;\n  personalApiKey?: string;\n  projectId: string;\n  accountId: string;\n}\n\n/**\n * Create a new PostHog account and provision a project via the provisioning API.\n *\n * This is the \"no browser\" signup path: the wizard collects the email,\n * calls the provisioning API to create the account, and gets back\n * credentials without opening a browser.\n */\nexport async function provisionNewAccount(\n  email: string,\n  name: string,\n  region: 'US' | 'EU' = 'US',\n  opts?: { orgName?: string; projectName?: string; baseUrl?: string },\n): Promise<ProvisioningResult> {\n  const codeVerifier = generateCodeVerifier();\n  const codeChallenge = generateCodeChallenge(codeVerifier);\n  const provisioningBaseUrl = getProvisioningBaseUrl(opts?.baseUrl);\n\n  logToFile('[provisioning] starting account creation');\n\n  // Step 1: Create account\n  const accountRes = await axios.post(\n    `${provisioningBaseUrl}/api/agentic/provisioning/account_requests`,\n    {\n      id: crypto.randomUUID(),\n      email,\n      name,\n      client_id: getProvisioningClientId(opts?.baseUrl),\n      code_challenge: codeChallenge,\n      code_challenge_method: 'S256',\n      scopes: WIZARD_PROVISIONING_SCOPES,\n      configuration: {\n        region,\n        ...(opts?.orgName ? { organization_name: opts.orgName } : {}),\n      },\n    },\n    {\n      headers: {\n        'Content-Type': 'application/json',\n        'API-Version': API_VERSION,\n        'User-Agent': WIZARD_USER_AGENT,\n      },\n      timeout: 30_000,\n    },\n  );\n\n  const accountData = AccountRequestResponseSchema.parse(accountRes.data);\n\n  if (accountData.type === 'error') {\n    const msg = accountData.error?.message ?? 'Account creation failed';\n    analytics.captureException(new Error(msg), {\n      step: 'provisioning_account_request',\n      error_code: accountData.error?.code,\n    });\n    throw new Error(msg);\n  }\n\n  if (accountData.type === 'requires_auth') {\n    throw new Error(\n      'This email is already associated with a PostHog account. Please use the login flow instead.',\n    );\n  }\n\n  const code = accountData.oauth?.code;\n  if (!code) {\n    throw new Error('No authorization code received from account creation');\n  }\n\n  logToFile('[provisioning] account created, exchanging code for tokens');\n\n  // Step 2: Exchange code for tokens\n  const tokenRes = await axios.post(\n    `${provisioningBaseUrl}/api/agentic/oauth/token`,\n    new URLSearchParams({\n      grant_type: 'authorization_code',\n      code,\n      code_verifier: codeVerifier,\n    }).toString(),\n    {\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n        'API-Version': API_VERSION,\n        'User-Agent': WIZARD_USER_AGENT,\n      },\n      timeout: 30_000,\n    },\n  );\n\n  const tokenData = TokenResponseSchema.parse(tokenRes.data);\n\n  logToFile('[provisioning] tokens received, provisioning resources');\n\n  // Step 3: Provision resources\n  const resourceRes = await axios.post(\n    `${provisioningBaseUrl}/api/agentic/provisioning/resources`,\n    {\n      service_id: 'analytics',\n      ...(opts?.projectName\n        ? { configuration: { project_name: opts.projectName } }\n        : {}),\n    },\n    {\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${tokenData.access_token}`,\n        'API-Version': API_VERSION,\n        'User-Agent': WIZARD_USER_AGENT,\n      },\n      timeout: 30_000,\n    },\n  );\n\n  const resourceData = ResourceResponseSchema.parse(resourceRes.data);\n\n  if (resourceData.status !== 'complete' || !resourceData.complete) {\n    throw new Error('Resource provisioning did not complete');\n  }\n\n  logToFile('[provisioning] resources provisioned successfully');\n\n  return {\n    accessToken: tokenData.access_token,\n    refreshToken: tokenData.refresh_token,\n    projectApiKey: resourceData.complete.access_configuration.api_key,\n    host: resourceData.complete.access_configuration.host,\n    personalApiKey: resourceData.complete.access_configuration.personal_api_key,\n    projectId: resourceData.id,\n    accountId: tokenData.account?.id ?? '',\n  };\n}\n\n/**\n * Request a one-time deep link URL that logs the user into PostHog\n * and redirects to their project dashboard — or, when `opts.path` is\n * given, to any safe in-app relative path (e.g. the Signals inbox).\n */\nexport async function requestDeepLink(\n  accessToken: string,\n  host: string,\n  opts?: { purpose?: string; path?: string },\n): Promise<string | null> {\n  try {\n    const baseUrl = host\n      .replace('us.i.posthog.com', 'us.posthog.com')\n      .replace('eu.i.posthog.com', 'eu.posthog.com');\n\n    const res = await axios.post(\n      `${baseUrl}/api/agentic/provisioning/deep_links`,\n      {\n        purpose: opts?.purpose ?? 'dashboard',\n        ...(opts?.path ? { path: opts.path } : {}),\n      },\n      {\n        headers: {\n          'Content-Type': 'application/json',\n          Authorization: `Bearer ${accessToken}`,\n          'API-Version': API_VERSION,\n          'User-Agent': WIZARD_USER_AGENT,\n        },\n        timeout: 10_000,\n      },\n    );\n\n    const url = res.data?.url;\n    if (typeof url === 'string') {\n      logToFile(`[provisioning] deep link created: ${url}`);\n      return url;\n    }\n    return null;\n  } catch {\n    logToFile('[provisioning] deep link request failed, skipping');\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsBA,MAAM,cAAc;;;;;;;;AASpB,MAAM,0BAA0B,YAC9B,eAAe,QAAQ,IAAI;;;;;;;;;;;AAY7B,MAAM,2BAA2B,YAC/B,eAAe,QAAQ,GAAG,wBAAwB;AAEpD,SAAS,uBAA+B;AACtC,QAAO,OAAO,YAAY,GAAG,CAAC,SAAS,YAAY;;AAGrD,SAAS,sBAAsB,UAA0B;AACvD,QAAO,OAAO,WAAW,SAAS,CAAC,OAAO,SAAS,CAAC,OAAO,YAAY;;AAKzE,MAAM,+BAA+B,EAAE,OAAO;CAC5C,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,KAAK;EAAC;EAAS;EAAiB;EAAQ,CAAC;CACjD,OAAO,EACJ,OAAO,EACN,MAAM,EAAE,QAAQ,EACjB,CAAC,CACD,UAAU;CACb,OAAO,EACJ,OAAO;EACN,MAAM,EAAE,QAAQ;EAChB,SAAS,EAAE,QAAQ;EACpB,CAAC,CACD,UAAU;CACd,CAAC;AAEF,MAAM,sBAAsB,EAAE,OAAO;CACnC,YAAY,EAAE,QAAQ;CACtB,cAAc,EAAE,QAAQ;CACxB,eAAe,EAAE,QAAQ;CACzB,YAAY,EAAE,QAAQ;CACtB,SAAS,EACN,OAAO,EACN,IAAI,EAAE,QAAQ,EACf,CAAC,CACD,UAAU;CACd,CAAC;AAEF,MAAM,yBAAyB,EAAE,OAAO;CACtC,QAAQ,EAAE,QAAQ;CAClB,IAAI,EAAE,QAAQ;CACd,YAAY,EAAE,QAAQ;CACtB,UAAU,EACP,OAAO,EACN,sBAAsB,EAAE,OAAO;EAC7B,SAAS,EAAE,QAAQ;EACnB,MAAM,EAAE,QAAQ;EAChB,kBAAkB,EAAE,QAAQ,CAAC,UAAU;EACxC,CAAC,EACH,CAAC,CACD,UAAU;CACd,CAAC;;;;;;;;AAmBF,eAAsB,oBACpB,OACA,MACA,SAAsB,MACtB,MAC6B;CAC7B,MAAM,eAAe,sBAAsB;CAC3C,MAAM,gBAAgB,sBAAsB,aAAa;CACzD,MAAM,sBAAsB,uBAAuB,MAAM,QAAQ;AAEjE,WAAU,2CAA2C;CAGrD,MAAM,aAAa,MAAM,MAAM,KAC7B,GAAG,oBAAoB,6CACvB;EACE,IAAI,OAAO,YAAY;EACvB;EACA;EACA,WAAW,wBAAwB,MAAM,QAAQ;EACjD,gBAAgB;EAChB,uBAAuB;EACvB,QAAQ;EACR,eAAe;GACb;GACA,GAAI,MAAM,UAAU,EAAE,mBAAmB,KAAK,SAAS,GAAG,EAAE;GAC7D;EACF,EACD;EACE,SAAS;GACP,gBAAgB;GAChB,eAAe;GACf,cAAc;GACf;EACD,SAAS;EACV,CACF;CAED,MAAM,cAAc,6BAA6B,MAAM,WAAW,KAAK;AAEvE,KAAI,YAAY,SAAS,SAAS;EAChC,MAAM,MAAM,YAAY,OAAO,WAAW;AAC1C,YAAU,iBAAiB,IAAI,MAAM,IAAI,EAAE;GACzC,MAAM;GACN,YAAY,YAAY,OAAO;GAChC,CAAC;AACF,QAAM,IAAI,MAAM,IAAI;;AAGtB,KAAI,YAAY,SAAS,gBACvB,OAAM,IAAI,MACR,8FACD;CAGH,MAAM,OAAO,YAAY,OAAO;AAChC,KAAI,CAAC,KACH,OAAM,IAAI,MAAM,uDAAuD;AAGzE,WAAU,6DAA6D;CAGvE,MAAM,WAAW,MAAM,MAAM,KAC3B,GAAG,oBAAoB,2BACvB,IAAI,gBAAgB;EAClB,YAAY;EACZ;EACA,eAAe;EAChB,CAAC,CAAC,UAAU,EACb;EACE,SAAS;GACP,gBAAgB;GAChB,eAAe;GACf,cAAc;GACf;EACD,SAAS;EACV,CACF;CAED,MAAM,YAAY,oBAAoB,MAAM,SAAS,KAAK;AAE1D,WAAU,yDAAyD;CAGnE,MAAM,cAAc,MAAM,MAAM,KAC9B,GAAG,oBAAoB,sCACvB;EACE,YAAY;EACZ,GAAI,MAAM,cACN,EAAE,eAAe,EAAE,cAAc,KAAK,aAAa,EAAE,GACrD,EAAE;EACP,EACD;EACE,SAAS;GACP,gBAAgB;GAChB,eAAe,UAAU,UAAU;GACnC,eAAe;GACf,cAAc;GACf;EACD,SAAS;EACV,CACF;CAED,MAAM,eAAe,uBAAuB,MAAM,YAAY,KAAK;AAEnE,KAAI,aAAa,WAAW,cAAc,CAAC,aAAa,SACtD,OAAM,IAAI,MAAM,yCAAyC;AAG3D,WAAU,oDAAoD;AAE9D,QAAO;EACL,aAAa,UAAU;EACvB,cAAc,UAAU;EACxB,eAAe,aAAa,SAAS,qBAAqB;EAC1D,MAAM,aAAa,SAAS,qBAAqB;EACjD,gBAAgB,aAAa,SAAS,qBAAqB;EAC3D,WAAW,aAAa;EACxB,WAAW,UAAU,SAAS,MAAM;EACrC;;;;;;;AAQH,eAAsB,gBACpB,aACA,MACA,MACwB;AACxB,KAAI;EACF,MAAM,UAAU,KACb,QAAQ,oBAAoB,iBAAiB,CAC7C,QAAQ,oBAAoB,iBAAiB;EAmBhD,MAAM,OAjBM,MAAM,MAAM,KACtB,GAAG,QAAQ,uCACX;GACE,SAAS,MAAM,WAAW;GAC1B,GAAI,MAAM,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,EAAE;GAC1C,EACD;GACE,SAAS;IACP,gBAAgB;IAChB,eAAe,UAAU;IACzB,eAAe;IACf,cAAc;IACf;GACD,SAAS;GACV,CACF,EAEe,MAAM;AACtB,MAAI,OAAO,QAAQ,UAAU;AAC3B,aAAU,qCAAqC,MAAM;AACrD,UAAO;;AAET,SAAO;SACD;AACN,YAAU,oDAAoD;AAC9D,SAAO"}

package/dist/{registry-BfTeAX2z.js → registry-Dj17F0a-.js}

@@ -1,8 +1,8 @@
 import { t as __exportAll } from "./rolldown-runtime-B_-DWIq7.js";
-import { p as getUI } from "./debug-Cn4L5Ype.js";
-import { a as createVersionBucket, i as tryGetPackageJson, s as detectAllPackageManagers } from "./setup-utils-B0oz3raQ.js";
+import { p as getUI } from "./debug-DXWxKT5f.js";
+import { a as createVersionBucket, i as tryGetPackageJson, s as detectAllPackageManagers } from "./setup-utils-DyTlaGOV.js";
 import { n as getInstalledPackageVersion, r as hasDeclaredDependency, t as getDeclaredVersion } from "./package-json-DCuoye-H.js";
-import { a as gradlePackageManager, c as getPackageManagerName$1, i as detectPythonPackageManagers, l as getPythonVersion, n as composerPackageManager, o as swiftPackageManager, r as detectNodePackageManagers, s as detectPackageManager$1, t as bundlerPackageManager, u as getPythonVersionBucket } from "./package-manager-Dozr4x6K.js";
+import { a as gradlePackageManager, c as getPackageManagerName$1, i as detectPythonPackageManagers, l as getPythonVersion, n as composerPackageManager, o as swiftPackageManager, r as detectNodePackageManagers, s as detectPackageManager$1, t as bundlerPackageManager, u as getPythonVersionBucket } from "./package-manager-BgXgJ1Mu.js";
 import * as semver from "semver";
 import { major, minVersion } from "semver";
 import path from "path";
@@ -2905,4 +2905,4 @@ const FRAMEWORK_REGISTRY = {
 //#endregion
 export { SPINNER_MESSAGE as i, registry_exports as n, DEFAULT_PACKAGE_INSTALLATION as r, FRAMEWORK_REGISTRY as t };
 
-//# sourceMappingURL=registry-BfTeAX2z.js.map
+//# sourceMappingURL=registry-Dj17F0a-.js.map