@posthog/wizard 2.49.0 → 2.51.0

package/dist/{tools-D5pL_r3K.js → tools-DwpaEyEv.js}

@@ -1,8 +1,9 @@
-import { s as logToFile } from "./debug-DF51kDvZ.js";
-import { n as analytics } from "./analytics-D6gRGiqt.js";
-import { A as isFullyCancelled, C as mergeEnvValues, D as vaultSensitiveAnswers, E as resolveEnvSecretRefs, S as installSkillById, T as resolveEnvPath, _ as ENV_FILE_PATH_DESCRIPTION, b as evaluateAskCap, g as createSecretVault, v as WIZARD_TOOL_NAMES, w as parseEnvKeys, x as fetchSkillMenu } from "./agent-interface-Doo3apDE.js";
-import { r as detectNodePackageManagers } from "./package-manager-B6QAvLyt.js";
-import { o as withMode } from "./pi-CXhGyUbi.js";
+import { s as logToFile } from "./debug-DaXKSXEy.js";
+import { n as analytics } from "./analytics-Ddf3zJgF.js";
+import { C as parseEnvKeys, E as vaultSensitiveAnswers, S as mergeEnvValues, T as resolveEnvSecretRefs, _ as WIZARD_TOOL_NAMES, b as fetchSkillMenu, g as ENV_FILE_PATH_DESCRIPTION, h as createSecretVault, k as isFullyCancelled, w as resolveEnvPath, x as installSkillById, y as evaluateAskCap } from "./agent-interface-BL2wCV3b.js";
+import { w as createTriageLLMProvider } from "./yara-hooks-CEs3jx7j.js";
+import { r as detectNodePackageManagers } from "./package-manager-DnzNEjci.js";
+import { o as withMode } from "./pi-DE2cAVfO.js";
 import fs from "fs";
 import path from "path";
 import { Type } from "typebox";
@@ -30,7 +31,8 @@ function text(s) {
 	};
 }
 function createWizardPiTools(ctx) {
-	const { workingDirectory, skillsBaseUrl, askBridge, onAskPendingChange } = ctx;
+	const { workingDirectory, skillsBaseUrl, askBridge, onAskPendingChange, triageAuth } = ctx;
+	const skillScanTriageProvider = createTriageLLMProvider(triageAuth);
 	const detectPackageManager = ctx.detectPackageManager ?? detectNodePackageManagers;
 	const askMaxQuestions = ctx.maxQuestions ?? 10;
 	let askCallCount = 0;
@@ -60,7 +62,7 @@ function createWizardPiTools(ctx) {
 		promptSnippet: "install_skill(skillId) — install a skill, then read its SKILL.md",
 		parameters: Type.Object({ skillId: Type.String({ description: "Skill ID from load_skill_menu" }) }),
 		async execute(_id, args) {
-			const result = await installSkillById(args.skillId, workingDirectory, skillsBaseUrl);
+			const result = await installSkillById(args.skillId, workingDirectory, skillsBaseUrl, void 0, skillScanTriageProvider);
 			if (result.kind !== "ok") {
 				logToFile(`[pi] install_skill ${args.skillId}: ${result.kind}`);
 				return text(`Error installing skill "${args.skillId}": ${result.kind}. Use load_skill_menu to see valid IDs.`);
@@ -196,4 +198,4 @@ function createWizardPiTools(ctx) {
 //#endregion
 export { createWizardPiTools };
 
-//# sourceMappingURL=tools-D5pL_r3K.js.map
+//# sourceMappingURL=tools-DwpaEyEv.js.map

package/dist/tools-DwpaEyEv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools-DwpaEyEv.js","names":[],"sources":["../src/lib/agent/runner/harness/pi/tools.ts"],"sourcesContent":["/**\n * Wizard capabilities as pi custom tools (#5). pi does not mount MCP servers,\n * so the tools the wizard prompt depends on — skill discovery/install and\n * fenced `.env` edits — are exposed to pi as native `defineTool` tools backed\n * by the same helpers the claude-agent-sdk path uses (`fetchSkillMenu`,\n * `installSkillById`, `parseEnvKeys`, `mergeEnvValues`). Same tool names as the\n * MCP server so the shared prompt is unchanged. `wizard_ask` is wired here too\n * (same schema, caps, and askBridge as the MCP tool) so interactive programs\n * can interview the user on pi; without a bridge (CI) it errors on call.\n * Sensitive answers are vaulted to `{secretRef}` and resolved host-side by\n * set_env_values — the raw value never enters the model conversation.\n */\n\nimport fs from 'fs';\nimport path from 'path';\nimport { Type } from 'typebox';\nimport { defineTool } from '@earendil-works/pi-coding-agent';\nimport type { ToolDefinition } from '@earendil-works/pi-coding-agent';\nimport { analytics } from '@utils/analytics';\nimport { logToFile } from '@utils/debug';\nimport {\n  DEFAULT_ASK_MAX_QUESTIONS,\n  ENV_FILE_PATH_DESCRIPTION,\n  WIZARD_TOOL_NAMES,\n  evaluateAskCap,\n  fetchSkillMenu,\n  installSkillById,\n  mergeEnvValues,\n  parseEnvKeys,\n  resolveEnvPath,\n  resolveEnvSecretRefs,\n  vaultSensitiveAnswers,\n} from '@lib/wizard-tools/tools';\nimport {\n  createTriageLLMProvider,\n  type TriageGatewayAuth,\n} from '@lib/agent/triage-provider';\nimport { isFullyCancelled, type WizardAskBridge } from '@lib/wizard-ask-bridge';\nimport { createSecretVault } from '@lib/secret-vault';\nimport { withMode } from './index';\nimport {\n  detectNodePackageManagers,\n  type PackageManagerDetector,\n} from '@lib/detection/package-manager';\n\nfunction text(s: string): {\n  content: [{ type: 'text'; text: string }];\n  details: unknown;\n} {\n  return { content: [{ type: 'text', text: s }], details: {} };\n}\n\nexport interface PiToolsContext {\n  workingDirectory: string;\n  skillsBaseUrl: string;\n  /** Framework's package-manager detector. Defaults to Node detection. */\n  detectPackageManager?: PackageManagerDetector;\n  /** Drives the `wizard_ask` overlay. Omitted in CI → the tool errors on call. */\n  askBridge?: WizardAskBridge;\n  /** Per-run cap on wizard_ask calls. Defaults to {@link DEFAULT_ASK_MAX_QUESTIONS}. */\n  maxQuestions?: number;\n  /** Overlay open/closed signal — the security gate blocks Write/Edit while open. */\n  onAskPendingChange?: (pending: boolean) => void;\n  /** Program disallow list; gates wizard_ask here since pi tools carry bare names the MCP-prefixed security gate misses. */\n  disallowedTools?: readonly string[];\n  /**\n   * Gateway auth for triaging a freshly installed skill. pi auths the gateway\n   * programmatically and never sets the ANTHROPIC_* env vars, so the env\n   * fallback in createTriageLLMProvider is empty here — without this the\n   * skill-install scan runs untriaged and fails closed, blocking clean\n   * first-party skills.\n   */\n  triageAuth?: TriageGatewayAuth;\n}\n\nexport function createWizardPiTools(ctx: PiToolsContext): ToolDefinition[] {\n  const {\n    workingDirectory,\n    skillsBaseUrl,\n    askBridge,\n    onAskPendingChange,\n    triageAuth,\n  } = ctx;\n  // Build the triage provider from pi's explicit gateway auth (env fallback is\n  // empty on pi) so install_skill can triage rather than block untriaged.\n  const skillScanTriageProvider = createTriageLLMProvider(triageAuth);\n  const detectPackageManager =\n    ctx.detectPackageManager ?? detectNodePackageManagers;\n  const askMaxQuestions = ctx.maxQuestions ?? DEFAULT_ASK_MAX_QUESTIONS;\n  // Per-run wizard_ask accounting (total cap + one-time adjacency nudge),\n  // mirroring the MCP server's counters.\n  let askCallCount = 0;\n  let askAdjacencyNudged = false;\n  // Session-scoped secret vault, same contract as the MCP server: wizard_ask\n  // mints `{secretRef}` for sensitive answers, set_env_values resolves them.\n  const secretVault = createSecretVault();\n\n  // Fetch the skill menu at most once per run — the agent calls load_skill_menu\n  // 2-3× otherwise, each a fresh HTTP round-trip (profiled slowness).\n  let menuPromise: ReturnType<typeof fetchSkillMenu> | undefined;\n  const getSkillMenu = () => (menuPromise ??= fetchSkillMenu(skillsBaseUrl));\n\n  const loadSkillMenu = defineTool({\n    name: 'load_skill_menu',\n    label: 'Load skill menu',\n    description:\n      'Load available PostHog skills for a category. Returns skill IDs and names. Call this first, then install_skill with the chosen ID.',\n    promptSnippet:\n      'load_skill_menu(category) — list installable PostHog skills',\n    parameters: Type.Object({\n      category: Type.String({\n        description: 'Skill category, e.g. \"integration\"',\n      }),\n    }),\n    async execute(_id, args) {\n      const menu = await getSkillMenu();\n      if (!menu) return text('Error: could not load the skill menu.');\n      const skills = menu.categories[args.category] ?? [];\n      if (skills.length === 0) {\n        return text(`No skills found for category \"${args.category}\".`);\n      }\n      logToFile(`[pi] load_skill_menu: ${skills.length} skills`);\n      return text(skills.map((s) => `- ${s.id}: ${s.name}`).join('\\n'));\n    },\n  });\n\n  const installSkill = defineTool({\n    name: 'install_skill',\n    label: 'Install skill',\n    description:\n      'Download and install a PostHog skill by ID into .claude/skills/<skillId>/. Call load_skill_menu first. Then read the installed SKILL.md and follow it.',\n    promptSnippet:\n      'install_skill(skillId) — install a skill, then read its SKILL.md',\n    parameters: Type.Object({\n      skillId: Type.String({ description: 'Skill ID from load_skill_menu' }),\n    }),\n    async execute(_id, args) {\n      const result = await installSkillById(\n        args.skillId,\n        workingDirectory,\n        skillsBaseUrl,\n        undefined,\n        skillScanTriageProvider,\n      );\n      if (result.kind !== 'ok') {\n        logToFile(`[pi] install_skill ${args.skillId}: ${result.kind}`);\n        return text(\n          `Error installing skill \"${args.skillId}\": ${result.kind}. Use load_skill_menu to see valid IDs.`,\n        );\n      }\n      logToFile(`[pi] install_skill ${args.skillId} -> ${result.path}`);\n      return text(\n        `Installed \"${args.skillId}\" at ${result.path}. Read ${result.path}/SKILL.md and follow it.`,\n      );\n    },\n  });\n\n  const checkEnvKeys = defineTool({\n    name: 'check_env_keys',\n    label: 'Check env keys',\n    description:\n      'Check which environment variable keys are present or missing in a .env file. Never reveals values.',\n    promptSnippet: 'check_env_keys(filePath, keys) — see which .env keys exist',\n    parameters: Type.Object({\n      filePath: Type.String({\n        description: ENV_FILE_PATH_DESCRIPTION,\n      }),\n      keys: Type.Array(Type.String(), {\n        description: 'Environment variable key names to check',\n      }),\n    }),\n    async execute(_id, args) {\n      const resolved = resolveEnvPath(workingDirectory, args.filePath);\n      const existing = fs.existsSync(resolved)\n        ? parseEnvKeys(await fs.promises.readFile(resolved, 'utf8'))\n        : new Set<string>();\n      const results: Record<string, 'present' | 'missing'> = {};\n      for (const key of args.keys) {\n        results[key] = existing.has(key) ? 'present' : 'missing';\n      }\n      return text(JSON.stringify(results, null, 2));\n    },\n  });\n\n  const setEnvValues = defineTool({\n    name: 'set_env_values',\n    label: 'Set env values',\n    description:\n      'Create or update environment variable keys in a .env file (creates the file if missing). Each value is either a literal string or a secret reference `{ \"secretRef\": \"secret:...\" }` returned by wizard_ask — refs are resolved locally, so the actual value is written to the file but never returned to the agent.',\n    promptSnippet:\n      'set_env_values(filePath, values) — write .env keys (never hardcode secrets in source)',\n    parameters: Type.Object({\n      filePath: Type.String({\n        description: ENV_FILE_PATH_DESCRIPTION,\n      }),\n      values: Type.Record(\n        Type.String(),\n        Type.Union([Type.String(), Type.Object({ secretRef: Type.String() })]),\n        {\n          description:\n            'Key → (literal string OR { secretRef } pointing to a vaulted secret)',\n        },\n      ),\n    }),\n    async execute(_id, args) {\n      const forbidden = Object.keys(args.values).find(\n        (k) => k.toUpperCase() === 'POSTHOG_KEY',\n      );\n      if (forbidden) {\n        return text(\n          `Error: \"${forbidden}\" is not a valid PostHog env var name. Use the framework-specific key (e.g. NEXT_PUBLIC_POSTHOG_PROJECT_TOKEN).`,\n        );\n      }\n      // Resolve secret refs host-side; the value never reaches the agent.\n      const resolution = resolveEnvSecretRefs(args.values, secretVault);\n      if (!resolution.ok) {\n        return text(\n          `Error: secret reference \"${resolution.secretRef}\" for key \"${resolution.key}\" is not known to the vault. The ref may have expired, been minted in a different run, or been mistyped.`,\n        );\n      }\n      const resolved = resolveEnvPath(workingDirectory, args.filePath);\n      const existing = fs.existsSync(resolved)\n        ? await fs.promises.readFile(resolved, 'utf8')\n        : '';\n      const merged = mergeEnvValues(existing, resolution.values);\n      const dir = path.dirname(resolved);\n      if (!fs.existsSync(dir))\n        await fs.promises.mkdir(dir, { recursive: true });\n      await fs.promises.writeFile(resolved, merged, 'utf8');\n      logToFile(\n        `[pi] set_env_values: ${resolved} keys=${Object.keys(args.values).join(\n          ',',\n        )}`,\n      );\n      return text(\n        `Wrote ${Object.keys(args.values).length} key(s) to ${args.filePath}.`,\n      );\n    },\n  });\n\n  const detectPm = defineTool({\n    name: 'detect_package_manager',\n    label: 'Detect package manager',\n    description:\n      \"Detect the project's package manager(s). Returns the name and the install command for each. Call this before installing a dependency, then RUN the returned install command (with the posthog package) via bash — the SDK package must end up in the project manifest, or the app will not build.\",\n    promptSnippet:\n      'detect_package_manager() — find the PM + install command, then run it via bash to add the SDK',\n    parameters: Type.Object({}),\n    async execute() {\n      const result = await detectPackageManager(workingDirectory);\n      logToFile(\n        `[pi] detect_package_manager: ${result.detected.length} detected`,\n      );\n      return text(JSON.stringify(result, null, 2));\n    },\n  });\n\n  // Native mirror of the MCP `wizard_ask` tool: same name, schema, and\n  // askBridge, so the shared prompt is unchanged.\n  const wizardAsk = defineTool({\n    name: 'wizard_ask',\n    label: 'Ask the user',\n    description:\n      'Ask the user one or more structured questions and wait for their answers. ' +\n      'Use this whenever you would otherwise inline a question in your text output. ' +\n      'Batch related questions into a single call (up to 8) rather than asking one at ' +\n      'a time; sequential calls are fine when later questions genuinely depend on ' +\n      'earlier answers. A fully cancelled or timed-out response does NOT count against ' +\n      'the per-run cap — treat it as \"the user declined\" and fall back gracefully.',\n    promptSnippet:\n      'wizard_ask(questions) — ask the user structured questions and wait for answers',\n    parameters: Type.Object({\n      questions: Type.Array(\n        Type.Object({\n          id: Type.String({\n            description: 'Stable key for the answer in the response map',\n          }),\n          prompt: Type.String({\n            description: 'Question text shown to the user',\n          }),\n          kind: Type.Union(\n            [\n              Type.Literal('single'),\n              Type.Literal('multi'),\n              Type.Literal('text'),\n            ],\n            {\n              description:\n                \"'single' = pick one option, 'multi' = pick any, 'text' = free-form single-line answer\",\n            },\n          ),\n          options: Type.Optional(\n            Type.Array(\n              Type.Object({\n                label: Type.String(),\n                value: Type.String(),\n                description: Type.Optional(Type.String()),\n              }),\n              {\n                description:\n                  'Required for kind=single|multi; ignored for kind=text',\n              },\n            ),\n          ),\n          required: Type.Optional(\n            Type.Boolean({ description: 'Defaults to true' }),\n          ),\n          sensitive: Type.Optional(\n            Type.Boolean({\n              description:\n                \"Only valid for kind='text'. The answer is stored in the wizard's secret vault and returned as { secretRef: 'secret:...' } instead of the raw string. Use for API keys and tokens; the ref is resolved only by tools that accept it (e.g. set_env_values).\",\n            }),\n          ),\n        }),\n        { minItems: 1, maxItems: 8 },\n      ),\n    }),\n    async execute(_id, args) {\n      if (!askBridge) {\n        return text(\n          'Error: wizard_ask is not available in this environment (CI / non-interactive). Proceed with sensible defaults or emit [ABORT] requirements-incomplete.',\n        );\n      }\n\n      const cap = evaluateAskCap(\n        askCallCount,\n        askMaxQuestions,\n        askAdjacencyNudged,\n      );\n      if (cap.kind === 'capped') {\n        if (cap.reason === 'adjacency') askAdjacencyNudged = true;\n        logToFile(\n          `[pi] wizard_ask capped: reason=${cap.reason} count=${askCallCount}`,\n        );\n        analytics.wizardCapture('wizard_ask capped', {\n          reason: cap.reason,\n          call_count: askCallCount,\n          max_questions: askMaxQuestions,\n        });\n        return text(cap.message);\n      }\n\n      // The schema can't enforce per-kind requirements or unique ids.\n      const ids = new Set<string>();\n      for (const q of args.questions) {\n        if ((q.kind === 'single' || q.kind === 'multi') && !q.options?.length) {\n          return text(\n            `Error: question \"${q.id}\" has kind=\"${q.kind}\" but no options. Provide at least one { label, value }, or use kind=\"text\".`,\n          );\n        }\n        if (q.sensitive && q.kind !== 'text') {\n          return text(\n            `Error: question \"${q.id}\" sets sensitive=true but kind=\"${q.kind}\". Only kind=\"text\" answers can be sensitive.`,\n          );\n        }\n        if (ids.has(q.id)) {\n          return text(\n            `Error: duplicate question id \"${q.id}\". Each question needs a unique id.`,\n          );\n        }\n        ids.add(q.id);\n      }\n\n      // Optimistically take the slot; refund it on a cancellation or a bridge\n      // error so a declined/failed ask doesn't burn the budget for later ones.\n      askCallCount += 1;\n      // Block Write/Edit for as long as the overlay is open, so the agent can't\n      // mutate files while it's waiting on the user's answer.\n      onAskPendingChange?.(true);\n      try {\n        const answers = await askBridge.request({ questions: args.questions });\n        if (isFullyCancelled(answers)) askCallCount -= 1;\n        // Sensitive answers go to the vault; the agent sees an opaque ref\n        // (same contract as the MCP wizard_ask).\n        const sanitised = vaultSensitiveAnswers(\n          args.questions,\n          answers,\n          secretVault,\n        );\n        logToFile(\n          `[pi] wizard_ask: resolved ${\n            Object.keys(answers).length\n          } answer(s) for ${args.questions.length} question(s)`,\n        );\n        return text(JSON.stringify({ answers: sanitised }, null, 2));\n      } catch (err) {\n        askCallCount -= 1;\n        const message = err instanceof Error ? err.message : String(err);\n        logToFile(`[pi] wizard_ask: error: ${message}`);\n        return text(`Error: wizard_ask failed: ${message}`);\n      } finally {\n        onAskPendingChange?.(false);\n      }\n    },\n  });\n\n  const tools = [\n    loadSkillMenu,\n    installSkill,\n    checkEnvKeys,\n    setEnvValues,\n    detectPm,\n  ];\n  // Register wizard_ask only when the program allows it. posthog-integration\n  // disallows it (runs without structured user input); self-driving keeps it.\n  // Sequential: the ask bridge holds a single in-flight question slot, so a\n  // batched turn must never dispatch two asks (or an ask + a write) at once.\n  const askDisallowed =\n    ctx.disallowedTools?.includes(WIZARD_TOOL_NAMES.wizardAsk) ?? false;\n  if (!askDisallowed) tools.push(withMode(wizardAsk, 'sequential'));\n  return tools;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA6CA,SAAS,KAAK,GAGZ;AACA,QAAO;EAAE,SAAS,CAAC;GAAE,MAAM;GAAQ,MAAM;GAAG,CAAC;EAAE,SAAS,EAAE;EAAE;;AA0B9D,SAAgB,oBAAoB,KAAuC;CACzE,MAAM,EACJ,kBACA,eACA,WACA,oBACA,eACE;CAGJ,MAAM,0BAA0B,wBAAwB,WAAW;CACnE,MAAM,uBACJ,IAAI,wBAAwB;CAC9B,MAAM,kBAAkB,IAAI,gBAAA;CAG5B,IAAI,eAAe;CACnB,IAAI,qBAAqB;CAGzB,MAAM,cAAc,mBAAmB;CAIvC,IAAI;CACJ,MAAM,qBAAsB,gBAAgB,eAAe,cAAc;CAEzE,MAAM,gBAAgB,WAAW;EAC/B,MAAM;EACN,OAAO;EACP,aACE;EACF,eACE;EACF,YAAY,KAAK,OAAO,EACtB,UAAU,KAAK,OAAO,EACpB,aAAa,wCACd,CAAC,EACH,CAAC;EACF,MAAM,QAAQ,KAAK,MAAM;GACvB,MAAM,OAAO,MAAM,cAAc;AACjC,OAAI,CAAC,KAAM,QAAO,KAAK,wCAAwC;GAC/D,MAAM,SAAS,KAAK,WAAW,KAAK,aAAa,EAAE;AACnD,OAAI,OAAO,WAAW,EACpB,QAAO,KAAK,iCAAiC,KAAK,SAAS,IAAI;AAEjE,aAAU,yBAAyB,OAAO,OAAO,SAAS;AAC1D,UAAO,KAAK,OAAO,KAAK,MAAM,KAAK,EAAE,GAAG,IAAI,EAAE,OAAO,CAAC,KAAK,KAAK,CAAC;;EAEpE,CAAC;CAEF,MAAM,eAAe,WAAW;EAC9B,MAAM;EACN,OAAO;EACP,aACE;EACF,eACE;EACF,YAAY,KAAK,OAAO,EACtB,SAAS,KAAK,OAAO,EAAE,aAAa,iCAAiC,CAAC,EACvE,CAAC;EACF,MAAM,QAAQ,KAAK,MAAM;GACvB,MAAM,SAAS,MAAM,iBACnB,KAAK,SACL,kBACA,eACA,KAAA,GACA,wBACD;AACD,OAAI,OAAO,SAAS,MAAM;AACxB,cAAU,sBAAsB,KAAK,QAAQ,IAAI,OAAO,OAAO;AAC/D,WAAO,KACL,2BAA2B,KAAK,QAAQ,KAAK,OAAO,KAAK,yCAC1D;;AAEH,aAAU,sBAAsB,KAAK,QAAQ,MAAM,OAAO,OAAO;AACjE,UAAO,KACL,cAAc,KAAK,QAAQ,OAAO,OAAO,KAAK,SAAS,OAAO,KAAK,0BACpE;;EAEJ,CAAC;CAEF,MAAM,eAAe,WAAW;EAC9B,MAAM;EACN,OAAO;EACP,aACE;EACF,eAAe;EACf,YAAY,KAAK,OAAO;GACtB,UAAU,KAAK,OAAO,EACpB,aAAa,2BACd,CAAC;GACF,MAAM,KAAK,MAAM,KAAK,QAAQ,EAAE,EAC9B,aAAa,2CACd,CAAC;GACH,CAAC;EACF,MAAM,QAAQ,KAAK,MAAM;GACvB,MAAM,WAAW,eAAe,kBAAkB,KAAK,SAAS;GAChE,MAAM,WAAW,GAAG,WAAW,SAAS,GACpC,aAAa,MAAM,GAAG,SAAS,SAAS,UAAU,OAAO,CAAC,mBAC1D,IAAI,KAAa;GACrB,MAAM,UAAiD,EAAE;AACzD,QAAK,MAAM,OAAO,KAAK,KACrB,SAAQ,OAAO,SAAS,IAAI,IAAI,GAAG,YAAY;AAEjD,UAAO,KAAK,KAAK,UAAU,SAAS,MAAM,EAAE,CAAC;;EAEhD,CAAC;CAEF,MAAM,eAAe,WAAW;EAC9B,MAAM;EACN,OAAO;EACP,aACE;EACF,eACE;EACF,YAAY,KAAK,OAAO;GACtB,UAAU,KAAK,OAAO,EACpB,aAAa,2BACd,CAAC;GACF,QAAQ,KAAK,OACX,KAAK,QAAQ,EACb,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,KAAK,OAAO,EAAE,WAAW,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,EACtE,EACE,aACE,wEACH,CACF;GACF,CAAC;EACF,MAAM,QAAQ,KAAK,MAAM;GACvB,MAAM,YAAY,OAAO,KAAK,KAAK,OAAO,CAAC,MACxC,MAAM,EAAE,aAAa,KAAK,cAC5B;AACD,OAAI,UACF,QAAO,KACL,WAAW,UAAU,iHACtB;GAGH,MAAM,aAAa,qBAAqB,KAAK,QAAQ,YAAY;AACjE,OAAI,CAAC,WAAW,GACd,QAAO,KACL,4BAA4B,WAAW,UAAU,aAAa,WAAW,IAAI,0GAC9E;GAEH,MAAM,WAAW,eAAe,kBAAkB,KAAK,SAAS;GAIhE,MAAM,SAAS,eAHE,GAAG,WAAW,SAAS,GACpC,MAAM,GAAG,SAAS,SAAS,UAAU,OAAO,GAC5C,IACoC,WAAW,OAAO;GAC1D,MAAM,MAAM,KAAK,QAAQ,SAAS;AAClC,OAAI,CAAC,GAAG,WAAW,IAAI,CACrB,OAAM,GAAG,SAAS,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;AACnD,SAAM,GAAG,SAAS,UAAU,UAAU,QAAQ,OAAO;AACrD,aACE,wBAAwB,SAAS,QAAQ,OAAO,KAAK,KAAK,OAAO,CAAC,KAChE,IACD,GACF;AACD,UAAO,KACL,SAAS,OAAO,KAAK,KAAK,OAAO,CAAC,OAAO,aAAa,KAAK,SAAS,GACrE;;EAEJ,CAAC;CAEF,MAAM,WAAW,WAAW;EAC1B,MAAM;EACN,OAAO;EACP,aACE;EACF,eACE;EACF,YAAY,KAAK,OAAO,EAAE,CAAC;EAC3B,MAAM,UAAU;GACd,MAAM,SAAS,MAAM,qBAAqB,iBAAiB;AAC3D,aACE,gCAAgC,OAAO,SAAS,OAAO,WACxD;AACD,UAAO,KAAK,KAAK,UAAU,QAAQ,MAAM,EAAE,CAAC;;EAE/C,CAAC;CAIF,MAAM,YAAY,WAAW;EAC3B,MAAM;EACN,OAAO;EACP,aACE;EAMF,eACE;EACF,YAAY,KAAK,OAAO,EACtB,WAAW,KAAK,MACd,KAAK,OAAO;GACV,IAAI,KAAK,OAAO,EACd,aAAa,iDACd,CAAC;GACF,QAAQ,KAAK,OAAO,EAClB,aAAa,mCACd,CAAC;GACF,MAAM,KAAK,MACT;IACE,KAAK,QAAQ,SAAS;IACtB,KAAK,QAAQ,QAAQ;IACrB,KAAK,QAAQ,OAAO;IACrB,EACD,EACE,aACE,yFACH,CACF;GACD,SAAS,KAAK,SACZ,KAAK,MACH,KAAK,OAAO;IACV,OAAO,KAAK,QAAQ;IACpB,OAAO,KAAK,QAAQ;IACpB,aAAa,KAAK,SAAS,KAAK,QAAQ,CAAC;IAC1C,CAAC,EACF,EACE,aACE,yDACH,CACF,CACF;GACD,UAAU,KAAK,SACb,KAAK,QAAQ,EAAE,aAAa,oBAAoB,CAAC,CAClD;GACD,WAAW,KAAK,SACd,KAAK,QAAQ,EACX,aACE,6PACH,CAAC,CACH;GACF,CAAC,EACF;GAAE,UAAU;GAAG,UAAU;GAAG,CAC7B,EACF,CAAC;EACF,MAAM,QAAQ,KAAK,MAAM;AACvB,OAAI,CAAC,UACH,QAAO,KACL,yJACD;GAGH,MAAM,MAAM,eACV,cACA,iBACA,mBACD;AACD,OAAI,IAAI,SAAS,UAAU;AACzB,QAAI,IAAI,WAAW,YAAa,sBAAqB;AACrD,cACE,kCAAkC,IAAI,OAAO,SAAS,eACvD;AACD,cAAU,cAAc,qBAAqB;KAC3C,QAAQ,IAAI;KACZ,YAAY;KACZ,eAAe;KAChB,CAAC;AACF,WAAO,KAAK,IAAI,QAAQ;;GAI1B,MAAM,sBAAM,IAAI,KAAa;AAC7B,QAAK,MAAM,KAAK,KAAK,WAAW;AAC9B,SAAK,EAAE,SAAS,YAAY,EAAE,SAAS,YAAY,CAAC,EAAE,SAAS,OAC7D,QAAO,KACL,oBAAoB,EAAE,GAAG,cAAc,EAAE,KAAK,8EAC/C;AAEH,QAAI,EAAE,aAAa,EAAE,SAAS,OAC5B,QAAO,KACL,oBAAoB,EAAE,GAAG,kCAAkC,EAAE,KAAK,+CACnE;AAEH,QAAI,IAAI,IAAI,EAAE,GAAG,CACf,QAAO,KACL,iCAAiC,EAAE,GAAG,qCACvC;AAEH,QAAI,IAAI,EAAE,GAAG;;AAKf,mBAAgB;AAGhB,wBAAqB,KAAK;AAC1B,OAAI;IACF,MAAM,UAAU,MAAM,UAAU,QAAQ,EAAE,WAAW,KAAK,WAAW,CAAC;AACtE,QAAI,iBAAiB,QAAQ,CAAE,iBAAgB;IAG/C,MAAM,YAAY,sBAChB,KAAK,WACL,SACA,YACD;AACD,cACE,6BACE,OAAO,KAAK,QAAQ,CAAC,OACtB,iBAAiB,KAAK,UAAU,OAAO,cACzC;AACD,WAAO,KAAK,KAAK,UAAU,EAAE,SAAS,WAAW,EAAE,MAAM,EAAE,CAAC;YACrD,KAAK;AACZ,oBAAgB;IAChB,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,cAAU,2BAA2B,UAAU;AAC/C,WAAO,KAAK,6BAA6B,UAAU;aAC3C;AACR,yBAAqB,MAAM;;;EAGhC,CAAC;CAEF,MAAM,QAAQ;EACZ;EACA;EACA;EACA;EACA;EACD;AAOD,KAAI,EADF,IAAI,iBAAiB,SAAS,kBAAkB,UAAU,IAAI,OAC5C,OAAM,KAAK,SAAS,WAAW,aAAa,CAAC;AACjE,QAAO"}

package/dist/{wizard-abort-Br1Dps20.js → wizard-abort-B1iPXM3K.js}

@@ -1,6 +1,6 @@
-import { f as getUI, s as logToFile } from "./debug-DF51kDvZ.js";
-import { n as analytics } from "./analytics-D6gRGiqt.js";
-import "./wizard-session-tp4Zdbwl.js";
+import { f as getUI, s as logToFile } from "./debug-DaXKSXEy.js";
+import { n as analytics } from "./analytics-Ddf3zJgF.js";
+import "./wizard-session-BAZql11N.js";
 //#region src/utils/wizard-abort.ts
 /**
 * Single exit point for the wizard. Use instead of process.exit() directly.
@@ -46,4 +46,4 @@ async function wizardAbort(options) {
 //#endregion
 export { wizardAbort as i, registerCleanup as n, runCleanups as r, WizardError as t };
 
-//# sourceMappingURL=wizard-abort-Br1Dps20.js.map
+//# sourceMappingURL=wizard-abort-B1iPXM3K.js.map

package/dist/{wizard-abort-Br1Dps20.js.map → wizard-abort-B1iPXM3K.js.map}

@@ -1 +1 @@
-{"version":3,"file":"wizard-abort-Br1Dps20.js","names":[],"sources":["../src/utils/wizard-abort.ts"],"sourcesContent":["/**\n * Single exit point for the wizard. Use instead of process.exit() directly.\n *\n * Sequence: cleanup -> error capture (optional) -> analytics shutdown -> outro -> process.exit\n *\n * WizardError is a data carrier passed to wizardAbort() for analytics context, never thrown.\n * The legacy abort() in setup-utils.ts delegates here.\n */\nimport { analytics } from './analytics';\nimport { logToFile } from './debug';\nimport { getUI } from '@ui';\nimport { OutroKind, type OutroData } from '@lib/wizard-session';\n\nexport class WizardError extends Error {\n  constructor(\n    message: string,\n    public readonly context?: Record<string, unknown>,\n  ) {\n    super(message);\n    this.name = 'WizardError';\n  }\n}\n\ninterface WizardAbortOptions {\n  message?: string;\n  /** Structured error data. Renders via `outroError` instead of `outro`. */\n  outroData?: OutroData;\n  error?: Error | WizardError;\n  exitCode?: number;\n}\n\nconst cleanupFns: Array<() => void> = [];\n\nexport function registerCleanup(fn: () => void): void {\n  cleanupFns.push(fn);\n}\n\nexport function clearCleanup(): void {\n  cleanupFns.length = 0;\n}\n\n/** Runs all registered cleanup functions and drains the array. */\nexport function runCleanups(): void {\n  const fns = cleanupFns.splice(0);\n  for (const fn of fns) {\n    try {\n      fn();\n    } catch {\n      /* cleanup should not prevent exit */\n    }\n  }\n}\n\nexport async function wizardAbort(\n  options?: WizardAbortOptions,\n): Promise<never> {\n  const {\n    message = 'Wizard setup cancelled.',\n    outroData,\n    error,\n    exitCode = 1,\n  } = options ?? {};\n\n  logToFile(`[wizard-abort] exitCode=${exitCode}, message: ${message}`);\n  if (error) {\n    logToFile('[wizard-abort] error:', error);\n  }\n\n  // 1. Run registered cleanup functions\n  runCleanups();\n\n  // 2. Capture error in analytics (if provided)\n  if (error) {\n    analytics.captureException(error, {\n      ...((error instanceof WizardError && error.context) || {}),\n    });\n  }\n\n  // 3. Shutdown analytics\n  await analytics.shutdown(error ? 'error' : 'cancelled');\n\n  // 4. Render the error outro. Synthesize OutroData from `message`\n  //    when the caller didn't provide structured data.\n  const ui = getUI();\n  ui.outroError(outroData ?? { kind: OutroKind.Error, message });\n\n  // 5. Wait for the user to dismiss the outro screen. In a TUI this gives\n  //    them time to read the error; in non-TUI environments it resolves\n  //    immediately.\n  await ui.waitForOutroDismissed();\n\n  // 6. Exit (fires 'exit' event so TUI cleanup runs)\n  return process.exit(exitCode);\n}\n"],"mappings":";;;;;;;;;;;;AAaA,IAAa,cAAb,cAAiC,MAAM;CACrC,YACE,SACA,SACA;AACA,QAAM,QAAQ;AAFE,OAAA,UAAA;AAGhB,OAAK,OAAO;;;AAYhB,MAAM,aAAgC,EAAE;AAExC,SAAgB,gBAAgB,IAAsB;AACpD,YAAW,KAAK,GAAG;;;AAQrB,SAAgB,cAAoB;CAClC,MAAM,MAAM,WAAW,OAAO,EAAE;AAChC,MAAK,MAAM,MAAM,IACf,KAAI;AACF,MAAI;SACE;;AAMZ,eAAsB,YACpB,SACgB;CAChB,MAAM,EACJ,UAAU,2BACV,WACA,OACA,WAAW,MACT,WAAW,EAAE;AAEjB,WAAU,2BAA2B,SAAS,aAAa,UAAU;AACrE,KAAI,MACF,WAAU,yBAAyB,MAAM;AAI3C,cAAa;AAGb,KAAI,MACF,WAAU,iBAAiB,OAAO,EAChC,GAAK,iBAAiB,eAAe,MAAM,WAAY,EAAE,EAC1D,CAAC;AAIJ,OAAM,UAAU,SAAS,QAAQ,UAAU,YAAY;CAIvD,MAAM,KAAK,OAAO;AAClB,IAAG,WAAW,aAAa;EAAE,MAAA;EAAuB;EAAS,CAAC;AAK9D,OAAM,GAAG,uBAAuB;AAGhC,QAAO,QAAQ,KAAK,SAAS"}
+{"version":3,"file":"wizard-abort-B1iPXM3K.js","names":[],"sources":["../src/utils/wizard-abort.ts"],"sourcesContent":["/**\n * Single exit point for the wizard. Use instead of process.exit() directly.\n *\n * Sequence: cleanup -> error capture (optional) -> analytics shutdown -> outro -> process.exit\n *\n * WizardError is a data carrier passed to wizardAbort() for analytics context, never thrown.\n * The legacy abort() in setup-utils.ts delegates here.\n */\nimport { analytics } from './analytics';\nimport { logToFile } from './debug';\nimport { getUI } from '@ui';\nimport { OutroKind, type OutroData } from '@lib/wizard-session';\n\nexport class WizardError extends Error {\n  constructor(\n    message: string,\n    public readonly context?: Record<string, unknown>,\n  ) {\n    super(message);\n    this.name = 'WizardError';\n  }\n}\n\ninterface WizardAbortOptions {\n  message?: string;\n  /** Structured error data. Renders via `outroError` instead of `outro`. */\n  outroData?: OutroData;\n  error?: Error | WizardError;\n  exitCode?: number;\n}\n\nconst cleanupFns: Array<() => void> = [];\n\nexport function registerCleanup(fn: () => void): void {\n  cleanupFns.push(fn);\n}\n\nexport function clearCleanup(): void {\n  cleanupFns.length = 0;\n}\n\n/** Runs all registered cleanup functions and drains the array. */\nexport function runCleanups(): void {\n  const fns = cleanupFns.splice(0);\n  for (const fn of fns) {\n    try {\n      fn();\n    } catch {\n      /* cleanup should not prevent exit */\n    }\n  }\n}\n\nexport async function wizardAbort(\n  options?: WizardAbortOptions,\n): Promise<never> {\n  const {\n    message = 'Wizard setup cancelled.',\n    outroData,\n    error,\n    exitCode = 1,\n  } = options ?? {};\n\n  logToFile(`[wizard-abort] exitCode=${exitCode}, message: ${message}`);\n  if (error) {\n    logToFile('[wizard-abort] error:', error);\n  }\n\n  // 1. Run registered cleanup functions\n  runCleanups();\n\n  // 2. Capture error in analytics (if provided)\n  if (error) {\n    analytics.captureException(error, {\n      ...((error instanceof WizardError && error.context) || {}),\n    });\n  }\n\n  // 3. Shutdown analytics\n  await analytics.shutdown(error ? 'error' : 'cancelled');\n\n  // 4. Render the error outro. Synthesize OutroData from `message`\n  //    when the caller didn't provide structured data.\n  const ui = getUI();\n  ui.outroError(outroData ?? { kind: OutroKind.Error, message });\n\n  // 5. Wait for the user to dismiss the outro screen. In a TUI this gives\n  //    them time to read the error; in non-TUI environments it resolves\n  //    immediately.\n  await ui.waitForOutroDismissed();\n\n  // 6. Exit (fires 'exit' event so TUI cleanup runs)\n  return process.exit(exitCode);\n}\n"],"mappings":";;;;;;;;;;;;AAaA,IAAa,cAAb,cAAiC,MAAM;CACrC,YACE,SACA,SACA;AACA,QAAM,QAAQ;AAFE,OAAA,UAAA;AAGhB,OAAK,OAAO;;;AAYhB,MAAM,aAAgC,EAAE;AAExC,SAAgB,gBAAgB,IAAsB;AACpD,YAAW,KAAK,GAAG;;;AAQrB,SAAgB,cAAoB;CAClC,MAAM,MAAM,WAAW,OAAO,EAAE;AAChC,MAAK,MAAM,MAAM,IACf,KAAI;AACF,MAAI;SACE;;AAMZ,eAAsB,YACpB,SACgB;CAChB,MAAM,EACJ,UAAU,2BACV,WACA,OACA,WAAW,MACT,WAAW,EAAE;AAEjB,WAAU,2BAA2B,SAAS,aAAa,UAAU;AACrE,KAAI,MACF,WAAU,yBAAyB,MAAM;AAI3C,cAAa;AAGb,KAAI,MACF,WAAU,iBAAiB,OAAO,EAChC,GAAK,iBAAiB,eAAe,MAAM,WAAY,EAAE,EAC1D,CAAC;AAIJ,OAAM,UAAU,SAAS,QAAQ,UAAU,YAAY;CAIvD,MAAM,KAAK,OAAO;AAClB,IAAG,WAAW,aAAa;EAAE,MAAA;EAAuB;EAAS,CAAC;AAK9D,OAAM,GAAG,uBAAuB;AAGhC,QAAO,QAAQ,KAAK,SAAS"}

package/dist/{wizard-abort-DG6Atd5I.js → wizard-abort-cX4Kytai.js}

@@ -1,2 +1,2 @@
-import { i as wizardAbort, t as WizardError } from "./wizard-abort-Br1Dps20.js";
+import { i as wizardAbort, t as WizardError } from "./wizard-abort-B1iPXM3K.js";
 export { WizardError, wizardAbort };

package/dist/{wizard-session-tp4Zdbwl.js → wizard-session-BAZql11N.js}

@@ -95,4 +95,4 @@ function buildSession(args) {
 //#endregion
 export { buildSession as a, RunPhase as i, ADDITIONAL_FEATURE_PROMPTS as n, OutroKind as r, ADDITIONAL_FEATURE_LABELS as t };
 
-//# sourceMappingURL=wizard-session-tp4Zdbwl.js.map
+//# sourceMappingURL=wizard-session-BAZql11N.js.map

package/dist/{wizard-session-tp4Zdbwl.js.map → wizard-session-BAZql11N.js.map}

@@ -1 +1 @@
-{"version":3,"file":"wizard-session-tp4Zdbwl.js","names":[],"sources":["../src/lib/wizard-session.ts"],"sourcesContent":["/**\n * WizardSession — single source of truth for every decision the wizard needs.\n *\n * Populated in layers:\n *   CLI args / env vars  →  populate fields directly\n *   Auto-detection       →  framework, typescript, package manager\n *   TUI screens          →  region, framework disambiguation, etc.\n *   OAuth                →  credentials\n *\n * Business logic reads from the session. Never calls a prompt.\n */\n\nimport type { Harness, Integration, Sequence } from './constants';\nimport type { FrameworkConfig } from './framework-config';\nimport type { WizardReadinessResult } from './health-checks/readiness';\nimport type { SettingsConflict } from './agent/claude-settings';\nimport type { ApiUser, ApiProject } from './api';\nimport type { HostResolution } from './host-resolution';\n\nexport interface Credentials {\n  accessToken: string;\n  projectApiKey: string;\n  /** Resolved at auth time and immutable thereafter — see {@link HostResolution}. */\n  host: HostResolution;\n  projectId: number;\n}\n\nfunction parseProjectIdArg(value: string | undefined): number | undefined {\n  if (value === undefined || value === '') return undefined;\n  const n = Number(value);\n  return Number.isInteger(n) && n > 0 ? n : undefined;\n}\n\nexport type CloudRegion = 'us' | 'eu';\n\n/** Lifecycle phase of the main work (agent run, MCP install, etc.) */\nexport enum RunPhase {\n  /** Still gathering input (intro, setup screens) */\n  Idle = 'idle',\n  /** Main work is in progress */\n  Running = 'running',\n  /** Main work finished successfully */\n  Completed = 'completed',\n  /** Main work finished with an error */\n  Error = 'error',\n}\n\n/** Features discovered by the feature-discovery subagent */\nexport enum DiscoveredFeature {\n  Stripe = 'stripe',\n  LLM = 'llm',\n}\n\n/** Additional features the agent can integrate after the main setup */\nexport enum AdditionalFeature {\n  LLM = 'llm',\n}\n\n/** Human-readable labels for additional features (used in TUI progress) */\nexport const ADDITIONAL_FEATURE_LABELS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: 'AI observability',\n};\n\n/** Agent prompts for each additional feature, injected via the stop hook */\nexport const ADDITIONAL_FEATURE_PROMPTS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: `Now integrate AI observability with PostHog. Use the PostHog MCP server to find the appropriate AI observability skill, install it, and follow its workflow. PostHog basics are already installed. Update the setup report markdown file when complete with additions from this task. `,\n};\n\n/** Outcome of the MCP server installation step */\nexport enum McpOutcome {\n  NoClients = 'no_clients',\n  Skipped = 'skipped',\n  Installed = 'installed',\n  Failed = 'failed',\n}\n\n/** Outcome kind for the outro screen */\nexport enum OutroKind {\n  Success = 'success',\n  Error = 'error',\n  Cancel = 'cancel',\n}\n\nexport interface OutroData {\n  kind: OutroKind;\n  /** Main headline (green check for Success, red X for Error, etc.) */\n  message?: string;\n  /** Free-form body text shown under the headline. Use \\n for paragraph breaks. */\n  body?: string;\n  /** Success-only: bulleted list of \"what the agent did\" */\n  changes?: string[];\n  /**\n   * Success-only: a prominent, labeled link to where the user should go\n   * next (e.g. an inbox the program just configured). Rendered right under\n   * the headline and shown verbatim — no UTM tagging — so the URL stays\n   * clean and copy-pasteable. Set per-program in buildOutroData.\n   */\n  primaryLink?: { label: string; url: string };\n  /**\n   * Success-only: a short \"what to do next\" checklist with its own heading,\n   * rendered as a bulleted list. Distinct from `changes`, which recaps what\n   * the agent already did.\n   */\n  nextSteps?: { heading: string; items: string[] };\n  docsUrl?: string;\n  continueUrl?: string;\n  /** Report file the agent wrote (e.g. \"posthog-setup-report.md\") */\n  reportFile?: string;\n  /** PostHog dashboard URL the program created on the user's behalf. */\n  dashboardUrl?: string;\n  /** PostHog notebook URL the program uploaded the report to. */\n  notebookUrl?: string;\n  /**\n   * Copy-paste prompt the operator hands to their coding agent to finish the\n   * job (work the report's checklist). Printed to the terminal's main buffer on\n   * exit (see getExitLine in start-tui.ts) — the TUI's alternate screen is wiped\n   * on exit, so the scrollback line is where it survives and can be\n   * triple-click-selected. Set per-program in buildOutroData.\n   */\n  handoffPrompt?: string;\n}\n\n/** A single question rendered by the WizardAsk overlay. */\nexport interface AskQuestion {\n  /** Key for the response map */\n  id: string;\n  prompt: string;\n  /** text = single-line free input; single/multi = picker */\n  kind: 'single' | 'multi' | 'text';\n  /** Required for `single` and `multi`. Ignored for `text`. */\n  options?: { label: string; value: string; description?: string }[];\n  /** Defaults to true */\n  required?: boolean;\n  /**\n   * Only meaningful for kind='text'. When true, the wizard-tools `wizard_ask`\n   * tool stores the user's answer in the session secret vault and returns\n   * `{ secretRef }` to the agent instead of the plain string — so the value\n   * never enters the LLM conversation. The TUI may also mask input\n   * accordingly. See `secret-vault.ts`.\n   */\n  sensitive?: boolean;\n}\n\n/** Map of question id → answer (string for single/text, string[] for multi). */\nexport type AskAnswers = Record<string, string | string[]>;\n\n/** A pending wizard_ask request held by the store. */\nexport interface PendingQuestion {\n  id: string;\n  questions: AskQuestion[];\n  /** Skill id of the caller. Set by the wizard from session.skillId. */\n  source: string;\n  /**\n   * When true, the ask overlay renders standalone URLs in prompt text as\n   * OSC 8 hyperlinks and copies a lone URL to the clipboard. Opt-in per\n   * program (set from `ProgramRun.richLinks` via the ask bridge); defaults\n   * to false so existing flows render prompts exactly as before. See\n   * `LinkText` / `link-helpers`.\n   */\n  richLinks?: boolean;\n}\n\n/**\n * PostHog dashboard URL emitted by the agent during a program run.\n * Populated via the `[DASHBOARD_URL]` text marker in agent assistant messages\n * — see `handleSDKMessage` in `agent/agent-interface.ts`. Read by programs\n * (e.g. events-audit) inside `buildOutroData` to surface a dashboard link\n * the agent actually created.\n */\n\nexport interface WizardSession {\n  // From CLI args\n  debug: boolean;\n  installDir: string;\n  ci: boolean;\n  signup: boolean;\n  localMcp: boolean;\n  mcpFeatures?: string[];\n  apiKey?: string;\n  email?: string;\n  region?: CloudRegion;\n  /**\n   * Explicit PostHog base URL (`--base-url`). When set, it pins every PostHog\n   * origin — API host, cloud/app URL, OAuth server — and `region` is ignored.\n   * The runtime equivalent of the dev-build localhost routing; lets the shipped\n   * wizard target a local/self-hosted stack. Threaded into the URL helpers in\n   * `@utils/urls`. Empty/unset → region-based resolution.\n   */\n  baseUrl?: string;\n  benchmark: boolean;\n  yaraReport: boolean;\n  projectId?: number;\n  noTelemetry: boolean;\n\n  /** `--harness` override, read by `resolveHarness`. Wins over the runner flag. */\n  harness?: Harness;\n  /** `--sequence` override, read in `runProgram`. Wins over the orchestrator flag. */\n  sequence?: Sequence;\n  /** `--model` override (gateway id), read by `resolveHarness`. Wins over the binding's model. */\n  model?: string;\n\n  // From detection + screens\n  setupConfirmed: boolean;\n  integration: Integration | null;\n  frameworkContext: Record<string, unknown>;\n  typescript: boolean;\n\n  /** Human-readable label for the detected framework variant (e.g., \"Django with Wagtail CMS\") */\n  detectedFrameworkLabel: string | null;\n\n  /** True once framework detection has run (whether it found something or not) */\n  detectionComplete: boolean;\n\n  /** Set when the detected framework version is too old for the wizard */\n  unsupportedVersion: {\n    current: string;\n    minimum: string;\n    docsUrl: string;\n  } | null;\n\n  // From OAuth\n  credentials: Credentials | null;\n\n  /**\n   * `role_at_organization` from `/api/users/@me/`. Null when the upstream\n   * value is missing (older accounts, fresh signups before onboarding).\n   * Drives role-tailored MCP prompt suggestions on the McpSuggestedPromptsScreen.\n   *\n   * Mirrors `apiUser?.role_at_organization` — kept as a top-level convenience\n   * because it has dedicated UI semantics (role-tailored kits) and pre-dates\n   * the broader `apiUser` plumbing.\n   */\n  roleAtOrganization: string | null;\n\n  /**\n   * Full user payload from `/api/users/@me/` — identifiers, profile,\n   * current team + organization, preferences, etc. Null until OAuth /\n   * CI-key auth populates it. Schema lives in `src/lib/api.ts` and\n   * passes through unknown upstream fields so downstream features can\n   * read account context (plan, org name, email, etc.) without\n   * re-fetching.\n   */\n  apiUser: ApiUser | null;\n\n  /**\n   * Project payload resolved at authentication, kept so a second agent run in\n   * the same invocation (e.g. self-driving's integration phase) reuses the\n   * first login wholesale instead of re-authenticating. The resolved region\n   * lives on `credentials.host.region`.\n   */\n  apiProject: ApiProject | null;\n\n  // Lifecycle\n  runPhase: RunPhase;\n  loginUrl: string | null;\n  // Direct PostHog authorize URL, shown in the manual-paste modal for\n  // headless/remote shells (the localhost loginUrl is unreachable there).\n  authorizeUrl: string | null;\n\n  // Feature discovery\n  discoveredFeatures: DiscoveredFeature[];\n  llmOptIn: boolean;\n\n  // ScreenId completion\n  mcpComplete: boolean;\n  mcpOutcome: McpOutcome | null;\n  mcpInstalledClients: string[];\n  mcpSuggestedPromptsDismissed: boolean;\n  /** True once the user has acted on (opened or skipped) the Connect-Slack step. */\n  slackStepDismissed: boolean;\n  /**\n   * Whether the project already has a Slack integration connected.\n   * `null` until detected. Prefetched by the tutorial screen as soon as\n   * credentials exist so the Connect-Slack step renders the right\n   * variant immediately instead of flashing the nudge first.\n   */\n  slackConnected: boolean | null;\n  skillsComplete: boolean;\n  outroDismissed: boolean;\n\n  /**\n   * Self-driving only: whether to integrate PostHog as part of this run.\n   * `null` until decided. When detection finds no PostHog SDK, the\n   * integration-check screen sets this to `true` (Self-driving needs an SDK,\n   * so we always integrate in that case) — and, on the same screen, asks\n   * whether the user already has a PostHog account: \"yes\" leaves `signup`\n   * false (OAuth login); \"no\" flips `signup` and collects `email`/`region`\n   * so auth provisions a new account. The `--integrate` flag pre-sets this to\n   * `true`, skipping the screen entirely and defaulting to the OAuth login.\n   * When `true`, the self-driving prompt has the agent set up the SDK before\n   * the Self-driving steps. Unused by other programs.\n   */\n  integrate: boolean | null;\n\n  /**\n   * Ids of composed run steps that have completed — e.g. self-driving's\n   * `integrate-run`. Lets a run step's `isComplete` hold after it ran,\n   * independent of the shared `runPhase`.\n   */\n  completedRuns: string[];\n\n  /**\n   * Self-driving only: whether the user confirmed the handoff screen shown\n   * after the integration run (\"PostHog is installed — now set up Self-driving\").\n   * Gates the Self-driving run so it doesn't start until acknowledged. Only\n   * reached in the integrate path; the already-has-PostHog path skips it.\n   */\n  selfDrivingHandoffConfirmed: boolean;\n\n  // Runtime\n  readinessResult: WizardReadinessResult | null;\n  outageDismissed: boolean;\n  settingsOverrideKeys: string[] | null;\n  settingsConflicts: SettingsConflict[] | null;\n  authErrorDetail: {\n    hasSettingsConflict: boolean;\n    conflicts?: SettingsConflict[];\n    logFilePath: string;\n  } | null;\n  portConflictProcess: {\n    command: string;\n    pid: string;\n    port: number;\n    user: string;\n  } | null;\n  outroData: OutroData | null;\n  dashboardUrl: string | null;\n  notebookUrl: string | null;\n\n  // Additional features queue (drained via stop hook after main integration)\n  additionalFeatureQueue: AdditionalFeature[];\n\n  // Program metadata (set by runWizard in bin.ts)\n  programLabel: string | null;\n  skillId: string | null;\n\n  // Resolved framework config (set after integration is known)\n  frameworkConfig: FrameworkConfig | null;\n\n  /** Active wizard_ask request, set by the bridge when the agent calls the tool. */\n  pendingQuestion: PendingQuestion | null;\n}\n\n/**\n * Build a WizardSession from CLI args, pre-populating whatever is known.\n */\nexport function buildSession(args: {\n  debug?: boolean;\n  installDir?: string;\n  ci?: boolean;\n  signup?: boolean;\n  localMcp?: boolean;\n  mcpFeatures?: string[];\n  apiKey?: string;\n  email?: string;\n  region?: CloudRegion;\n  baseUrl?: string;\n  integration?: Integration;\n  benchmark?: boolean;\n  yaraReport?: boolean;\n  projectId?: string;\n  noTelemetry?: boolean;\n  harness?: Harness;\n  sequence?: Sequence;\n  model?: string;\n  integrate?: boolean;\n}): WizardSession {\n  return {\n    debug: args.debug ?? false,\n    installDir: args.installDir ?? process.cwd(),\n    ci: args.ci ?? false,\n    signup: args.signup ?? false,\n    localMcp: args.localMcp ?? false,\n    mcpFeatures: args.mcpFeatures,\n    apiKey: args.apiKey,\n    email: args.email,\n    region: args.region,\n    baseUrl: args.baseUrl,\n    benchmark: args.benchmark ?? false,\n    yaraReport: args.yaraReport ?? false,\n    projectId: parseProjectIdArg(args.projectId),\n    noTelemetry: args.noTelemetry ?? false,\n    harness: args.harness,\n    sequence: args.sequence,\n    model: args.model,\n\n    setupConfirmed: false,\n    integration: args.integration ?? null,\n    frameworkContext: {},\n    typescript: false,\n    detectedFrameworkLabel: null,\n    detectionComplete: false,\n    unsupportedVersion: null,\n\n    runPhase: RunPhase.Idle,\n    discoveredFeatures: [],\n    llmOptIn: false,\n    mcpComplete: false,\n    mcpOutcome: null,\n    mcpInstalledClients: [],\n    mcpSuggestedPromptsDismissed: false,\n    slackStepDismissed: false,\n    slackConnected: null,\n    skillsComplete: false,\n    outroDismissed: false,\n    // `--integrate` forces integration (skip the question); otherwise the\n    // integration-check screen resolves it from null.\n    integrate: args.integrate === true ? true : null,\n    completedRuns: [],\n    selfDrivingHandoffConfirmed: false,\n    loginUrl: null,\n    authorizeUrl: null,\n    credentials: null,\n    roleAtOrganization: null,\n    apiUser: null,\n    apiProject: null,\n    readinessResult: null,\n    outageDismissed: false,\n    settingsOverrideKeys: null,\n    settingsConflicts: null,\n    authErrorDetail: null,\n    portConflictProcess: null,\n    outroData: null,\n    dashboardUrl: null,\n    notebookUrl: null,\n    additionalFeatureQueue: [],\n    programLabel: null,\n    skillId: null,\n    frameworkConfig: null,\n    pendingQuestion: null,\n  };\n}\n"],"mappings":";AA2BA,SAAS,kBAAkB,OAA+C;AACxE,KAAI,UAAU,KAAA,KAAa,UAAU,GAAI,QAAO,KAAA;CAChD,MAAM,IAAI,OAAO,MAAM;AACvB,QAAO,OAAO,UAAU,EAAE,IAAI,IAAI,IAAI,IAAI,KAAA;;;AAM5C,IAAY,WAAL,yBAAA,UAAA;;AAEL,UAAA,UAAA;;AAEA,UAAA,aAAA;;AAEA,UAAA,eAAA;;AAEA,UAAA,WAAA;;KACD;;AAcD,MAAa,4BAA+D,GAAA,QACjD,oBAC1B;;AAGD,MAAa,6BAAgE,GAAA,QAClD,0RAC1B;;AAWD,IAAY,YAAL,yBAAA,WAAA;AACL,WAAA,aAAA;AACA,WAAA,WAAA;AACA,WAAA,YAAA;;KACD;;;;AAyQD,SAAgB,aAAa,MAoBX;AAChB,QAAO;EACL,OAAO,KAAK,SAAS;EACrB,YAAY,KAAK,cAAc,QAAQ,KAAK;EAC5C,IAAI,KAAK,MAAM;EACf,QAAQ,KAAK,UAAU;EACvB,UAAU,KAAK,YAAY;EAC3B,aAAa,KAAK;EAClB,QAAQ,KAAK;EACb,OAAO,KAAK;EACZ,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,WAAW,KAAK,aAAa;EAC7B,YAAY,KAAK,cAAc;EAC/B,WAAW,kBAAkB,KAAK,UAAU;EAC5C,aAAa,KAAK,eAAe;EACjC,SAAS,KAAK;EACd,UAAU,KAAK;EACf,OAAO,KAAK;EAEZ,gBAAgB;EAChB,aAAa,KAAK,eAAe;EACjC,kBAAkB,EAAE;EACpB,YAAY;EACZ,wBAAwB;EACxB,mBAAmB;EACnB,oBAAoB;EAEpB,UAAA;EACA,oBAAoB,EAAE;EACtB,UAAU;EACV,aAAa;EACb,YAAY;EACZ,qBAAqB,EAAE;EACvB,8BAA8B;EAC9B,oBAAoB;EACpB,gBAAgB;EAChB,gBAAgB;EAChB,gBAAgB;EAGhB,WAAW,KAAK,cAAc,OAAO,OAAO;EAC5C,eAAe,EAAE;EACjB,6BAA6B;EAC7B,UAAU;EACV,cAAc;EACd,aAAa;EACb,oBAAoB;EACpB,SAAS;EACT,YAAY;EACZ,iBAAiB;EACjB,iBAAiB;EACjB,sBAAsB;EACtB,mBAAmB;EACnB,iBAAiB;EACjB,qBAAqB;EACrB,WAAW;EACX,cAAc;EACd,aAAa;EACb,wBAAwB,EAAE;EAC1B,cAAc;EACd,SAAS;EACT,iBAAiB;EACjB,iBAAiB;EAClB"}
+{"version":3,"file":"wizard-session-BAZql11N.js","names":[],"sources":["../src/lib/wizard-session.ts"],"sourcesContent":["/**\n * WizardSession — single source of truth for every decision the wizard needs.\n *\n * Populated in layers:\n *   CLI args / env vars  →  populate fields directly\n *   Auto-detection       →  framework, typescript, package manager\n *   TUI screens          →  region, framework disambiguation, etc.\n *   OAuth                →  credentials\n *\n * Business logic reads from the session. Never calls a prompt.\n */\n\nimport type { Harness, Integration, Sequence } from './constants';\nimport type { FrameworkConfig } from './framework-config';\nimport type { WizardReadinessResult } from './health-checks/readiness';\nimport type { SettingsConflict } from './agent/claude-settings';\nimport type { ApiUser, ApiProject } from './api';\nimport type { HostResolution } from './host-resolution';\n\nexport interface Credentials {\n  accessToken: string;\n  projectApiKey: string;\n  /** Resolved at auth time and immutable thereafter — see {@link HostResolution}. */\n  host: HostResolution;\n  projectId: number;\n}\n\nfunction parseProjectIdArg(value: string | undefined): number | undefined {\n  if (value === undefined || value === '') return undefined;\n  const n = Number(value);\n  return Number.isInteger(n) && n > 0 ? n : undefined;\n}\n\nexport type CloudRegion = 'us' | 'eu';\n\n/** Lifecycle phase of the main work (agent run, MCP install, etc.) */\nexport enum RunPhase {\n  /** Still gathering input (intro, setup screens) */\n  Idle = 'idle',\n  /** Main work is in progress */\n  Running = 'running',\n  /** Main work finished successfully */\n  Completed = 'completed',\n  /** Main work finished with an error */\n  Error = 'error',\n}\n\n/** Features discovered by the feature-discovery subagent */\nexport enum DiscoveredFeature {\n  Stripe = 'stripe',\n  LLM = 'llm',\n}\n\n/** Additional features the agent can integrate after the main setup */\nexport enum AdditionalFeature {\n  LLM = 'llm',\n}\n\n/** Human-readable labels for additional features (used in TUI progress) */\nexport const ADDITIONAL_FEATURE_LABELS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: 'AI observability',\n};\n\n/** Agent prompts for each additional feature, injected via the stop hook */\nexport const ADDITIONAL_FEATURE_PROMPTS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: `Now integrate AI observability with PostHog. Use the PostHog MCP server to find the appropriate AI observability skill, install it, and follow its workflow. PostHog basics are already installed. Update the setup report markdown file when complete with additions from this task. `,\n};\n\n/** Outcome of the MCP server installation step */\nexport enum McpOutcome {\n  NoClients = 'no_clients',\n  Skipped = 'skipped',\n  Installed = 'installed',\n  Failed = 'failed',\n}\n\n/** Outcome kind for the outro screen */\nexport enum OutroKind {\n  Success = 'success',\n  Error = 'error',\n  Cancel = 'cancel',\n}\n\nexport interface OutroData {\n  kind: OutroKind;\n  /** Main headline (green check for Success, red X for Error, etc.) */\n  message?: string;\n  /** Free-form body text shown under the headline. Use \\n for paragraph breaks. */\n  body?: string;\n  /** Success-only: bulleted list of \"what the agent did\" */\n  changes?: string[];\n  /**\n   * Success-only: a prominent, labeled link to where the user should go\n   * next (e.g. an inbox the program just configured). Rendered right under\n   * the headline and shown verbatim — no UTM tagging — so the URL stays\n   * clean and copy-pasteable. Set per-program in buildOutroData.\n   */\n  primaryLink?: { label: string; url: string };\n  /**\n   * Success-only: a short \"what to do next\" checklist with its own heading,\n   * rendered as a bulleted list. Distinct from `changes`, which recaps what\n   * the agent already did.\n   */\n  nextSteps?: { heading: string; items: string[] };\n  docsUrl?: string;\n  continueUrl?: string;\n  /** Report file the agent wrote (e.g. \"posthog-setup-report.md\") */\n  reportFile?: string;\n  /** PostHog dashboard URL the program created on the user's behalf. */\n  dashboardUrl?: string;\n  /** PostHog notebook URL the program uploaded the report to. */\n  notebookUrl?: string;\n  /**\n   * Copy-paste prompt the operator hands to their coding agent to finish the\n   * job (work the report's checklist). Printed to the terminal's main buffer on\n   * exit (see getExitLine in start-tui.ts) — the TUI's alternate screen is wiped\n   * on exit, so the scrollback line is where it survives and can be\n   * triple-click-selected. Set per-program in buildOutroData.\n   */\n  handoffPrompt?: string;\n}\n\n/** A single question rendered by the WizardAsk overlay. */\nexport interface AskQuestion {\n  /** Key for the response map */\n  id: string;\n  prompt: string;\n  /** text = single-line free input; single/multi = picker */\n  kind: 'single' | 'multi' | 'text';\n  /** Required for `single` and `multi`. Ignored for `text`. */\n  options?: { label: string; value: string; description?: string }[];\n  /** Defaults to true */\n  required?: boolean;\n  /**\n   * Only meaningful for kind='text'. When true, the wizard-tools `wizard_ask`\n   * tool stores the user's answer in the session secret vault and returns\n   * `{ secretRef }` to the agent instead of the plain string — so the value\n   * never enters the LLM conversation. The TUI may also mask input\n   * accordingly. See `secret-vault.ts`.\n   */\n  sensitive?: boolean;\n}\n\n/** Map of question id → answer (string for single/text, string[] for multi). */\nexport type AskAnswers = Record<string, string | string[]>;\n\n/** A pending wizard_ask request held by the store. */\nexport interface PendingQuestion {\n  id: string;\n  questions: AskQuestion[];\n  /** Skill id of the caller. Set by the wizard from session.skillId. */\n  source: string;\n  /**\n   * When true, the ask overlay renders standalone URLs in prompt text as\n   * OSC 8 hyperlinks and copies a lone URL to the clipboard. Opt-in per\n   * program (set from `ProgramRun.richLinks` via the ask bridge); defaults\n   * to false so existing flows render prompts exactly as before. See\n   * `LinkText` / `link-helpers`.\n   */\n  richLinks?: boolean;\n}\n\n/**\n * PostHog dashboard URL emitted by the agent during a program run.\n * Populated via the `[DASHBOARD_URL]` text marker in agent assistant messages\n * — see `handleSDKMessage` in `agent/agent-interface.ts`. Read by programs\n * (e.g. events-audit) inside `buildOutroData` to surface a dashboard link\n * the agent actually created.\n */\n\nexport interface WizardSession {\n  // From CLI args\n  debug: boolean;\n  installDir: string;\n  ci: boolean;\n  signup: boolean;\n  localMcp: boolean;\n  mcpFeatures?: string[];\n  apiKey?: string;\n  email?: string;\n  region?: CloudRegion;\n  /**\n   * Explicit PostHog base URL (`--base-url`). When set, it pins every PostHog\n   * origin — API host, cloud/app URL, OAuth server — and `region` is ignored.\n   * The runtime equivalent of the dev-build localhost routing; lets the shipped\n   * wizard target a local/self-hosted stack. Threaded into the URL helpers in\n   * `@utils/urls`. Empty/unset → region-based resolution.\n   */\n  baseUrl?: string;\n  benchmark: boolean;\n  yaraReport: boolean;\n  projectId?: number;\n  noTelemetry: boolean;\n\n  /** `--harness` override, read by `resolveHarness`. Wins over the runner flag. */\n  harness?: Harness;\n  /** `--sequence` override, read in `runProgram`. Wins over the orchestrator flag. */\n  sequence?: Sequence;\n  /** `--model` override (gateway id), read by `resolveHarness`. Wins over the binding's model. */\n  model?: string;\n\n  // From detection + screens\n  setupConfirmed: boolean;\n  integration: Integration | null;\n  frameworkContext: Record<string, unknown>;\n  typescript: boolean;\n\n  /** Human-readable label for the detected framework variant (e.g., \"Django with Wagtail CMS\") */\n  detectedFrameworkLabel: string | null;\n\n  /** True once framework detection has run (whether it found something or not) */\n  detectionComplete: boolean;\n\n  /** Set when the detected framework version is too old for the wizard */\n  unsupportedVersion: {\n    current: string;\n    minimum: string;\n    docsUrl: string;\n  } | null;\n\n  // From OAuth\n  credentials: Credentials | null;\n\n  /**\n   * `role_at_organization` from `/api/users/@me/`. Null when the upstream\n   * value is missing (older accounts, fresh signups before onboarding).\n   * Drives role-tailored MCP prompt suggestions on the McpSuggestedPromptsScreen.\n   *\n   * Mirrors `apiUser?.role_at_organization` — kept as a top-level convenience\n   * because it has dedicated UI semantics (role-tailored kits) and pre-dates\n   * the broader `apiUser` plumbing.\n   */\n  roleAtOrganization: string | null;\n\n  /**\n   * Full user payload from `/api/users/@me/` — identifiers, profile,\n   * current team + organization, preferences, etc. Null until OAuth /\n   * CI-key auth populates it. Schema lives in `src/lib/api.ts` and\n   * passes through unknown upstream fields so downstream features can\n   * read account context (plan, org name, email, etc.) without\n   * re-fetching.\n   */\n  apiUser: ApiUser | null;\n\n  /**\n   * Project payload resolved at authentication, kept so a second agent run in\n   * the same invocation (e.g. self-driving's integration phase) reuses the\n   * first login wholesale instead of re-authenticating. The resolved region\n   * lives on `credentials.host.region`.\n   */\n  apiProject: ApiProject | null;\n\n  // Lifecycle\n  runPhase: RunPhase;\n  loginUrl: string | null;\n  // Direct PostHog authorize URL, shown in the manual-paste modal for\n  // headless/remote shells (the localhost loginUrl is unreachable there).\n  authorizeUrl: string | null;\n\n  // Feature discovery\n  discoveredFeatures: DiscoveredFeature[];\n  llmOptIn: boolean;\n\n  // ScreenId completion\n  mcpComplete: boolean;\n  mcpOutcome: McpOutcome | null;\n  mcpInstalledClients: string[];\n  mcpSuggestedPromptsDismissed: boolean;\n  /** True once the user has acted on (opened or skipped) the Connect-Slack step. */\n  slackStepDismissed: boolean;\n  /**\n   * Whether the project already has a Slack integration connected.\n   * `null` until detected. Prefetched by the tutorial screen as soon as\n   * credentials exist so the Connect-Slack step renders the right\n   * variant immediately instead of flashing the nudge first.\n   */\n  slackConnected: boolean | null;\n  skillsComplete: boolean;\n  outroDismissed: boolean;\n\n  /**\n   * Self-driving only: whether to integrate PostHog as part of this run.\n   * `null` until decided. When detection finds no PostHog SDK, the\n   * integration-check screen sets this to `true` (Self-driving needs an SDK,\n   * so we always integrate in that case) — and, on the same screen, asks\n   * whether the user already has a PostHog account: \"yes\" leaves `signup`\n   * false (OAuth login); \"no\" flips `signup` and collects `email`/`region`\n   * so auth provisions a new account. The `--integrate` flag pre-sets this to\n   * `true`, skipping the screen entirely and defaulting to the OAuth login.\n   * When `true`, the self-driving prompt has the agent set up the SDK before\n   * the Self-driving steps. Unused by other programs.\n   */\n  integrate: boolean | null;\n\n  /**\n   * Ids of composed run steps that have completed — e.g. self-driving's\n   * `integrate-run`. Lets a run step's `isComplete` hold after it ran,\n   * independent of the shared `runPhase`.\n   */\n  completedRuns: string[];\n\n  /**\n   * Self-driving only: whether the user confirmed the handoff screen shown\n   * after the integration run (\"PostHog is installed — now set up Self-driving\").\n   * Gates the Self-driving run so it doesn't start until acknowledged. Only\n   * reached in the integrate path; the already-has-PostHog path skips it.\n   */\n  selfDrivingHandoffConfirmed: boolean;\n\n  // Runtime\n  readinessResult: WizardReadinessResult | null;\n  outageDismissed: boolean;\n  settingsOverrideKeys: string[] | null;\n  settingsConflicts: SettingsConflict[] | null;\n  authErrorDetail: {\n    hasSettingsConflict: boolean;\n    conflicts?: SettingsConflict[];\n    logFilePath: string;\n  } | null;\n  portConflictProcess: {\n    command: string;\n    pid: string;\n    port: number;\n    user: string;\n  } | null;\n  outroData: OutroData | null;\n  dashboardUrl: string | null;\n  notebookUrl: string | null;\n\n  // Additional features queue (drained via stop hook after main integration)\n  additionalFeatureQueue: AdditionalFeature[];\n\n  // Program metadata (set by runWizard in bin.ts)\n  programLabel: string | null;\n  skillId: string | null;\n\n  // Resolved framework config (set after integration is known)\n  frameworkConfig: FrameworkConfig | null;\n\n  /** Active wizard_ask request, set by the bridge when the agent calls the tool. */\n  pendingQuestion: PendingQuestion | null;\n}\n\n/**\n * Build a WizardSession from CLI args, pre-populating whatever is known.\n */\nexport function buildSession(args: {\n  debug?: boolean;\n  installDir?: string;\n  ci?: boolean;\n  signup?: boolean;\n  localMcp?: boolean;\n  mcpFeatures?: string[];\n  apiKey?: string;\n  email?: string;\n  region?: CloudRegion;\n  baseUrl?: string;\n  integration?: Integration;\n  benchmark?: boolean;\n  yaraReport?: boolean;\n  projectId?: string;\n  noTelemetry?: boolean;\n  harness?: Harness;\n  sequence?: Sequence;\n  model?: string;\n  integrate?: boolean;\n}): WizardSession {\n  return {\n    debug: args.debug ?? false,\n    installDir: args.installDir ?? process.cwd(),\n    ci: args.ci ?? false,\n    signup: args.signup ?? false,\n    localMcp: args.localMcp ?? false,\n    mcpFeatures: args.mcpFeatures,\n    apiKey: args.apiKey,\n    email: args.email,\n    region: args.region,\n    baseUrl: args.baseUrl,\n    benchmark: args.benchmark ?? false,\n    yaraReport: args.yaraReport ?? false,\n    projectId: parseProjectIdArg(args.projectId),\n    noTelemetry: args.noTelemetry ?? false,\n    harness: args.harness,\n    sequence: args.sequence,\n    model: args.model,\n\n    setupConfirmed: false,\n    integration: args.integration ?? null,\n    frameworkContext: {},\n    typescript: false,\n    detectedFrameworkLabel: null,\n    detectionComplete: false,\n    unsupportedVersion: null,\n\n    runPhase: RunPhase.Idle,\n    discoveredFeatures: [],\n    llmOptIn: false,\n    mcpComplete: false,\n    mcpOutcome: null,\n    mcpInstalledClients: [],\n    mcpSuggestedPromptsDismissed: false,\n    slackStepDismissed: false,\n    slackConnected: null,\n    skillsComplete: false,\n    outroDismissed: false,\n    // `--integrate` forces integration (skip the question); otherwise the\n    // integration-check screen resolves it from null.\n    integrate: args.integrate === true ? true : null,\n    completedRuns: [],\n    selfDrivingHandoffConfirmed: false,\n    loginUrl: null,\n    authorizeUrl: null,\n    credentials: null,\n    roleAtOrganization: null,\n    apiUser: null,\n    apiProject: null,\n    readinessResult: null,\n    outageDismissed: false,\n    settingsOverrideKeys: null,\n    settingsConflicts: null,\n    authErrorDetail: null,\n    portConflictProcess: null,\n    outroData: null,\n    dashboardUrl: null,\n    notebookUrl: null,\n    additionalFeatureQueue: [],\n    programLabel: null,\n    skillId: null,\n    frameworkConfig: null,\n    pendingQuestion: null,\n  };\n}\n"],"mappings":";AA2BA,SAAS,kBAAkB,OAA+C;AACxE,KAAI,UAAU,KAAA,KAAa,UAAU,GAAI,QAAO,KAAA;CAChD,MAAM,IAAI,OAAO,MAAM;AACvB,QAAO,OAAO,UAAU,EAAE,IAAI,IAAI,IAAI,IAAI,KAAA;;;AAM5C,IAAY,WAAL,yBAAA,UAAA;;AAEL,UAAA,UAAA;;AAEA,UAAA,aAAA;;AAEA,UAAA,eAAA;;AAEA,UAAA,WAAA;;KACD;;AAcD,MAAa,4BAA+D,GAAA,QACjD,oBAC1B;;AAGD,MAAa,6BAAgE,GAAA,QAClD,0RAC1B;;AAWD,IAAY,YAAL,yBAAA,WAAA;AACL,WAAA,aAAA;AACA,WAAA,WAAA;AACA,WAAA,YAAA;;KACD;;;;AAyQD,SAAgB,aAAa,MAoBX;AAChB,QAAO;EACL,OAAO,KAAK,SAAS;EACrB,YAAY,KAAK,cAAc,QAAQ,KAAK;EAC5C,IAAI,KAAK,MAAM;EACf,QAAQ,KAAK,UAAU;EACvB,UAAU,KAAK,YAAY;EAC3B,aAAa,KAAK;EAClB,QAAQ,KAAK;EACb,OAAO,KAAK;EACZ,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,WAAW,KAAK,aAAa;EAC7B,YAAY,KAAK,cAAc;EAC/B,WAAW,kBAAkB,KAAK,UAAU;EAC5C,aAAa,KAAK,eAAe;EACjC,SAAS,KAAK;EACd,UAAU,KAAK;EACf,OAAO,KAAK;EAEZ,gBAAgB;EAChB,aAAa,KAAK,eAAe;EACjC,kBAAkB,EAAE;EACpB,YAAY;EACZ,wBAAwB;EACxB,mBAAmB;EACnB,oBAAoB;EAEpB,UAAA;EACA,oBAAoB,EAAE;EACtB,UAAU;EACV,aAAa;EACb,YAAY;EACZ,qBAAqB,EAAE;EACvB,8BAA8B;EAC9B,oBAAoB;EACpB,gBAAgB;EAChB,gBAAgB;EAChB,gBAAgB;EAGhB,WAAW,KAAK,cAAc,OAAO,OAAO;EAC5C,eAAe,EAAE;EACjB,6BAA6B;EAC7B,UAAU;EACV,cAAc;EACd,aAAa;EACb,oBAAoB;EACpB,SAAS;EACT,YAAY;EACZ,iBAAiB;EACjB,iBAAiB;EACjB,sBAAsB;EACtB,mBAAmB;EACnB,iBAAiB;EACjB,qBAAqB;EACrB,WAAW;EACX,cAAc;EACd,aAAa;EACb,wBAAwB,EAAE;EAC1B,cAAc;EACd,SAAS;EACT,iBAAiB;EACjB,iBAAiB;EAClB"}

package/dist/{wizard-session-DWHe83uk.js → wizard-session-C5lZPPEc.js}

@@ -1,2 +1,2 @@
-import { a as buildSession, i as RunPhase, r as OutroKind } from "./wizard-session-tp4Zdbwl.js";
+import { a as buildSession, i as RunPhase, r as OutroKind } from "./wizard-session-BAZql11N.js";
 export { OutroKind, RunPhase, buildSession };

package/dist/{yara-hooks-DEHfsDSF.js → yara-hooks-CEs3jx7j.js}

@@ -1,52 +1,11 @@
-import { f as getUI, s as logToFile, u as WIZARD_YARA_REPORT_FILE } from "./debug-DF51kDvZ.js";
-import { n as analytics } from "./analytics-D6gRGiqt.js";
+import { f as getUI, s as logToFile, u as WIZARD_YARA_REPORT_FILE } from "./debug-DaXKSXEy.js";
+import { n as analytics } from "./analytics-Ddf3zJgF.js";
+import { n as readFileHead } from "./bounded-fs-d0dw1Qv5.js";
 import fs from "fs";
 import path from "path";
 import fg from "fast-glob";
+import axios from "axios";
 import { createHash } from "crypto";
-//#region src/lib/programs/audit/types.ts
-/** Single source of truth for status glyph + color across audit views. */
-const AUDIT_SEVERITY_STYLE = {
-	pending: {
-		glyph: "◌",
-		color: "gray"
-	},
-	pass: {
-		glyph: "✔",
-		color: "green"
-	},
-	error: {
-		glyph: "✘",
-		color: "red"
-	},
-	warning: {
-		glyph: "⚠",
-		color: "yellow"
-	},
-	suggestion: {
-		glyph: "•",
-		color: "cyan"
-	}
-};
-const AUDIT_CHECKS_FILE = ".posthog-audit-checks.json";
-const AUDIT_REPORT_FILE = "posthog-audit-report.md";
-const AUDIT_CHECKS_KEY = "auditChecks";
-function getAuditChecks(session) {
-	const raw = session.frameworkContext[AUDIT_CHECKS_KEY];
-	return Array.isArray(raw) ? raw : [];
-}
-/**
-* Read the audit checks ledger off disk. Validation lives at write time —
-* every writer (`audit_seed_checks` / `audit_add_checks` / `audit_resolve_checks`
-* MCP tools, `seedAuditLedger`) zod-parses entries before the atomic write,
-* so by the time the file watcher fires we trust the shape and only guard
-* against the file not being a JSON array (corrupted / hand-edited / not yet
-* seeded).
-*/
-function coerceAuditChecks(parsed) {
-	return Array.isArray(parsed) ? parsed : [];
-}
-//#endregion
 //#region src/lib/skill-install.ts
 /**
 * Check if command is a PostHog skill installation from MCP.
@@ -65,6 +24,62 @@ function isSkillInstallCommand(command) {
 	return url.startsWith("https://github.com/PostHog/context-mill/releases/") || /^http:\/\/localhost:\d+\//.test(url);
 }
 //#endregion
+//#region src/lib/agent/triage-provider.ts
+/**
+* LLM provider for warlock security-scan triage.
+*
+* Warlock's triageMatches() takes a consumer-supplied `(prompt) => Promise<string>`
+* to run a second pass that filters false positives out of YARA matches. This
+* builds that provider on top of the wizard's existing PostHog LLM gateway auth
+* — the same ANTHROPIC_BASE_URL / ANTHROPIC_AUTH_TOKEN that initializeAgent()
+* sets for the agent SDK. The gateway speaks the standard Anthropic Messages API,
+* so we POST to it directly with axios (the plain @anthropic-ai/sdk isn't a dep).
+*/
+const TRIAGE_MODEL = "claude-haiku-4-5";
+const TRIAGE_MAX_TOKENS = 16384;
+const TRIAGE_TIMEOUT_MS = 2e4;
+/**
+* Build the triage LLM provider. Auth comes from the explicit `auth` param
+* when given (the pi harness — it auths the gateway programmatically and never
+* sets the env vars), otherwise from the gateway auth on process.env (set by
+* initializeAgent on the anthropic path). Returns undefined if neither is
+* configured — callers then skip triage and fail closed (act on every flagged
+* match), so a missing key never silently disables the scanner.
+*
+* The triage model is independent of the agent's model: it is a classifier
+* judging scan matches, and the gateway routes it by model id regardless of
+* which model runs the coding agent.
+*/
+function createTriageLLMProvider(auth) {
+	const baseURL = auth?.baseURL ?? process.env.ANTHROPIC_BASE_URL;
+	const authToken = auth?.authToken ?? process.env.ANTHROPIC_AUTH_TOKEN;
+	if (!baseURL || !authToken) {
+		logToFile("[YARA] triage provider unavailable (no gateway auth) — flagged scans will fail closed");
+		return;
+	}
+	logToFile(`[YARA] triage provider ready (model: ${TRIAGE_MODEL})`);
+	return async (prompt) => {
+		const content = (await axios.post(`${baseURL}/v1/messages`, {
+			model: TRIAGE_MODEL,
+			max_tokens: TRIAGE_MAX_TOKENS,
+			temperature: 0,
+			messages: [{
+				role: "user",
+				content: prompt
+			}]
+		}, {
+			headers: {
+				Authorization: `Bearer ${authToken}`,
+				"anthropic-version": "2023-06-01",
+				"content-type": "application/json"
+			},
+			timeout: TRIAGE_TIMEOUT_MS
+		})).data?.content;
+		if (Array.isArray(content)) return content.filter((b) => b?.type === "text" && typeof b.text === "string").map((b) => b.text).join("");
+		return "";
+	};
+}
+//#endregion
 //#region src/lib/yara-policy.ts
 /** Severity order, highest first, for picking the match worth reporting. */
 const SEVERITY_RANK = {
@@ -108,6 +123,49 @@ const EVENT_INVENTORY_FILE = ".posthog-events-inventory.json";
 /** Per-part filename pattern emitted by events-audit subagents (e.g. `.posthog-events-inventory.part-3.json`). */
 const EVENT_INVENTORY_PART_PATTERN = /^\.posthog-events-inventory\.part-\d+\.json$/;
 //#endregion
+//#region src/lib/programs/audit/types.ts
+/** Single source of truth for status glyph + color across audit views. */
+const AUDIT_SEVERITY_STYLE = {
+	pending: {
+		glyph: "◌",
+		color: "gray"
+	},
+	pass: {
+		glyph: "✔",
+		color: "green"
+	},
+	error: {
+		glyph: "✘",
+		color: "red"
+	},
+	warning: {
+		glyph: "⚠",
+		color: "yellow"
+	},
+	suggestion: {
+		glyph: "•",
+		color: "cyan"
+	}
+};
+const AUDIT_CHECKS_FILE = ".posthog-audit-checks.json";
+const AUDIT_REPORT_FILE = "posthog-audit-report.md";
+const AUDIT_CHECKS_KEY = "auditChecks";
+function getAuditChecks(session) {
+	const raw = session.frameworkContext[AUDIT_CHECKS_KEY];
+	return Array.isArray(raw) ? raw : [];
+}
+/**
+* Read the audit checks ledger off disk. Validation lives at write time —
+* every writer (`audit_seed_checks` / `audit_add_checks` / `audit_resolve_checks`
+* MCP tools, `seedAuditLedger`) zod-parses entries before the atomic write,
+* so by the time the file watcher fires we trust the shape and only guard
+* against the file not being a JSON array (corrupted / hand-edited / not yet
+* seeded).
+*/
+function coerceAuditChecks(parsed) {
+	return Array.isArray(parsed) ? parsed : [];
+}
+//#endregion
 //#region src/lib/programs/posthog-integration/constants.ts
 /**
 * Leaf-level constants for the posthog-integration program.
@@ -285,6 +343,7 @@ const SKILL_SCAN_HOOK_TIMEOUT_MS = 3e4;
 * (~25K tokens), so triage always sees the chunk its matches came from.
 */
 const SCAN_CHUNK_SIZE = 1e5;
+const SKILL_FILE_SCAN_BYTES = 10 * 1024 * 1024;
 /**
 * Overlap between adjacent chunks so a pattern straddling a chunk boundary
 * still lands whole inside at least one chunk. YARA rule strings are at most
@@ -660,6 +719,24 @@ function createPostToolUseYaraHooks(llmProvider, onTerminate) {
 	];
 }
 /**
+* Scan a freshly installed skill directory (any root — .claude/skills or the
+* orchestrator's run cache) and return a terminate reason when it is
+* poisoned, else null. The choke point for TS-path installs (downloadSkill);
+* agent Bash installs are covered by the PostToolUse matcher above. Runs the
+* same LLM triage as the tool-use scans (default provider from gateway auth on
+* the env); fail-closed to treating every match as real when no provider is
+* configured, so a missing key never weakens the check. `llmProvider` is
+* injectable for tests.
+*/
+async function scanInstalledSkill(absoluteSkillDir, llmProvider = createTriageLLMProvider()) {
+	recordScan();
+	const matches = await scanSkillFiles(absoluteSkillDir, ".", llmProvider);
+	if (matches.length === 0) return null;
+	const match = highestSeverityMatch(matches);
+	recordMatch("skill-install", "installSkillById", match, "terminated");
+	return `Poisoned skill detected: ${match.rule} (${match.metadata.severity ?? "unknown"}) in ${absoluteSkillDir}`;
+}
+/**
 * Read and scan all text files in a skill directory for prompt injection.
 * Scans each file sequentially (single-threaded WASM — parallelism buys
 * nothing), unions the 'input'-context matches, then triages once across the
@@ -675,22 +752,28 @@ async function scanSkillFiles(cwd, skillDir, llmProvider) {
 		cwd: absoluteDir,
 		absolute: true
 	});
-	const fileContents = [];
-	for (const filePath of files) try {
-		fileContents.push(fs.readFileSync(filePath, "utf-8"));
-	} catch (err) {
-		logToFile(`[YARA] Could not read skill file ${filePath}:`, err);
-	}
-	if (fileContents.length === 0) {
+	if (files.length === 0) {
 		logToFile(`[YARA] No text files found in skill directory: ${absoluteDir}`);
 		return [];
 	}
-	logToFile(`[YARA] Scanning ${fileContents.length} files in skill directory: ${skillDir}`);
+	logToFile(`[YARA] Scanning ${files.length} files in skill directory: ${skillDir}`);
 	const flagged = [];
-	for (const content of fileContents) flagged.push(...await scanForContext(content, "input"));
+	for (const filePath of files) {
+		let content;
+		try {
+			if (fs.statSync(filePath).size > SKILL_FILE_SCAN_BYTES) {
+				logToFile(`[YARA] Skill file over ${SKILL_FILE_SCAN_BYTES} bytes; scanning its head only: ${filePath}`);
+				content = readFileHead(filePath, SKILL_FILE_SCAN_BYTES);
+			} else content = fs.readFileSync(filePath, "utf-8");
+		} catch (err) {
+			logToFile(`[YARA] Could not read skill file ${filePath}:`, err);
+			continue;
+		}
+		if (content) flagged.push(...await scanForContext(content, "input"));
+	}
 	return triageFlagged(flagged, "input", llmProvider);
 }
 //#endregion
-export { getAuditChecks as S, AUDIT_CHECKS_FILE as _, flushScanReport as a, AUDIT_SEVERITY_STYLE as b, isWizardDocumentationPath as c, repeatBlockReason as d, scanAndTriage as f, scanVerdict as g, SETUP_REPORT_FILE as h, createRepeatBlockTracker as i, prewarmYaraScanner as l, EVENT_PLAN_FILE as m, createPostToolUseYaraHooks as n, formatScanReport as o, writeScanReport as p, createPreToolUseYaraHooks as r, formatYaraAbortMessage as s, captureScanReport as t, recordExternalScan as u, AUDIT_CHECKS_KEY as v, coerceAuditChecks as x, AUDIT_REPORT_FILE as y };
+export { scanVerdict as C, SETUP_REPORT_FILE as S, AUDIT_CHECKS_KEY as _, flushScanReport as a, coerceAuditChecks as b, isWizardDocumentationPath as c, repeatBlockReason as d, scanAndTriage as f, AUDIT_CHECKS_FILE as g, EVENT_PLAN_FILE as h, createRepeatBlockTracker as i, prewarmYaraScanner as l, writeScanReport as m, createPostToolUseYaraHooks as n, formatScanReport as o, scanInstalledSkill as p, createPreToolUseYaraHooks as r, formatYaraAbortMessage as s, captureScanReport as t, recordExternalScan as u, AUDIT_REPORT_FILE as v, createTriageLLMProvider as w, getAuditChecks as x, AUDIT_SEVERITY_STYLE as y };
 
-//# sourceMappingURL=yara-hooks-DEHfsDSF.js.map
+//# sourceMappingURL=yara-hooks-CEs3jx7j.js.map