@posthog/wizard 2.53.0 → 2.54.0

package/dist/debug-tCr3A18e.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"debug-tCr3A18e.js","names":["errResult","join","sep"],"sources":["../src/lib/headless-mode.ts","../src/env.ts","../src/lib/version.ts","../src/lib/constants.ts","../src/ui/wizard-ui.ts","../src/lib/health-checks/statuspage.ts","../src/lib/health-checks/incidentio.ts","../src/lib/health-checks/endpoints.ts","../src/lib/health-checks/readiness.ts","../src/ui/logging-ui.ts","../src/ui/index.ts","../src/utils/paths.ts","../src/utils/debug.ts"],"sourcesContent":["/**\n * Headless mode — the published-build, non-interactive run path.\n *\n * The headless flag and `--ci` both drive a non-interactive install\n * (session.ci === true), but through dedicated entry points so they can\n * diverge: runHeadlessInstall → runWizardHeadless for headless,\n * runCIInstall → runWizardCI for `--ci`. Both delegate to one shared pipeline\n * (runNonInteractive) today; the only forks are the api-key prefixes accepted\n * (ci-install) and the analytics build tag (the mode passed to the runner).\n *\n * The flag is deliberately named `--headless-DONOTUSE-EXPERIMENTAL` and hidden\n * from `--help`: the contract is still unstable and subject to breaking\n * changes, so it must not be advertised or relied on by external callers. This\n * module is the single source of truth for the flag's name and detection — keep\n * the scary name out of every other file so a future rename is one edit here.\n */\n\nimport type { Options } from 'yargs';\n\n/**\n * The on-CLI flag name. Intentionally ugly + undocumented; do not surface it in\n * `--help`, the README, or user-facing error messages.\n */\nexport const HEADLESS_FLAG = 'headless-DONOTUSE-EXPERIMENTAL';\n\n/**\n * The yargs option declaration for the headless flag. Declared per-command\n * (basic integration + audit) rather than globally, so no other command\n * accepts it. Spread into a command's `options` to opt it into headless.\n */\nexport const headlessOption: Record<string, Options> = {\n  [HEADLESS_FLAG]: {\n    default: false,\n    // EXPERIMENTAL + UNSTABLE: the non-interactive published-build run path.\n    // Declared unconditionally (unlike --ci) so it works in the shipped\n    // package, but hidden and intentionally ugly-named — the contract may\n    // break without notice, so it must not be advertised.\n    describe:\n      'EXPERIMENTAL — do not use. Unstable, subject to breaking changes.',\n    type: 'boolean',\n    hidden: true,\n  },\n};\n\n/**\n * Read the headless signal off a parsed argv / options bag. yargs always sets\n * the value under the declared key (`HEADLESS_FLAG`), so reading that key is\n * reliable regardless of camel-case expansion.\n */\nexport function isHeadless(options: Record<string, unknown>): boolean {\n  return options[HEADLESS_FLAG] === true;\n}\n\n// `--region` only means something non-interactively (API-key auth has no OAuth\n// token response to read `posthog_region` from), so only headless-capable\n// commands declare it.\nexport const regionOption: Record<string, Options> = {\n  region: {\n    describe: 'PostHog cloud region\\nenv: POSTHOG_WIZARD_REGION',\n    choices: ['us', 'eu'],\n    type: 'string',\n    hidden: true,\n  },\n};\n","/**\n * Central environment variable access for the PostHog wizard.\n *\n * ── Build-time constants ────────────────────────────────────────────\n * Inlined by tsdown's `env` option at compile time. After build, the\n * runtime value of these env vars has zero effect on the wizard.\n *\n * ── Runtime variables ───────────────────────────────────────────────\n * Read through `runtimeEnv()` with a typed allowlist. This makes every\n * runtime dependency on the environment explicit and grep-able.\n *\n * ── Direct process.env access ───────────────────────────────────────\n * Reserved for subprocess environment configuration (writes) and\n * vendored code. Production source outside those cases should use\n * this module instead.\n */\n\nimport { HEADLESS_FLAG } from '@lib/headless-mode';\n\n// ── Build-time constants ─────────────────────────────────────────────\n// tsdown replaces `process.env.NODE_ENV` with a string literal.\n// After build these are just `\"production\"`, `false`, etc.\n\nexport const NODE_ENV = process.env.NODE_ENV as string;\nexport const IS_DEV =\n  process.env.NODE_ENV === 'development' || process.env.NODE_ENV === 'test';\n\n/**\n * True only in published/production builds. tsdown inlines\n * `process.env.NODE_ENV` as the literal `\"production\"` at build time, so this\n * collapses to `true` in `dist/` and stays `false` for `tsx`/dev/test runs\n * (where NODE_ENV is unset, `development`, or `test`). Used to gate features\n * that aren't supported in the shipped package — e.g. `--ci` mode.\n */\nexport const IS_PRODUCTION_BUILD = process.env.NODE_ENV === 'production';\n\n/** 'cloud' when launched with the experimental headless flag, else 'local' — resolved once from argv at launch. */\nexport const RUN_SURFACE: 'cloud' | 'local' = process.argv.some(\n  (a) => a === `--${HEADLESS_FLAG}` || a.startsWith(`--${HEADLESS_FLAG}=`),\n)\n  ? 'cloud'\n  : 'local';\n\n// ── Runtime environment ──────────────────────────────────────────────\n\n/**\n * Exhaustive allowlist of env vars the wizard reads at runtime.\n * Add new keys here when a new runtime dependency is needed.\n */\ntype RuntimeEnvKey =\n  // CI-build-only flag overrides (see utils/ci-flag-overrides.ts).\n  // Deliberately NOT POSTHOG_WIZARD_-prefixed: yargs .env('POSTHOG_WIZARD')\n  // would claim it as an unknown CLI option and strict-reject the run.\n  | 'WIZARD_CI_FLAG_OVERRIDES'\n  | 'WIZARD_CI_EXCLUDE_TASKS'\n  // Wizard CLI configuration (yargs POSTHOG_WIZARD_ prefix)\n  | 'POSTHOG_WIZARD_BENCHMARK_CONFIG'\n  | 'POSTHOG_WIZARD_BENCHMARK_FILE'\n  | 'POSTHOG_WIZARD_LOG_DIR'\n  | 'POSTHOG_WIZARD_DEBUG'\n  // Identity of the PostHog task run whose sandbox launched this wizard. Set by\n  // the sandbox for every run it starts, agent or wizard. Deliberately NOT\n  // POSTHOG_WIZARD_-prefixed, for the same reason as the two keys above:\n  // yargs .env('POSTHOG_WIZARD') would claim them as CLI options and\n  // .strictOptions() would reject the run unless the wizard also declared them,\n  // which would tie every sandbox deploy to an npm release of this package.\n  | 'POSTHOG_TASK_RUN_ID'\n  | 'POSTHOG_TASK_ID'\n  // Local/CI escape hatch to disable Warlock scanning without the PostHog flag.\n  | 'POSTHOG_WIZARD_WARLOCK_DISABLED'\n  | 'DEBUG'\n  // Agent / MCP\n  | 'MCP_URL'\n  | 'POSTHOG_API_KEY'\n  // Platform: terminal detection\n  | 'TERM'\n  | 'TERM_PROGRAM'\n  | 'TERMINAL_EMULATOR'\n  | 'CI'\n  | 'WT_SESSION'\n  | 'TERMINUS_SUBLIME'\n  | 'ConEmuTask'\n  // Platform: paths\n  | 'APPDATA'\n  | 'OPENCODE_CONFIG_DIR'\n  | 'XDG_CONFIG_HOME';\n\n/** Read a runtime environment variable. Only allowlisted keys compile. */\nexport function runtimeEnv(key: RuntimeEnvKey): string | undefined {\n  return process.env[key];\n}\n\n/**\n * The PostHog task run that launched this wizard, when one did. A cloud run's\n * sandbox exports both ids into the wizard's environment; every local run\n * leaves them undefined. Resolved once at launch, like RUN_SURFACE above.\n */\nexport const TASK_RUN_ID: string | undefined =\n  runtimeEnv('POSTHOG_TASK_RUN_ID') || undefined;\nexport const TASK_ID: string | undefined =\n  runtimeEnv('POSTHOG_TASK_ID') || undefined;\n","// Auto-generated by scripts/generate-version.js — do not edit\nexport const VERSION = '2.53.0';\n","/**\n * Shared constants for the PostHog wizard.\n */\n\nimport { VERSION } from './version';\n\n// ── Models ──────────────────────────────────────────────────────────\n\n/**\n * Default model for agent runs. Bare model IDs (no `anthropic/` prefix) so the\n * LLM gateway's Bedrock fallback can match map_to_bedrock_model().\n */\nexport const DEFAULT_AGENT_MODEL = 'claude-sonnet-4-6';\n\n/** Next sonnet generation (a `MODEL_FLAG_VARIANTS` key in the switchboard). */\nexport const SONNET_5_MODEL = 'claude-sonnet-5';\n\n/**\n * Cheaper, faster model for mechanical agent work (e.g. repo classification\n * during source-map detection). Passed via AgentConfig.modelOverride.\n */\nexport const HAIKU_MODEL = 'claude-haiku-4-5-20251001';\n\n/** Undated haiku, for scan triage — the alias tracks the current 4.5 release rather than pinning one. */\nexport const HAIKU_TRIAGE_MODEL = 'claude-haiku-4-5';\n\n/**\n * Larger model for planning / hard work. Named the switchboard could route to\n * from `PROGRAM_BINDINGS[id].model` or `contextMillOverride`.\n */\nexport const OPUS_MODEL = 'claude-opus-4-8';\n\n// The only openai models the wizard runs.\nexport const GPT5_6_LUNA_MODEL = 'openai/gpt-5.6-luna';\nexport const GPT5_6_TERRA_MODEL = 'openai/gpt-5.6-terra';\nexport const GPT5_6_SOL_MODEL = 'openai/gpt-5.6-sol';\n\n// ── Agent runner routing axes ────────────────────────────────────────\n\n/**\n * The two agent runner routing axes: **harness** (which agent SDK drives the LLM)\n * and **sequence** (which pipeline shape orchestrates the work). Single source\n * of truth for yargs `choices`, session fields, the runner registry, and tests\n * — `Object.values(Harness)` gives an iterable of the values when an array is\n * needed. Adding a member is enough to pick it up everywhere.\n *\n * Naming matches the directory layout — see `src/lib/agent/runner/harness/`\n * and `src/lib/agent/runner/sequence/`.\n */\nexport enum Harness {\n  anthropic = 'anthropic',\n  pi = 'pi',\n}\n\nexport enum Sequence {\n  linear = 'linear',\n  orchestrator = 'orchestrator',\n}\n\n// ── Integration / CLI ───────────────────────────────────────────────\n\n/**\n * Detection order matters: put framework-specific integrations BEFORE basic language fallbacks.\n */\nexport enum Integration {\n  // Frameworks\n  nextjs = 'nextjs',\n  nuxt = 'nuxt',\n  vue = 'vue',\n  reactRouter = 'react-router',\n  tanstackStart = 'tanstack-start',\n  tanstackRouter = 'tanstack-router',\n  reactNative = 'react-native',\n  angular = 'angular',\n  astro = 'astro',\n  django = 'django',\n  flask = 'flask',\n  fastapi = 'fastapi',\n  laravel = 'laravel',\n  sveltekit = 'sveltekit',\n  kmp = 'kmp',\n  swift = 'swift',\n  android = 'android',\n  rails = 'rails',\n\n  // Language fallbacks. Keep javascriptNode last: it matches any package.json.\n  python = 'python',\n  ruby = 'ruby',\n  javascript_web = 'javascript_web',\n  javascriptNode = 'javascript_node',\n}\n\nexport interface Args {\n  debug: boolean;\n  integration: Integration;\n}\n\n// ── Environment ──────────────────────────────────────────────────────\n\nimport { IS_DEV } from '@env';\nexport { IS_DEV };\nexport const DEBUG = false;\n\n// ── URLs ─────────────────────────────────────────────────────────────\n\nexport const DEFAULT_URL = IS_DEV\n  ? 'http://localhost:8010'\n  : 'https://us.posthog.com';\n/**\n * Region-agnostic PostHog app URL. Resolves to us.posthog.com or\n * eu.posthog.com server-side based on the signed-in user's profile.\n * Use this for share-with-user links (e.g. settings pages) so they\n * land on the right region without us needing to know it client-side.\n */\nexport const POSTHOG_APP_URL = IS_DEV\n  ? 'http://localhost:8010'\n  : 'https://app.posthog.com';\nexport const DEFAULT_HOST_URL = IS_DEV\n  ? 'http://localhost:8010'\n  : 'https://us.i.posthog.com';\nexport const ISSUES_URL = 'https://github.com/posthog/wizard/issues';\n/** Public status page, linked from transient-failure guidance (e.g. OAuth server_error). */\nexport const POSTHOG_STATUS_PAGE_URL = 'https://www.posthogstatus.com';\nexport const CONTEXT_MILL_URL = 'https://github.com/PostHog/context-mill';\n/**\n * Latest context-mill release page — the BYOAI download link shown in\n * the privacy panel. Deliberately the release PAGE, not a direct asset\n * URL: asset URLs are ~89 chars and hard-wrap inside the 64-col panel,\n * which corrupts terminal copy/paste with a mid-URL line break. This\n * stays under one line; the panel names the exact asset to grab.\n */\nexport const CONTEXT_MILL_RELEASES_URL =\n  'https://github.com/PostHog/context-mill/releases/latest';\nexport const POSTHOG_DOCS_URL = 'https://posthog.com/docs';\nexport const POSTHOG_WIZARD_REPO_URL = 'https://github.com/PostHog/wizard';\nexport const POSTHOG_TERMS_URL = 'https://posthog.com/terms';\nexport const POSTHOG_PRIVACY_URL = 'https://posthog.com/privacy';\nexport const POSTHOG_ORG_AI_SETTINGS_URL =\n  'https://app.posthog.com/settings/organization-details#setting=organization-ai-consent';\nexport const WIZARD_CONTACT_EMAIL = 'wizard@posthog.com';\n\n/** Remote base URL for fetching the skill menu + downloading skills. */\nexport const REMOTE_SKILLS_BASE_URL =\n  'https://github.com/PostHog/context-mill/releases/latest/download';\n/** Local base URL when `--local-mcp` is set (served by context-mill dev server). */\nexport const LOCAL_SKILLS_BASE_URL = 'http://localhost:8765';\n\n/**\n * Pick the skills base URL based on the session's localMcp flag.\n * Single source of truth — do not inline this ternary anywhere.\n */\nexport function getSkillsBaseUrl(localMcp: boolean): string {\n  return localMcp ? LOCAL_SKILLS_BASE_URL : REMOTE_SKILLS_BASE_URL;\n}\n\n// ── Analytics (internal) ──────────────────────────────────────────────\n\nexport const ANALYTICS_POSTHOG_PUBLIC_PROJECT_WRITE_KEY = 'sTMFPsFhdP1Ssg';\nexport const ANALYTICS_HOST_URL = 'https://internal-j.posthog.com';\nexport const ANALYTICS_TEAM_TAG = 'docs-and-wizard';\n\n// ── OAuth / Auth ────────────────────────────────────────────────────\n\nexport const OAUTH_PORTS = [8239, 8238, 8240, 8237, 8236, 8235] as const;\nexport const POSTHOG_US_CLIENT_ID = 'c4Rdw8DIxgtQfA80IiSnGKlNX8QN00cFWF00QQhM';\nexport const POSTHOG_EU_CLIENT_ID = 'bx2C5sZRN03TkdjraCcetvQFPGH6N2Y9vRLkcKEy';\nexport const POSTHOG_DEV_CLIENT_ID = 'DC5uRLVbGI02YQ82grxgnK6Qn12SXWpCqdPb60oZ';\nexport const POSTHOG_PROXY_CLIENT_ID = POSTHOG_US_CLIENT_ID;\nexport const DUMMY_PROJECT_API_KEY = '_YOUR_POSTHOG_PROJECT_TOKEN_';\n\n/**\n * Scopes the wizard requests during the agentic provisioning signup flow.\n *\n * Each entry is justified by what the wizard's agent step does after signup:\n * - user:read         identify the user for analytics + agent context\n * - project:read      look up the freshly-provisioned project\n * - llm_gateway:read  authenticate to gateway.{us,eu}.posthog.com/wizard\n *                     (the agent's LLM calls — without this scope, every\n *                     agent message returns 401)\n * - query:read        run HogQL queries when the agent needs data\n * - dashboard:write   create the onboarding dashboard during setup\n * - insight:write     create the onboarding insights during setup\n * - notebook:write    upload the events-audit report as a PostHog notebook\n *                     in step 6 of the events-audit skill (notebooks-create\n *                     MCP tool requires this scope)\n * - event_definition:write\n *                     create event definitions from the completed wizard\n *                     session's event plan\n *\n * Must be a subset of `ALLOWED_PROVISIONING_SCOPES` in\n * `ee/api/agentic_provisioning/views.py` on the backend.\n */\nexport const WIZARD_PROVISIONING_SCOPES = [\n  'user:read',\n  'project:read',\n  'llm_gateway:read',\n  'dashboard:write',\n  'insight:write',\n  'query:read',\n  'notebook:write',\n  'event_definition:write',\n] as const;\n\n/**\n * Scopes the wizard requests during the OAuth login flow. Superset of\n * `WIZARD_PROVISIONING_SCOPES` with scopes that only apply to the login\n * path and are not in the provisioning allowlist:\n * - health_issue:read     used by `wizard doctor`\n * - wizard_session:read   list / retrieve / stream sessions\n * - wizard_session:write  stream run state to /api/projects/{id}/wizard/sessions/\n * - event_definition:write\n *                          create event definitions when a session completes\n * - organization:read     read `organization.is_ai_data_processing_approved`\n *                         from /api/users/@me/ for the AI opt-in gate\n *\n * NOTE: every scope here must be within the wizard OAuth application's\n * server-side scope ceiling (`OAuthApplication.scopes` in posthog, set\n * via Django admin on BOTH prod regions) — requesting anything outside\n * it fails the WHOLE authorize request with `error=invalid_scope`\n * before the consent screen renders. Procedure: the\n * \"scope-ceiling-invalid-scope\" runbook in PostHog/runbooks. Keep the\n * runbook's worked example in sync when this list changes.\n */\nexport const WIZARD_OAUTH_SCOPES = [\n  ...WIZARD_PROVISIONING_SCOPES,\n  'health_issue:read',\n  'wizard_session:read',\n  'wizard_session:write',\n  'organization:read',\n] as const;\n\n// ── Wizard run / variants ───────────────────────────────────────────\n\nexport const WIZARD_INTERACTION_EVENT_NAME = 'wizard interaction';\nexport const WIZARD_REMARK_EVENT_NAME = 'wizard remark';\n/** Boolean feature flag that routes a run to the experimental orchestrator runner. */\nexport const WIZARD_ORCHESTRATOR_FLAG_KEY = 'wizard-orchestrator';\n/** Multivariate flag: per-stage orchestrator overrides ride each variant's JSON payload (`{stage: {model?, effort?}}`). */\nexport const WIZARD_ORCHESTRATOR_OVERRIDE_FLAG_KEY =\n  'wizard-orchestrator-override';\n/** Boolean flag: on → pi for self-driving. Payload carries `{model, effort?, harness?, sequence?}` (model = a `MODEL_FLAG_VARIANTS` key); missing/invalid payload keeps the non-flagged default. */\nexport const WIZARD_SELF_DRIVING_USE_PI_HARNESS_FLAG_KEY =\n  'wizard-self-driving-use-pi-harness';\n/** Boolean flag: agentic project scoping for non-interactive basic-integration runs. */\nexport const WIZARD_BASIC_INTEGRATION_AGENTIC_DETECTION_FLAG_KEY =\n  'wizard-basic-integration-agentic-detection';\n// Reading a flag enters this run into that flag's experiment, so a closed set — not a\n// `wizard-` prefix anyone can name into — decides what a run evaluates. Test-pinned exhaustive.\nexport const WIZARD_FLAG_KEYS = [\n  WIZARD_ORCHESTRATOR_FLAG_KEY,\n  WIZARD_ORCHESTRATOR_OVERRIDE_FLAG_KEY,\n  WIZARD_SELF_DRIVING_USE_PI_HARNESS_FLAG_KEY,\n  WIZARD_BASIC_INTEGRATION_AGENTIC_DETECTION_FLAG_KEY,\n] as const;\n/** User-Agent for wizard HTTP requests and MCP server identification. */\nexport const WIZARD_USER_AGENT = `posthog/wizard; version: ${VERSION}`;\n\n/**\n * User-Agent for a specific program's MCP calls, tagged with `program: <id>` so the\n * backend can attribute work per program (e.g. the `self-driving` program's warehouse\n * sources are recorded as `created_via=self_driving` rather than plain `wizard`). The\n * base `posthog/wizard` token is preserved, so anything keying only on that still matches.\n */\nexport function wizardUserAgentForProgram(programId?: string): string {\n  return programId\n    ? `${WIZARD_USER_AGENT}; program: ${programId}`\n    : WIZARD_USER_AGENT;\n}\n\n// ── HTTP headers ─────────────────────────────────────────────────────\n\n/** Header prefix for PostHog properties (e.g. X-POSTHOG-PROPERTY-VARIANT). */\nexport const POSTHOG_PROPERTY_HEADER_PREFIX = 'X-POSTHOG-PROPERTY-';\n/** Header prefix for PostHog feature flags. */\nexport const POSTHOG_FLAG_HEADER_PREFIX = 'X-POSTHOG-FLAG-';\n\n// ── Timeouts ─────────────────────────────────────────────────────────\n\n/** Timeout for framework / project detection probes (ms). */\nexport const DETECTION_TIMEOUT_MS = 10_000;\n\n/** Timeout for the agentic project scan (ms); past it the run falls back to root detection. */\nexport const AGENTIC_DETECTION_TIMEOUT_MS = 60_000;\n\n/**\n * Timeout for the OAuth authorization flow (ms).\n *\n * Mirrors the server-side authorization-code expiry\n * (`AUTHORIZATION_CODE_EXPIRE_SECONDS`, 5 minutes). Once the code expires the\n * callback is dead and the token exchange can no longer succeed, so we stop\n * waiting at the same moment and prompt the user to re-run rather than letting\n * them complete a login that would fail.\n */\nexport const OAUTH_TIMEOUT_MS = 300_000;\n","/**\n * WizardUI — abstraction layer for all user-facing operations.\n *\n * Business logic calls `getUI()` instead of importing the store directly.\n * Implementations: InkUI (TUI), LoggingUI (CI).\n *\n * No prompt methods — the TUI screens own all user input.\n * Session-mutating methods trigger reactive screen resolution in the TUI.\n */\n\nimport type { SettingsConflict } from '@lib/agent/claude-settings';\nimport type { WizardReadinessResult } from '@lib/health-checks/readiness';\nimport type { ApiUser } from '@lib/api';\nimport type { Credentials } from '@lib/wizard-session';\nimport type {\n  AskAnswers,\n  OutroData,\n  PendingQuestion,\n} from '@lib/wizard-session';\n\nexport enum TaskStatus {\n  Pending = 'pending',\n  InProgress = 'in_progress',\n  Completed = 'completed',\n  Skipped = 'skipped',\n}\n\nexport function isTaskStatus(value: string): value is TaskStatus {\n  return (Object.values(TaskStatus) as string[]).includes(value);\n}\n\n/**\n * One assistant turn's token usage, for the hidden Ctrl+T token/cost HUD.\n * `model` is the model that produced *this* turn (e.g. the SDK's\n * `message.message.model`) — a subagent can run on a different model than\n * the main session, and some programs override to Haiku, so pricing must key\n * off the per-turn model rather than a single run-wide assumption. Omit only\n * when the caller genuinely has no model context (falls back to Sonnet\n * pricing — see `pricePerMtokForModel` in `@lib/agent/token-pricing`).\n */\nexport interface TokenUsageDelta {\n  inputTokens: number;\n  outputTokens: number;\n  cacheReadTokens: number;\n  cacheCreationTokens: number;\n  cacheCreation5m: number;\n  cacheCreation1h: number;\n  model?: string;\n}\n\nexport interface SpinnerHandle {\n  start(message?: string): void;\n  stop(message?: string): void;\n  message(msg?: string): void;\n}\n\n/**\n * Context passed to `showAuthError` so the screen can pick the right copy.\n *\n * `hasSettingsConflict` is true when a Claude Code settings file (project,\n * project-local, the user's global config, or managed) actually overrides the\n * LLM Gateway auth. `conflicts` carries the exact files and keys so the screen\n * can name them. When there is no conflict, the 401 has a different cause (bad\n * PAT prefix, missing scope, expired key, region mismatch) and we should not\n * advise the user to log out of Claude Code.\n */\nexport interface AuthErrorDetail {\n  hasSettingsConflict: boolean;\n  conflicts?: SettingsConflict[];\n  /**\n   * True when the agent SDK authenticated from a stored Claude login\n   * (`apiKeySource: \"/login managed key\"`) instead of the wizard's gateway\n   * token — conflicting Anthropic credentials. Takes priority in the screen.\n   */\n  usingManagedLogin?: boolean;\n  /** Human-readable places a conflicting Anthropic credential may live. */\n  credentialPlaces?: string[];\n  logFilePath: string;\n}\n\nexport interface WizardUI {\n  // ── Lifecycle messages ────────────────────────────────────────────\n  intro(message: string): void;\n  /** Success outro with a plain text message. */\n  outro(message: string): void;\n  /**\n   * Error outro. Sets structured outroData and transitions run phase so\n   * the router advances to the outro screen. Use for abort/failure paths\n   * that need a custom error render — do NOT build the outroData by\n   * mutating session directly (nanostore holds a shallow copy).\n   */\n  outroError(data: OutroData): void;\n  /** Resolves when the user dismisses the outro screen (presses any key).\n   *  Lets the abort path wait for the user to read the error before the\n   *  process exits. Resolves immediately in non-TUI environments. */\n  waitForOutroDismissed(): Promise<void>;\n  cancel(message: string): void;\n\n  // ── Logging ───────────────────────────────────────────────────────\n  log: {\n    info(message: string): void;\n    warn(message: string): void;\n    error(message: string): void;\n    success(message: string): void;\n    step(message: string): void;\n  };\n\n  note(message: string): void;\n  pushStatus(message: string): void;\n\n  // ── Spinner ───────────────────────────────────────────────────────\n  spinner(): SpinnerHandle;\n\n  // ── Session state (triggers reactive screen resolution in TUI) ────\n  /** Signal that the main work (agent run) has started. */\n  startRun(): void;\n\n  /** Store OAuth/API credentials. Resolves past AuthScreen in TUI. */\n  setCredentials(credentials: Credentials): void;\n\n  /**\n   * Persist the user's `role_at_organization` once it's been fetched from\n   * `/api/users/@me/`. Drives role-tailored prompt suggestions on the\n   * McpSuggestedPromptsScreen. Pass `null` to clear / when unknown.\n   */\n  setRoleAtOrganization(role: string | null): void;\n\n  /**\n   * Persist the full user payload from `/api/users/@me/` so downstream\n   * screens can read account context (current org, team, plan, email,\n   * preferences, etc.) without re-fetching. Pass `null` to clear or\n   * when the request failed.\n   */\n  setApiUser(user: ApiUser | null): void;\n\n  /**\n   * Park until the org's AI opt-in gate clears\n   * (`organization.is_ai_data_processing_approved === true`, or the\n   * program never registered the gate — requiresAi: false / no auth\n   * step / CI session). The agent runner awaits this after setApiUser\n   * and BEFORE skill install or agent start: this is the enforcement\n   * point that keeps source on the machine while the TUI shows\n   * AiOptInRequiredScreen. Resolves immediately in non-TUI\n   * environments (CI auto-consents to AI usage).\n   */\n  waitForAiOptIn(): Promise<void>;\n\n  /** Show blocking service outage (pushes outage overlay in TUI). Blocks until dismissed. */\n  showBlockingOutage(result: WizardReadinessResult): Promise<void>;\n\n  /** Store non-blocking readiness warnings (shown as Health tab in RunScreen). */\n  setReadinessWarnings(result: WizardReadinessResult): void;\n\n  /** Warn that another process is blocking the OAuth port (pushes overlay in TUI). */\n  showPortConflict(processInfo: {\n    command: string;\n    pid: string;\n    port: number;\n    user: string;\n  }): Promise<void>;\n\n  /**\n   * Resolve with an OAuth authorization code the user enters by hand — the\n   * fallback for headless/remote shells where the browser can't reach the\n   * local callback server. The OAuth flow races this against the callback\n   * server. Implementations that can't prompt (CI/logging) never resolve.\n   */\n  waitForManualAuthCode(): Promise<string>;\n\n  showSettingsOverride(\n    conflicts: SettingsConflict[],\n    backupAndFix: () => boolean,\n  ): Promise<void>;\n\n  /** Show auth error overlay when Anthropic API returns 401. */\n  showAuthError(detail?: AuthErrorDetail): void;\n\n  /** Show the session-timeout overlay when the OAuth login window expires. */\n  showSessionTimeout(): void;\n\n  /**\n   * Open the wizard_ask overlay and resolve with the user's answers.\n   * Implementations that can't ask (CI/logging) reject so the bridge can\n   * surface a clear \"not available\" error to the agent.\n   */\n  requestQuestion(question: PendingQuestion): Promise<AskAnswers>;\n\n  /**\n   * Dismiss the in-flight wizard_ask overlay, resolving its request with\n   * cancelled sentinels. No-op when nothing is pending. The ask bridge calls\n   * this on timeout so a stale pending question can't block later asks.\n   */\n  cancelPendingQuestion(): void;\n\n  // ── Display state ──────────────────────────────────────────────────\n  /** Set the detected framework label (e.g., \"Django with Wagtail CMS\") */\n  setDetectedFramework(label: string): void;\n\n  /** Register a callback to run when the TUI transitions onto the given screen. */\n  onEnterScreen(screen: string, fn: () => void): void;\n\n  setLoginUrl(url: string | null): void;\n\n  /** Direct PostHog authorize URL, shown in the manual-paste modal. */\n  setAuthorizeUrl(url: string | null): void;\n\n  // ── Task tracking from SDK TaskCreate/TaskUpdate events ───────────\n  // Receives the full materialised task list each call. The caller (agent\n  // loop) maintains a Map<taskId, …> from incremental Task* events and\n  // re-emits the snapshot here, preserving the existing store semantics.\n  syncTodos(\n    todos: Array<{ content: string; status: string; activeForm?: string }>,\n  ): void;\n\n  // ── Event plan from .posthog-events.json ────────────────────\n  setEventPlan(events: Array<{ name: string; description: string }>): void;\n\n  // ── Dashboard URL emitted by the agent via [DASHBOARD_URL] marker ──\n  setDashboardUrl(url: string): void;\n\n  /** Current \"stage of work\" — derived from the active tool call. Drives the\n   *  Visualizer tab's NOW PLAYING display. Pass an AgentPhase value. */\n  setStage(stage: string): void;\n\n  // ── Notebook URL emitted by the agent via [NOTEBOOK_URL] marker ──\n  setNotebookUrl(url: string): void;\n\n  /** Accumulate one assistant turn's token usage into the hidden Ctrl+T\n   *  token/cost HUD's running estimate. No-op outside the TUI. */\n  addTokenUsage(delta: TokenUsageDelta): void;\n\n  /** Reconcile the HUD's running cost estimate to the SDK's authoritative\n   *  `total_cost_usd` once the agent run completes. No-op outside the TUI. */\n  setFinalTokenCostUsd(costUsd: number): void;\n\n  // ── Outro payload built by agent-runner ──\n  // Replaces the direct `session.outroData = X` mutation that breaks once\n  // setKey-based store mutations have forked the session reference.\n  setOutroData(data: OutroData): void;\n\n  // ── Generic frameworkContext setter for program file watchers ─────\n  setFrameworkContext(key: string, value: unknown): void;\n\n  /** Read a frameworkContext value from the LIVE session (store may have\n   * forked the reference the runner holds). Used by run configs to read\n   * values written by post-auth screens (e.g. the source-maps picker). */\n  getFrameworkContext(key: string): unknown;\n\n  /** Park until the named program step's gate predicate flips true. Resolves\n   * immediately if the step has no gate. Mirrors waitForAiOptIn for any\n   * post-auth interactive step the agent run must wait on. */\n  waitForGate(stepId: string): Promise<void>;\n}\n","import {\n  ServiceHealthStatus,\n  type BaseHealthResult,\n  type ComponentHealthResult,\n} from './types';\n\n// ---------------------------------------------------------------------------\n// Statuspage.io v2 API helpers\n// https://metastatuspage.com/api\n//\n// status.json  – page-level rollup; indicator is one of: none | minor | major | critical\n// summary.json – same rollup + component list; component status is one of:\n//   operational | degraded_performance | partial_outage | major_outage | under_maintenance\n//   https://support.atlassian.com/statuspage/docs/show-service-status-with-components\n// ---------------------------------------------------------------------------\n\ninterface StatuspageStatusResponse {\n  status?: { indicator?: string; description?: string };\n}\n\ninterface StatuspageSummaryResponse extends StatuspageStatusResponse {\n  components?: { id: string; name: string; status: string }[];\n}\n\nfunction mapIndicator(v: string | null | undefined): ServiceHealthStatus {\n  switch (v) {\n    case 'none':\n      return ServiceHealthStatus.Healthy;\n    case 'minor':\n      return ServiceHealthStatus.Degraded;\n    case 'major':\n    case 'critical':\n      return ServiceHealthStatus.Down;\n    default:\n      return ServiceHealthStatus.Degraded;\n  }\n}\n\nfunction mapComponentRaw(v: string | null | undefined): ServiceHealthStatus {\n  switch (v) {\n    case 'operational':\n      return ServiceHealthStatus.Healthy;\n    case 'degraded_performance':\n    case 'under_maintenance':\n      return ServiceHealthStatus.Degraded;\n    case 'partial_outage':\n    case 'major_outage':\n      return ServiceHealthStatus.Down;\n    default:\n      return ServiceHealthStatus.Degraded;\n  }\n}\n\nfunction errResult(error: string): BaseHealthResult {\n  return { status: ServiceHealthStatus.Degraded, error };\n}\n\nasync function fetchStatuspageIndicator(\n  url: string,\n  timeoutMs = 5000,\n): Promise<BaseHealthResult> {\n  try {\n    const controller = new AbortController();\n    const tid = setTimeout(() => controller.abort(), timeoutMs);\n    const res = await fetch(url, { signal: controller.signal });\n    clearTimeout(tid);\n\n    if (!res.ok) return errResult(`HTTP ${res.status}`);\n\n    const data = (await res.json()) as StatuspageStatusResponse;\n    const indicator = data.status?.indicator ?? null;\n    return {\n      status: mapIndicator(indicator),\n      rawIndicator: indicator ?? undefined,\n    };\n  } catch (e) {\n    if (e instanceof Error && e.name === 'AbortError')\n      return errResult('Request timed out');\n    return errResult(e instanceof Error ? e.message : 'Unknown error');\n  }\n}\n\nasync function fetchStatuspageSummary(\n  url: string,\n  timeoutMs = 5000,\n): Promise<ComponentHealthResult> {\n  try {\n    const controller = new AbortController();\n    const tid = setTimeout(() => controller.abort(), timeoutMs);\n    const res = await fetch(url, { signal: controller.signal });\n    clearTimeout(tid);\n\n    if (!res.ok) return errResult(`HTTP ${res.status}`);\n\n    const data = (await res.json()) as StatuspageSummaryResponse;\n    const indicator = data.status?.indicator ?? null;\n    const overall = mapIndicator(indicator);\n\n    const affected = (data.components ?? [])\n      .map((c) => ({\n        name: c.name,\n        status: mapComponentRaw(c.status),\n        rawStatus: c.status,\n      }))\n      .filter((c) => c.status !== ServiceHealthStatus.Healthy);\n\n    return {\n      status: affected.length > 0 ? ServiceHealthStatus.Degraded : overall,\n      rawIndicator: indicator ?? undefined,\n      degradedOrDownComponents: affected.length > 0 ? affected : undefined,\n    };\n  } catch (e) {\n    if (e instanceof Error && e.name === 'AbortError')\n      return errResult('Request timed out');\n    return errResult(e instanceof Error ? e.message : 'Unknown error');\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Individual statuspage-backed checks\n// ---------------------------------------------------------------------------\n\nexport const checkAnthropicHealth = (): Promise<BaseHealthResult> =>\n  fetchStatuspageIndicator('https://status.claude.com/api/v2/status.json');\n\nexport const checkGithubHealth = (): Promise<BaseHealthResult> =>\n  fetchStatuspageIndicator('https://www.githubstatus.com/api/v2/status.json');\n\nexport const checkNpmOverallHealth = (): Promise<BaseHealthResult> =>\n  fetchStatuspageIndicator('https://status.npmjs.org/api/v2/status.json');\n\nexport const checkNpmComponentHealth = (): Promise<ComponentHealthResult> =>\n  fetchStatuspageSummary('https://status.npmjs.org/api/v2/summary.json');\n\nexport const checkCloudflareOverallHealth = (): Promise<BaseHealthResult> =>\n  fetchStatuspageIndicator(\n    'https://www.cloudflarestatus.com/api/v2/status.json',\n  );\n\nexport const checkCloudflareComponentHealth =\n  (): Promise<ComponentHealthResult> =>\n    fetchStatuspageSummary(\n      'https://www.cloudflarestatus.com/api/v2/summary.json',\n    );\n","import {\n  ServiceHealthStatus,\n  type BaseHealthResult,\n  type ComponentHealthResult,\n  type ComponentStatus,\n} from './types';\n\ninterface IncidentIoAffectedComponent {\n  id: string;\n  name: string;\n  group_name?: string;\n  current_status: string;\n}\n\ninterface IncidentIoIncident {\n  id: string;\n  name: string;\n  status: string;\n  current_worst_impact: string;\n  affected_components: IncidentIoAffectedComponent[];\n}\n\ninterface IncidentIoSummary {\n  ongoing_incidents: IncidentIoIncident[];\n  in_progress_maintenances: unknown[];\n}\n\nfunction mapIncidentImpact(impact: string): ServiceHealthStatus {\n  switch (impact) {\n    case 'full_outage':\n      return ServiceHealthStatus.Down;\n    case 'partial_outage':\n    case 'degraded_performance':\n      return ServiceHealthStatus.Degraded;\n    default:\n      return ServiceHealthStatus.Degraded;\n  }\n}\n\nfunction mapComponentStatus(status: string): ServiceHealthStatus {\n  switch (status) {\n    case 'operational':\n      return ServiceHealthStatus.Healthy;\n    case 'full_outage':\n      return ServiceHealthStatus.Down;\n    case 'partial_outage':\n    case 'degraded_performance':\n      return ServiceHealthStatus.Degraded;\n    default:\n      return ServiceHealthStatus.Degraded;\n  }\n}\n\n/**\n * Build an error result for fetch failures. The kind matters for\n * downstream reconciliation:\n *\n *   - 'http' (incident.io returned a bad status code) → `Down`. We\n *     reached the status page but it told us something is wrong on\n *     its side. We have a definitive response.\n *   - 'network' (timeout, DNS failure, TCP/TLS failure) → `NoConnection`.\n *     We never reached the status page. Treating this as `Degraded`\n *     (the previous behavior) silently flipped the reconciliation in\n *     `readiness.ts` from \"soft\" to \"confirmed outage\" whenever the\n *     user's own network was flaky — exactly the false positive this\n *     module is meant to help diagnose.\n */\nfunction errResult(error: string, kind: 'http' | 'network'): BaseHealthResult {\n  return {\n    status:\n      kind === 'http'\n        ? ServiceHealthStatus.Down\n        : ServiceHealthStatus.NoConnection,\n    error,\n  };\n}\n\nconst POSTHOG_STATUS_URL = 'https://www.posthogstatus.com/api/v1/summary';\n\nasync function fetchPosthogStatus(\n  timeoutMs = 5000,\n): Promise<{ overall: BaseHealthResult; components: ComponentHealthResult }> {\n  try {\n    const controller = new AbortController();\n    const tid = setTimeout(() => controller.abort(), timeoutMs);\n    const res = await fetch(POSTHOG_STATUS_URL, { signal: controller.signal });\n    clearTimeout(tid);\n\n    if (!res.ok) {\n      const err = errResult(`HTTP ${res.status}`, 'http');\n      return { overall: err, components: err };\n    }\n\n    const data = (await res.json()) as IncidentIoSummary;\n    const incidents = data.ongoing_incidents ?? [];\n\n    if (incidents.length === 0) {\n      return {\n        overall: { status: ServiceHealthStatus.Healthy },\n        components: { status: ServiceHealthStatus.Healthy },\n      };\n    }\n\n    let worstOverall = ServiceHealthStatus.Degraded;\n    const affected: ComponentStatus[] = [];\n\n    for (const incident of incidents) {\n      const impact = mapIncidentImpact(incident.current_worst_impact);\n      if (impact === ServiceHealthStatus.Down) {\n        worstOverall = ServiceHealthStatus.Down;\n      }\n\n      for (const comp of incident.affected_components ?? []) {\n        const compStatus = mapComponentStatus(comp.current_status);\n        if (compStatus !== ServiceHealthStatus.Healthy) {\n          affected.push({\n            name: comp.group_name\n              ? `${comp.group_name} — ${comp.name}`\n              : comp.name,\n            status: compStatus,\n            rawStatus: comp.current_status,\n          });\n        }\n      }\n    }\n\n    return {\n      overall: { status: worstOverall },\n      components: {\n        status:\n          affected.length > 0 ? ServiceHealthStatus.Degraded : worstOverall,\n        degradedOrDownComponents: affected.length > 0 ? affected : undefined,\n      },\n    };\n  } catch (e) {\n    if (e instanceof Error && e.name === 'AbortError') {\n      const err = errResult('Request timed out', 'network');\n      return { overall: err, components: err };\n    }\n    const err = errResult(\n      e instanceof Error ? e.message : 'Unknown error',\n      'network',\n    );\n    return { overall: err, components: err };\n  }\n}\n\nlet _cache: Promise<{\n  overall: BaseHealthResult;\n  components: ComponentHealthResult;\n}> | null = null;\n\nfunction getPosthogHealth() {\n  if (!_cache) _cache = fetchPosthogStatus();\n  return _cache;\n}\n\nexport function resetPosthogHealthCache(): void {\n  _cache = null;\n}\n\nexport const checkPosthogOverallHealth = async (): Promise<BaseHealthResult> =>\n  (await getPosthogHealth()).overall;\n\nexport const checkPosthogComponentHealth =\n  async (): Promise<ComponentHealthResult> =>\n    (await getPosthogHealth()).components;\n","import { REMOTE_SKILLS_BASE_URL } from '@lib/constants';\nimport { logToFile } from '@utils/debug';\nimport { ServiceHealthStatus, type BaseHealthResult } from './types';\n\n// ---------------------------------------------------------------------------\n// Direct endpoint health checks\n//\n// These ping PostHog-owned services directly (no Statuspage intermediary).\n// Result taxonomy:\n//   - HTTP 2xx-3xx (per `isExpectedStatus`)        → Healthy\n//   - HTTP 4xx / 5xx                                → Down (confirmed)\n//   - Network error / DNS / timeout (after retries) → NoConnection\n// NoConnection means we don't know whose fault it is; readiness reconciles\n// against the status page before deciding how to surface it to the user.\n//\n// LLM Gateway – FastAPI service\n//   Source: posthog/services/llm-gateway/src/llm_gateway/api/health.py\n//   GET /_liveness → 200 {\"status\":\"alive\"}\n//\n// MCP – Cloudflare Worker\n//   Source: posthog/services/mcp/src/index.ts\n//   GET / → 302 to posthog.com docs. The redirect proves the worker is up.\n// ---------------------------------------------------------------------------\n\nfunction noConnectionResult(error: string, attempts: number): BaseHealthResult {\n  return {\n    status: ServiceHealthStatus.NoConnection,\n    error,\n    rawIndicator: attempts > 1 ? `attempts=${attempts}` : undefined,\n  };\n}\n\nfunction downResult(error: string): BaseHealthResult {\n  return { status: ServiceHealthStatus.Down, error };\n}\n\n// Backoffs sized to cover typical wifi flakiness — a single dropped\n// packet recovers via the 500ms retry; a wifi access point reconnect\n// or wifi↔LTE handoff (2-5s) is caught by the 2000ms retry. Tighter\n// schedules miss multi-second blips because all retries land in the\n// same dead window.\nconst RETRY_BACKOFFS_MS = [500, 2000];\n\nasync function attemptFetch(\n  url: string,\n  timeoutMs: number,\n  redirect: 'follow' | 'manual' | 'error',\n): Promise<\n  | { kind: 'response'; res: Response }\n  | { kind: 'error'; error: Error; timedOut: boolean }\n> {\n  const controller = new AbortController();\n  const tid = setTimeout(() => controller.abort(), timeoutMs);\n  try {\n    const res = await fetch(url, { signal: controller.signal, redirect });\n    clearTimeout(tid);\n    return { kind: 'response', res };\n  } catch (e) {\n    clearTimeout(tid);\n    const err = e instanceof Error ? e : new Error('Unknown error');\n    return { kind: 'error', error: err, timedOut: err.name === 'AbortError' };\n  }\n}\n\nasync function fetchEndpointHealth(\n  url: string,\n  timeoutMs = 5000,\n  isExpectedStatus: (status: number) => boolean = (s) => s === 200,\n  redirect: 'follow' | 'manual' | 'error' = 'follow',\n): Promise<BaseHealthResult> {\n  // Total attempts = 1 initial + RETRY_BACKOFFS_MS.length retries. Both\n  // unexpected HTTP statuses (4xx/5xx) and network errors trigger a retry:\n  // transient 5xx and Cloudflare edge blips often recover on a retry, and\n  // even nominally deterministic 4xx can be transient (CDN propagation\n  // lag after a release, token rotation, rate-limit window resets). GETs\n  // are idempotent so retrying is safe.\n  //\n  // Final status if every attempt fails:\n  //   - At least one HTTP response observed → `Down` (server-side evidence)\n  //   - Only network errors observed         → `NoConnection`\n  let lastHttpStatus: number | null = null;\n  let lastError = 'Unknown error';\n  let attempts = 0;\n\n  for (let i = 0; i <= RETRY_BACKOFFS_MS.length; i++) {\n    if (i > 0) {\n      const wait = RETRY_BACKOFFS_MS[i - 1];\n      logToFile(\n        `[health-checks] retry ${i}/${RETRY_BACKOFFS_MS.length} for ${url} in ${wait}ms (last: ${lastError})`,\n      );\n      await new Promise((r) => setTimeout(r, wait));\n    }\n    attempts++;\n\n    const outcome = await attemptFetch(url, timeoutMs, redirect);\n\n    if (outcome.kind === 'response') {\n      const res = outcome.res;\n      if (isExpectedStatus(res.status)) {\n        const result: BaseHealthResult = {\n          status: ServiceHealthStatus.Healthy,\n          rawIndicator:\n            attempts > 1\n              ? `HTTP ${res.status} (attempts=${attempts})`\n              : `HTTP ${res.status}`,\n        };\n        logToFile(\n          `[health-checks] GET ${url} -> ${result.status}` +\n            ` (${result.rawIndicator})`,\n        );\n        return result;\n      }\n      lastHttpStatus = res.status;\n      lastError = `HTTP ${res.status}`;\n      continue;\n    }\n\n    lastError = outcome.timedOut\n      ? `Request timed out after ${timeoutMs}ms`\n      : outcome.error.message;\n  }\n\n  const result =\n    lastHttpStatus !== null\n      ? downResult(`HTTP ${lastHttpStatus} (attempts=${attempts})`)\n      : noConnectionResult(lastError, attempts);\n  logToFile(\n    `[health-checks] GET ${url} -> ${result.status}` +\n      ` (attempts=${attempts}, ${result.error})`,\n  );\n  return result;\n}\n\nexport const checkLlmGatewayHealth = (): Promise<BaseHealthResult> =>\n  fetchEndpointHealth('https://gateway.us.posthog.com/_liveness');\n\nexport const checkMcpHealth = (): Promise<BaseHealthResult> =>\n  fetchEndpointHealth(\n    'https://mcp.posthog.com/',\n    5000,\n    // 2xx-3xx counts as up (redirect to docs)\n    (s) => s >= 200 && s < 400,\n    'manual',\n  );\n\nexport const checkGithubReleasesHealth = (): Promise<BaseHealthResult> =>\n  fetchEndpointHealth(`${REMOTE_SKILLS_BASE_URL}/skill-menu.json`);\n","import {\n  ServiceHealthStatus,\n  type AllServicesHealth,\n  type BaseHealthResult,\n  type ComponentHealthResult,\n  type HealthCheckKey,\n} from './types';\nimport {\n  checkAnthropicHealth,\n  checkGithubHealth,\n  checkNpmOverallHealth,\n  checkNpmComponentHealth,\n  checkCloudflareOverallHealth,\n  checkCloudflareComponentHealth,\n} from './statuspage';\nimport {\n  checkPosthogOverallHealth,\n  checkPosthogComponentHealth,\n} from './incidentio';\nimport {\n  checkLlmGatewayHealth,\n  checkMcpHealth,\n  checkGithubReleasesHealth,\n} from './endpoints';\nimport { logToFile } from '@utils/debug';\n\n// ---------------------------------------------------------------------------\n// Service labels (used in human-readable reason strings)\n// ---------------------------------------------------------------------------\n\nexport const SERVICE_LABELS: Record<HealthCheckKey, string> = {\n  anthropic: 'Anthropic',\n  posthogOverall: 'PostHog',\n  posthogComponents: 'PostHog (components)',\n  github: 'GitHub',\n  npmOverall: 'npm',\n  npmComponents: 'npm (components)',\n  cloudflareOverall: 'Cloudflare',\n  cloudflareComponents: 'Cloudflare (components)',\n  llmGateway: 'LLM Gateway',\n  mcp: 'MCP',\n  githubReleases: 'GitHub Releases',\n};\n\n// ---------------------------------------------------------------------------\n// Readiness config\n// ---------------------------------------------------------------------------\n\nexport interface WizardReadinessConfig {\n  /** Services where status=Down blocks the run (readiness=No). */\n  downBlocksRun: HealthCheckKey[];\n  /** Services where status=Degraded (or worse) blocks the run (readiness=No). */\n  degradedBlocksRun?: HealthCheckKey[];\n}\n\n/**\n * See README section \"Health checks\" for the full rationale.\n * Adjust these arrays to change what blocks a wizard run.\n */\nexport const DEFAULT_WIZARD_READINESS_CONFIG: WizardReadinessConfig = {\n  downBlocksRun: [\n    'anthropic',\n    'npmOverall',\n    'llmGateway',\n    'mcp',\n    'githubReleases',\n  ],\n  degradedBlocksRun: ['anthropic'],\n};\n\n/**\n * Reduced readiness config for --signup provisioning flows.\n *\n * Provisioning only needs PostHog and the LLM Gateway - it doesn't\n * use Anthropic directly, npm, GitHub Releases, or MCP.\n */\nexport const SIGNUP_WIZARD_READINESS_CONFIG: WizardReadinessConfig = {\n  downBlocksRun: ['posthogOverall', 'llmGateway'],\n};\n\n// ---------------------------------------------------------------------------\n// Aggregate check\n// ---------------------------------------------------------------------------\n\nexport async function checkAllExternalServices(): Promise<AllServicesHealth> {\n  const [\n    anthropic,\n    posthogOverall,\n    posthogComponents,\n    github,\n    npmOverall,\n    npmComponents,\n    cloudflareOverall,\n    cloudflareComponents,\n    llmGateway,\n    mcp,\n    githubReleases,\n  ] = await Promise.all([\n    checkAnthropicHealth(),\n    checkPosthogOverallHealth(),\n    checkPosthogComponentHealth(),\n    checkGithubHealth(),\n    checkNpmOverallHealth(),\n    checkNpmComponentHealth(),\n    checkCloudflareOverallHealth(),\n    checkCloudflareComponentHealth(),\n    checkLlmGatewayHealth(),\n    checkMcpHealth(),\n    checkGithubReleasesHealth(),\n  ]);\n\n  const health: AllServicesHealth = {\n    anthropic,\n    posthogOverall,\n    posthogComponents,\n    github,\n    npmOverall,\n    npmComponents,\n    cloudflareOverall,\n    cloudflareComponents,\n    llmGateway,\n    mcp,\n    githubReleases,\n  };\n  return reconcilePosthogReachability(health);\n}\n\n/**\n * When a PostHog-owned endpoint probe returns `NoConnection`, decide\n * whether it's a real outage or a likely-local issue by checking the\n * official status page (`posthogstatus.com`):\n *\n *   - Status page says PostHog is `Down` / `Degraded` → upgrade\n *     llmGateway / mcp to `Down`. The status page corroborates.\n *   - Status page is `Healthy` → keep `NoConnection`. The status page\n *     contradicts; this is probably the user's network.\n *   - Status page is also `NoConnection` → keep `NoConnection`. User\n *     can't reach two independent PostHog properties; almost\n *     certainly their network. (This case relies on incidentio.ts\n *     correctly emitting `NoConnection` for fetch failures rather\n *     than the previous `Degraded`, which used to silently flip the\n *     reconciliation into a false positive.)\n *\n * Why `Degraded` corroborates: a `Degraded` reading here only fires\n * when incident.io's API parsed successfully and reported a real\n * `partial_outage` or `degraded_performance` for some component. That's\n * PostHog acknowledging an issue, even if narrower than a full outage.\n * If our gateway probe is also failing, those two signals together\n * justify pointing at PostHog rather than the user.\n *\n * A narrower variant — only corroborate when the affected component is\n * gateway-related (LLM, US/EU Cloud, app) — would be more precise. We\n * have the data in `posthogComponents` but don't use it here. If the\n * analytics show false positives concentrated in this case, it's a\n * cheap follow-up.\n *\n * Mutates a copy of `health` and returns it.\n */\nexport function reconcilePosthogReachability(\n  health: AllServicesHealth,\n): AllServicesHealth {\n  const posthogStatus = health.posthogOverall.status;\n  const corroboratesOutage =\n    posthogStatus === ServiceHealthStatus.Down ||\n    posthogStatus === ServiceHealthStatus.Degraded;\n\n  if (!corroboratesOutage) return health;\n\n  const upgrade = (r: BaseHealthResult): BaseHealthResult =>\n    r.status === ServiceHealthStatus.NoConnection\n      ? {\n          ...r,\n          status: ServiceHealthStatus.Down,\n          error: r.error\n            ? `${r.error} (corroborated by status page)`\n            : 'corroborated by status page',\n        }\n      : r;\n\n  return {\n    ...health,\n    llmGateway: upgrade(health.llmGateway),\n    mcp: upgrade(health.mcp),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Wizard readiness evaluation\n// ---------------------------------------------------------------------------\n\nexport enum WizardReadiness {\n  Yes = 'yes',\n  No = 'no',\n  YesWithWarnings = 'yes_with_warnings',\n}\n\nexport interface WizardReadinessResult {\n  decision: WizardReadiness;\n  health: AllServicesHealth;\n  reasons: string[];\n}\n\nfunction describeResult(label: string, h: BaseHealthResult): string {\n  const parts = [`${label}: ${h.status}`];\n  if (h.rawIndicator) parts.push(`indicator=${h.rawIndicator}`);\n  if (h.error) parts.push(h.error);\n  return parts.join(' — ');\n}\n\nconst MAX_COMPONENT_NAMES = 8;\n\nfunction describeComponents(label: string, h: ComponentHealthResult): string {\n  const affected = h.degradedOrDownComponents;\n  if (!affected || affected.length === 0)\n    return `${label} components: all operational`;\n  const shown = affected\n    .slice(0, MAX_COMPONENT_NAMES)\n    .map((c) => `${c.name} (${c.status})`);\n  const suffix =\n    affected.length > MAX_COMPONENT_NAMES\n      ? `, +${affected.length - MAX_COMPONENT_NAMES} more`\n      : '';\n  return `${label} components impacted: ${shown.join(', ')}${suffix}`;\n}\n\n// Each probe can take up to one base timeout + two retries with the\n// 500ms / 2000ms backoffs in endpoints.ts (worst case ~17.5s for a\n// network failure that exhausts retries). Probes run in parallel so\n// the aggregate ceiling is one probe, not the sum.\nconst READINESS_TIMEOUT_MS = 20_000;\n\nexport async function evaluateWizardReadiness(\n  config: WizardReadinessConfig = DEFAULT_WIZARD_READINESS_CONFIG,\n): Promise<WizardReadinessResult> {\n  try {\n    const health = await Promise.race([\n      checkAllExternalServices(),\n      new Promise<AllServicesHealth>((resolve) =>\n        setTimeout(\n          () => resolve(allUnknown('Health check timed out')),\n          READINESS_TIMEOUT_MS,\n        ),\n      ),\n    ]);\n\n    const reasons: string[] = [];\n\n    for (const key of Object.keys(health) as HealthCheckKey[]) {\n      const result = health[key];\n      const label = SERVICE_LABELS[key];\n\n      reasons.push(describeResult(label, result));\n\n      if ('degradedOrDownComponents' in result) {\n        reasons.push(describeComponents(label, result));\n      }\n    }\n\n    const blockingKeys = getBlockingServiceKeys(health, config);\n    if (blockingKeys.length > 0) {\n      const blockingDetails = blockingKeys.map((key) => {\n        const h = health[key];\n        return `${key} (${h.status}${h.error ? ` — ${h.error}` : ''})`;\n      });\n      logToFile(`[health-checks] blocked by: ${blockingDetails.join(', ')}`);\n      return { decision: WizardReadiness.No, health, reasons };\n    }\n\n    const hasWarnings = Object.values(health).some(\n      (h) => h.status !== ServiceHealthStatus.Healthy,\n    );\n\n    if (hasWarnings) {\n      return { decision: WizardReadiness.YesWithWarnings, health, reasons };\n    }\n\n    return { decision: WizardReadiness.Yes, health, reasons };\n  } catch (err) {\n    logToFile(\n      `[health-checks] error: ${err instanceof Error ? err.message : err}`,\n    );\n    // Health checks must never block the wizard run\n    return {\n      decision: WizardReadiness.Yes,\n      health: allUnknown('Unexpected error'),\n      reasons: ['Health check failed unexpectedly — proceeding anyway'],\n    };\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Blocking service detection\n// ---------------------------------------------------------------------------\n\n/** Keys that are component-level detail, not top-level services. */\nconst COMPONENT_KEYS: HealthCheckKey[] = [\n  'posthogComponents',\n  'npmComponents',\n  'cloudflareComponents',\n];\n\n/**\n * Get the keys of services that would block a wizard run per the given config.\n *\n * `NoConnection` blocks the same services as `Down` — the wizard genuinely\n * can't continue if it can't reach the gateway. The screen shows softer\n * framing in that case (HealthCheckScreen) so we don't falsely accuse\n * PostHog of an outage when the user's network is the likely cause.\n */\nexport function getBlockingServiceKeys(\n  health: AllServicesHealth,\n  config: WizardReadinessConfig = DEFAULT_WIZARD_READINESS_CONFIG,\n): HealthCheckKey[] {\n  return (Object.keys(health) as HealthCheckKey[]).filter((key) => {\n    if (COMPONENT_KEYS.includes(key)) return false;\n    const result = health[key];\n    if (\n      config.downBlocksRun.includes(key) &&\n      (result.status === ServiceHealthStatus.Down ||\n        result.status === ServiceHealthStatus.NoConnection)\n    ) {\n      return true;\n    }\n    if (\n      (config.degradedBlocksRun ?? []).includes(key) &&\n      result.status !== ServiceHealthStatus.Healthy\n    ) {\n      return true;\n    }\n    return false;\n  });\n}\n\n/** Build an AllServicesHealth where every service is Degraded with the given error. */\nfunction allUnknown(error: string): AllServicesHealth {\n  const base: BaseHealthResult = {\n    status: ServiceHealthStatus.Degraded,\n    error,\n  };\n  return {\n    anthropic: base,\n    posthogOverall: base,\n    posthogComponents: { ...base },\n    github: base,\n    npmOverall: base,\n    npmComponents: { ...base },\n    cloudflareOverall: base,\n    cloudflareComponents: { ...base },\n    llmGateway: base,\n    mcp: base,\n    githubReleases: base,\n  };\n}\n","/* eslint-disable no-console */\n/**\n * LoggingUI — Logging-only implementation for CI mode.\n * No prompts, no TUI, no interactivity. Just console output.\n */\n\nimport {\n  TaskStatus,\n  type WizardUI,\n  type SpinnerHandle,\n  type AuthErrorDetail,\n  type TokenUsageDelta,\n} from './wizard-ui';\nimport type { SettingsConflict } from '@lib/agent/claude-settings';\nimport type { ApiUser } from '@lib/api';\nimport { OAUTH_TIMEOUT_MS } from '@lib/constants';\nimport {\n  type WizardReadinessResult,\n  getBlockingServiceKeys,\n  SERVICE_LABELS,\n} from '@lib/health-checks/readiness';\nimport type {\n  AskAnswers,\n  Credentials,\n  OutroData,\n  PendingQuestion,\n} from '@lib/wizard-session';\n\nexport class LoggingUI implements WizardUI {\n  intro(message: string): void {\n    console.log(`┌  ${message}`);\n  }\n\n  outro(message: string): void {\n    console.log(`└  ${message}`);\n  }\n\n  outroError(data: OutroData): void {\n    console.log(`✖  ${data.message ?? 'Wizard aborted'}`);\n    if (data.body) console.log(`│  ${data.body}`);\n    if (data.docsUrl) console.log(`│  Docs: ${data.docsUrl}`);\n  }\n\n  waitForOutroDismissed(): Promise<void> {\n    return Promise.resolve();\n  }\n\n  waitForAiOptIn(): Promise<void> {\n    // Non-TUI runs are CI runs, which auto-consent to AI usage.\n    return Promise.resolve();\n  }\n\n  cancel(message: string): void {\n    console.log(`■  ${message}`);\n  }\n\n  log = {\n    info(message: string): void {\n      console.log(`│  ${message}`);\n    },\n    warn(message: string): void {\n      console.log(`▲  ${message}`);\n    },\n    error(message: string): void {\n      console.log(`✖  ${message}`);\n    },\n    success(message: string): void {\n      console.log(`✔  ${message}`);\n    },\n    step(message: string): void {\n      console.log(`◇  ${message}`);\n    },\n  };\n\n  note(message: string): void {\n    console.log(`│  ${message}`);\n  }\n\n  spinner(): SpinnerHandle {\n    return {\n      start(message?: string) {\n        if (message) console.log(`◌  ${message}`);\n      },\n      stop(message?: string) {\n        if (message) console.log(`●  ${message}`);\n      },\n      message(msg?: string) {\n        if (msg) console.log(`◌  ${msg}`);\n      },\n    };\n  }\n\n  pushStatus(message: string): void {\n    console.log(`◇  ${message}`);\n  }\n\n  setDetectedFramework(label: string): void {\n    console.log(`✔  Framework: ${label}`);\n  }\n\n  onEnterScreen(_screen: string, _fn: () => void): void {\n    // No screen transitions in CI\n  }\n\n  setLoginUrl(url: string | null): void {\n    if (url) {\n      console.log(\n        `│  If the browser didn't open automatically, use this link:`,\n      );\n      console.log(`│  ${url}`);\n    }\n  }\n\n  setAuthorizeUrl(_url: string | null): void {\n    // Manual-paste modal is TUI-only; CI/non-interactive runs don't use it.\n  }\n\n  showBlockingOutage(result: WizardReadinessResult): Promise<void> {\n    console.log(`▲  Service health issues detected.`);\n    const blockingKeys = getBlockingServiceKeys(result.health);\n    if (blockingKeys.length > 0) {\n      console.log(`│`);\n      console.log(`│  Blocking services:`);\n      for (const key of blockingKeys) {\n        const status = result.health[key].status;\n        const error = result.health[key].error;\n        const label = SERVICE_LABELS[key];\n        const detail = error ? ` — ${error}` : '';\n        console.log(`│    ✖ ${label}: ${status}${detail}`);\n      }\n      console.log(`│`);\n    }\n    for (const reason of result.reasons) {\n      console.log(`│  ${reason}`);\n    }\n    console.log(\n      `│  Continuing anyway — health checks are advisory in non-interactive runs.`,\n    );\n    return Promise.resolve();\n  }\n\n  setReadinessWarnings(result: WizardReadinessResult): void {\n    console.log(`▲  Service health warnings detected.`);\n    for (const reason of result.reasons) {\n      console.log(`│  ${reason}`);\n    }\n  }\n\n  showPortConflict(_processInfo: {\n    command: string;\n    pid: string;\n    port: number;\n    user: string;\n  }): Promise<void> {\n    return Promise.resolve();\n  }\n\n  waitForManualAuthCode(): Promise<string> {\n    // No interactive prompt in CI/logging mode — never resolves. CI bypasses\n    // OAuth entirely, so this is only here to satisfy the interface.\n    return new Promise<string>(() => {\n      /* intentionally never resolves */\n    });\n  }\n\n  showSettingsOverride(\n    _conflicts: SettingsConflict[],\n    _backupAndFix: () => boolean,\n  ): Promise<void> {\n    return Promise.resolve();\n  }\n\n  requestQuestion(_question: PendingQuestion): Promise<AskAnswers> {\n    return Promise.reject(\n      new Error(\n        'wizard_ask is not available in CI / non-interactive mode. ' +\n          'Re-run the wizard without --ci to answer interactively.',\n      ),\n    );\n  }\n\n  cancelPendingQuestion(): void {\n    // Nothing to dismiss — requestQuestion never opens an overlay here.\n  }\n\n  showAuthError(detail?: AuthErrorDetail): void {\n    console.log(`✖  Authentication failed (401)`);\n    if (detail?.hasSettingsConflict) {\n      console.log(\n        `│  Claude Code auth is conflicting with the wizard. Please try again after logging out:`,\n      );\n      console.log(`│    claude auth logout`);\n    } else {\n      console.log(\n        `│  The PostHog LLM Gateway rejected the API key. Common causes:`,\n      );\n      console.log(\n        `│    - Wrong key type: pass a personal API key (phx_xxx). pha_ is an OAuth access token, phc_ is a project key.`,\n      );\n      console.log(\n        `│    - Missing scope: the personal API key needs the \"llm_gateway:read\" scope.`,\n      );\n      console.log(`│    - Expired or revoked key.`);\n      console.log(\n        `│    - Region mismatch: --region must match the region the key was issued in (us vs eu).`,\n      );\n    }\n    if (detail?.logFilePath) {\n      console.log(`│  Verbose log: ${detail.logFilePath}`);\n    }\n  }\n\n  showSessionTimeout(): void {\n    const minutes = Math.round(OAUTH_TIMEOUT_MS / 60_000);\n    console.log(\n      `✖  Login timed out. The OAuth link timed out after ${minutes} minutes.`,\n    );\n    console.log(`│  Re-run the wizard to get a fresh link and try again.`);\n  }\n\n  startRun(): void {\n    // No-op in CI mode\n  }\n\n  setCredentials(_credentials: Credentials): void {\n    // No-op in CI mode — credentials are handled directly\n  }\n\n  setRoleAtOrganization(_role: string | null): void {\n    // No-op in CI mode — there's no TUI to render role-tailored prompts\n  }\n\n  setApiUser(_user: ApiUser | null): void {\n    // No-op in CI mode — there's no TUI to read account context from\n    // the session.\n  }\n\n  private lastTodoLine = '';\n\n  syncTodos(\n    todos: Array<{ content: string; status: string; activeForm?: string }>,\n  ): void {\n    const completed = todos.filter(\n      (t) => t.status === TaskStatus.Completed,\n    ).length;\n    const active = todos.filter((t) => t.status === TaskStatus.InProgress);\n    if (active.length === 0) return;\n    const labels = active.map((t) => t.activeForm || t.content).join(' · ');\n    const line = `◌  [${completed}/${todos.length}] ${labels}`;\n    // The queue re-renders on every transition; print only what changed.\n    if (line === this.lastTodoLine) return;\n    this.lastTodoLine = line;\n    console.log(line);\n  }\n\n  setEventPlan(_events: Array<{ name: string; description: string }>): void {\n    // No-op in CI mode\n  }\n\n  setDashboardUrl(_url: string): void {\n    // No-op in CI mode\n  }\n\n  setStage(_stage: string): void {\n    // No-op in CI mode\n  }\n\n  setNotebookUrl(_url: string): void {\n    // No-op in CI mode\n  }\n\n  addTokenUsage(_delta: TokenUsageDelta): void {\n    // No-op — the hidden Ctrl+T HUD is TUI-only\n  }\n\n  setFinalTokenCostUsd(_costUsd: number): void {\n    // No-op — the hidden Ctrl+T HUD is TUI-only\n  }\n\n  setOutroData(_data: import('@lib/wizard-session').OutroData): void {\n    // No-op in CI mode\n  }\n\n  setFrameworkContext(_key: string, _value: unknown): void {\n    // No-op in CI mode\n  }\n\n  getFrameworkContext(_key: string): unknown {\n    // No frameworkContext in CI mode\n    return undefined;\n  }\n\n  waitForGate(_stepId: string): Promise<void> {\n    // No interactive gates in CI mode\n    return Promise.resolve();\n  }\n}\n","/**\n * UI singleton — provides getUI() and setUI() for the wizard.\n * Default: LoggingUI. Swap to InkUI at startup for TUI mode.\n */\n\nimport type { WizardUI } from './wizard-ui';\nimport { LoggingUI } from './logging-ui';\n\nlet currentUI: WizardUI = new LoggingUI();\n\nexport function getUI(): WizardUI {\n  return currentUI;\n}\n\nexport function setUI(ui: WizardUI): void {\n  currentUI = ui;\n}\n\nexport type { WizardUI, SpinnerHandle } from './wizard-ui';\n","import { tmpdir } from 'node:os';\nimport { join, sep } from 'node:path';\n\n// /tmp is stable and discoverable on macOS/Linux; Windows needs os.tmpdir()\nconst TMP = process.platform === 'win32' ? tmpdir() : '/tmp';\n\nexport const WIZARD_LOG_FILE = join(TMP, 'posthog-wizard.log');\nexport const WIZARD_BENCHMARK_FILE = join(TMP, 'posthog-wizard-benchmark.json');\nexport const WIZARD_YARA_REPORT_FILE = join(\n  TMP,\n  'posthog-wizard-yara-report.json',\n);\n/**\n * Strip an absolute installDir prefix off a project file path so the UI\n * renders `index.js:12` instead of `/Users/.../index.js:12`. Defends\n * against false matches like `/Users/foo` ⊂ `/Users/foobar/x.js` by\n * normalizing to a trailing path separator before the prefix check.\n */\nexport function relativeToInstallDir(file: string, installDir: string): string {\n  const prefix = installDir.endsWith(sep) ? installDir : installDir + sep;\n  return file.startsWith(prefix) ? file.slice(prefix.length) : file;\n}\n","import { appendFileSync, mkdirSync } from 'fs';\nimport path from 'path';\nimport { inspect } from 'node:util';\nimport { getUI } from '@ui';\nimport { IS_DEV, runtimeEnv } from '@env';\nimport { WIZARD_LOG_FILE } from './paths';\n\n// Dev builds may redirect the log so concurrent runs don't interleave one file.\nlet logFilePath =\n  (IS_DEV && process.env.POSTHOG_WIZARD_LOG_FILE) || WIZARD_LOG_FILE;\nlet fileLoggingEnabled = true;\nlet consoleLoggingEnabled = false;\n\nfunction stringify(value: unknown): string {\n  if (typeof value === 'string') return value;\n  if (value instanceof Error) return value.stack ?? String(value);\n  try {\n    // JSON.stringify throws on cycles and skips some values — fall back to\n    // inspect so a crash log line is never dropped.\n    return JSON.stringify(value, null, 2) ?? inspect(value, { depth: 3 });\n  } catch {\n    return inspect(value, { depth: 3 });\n  }\n}\n\nfunction renderLine(args: readonly unknown[]): string {\n  return args.map(stringify).join(' ');\n}\n\nexport function getLogFilePath(): string {\n  return logFilePath;\n}\n\nexport function configureLogFile(opts: {\n  path?: string;\n  enabled?: boolean;\n}): void {\n  if (opts.path !== undefined) {\n    logFilePath = opts.path;\n    ensuredLogDir = false;\n  }\n  if (opts.enabled !== undefined) fileLoggingEnabled = opts.enabled;\n}\n\nlet ensuredLogDir = false;\nlet reportedLogFailure = false;\n\n// Failed log writes go to error tracking, once per process. Dynamic import:\n// analytics logs through this module, so a static import would be a cycle.\nfunction reportLogFailureOnce(err: unknown): void {\n  if (reportedLogFailure) return;\n  reportedLogFailure = true;\n  void import('./analytics')\n    .then(({ analytics }) =>\n      analytics.captureException(\n        err instanceof Error ? err : new Error(String(err)),\n        {\n          source: 'log-file-write',\n          log_path: logFilePath,\n          platform: process.platform,\n        },\n      ),\n    )\n    .catch(() => {\n      // Reporting must never crash the wizard either.\n    });\n}\n\n// The log's directory isn't guaranteed to exist (Windows %TEMP%,\n// POSTHOG_WIZARD_LOG_DIR) — create it on first failure.\nfunction appendLine(text: string): void {\n  try {\n    appendFileSync(logFilePath, text);\n  } catch (err) {\n    if (ensuredLogDir) {\n      reportLogFailureOnce(err);\n      return;\n    }\n    ensuredLogDir = true;\n    try {\n      mkdirSync(path.dirname(logFilePath), { recursive: true });\n      appendFileSync(logFilePath, text);\n    } catch (retryErr) {\n      reportLogFailureOnce(retryErr);\n    }\n  }\n}\n\nexport function configureLogFileFromEnvironment(): void {\n  const dir = runtimeEnv('POSTHOG_WIZARD_LOG_DIR');\n  if (dir) {\n    configureLogFile({ path: path.join(dir, 'posthog-wizard.log') });\n  }\n}\n\nexport function initLogFile(): void {\n  if (!fileLoggingEnabled) return;\n  const divider = '='.repeat(60);\n  appendLine(\n    `\\n${divider}\\nPostHog Wizard Run: ${new Date().toISOString()}\\n${divider}\\n`,\n  );\n}\n\nexport function logToFile(...args: unknown[]): void {\n  if (!fileLoggingEnabled) return;\n  const ts = new Date().toISOString();\n  appendLine(`[${ts}] ${renderLine(args)}\\n`);\n}\n\nexport function debug(...args: unknown[]): void {\n  if (!consoleLoggingEnabled) return;\n  getUI().log.info(renderLine(args));\n}\n\nexport function enableDebugLogs(): void {\n  consoleLoggingEnabled = true;\n}\n"],"mappings":";;;;;;;;;;AAuBA,MAAa,gBAAgB;;;;;;AAO7B,MAAa,iBAA0C,GACpD,gBAAgB;CACf,SAAS;CAKT,UACE;CACF,MAAM;CACN,QAAQ;CACT,EACF;;;;;;AAOD,SAAgB,WAAW,SAA2C;AACpE,QAAO,QAAQ,mBAAmB;;AAMpC,MAAa,eAAwC,EACnD,QAAQ;CACN,UAAU;CACV,SAAS,CAAC,MAAM,KAAK;CACrB,MAAM;CACN,QAAQ;CACT,EACF;;;;;;;;;;;;;;;;;;;ACxCD,MAAa,WAAA;;AAcb,MAAa,cAAiC,QAAQ,KAAK,MACxD,MAAM,MAAM,sCAAwB,EAAE,WAAW,oCAAsB,CACzE,GACG,UACA;;AA+CJ,SAAgB,WAAW,KAAwC;AACjE,QAAO,QAAQ,IAAI;;;;;;;AAQrB,MAAa,cACX,WAAW,sBAAsB,IAAI,KAAA;AACvC,MAAa,UACX,WAAW,kBAAkB,IAAI,KAAA;;;ACnGnC,MAAa,UAAU;;;;;;;;;;ACWvB,MAAa,sBAAsB;;AAGnC,MAAa,iBAAiB;;;;;AAM9B,MAAa,cAAc;;AAG3B,MAAa,qBAAqB;;;;;AAMlC,MAAa,aAAa;AAG1B,MAAa,oBAAoB;AACjC,MAAa,qBAAqB;AAClC,MAAa,mBAAmB;;;;;;;;;;;AAchC,IAAY,UAAL,yBAAA,SAAA;AACL,SAAA,eAAA;AACA,SAAA,QAAA;;KACD;AAED,IAAY,WAAL,yBAAA,UAAA;AACL,UAAA,YAAA;AACA,UAAA,kBAAA;;KACD;;;;AAOD,IAAY,cAAL,yBAAA,aAAA;AAEL,aAAA,YAAA;AACA,aAAA,UAAA;AACA,aAAA,SAAA;AACA,aAAA,iBAAA;AACA,aAAA,mBAAA;AACA,aAAA,oBAAA;AACA,aAAA,iBAAA;AACA,aAAA,aAAA;AACA,aAAA,WAAA;AACA,aAAA,YAAA;AACA,aAAA,WAAA;AACA,aAAA,aAAA;AACA,aAAA,aAAA;AACA,aAAA,eAAA;AACA,aAAA,SAAA;AACA,aAAA,WAAA;AACA,aAAA,aAAA;AACA,aAAA,WAAA;AAGA,aAAA,YAAA;AACA,aAAA,UAAA;AACA,aAAA,oBAAA;AACA,aAAA,oBAAA;;KACD;;;;;;;AAwBD,MAAa,kBAET;AAIJ,MAAa,aAAa;;AAE1B,MAAa,0BAA0B;AACvC,MAAa,mBAAmB;;;;;;;;AAQhC,MAAa,4BACX;AACF,MAAa,mBAAmB;AAEhC,MAAa,oBAAoB;AACjC,MAAa,sBAAsB;AACnC,MAAa,8BACX;AACF,MAAa,uBAAuB;;AAGpC,MAAa,yBACX;;AAEF,MAAa,wBAAwB;;;;;AAMrC,SAAgB,iBAAiB,UAA2B;AAC1D,QAAO,WAAW,wBAAwB;;AAK5C,MAAa,6CAA6C;AAC1D,MAAa,qBAAqB;AAClC,MAAa,qBAAqB;AAIlC,MAAa,cAAc;CAAC;CAAM;CAAM;CAAM;CAAM;CAAM;CAAK;AAC/D,MAAa,uBAAuB;AACpC,MAAa,uBAAuB;AACpC,MAAa,wBAAwB;AACrC,MAAa,0BAA0B;AACvC,MAAa,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;AAwBrC,MAAa,6BAA6B;CACxC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;;;;;;;;;;;;;;;;;AAsBD,MAAa,sBAAsB;CACjC,GAAG;CACH;CACA;CACA;CACA;CACD;AAID,MAAa,gCAAgC;AAC7C,MAAa,2BAA2B;;AAExC,MAAa,+BAA+B;;AAE5C,MAAa,wCACX;;AAEF,MAAa,8CACX;;AAEF,MAAa,sDACX;AAGF,MAAa,mBAAmB;CAC9B;CACA;CACA;CACA;CACD;;AAED,MAAa,oBAAoB,4BAA4B;;;;;;;AAQ7D,SAAgB,0BAA0B,WAA4B;AACpE,QAAO,YACH,GAAG,kBAAkB,aAAa,cAClC;;;AAMN,MAAa,iCAAiC;;AAE9C,MAAa,6BAA6B;;AAK1C,MAAa,uBAAuB;;AAGpC,MAAa,+BAA+B;;;;;;;;;;AAW5C,MAAa,mBAAmB;;;ACjRhC,IAAY,aAAL,yBAAA,YAAA;AACL,YAAA,aAAA;AACA,YAAA,gBAAA;AACA,YAAA,eAAA;AACA,YAAA,aAAA;;KACD;AAED,SAAgB,aAAa,OAAoC;AAC/D,QAAQ,OAAO,OAAO,WAAW,CAAc,SAAS,MAAM;;;;ACJhE,SAAS,aAAa,GAAmD;AACvE,SAAQ,GAAR;EACE,KAAK,OACH,QAAA;EACF,KAAK,QACH,QAAA;EACF,KAAK;EACL,KAAK,WACH,QAAA;EACF,QACE,QAAA;;;AAIN,SAAS,gBAAgB,GAAmD;AAC1E,SAAQ,GAAR;EACE,KAAK,cACH,QAAA;EACF,KAAK;EACL,KAAK,oBACH,QAAA;EACF,KAAK;EACL,KAAK,eACH,QAAA;EACF,QACE,QAAA;;;AAIN,SAASA,YAAU,OAAiC;AAClD,QAAO;EAAE,QAAA;EAAsC;EAAO;;AAGxD,eAAe,yBACb,KACA,YAAY,KACe;AAC3B,KAAI;EACF,MAAM,aAAa,IAAI,iBAAiB;EACxC,MAAM,MAAM,iBAAiB,WAAW,OAAO,EAAE,UAAU;EAC3D,MAAM,MAAM,MAAM,MAAM,KAAK,EAAE,QAAQ,WAAW,QAAQ,CAAC;AAC3D,eAAa,IAAI;AAEjB,MAAI,CAAC,IAAI,GAAI,QAAOA,YAAU,QAAQ,IAAI,SAAS;EAGnD,MAAM,aADQ,MAAM,IAAI,MAAM,EACP,QAAQ,aAAa;AAC5C,SAAO;GACL,QAAQ,aAAa,UAAU;GAC/B,cAAc,aAAa,KAAA;GAC5B;UACM,GAAG;AACV,MAAI,aAAa,SAAS,EAAE,SAAS,aACnC,QAAOA,YAAU,oBAAoB;AACvC,SAAOA,YAAU,aAAa,QAAQ,EAAE,UAAU,gBAAgB;;;AAItE,eAAe,uBACb,KACA,YAAY,KACoB;AAChC,KAAI;EACF,MAAM,aAAa,IAAI,iBAAiB;EACxC,MAAM,MAAM,iBAAiB,WAAW,OAAO,EAAE,UAAU;EAC3D,MAAM,MAAM,MAAM,MAAM,KAAK,EAAE,QAAQ,WAAW,QAAQ,CAAC;AAC3D,eAAa,IAAI;AAEjB,MAAI,CAAC,IAAI,GAAI,QAAOA,YAAU,QAAQ,IAAI,SAAS;EAEnD,MAAM,OAAQ,MAAM,IAAI,MAAM;EAC9B,MAAM,YAAY,KAAK,QAAQ,aAAa;EAC5C,MAAM,UAAU,aAAa,UAAU;EAEvC,MAAM,YAAY,KAAK,cAAc,EAAE,EACpC,KAAK,OAAO;GACX,MAAM,EAAE;GACR,QAAQ,gBAAgB,EAAE,OAAO;GACjC,WAAW,EAAE;GACd,EAAE,CACF,QAAQ,MAAM,EAAE,WAAA,UAAuC;AAE1D,SAAO;GACL,QAAQ,SAAS,SAAS,IAAA,aAAmC;GAC7D,cAAc,aAAa,KAAA;GAC3B,0BAA0B,SAAS,SAAS,IAAI,WAAW,KAAA;GAC5D;UACM,GAAG;AACV,MAAI,aAAa,SAAS,EAAE,SAAS,aACnC,QAAOA,YAAU,oBAAoB;AACvC,SAAOA,YAAU,aAAa,QAAQ,EAAE,UAAU,gBAAgB;;;AAQtE,MAAa,6BACX,yBAAyB,+CAA+C;AAE1E,MAAa,0BACX,yBAAyB,kDAAkD;AAE7E,MAAa,8BACX,yBAAyB,8CAA8C;AAEzE,MAAa,gCACX,uBAAuB,+CAA+C;AAExE,MAAa,qCACX,yBACE,sDACD;AAEH,MAAa,uCAET,uBACE,uDACD;;;ACpHL,SAAS,kBAAkB,QAAqC;AAC9D,SAAQ,QAAR;EACE,KAAK,cACH,QAAA;EACF,KAAK;EACL,KAAK,uBACH,QAAA;EACF,QACE,QAAA;;;AAIN,SAAS,mBAAmB,QAAqC;AAC/D,SAAQ,QAAR;EACE,KAAK,cACH,QAAA;EACF,KAAK,cACH,QAAA;EACF,KAAK;EACL,KAAK,uBACH,QAAA;EACF,QACE,QAAA;;;;;;;;;;;;;;;;;AAkBN,SAAS,UAAU,OAAe,MAA4C;AAC5E,QAAO;EACL,QACE,SAAS,SAAA,SAAA;EAGX;EACD;;AAGH,MAAM,qBAAqB;AAE3B,eAAe,mBACb,YAAY,KAC+D;AAC3E,KAAI;EACF,MAAM,aAAa,IAAI,iBAAiB;EACxC,MAAM,MAAM,iBAAiB,WAAW,OAAO,EAAE,UAAU;EAC3D,MAAM,MAAM,MAAM,MAAM,oBAAoB,EAAE,QAAQ,WAAW,QAAQ,CAAC;AAC1E,eAAa,IAAI;AAEjB,MAAI,CAAC,IAAI,IAAI;GACX,MAAM,MAAM,UAAU,QAAQ,IAAI,UAAU,OAAO;AACnD,UAAO;IAAE,SAAS;IAAK,YAAY;IAAK;;EAI1C,MAAM,aADQ,MAAM,IAAI,MAAM,EACP,qBAAqB,EAAE;AAE9C,MAAI,UAAU,WAAW,EACvB,QAAO;GACL,SAAS,EAAE,QAAA,WAAqC;GAChD,YAAY,EAAE,QAAA,WAAqC;GACpD;EAGH,IAAI,eAAA;EACJ,MAAM,WAA8B,EAAE;AAEtC,OAAK,MAAM,YAAY,WAAW;AAEhC,OADe,kBAAkB,SAAS,qBAAqB,KAAA,OAE7D,gBAAA;AAGF,QAAK,MAAM,QAAQ,SAAS,uBAAuB,EAAE,EAAE;IACrD,MAAM,aAAa,mBAAmB,KAAK,eAAe;AAC1D,QAAI,eAAA,UACF,UAAS,KAAK;KACZ,MAAM,KAAK,aACP,GAAG,KAAK,WAAW,KAAK,KAAK,SAC7B,KAAK;KACT,QAAQ;KACR,WAAW,KAAK;KACjB,CAAC;;;AAKR,SAAO;GACL,SAAS,EAAE,QAAQ,cAAc;GACjC,YAAY;IACV,QACE,SAAS,SAAS,IAAA,aAAmC;IACvD,0BAA0B,SAAS,SAAS,IAAI,WAAW,KAAA;IAC5D;GACF;UACM,GAAG;AACV,MAAI,aAAa,SAAS,EAAE,SAAS,cAAc;GACjD,MAAM,MAAM,UAAU,qBAAqB,UAAU;AACrD,UAAO;IAAE,SAAS;IAAK,YAAY;IAAK;;EAE1C,MAAM,MAAM,UACV,aAAa,QAAQ,EAAE,UAAU,iBACjC,UACD;AACD,SAAO;GAAE,SAAS;GAAK,YAAY;GAAK;;;AAI5C,IAAI,SAGQ;AAEZ,SAAS,mBAAmB;AAC1B,KAAI,CAAC,OAAQ,UAAS,oBAAoB;AAC1C,QAAO;;AAOT,MAAa,4BAA4B,aACtC,MAAM,kBAAkB,EAAE;AAE7B,MAAa,8BACX,aACG,MAAM,kBAAkB,EAAE;;;AC9I/B,SAAS,mBAAmB,OAAe,UAAoC;AAC7E,QAAO;EACL,QAAA;EACA;EACA,cAAc,WAAW,IAAI,YAAY,aAAa,KAAA;EACvD;;AAGH,SAAS,WAAW,OAAiC;AACnD,QAAO;EAAE,QAAA;EAAkC;EAAO;;AAQpD,MAAM,oBAAoB,CAAC,KAAK,IAAK;AAErC,eAAe,aACb,KACA,WACA,UAIA;CACA,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,MAAM,iBAAiB,WAAW,OAAO,EAAE,UAAU;AAC3D,KAAI;EACF,MAAM,MAAM,MAAM,MAAM,KAAK;GAAE,QAAQ,WAAW;GAAQ;GAAU,CAAC;AACrE,eAAa,IAAI;AACjB,SAAO;GAAE,MAAM;GAAY;GAAK;UACzB,GAAG;AACV,eAAa,IAAI;EACjB,MAAM,MAAM,aAAa,QAAQ,oBAAI,IAAI,MAAM,gBAAgB;AAC/D,SAAO;GAAE,MAAM;GAAS,OAAO;GAAK,UAAU,IAAI,SAAS;GAAc;;;AAI7E,eAAe,oBACb,KACA,YAAY,KACZ,oBAAiD,MAAM,MAAM,KAC7D,WAA0C,UACf;CAW3B,IAAI,iBAAgC;CACpC,IAAI,YAAY;CAChB,IAAI,WAAW;AAEf,MAAK,IAAI,IAAI,GAAG,KAAK,kBAAkB,QAAQ,KAAK;AAClD,MAAI,IAAI,GAAG;GACT,MAAM,OAAO,kBAAkB,IAAI;AACnC,aACE,yBAAyB,EAAE,GAAG,kBAAkB,OAAO,OAAO,IAAI,MAAM,KAAK,YAAY,UAAU,GACpG;AACD,SAAM,IAAI,SAAS,MAAM,WAAW,GAAG,KAAK,CAAC;;AAE/C;EAEA,MAAM,UAAU,MAAM,aAAa,KAAK,WAAW,SAAS;AAE5D,MAAI,QAAQ,SAAS,YAAY;GAC/B,MAAM,MAAM,QAAQ;AACpB,OAAI,iBAAiB,IAAI,OAAO,EAAE;IAChC,MAAM,SAA2B;KAC/B,QAAA;KACA,cACE,WAAW,IACP,QAAQ,IAAI,OAAO,aAAa,SAAS,KACzC,QAAQ,IAAI;KACnB;AACD,cACE,uBAAuB,IAAI,MAAM,OAAO,OAAA,IACjC,OAAO,aAAa,GAC5B;AACD,WAAO;;AAET,oBAAiB,IAAI;AACrB,eAAY,QAAQ,IAAI;AACxB;;AAGF,cAAY,QAAQ,WAChB,2BAA2B,UAAU,MACrC,QAAQ,MAAM;;CAGpB,MAAM,SACJ,mBAAmB,OACf,WAAW,QAAQ,eAAe,aAAa,SAAS,GAAG,GAC3D,mBAAmB,WAAW,SAAS;AAC7C,WACE,uBAAuB,IAAI,MAAM,OAAO,OAAA,aACxB,SAAS,IAAI,OAAO,MAAM,GAC3C;AACD,QAAO;;AAGT,MAAa,8BACX,oBAAoB,2CAA2C;AAEjE,MAAa,uBACX,oBACE,4BACA,MAEC,MAAM,KAAK,OAAO,IAAI,KACvB,SACD;AAEH,MAAa,kCACX,oBAAoB,GAAG,uBAAuB,kBAAkB;;;ACpHlE,MAAa,iBAAiD;CAC5D,WAAW;CACX,gBAAgB;CAChB,mBAAmB;CACnB,QAAQ;CACR,YAAY;CACZ,eAAe;CACf,mBAAmB;CACnB,sBAAsB;CACtB,YAAY;CACZ,KAAK;CACL,gBAAgB;CACjB;;;;;AAiBD,MAAa,kCAAyD;CACpE,eAAe;EACb;EACA;EACA;EACA;EACA;EACD;CACD,mBAAmB,CAAC,YAAY;CACjC;;;;;;;AAQD,MAAa,iCAAwD,EACnE,eAAe,CAAC,kBAAkB,aAAa,EAChD;AAMD,eAAsB,2BAAuD;CAC3E,MAAM,CACJ,WACA,gBACA,mBACA,QACA,YACA,eACA,mBACA,sBACA,YACA,KACA,kBACE,MAAM,QAAQ,IAAI;EACpB,sBAAsB;EACtB,2BAA2B;EAC3B,6BAA6B;EAC7B,mBAAmB;EACnB,uBAAuB;EACvB,yBAAyB;EACzB,8BAA8B;EAC9B,gCAAgC;EAChC,uBAAuB;EACvB,gBAAgB;EAChB,2BAA2B;EAC5B,CAAC;AAeF,QAAO,6BAb2B;EAChC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAC0C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkC7C,SAAgB,6BACd,QACmB;CACnB,MAAM,gBAAgB,OAAO,eAAe;AAK5C,KAAI,EAHF,kBAAA,UACA,kBAAA,YAEuB,QAAO;CAEhC,MAAM,WAAW,MACf,EAAE,WAAA,kBACE;EACE,GAAG;EACH,QAAA;EACA,OAAO,EAAE,QACL,GAAG,EAAE,MAAM,kCACX;EACL,GACD;AAEN,QAAO;EACL,GAAG;EACH,YAAY,QAAQ,OAAO,WAAW;EACtC,KAAK,QAAQ,OAAO,IAAI;EACzB;;AAmBH,SAAS,eAAe,OAAe,GAA6B;CAClE,MAAM,QAAQ,CAAC,GAAG,MAAM,IAAI,EAAE,SAAS;AACvC,KAAI,EAAE,aAAc,OAAM,KAAK,aAAa,EAAE,eAAe;AAC7D,KAAI,EAAE,MAAO,OAAM,KAAK,EAAE,MAAM;AAChC,QAAO,MAAM,KAAK,MAAM;;AAG1B,MAAM,sBAAsB;AAE5B,SAAS,mBAAmB,OAAe,GAAkC;CAC3E,MAAM,WAAW,EAAE;AACnB,KAAI,CAAC,YAAY,SAAS,WAAW,EACnC,QAAO,GAAG,MAAM;CAClB,MAAM,QAAQ,SACX,MAAM,GAAG,oBAAoB,CAC7B,KAAK,MAAM,GAAG,EAAE,KAAK,IAAI,EAAE,OAAO,GAAG;CACxC,MAAM,SACJ,SAAS,SAAS,sBACd,MAAM,SAAS,SAAS,oBAAoB,SAC5C;AACN,QAAO,GAAG,MAAM,wBAAwB,MAAM,KAAK,KAAK,GAAG;;AAO7D,MAAM,uBAAuB;AAE7B,eAAsB,wBACpB,SAAgC,iCACA;AAChC,KAAI;EACF,MAAM,SAAS,MAAM,QAAQ,KAAK,CAChC,0BAA0B,EAC1B,IAAI,SAA4B,YAC9B,iBACQ,QAAQ,WAAW,yBAAyB,CAAC,EACnD,qBACD,CACF,CACF,CAAC;EAEF,MAAM,UAAoB,EAAE;AAE5B,OAAK,MAAM,OAAO,OAAO,KAAK,OAAO,EAAsB;GACzD,MAAM,SAAS,OAAO;GACtB,MAAM,QAAQ,eAAe;AAE7B,WAAQ,KAAK,eAAe,OAAO,OAAO,CAAC;AAE3C,OAAI,8BAA8B,OAChC,SAAQ,KAAK,mBAAmB,OAAO,OAAO,CAAC;;EAInD,MAAM,eAAe,uBAAuB,QAAQ,OAAO;AAC3D,MAAI,aAAa,SAAS,GAAG;AAK3B,aAAU,+BAJc,aAAa,KAAK,QAAQ;IAChD,MAAM,IAAI,OAAO;AACjB,WAAO,GAAG,IAAI,IAAI,EAAE,SAAS,EAAE,QAAQ,MAAM,EAAE,UAAU,GAAG;KAC5D,CACuD,KAAK,KAAK,GAAG;AACtE,UAAO;IAAE,UAAA;IAA8B;IAAQ;IAAS;;AAO1D,MAJoB,OAAO,OAAO,OAAO,CAAC,MACvC,MAAM,EAAE,WAAA,UACV,CAGC,QAAO;GAAE,UAAA;GAA2C;GAAQ;GAAS;AAGvE,SAAO;GAAE,UAAA;GAA+B;GAAQ;GAAS;UAClD,KAAK;AACZ,YACE,0BAA0B,eAAe,QAAQ,IAAI,UAAU,MAChE;AAED,SAAO;GACL,UAAA;GACA,QAAQ,WAAW,mBAAmB;GACtC,SAAS,CAAC,uDAAuD;GAClE;;;;AASL,MAAM,iBAAmC;CACvC;CACA;CACA;CACD;;;;;;;;;AAUD,SAAgB,uBACd,QACA,SAAgC,iCACd;AAClB,QAAQ,OAAO,KAAK,OAAO,CAAsB,QAAQ,QAAQ;AAC/D,MAAI,eAAe,SAAS,IAAI,CAAE,QAAO;EACzC,MAAM,SAAS,OAAO;AACtB,MACE,OAAO,cAAc,SAAS,IAAI,KACjC,OAAO,WAAA,UACN,OAAO,WAAA,iBAET,QAAO;AAET,OACG,OAAO,qBAAqB,EAAE,EAAE,SAAS,IAAI,IAC9C,OAAO,WAAA,UAEP,QAAO;AAET,SAAO;GACP;;;AAIJ,SAAS,WAAW,OAAkC;CACpD,MAAM,OAAyB;EAC7B,QAAA;EACA;EACD;AACD,QAAO;EACL,WAAW;EACX,gBAAgB;EAChB,mBAAmB,EAAE,GAAG,MAAM;EAC9B,QAAQ;EACR,YAAY;EACZ,eAAe,EAAE,GAAG,MAAM;EAC1B,mBAAmB;EACnB,sBAAsB,EAAE,GAAG,MAAM;EACjC,YAAY;EACZ,KAAK;EACL,gBAAgB;EACjB;;;;ACnUH,IAAa,YAAb,MAA2C;CACzC,MAAM,SAAuB;AAC3B,UAAQ,IAAI,MAAM,UAAU;;CAG9B,MAAM,SAAuB;AAC3B,UAAQ,IAAI,MAAM,UAAU;;CAG9B,WAAW,MAAuB;AAChC,UAAQ,IAAI,MAAM,KAAK,WAAW,mBAAmB;AACrD,MAAI,KAAK,KAAM,SAAQ,IAAI,MAAM,KAAK,OAAO;AAC7C,MAAI,KAAK,QAAS,SAAQ,IAAI,YAAY,KAAK,UAAU;;CAG3D,wBAAuC;AACrC,SAAO,QAAQ,SAAS;;CAG1B,iBAAgC;AAE9B,SAAO,QAAQ,SAAS;;CAG1B,OAAO,SAAuB;AAC5B,UAAQ,IAAI,MAAM,UAAU;;CAG9B,MAAM;EACJ,KAAK,SAAuB;AAC1B,WAAQ,IAAI,MAAM,UAAU;;EAE9B,KAAK,SAAuB;AAC1B,WAAQ,IAAI,MAAM,UAAU;;EAE9B,MAAM,SAAuB;AAC3B,WAAQ,IAAI,MAAM,UAAU;;EAE9B,QAAQ,SAAuB;AAC7B,WAAQ,IAAI,MAAM,UAAU;;EAE9B,KAAK,SAAuB;AAC1B,WAAQ,IAAI,MAAM,UAAU;;EAE/B;CAED,KAAK,SAAuB;AAC1B,UAAQ,IAAI,MAAM,UAAU;;CAG9B,UAAyB;AACvB,SAAO;GACL,MAAM,SAAkB;AACtB,QAAI,QAAS,SAAQ,IAAI,MAAM,UAAU;;GAE3C,KAAK,SAAkB;AACrB,QAAI,QAAS,SAAQ,IAAI,MAAM,UAAU;;GAE3C,QAAQ,KAAc;AACpB,QAAI,IAAK,SAAQ,IAAI,MAAM,MAAM;;GAEpC;;CAGH,WAAW,SAAuB;AAChC,UAAQ,IAAI,MAAM,UAAU;;CAG9B,qBAAqB,OAAqB;AACxC,UAAQ,IAAI,iBAAiB,QAAQ;;CAGvC,cAAc,SAAiB,KAAuB;CAItD,YAAY,KAA0B;AACpC,MAAI,KAAK;AACP,WAAQ,IACN,8DACD;AACD,WAAQ,IAAI,MAAM,MAAM;;;CAI5B,gBAAgB,MAA2B;CAI3C,mBAAmB,QAA8C;AAC/D,UAAQ,IAAI,qCAAqC;EACjD,MAAM,eAAe,uBAAuB,OAAO,OAAO;AAC1D,MAAI,aAAa,SAAS,GAAG;AAC3B,WAAQ,IAAI,IAAI;AAChB,WAAQ,IAAI,wBAAwB;AACpC,QAAK,MAAM,OAAO,cAAc;IAC9B,MAAM,SAAS,OAAO,OAAO,KAAK;IAClC,MAAM,QAAQ,OAAO,OAAO,KAAK;IACjC,MAAM,QAAQ,eAAe;IAC7B,MAAM,SAAS,QAAQ,MAAM,UAAU;AACvC,YAAQ,IAAI,UAAU,MAAM,IAAI,SAAS,SAAS;;AAEpD,WAAQ,IAAI,IAAI;;AAElB,OAAK,MAAM,UAAU,OAAO,QAC1B,SAAQ,IAAI,MAAM,SAAS;AAE7B,UAAQ,IACN,6EACD;AACD,SAAO,QAAQ,SAAS;;CAG1B,qBAAqB,QAAqC;AACxD,UAAQ,IAAI,uCAAuC;AACnD,OAAK,MAAM,UAAU,OAAO,QAC1B,SAAQ,IAAI,MAAM,SAAS;;CAI/B,iBAAiB,cAKC;AAChB,SAAO,QAAQ,SAAS;;CAG1B,wBAAyC;AAGvC,SAAO,IAAI,cAAsB,GAE/B;;CAGJ,qBACE,YACA,eACe;AACf,SAAO,QAAQ,SAAS;;CAG1B,gBAAgB,WAAiD;AAC/D,SAAO,QAAQ,uBACb,IAAI,MACF,oHAED,CACF;;CAGH,wBAA8B;CAI9B,cAAc,QAAgC;AAC5C,UAAQ,IAAI,iCAAiC;AAC7C,MAAI,QAAQ,qBAAqB;AAC/B,WAAQ,IACN,0FACD;AACD,WAAQ,IAAI,0BAA0B;SACjC;AACL,WAAQ,IACN,kEACD;AACD,WAAQ,IACN,kHACD;AACD,WAAQ,IACN,iFACD;AACD,WAAQ,IAAI,iCAAiC;AAC7C,WAAQ,IACN,2FACD;;AAEH,MAAI,QAAQ,YACV,SAAQ,IAAI,mBAAmB,OAAO,cAAc;;CAIxD,qBAA2B;EACzB,MAAM,UAAU,KAAK,MAAM,mBAAmB,IAAO;AACrD,UAAQ,IACN,sDAAsD,QAAQ,WAC/D;AACD,UAAQ,IAAI,0DAA0D;;CAGxE,WAAiB;CAIjB,eAAe,cAAiC;CAIhD,sBAAsB,OAA4B;CAIlD,WAAW,OAA6B;CAKxC,eAAuB;CAEvB,UACE,OACM;EACN,MAAM,YAAY,MAAM,QACrB,MAAM,EAAE,WAAA,YACV,CAAC;EACF,MAAM,SAAS,MAAM,QAAQ,MAAM,EAAE,WAAA,cAAiC;AACtE,MAAI,OAAO,WAAW,EAAG;EACzB,MAAM,SAAS,OAAO,KAAK,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,KAAK,MAAM;EACvE,MAAM,OAAO,OAAO,UAAU,GAAG,MAAM,OAAO,IAAI;AAElD,MAAI,SAAS,KAAK,aAAc;AAChC,OAAK,eAAe;AACpB,UAAQ,IAAI,KAAK;;CAGnB,aAAa,SAA6D;CAI1E,gBAAgB,MAAoB;CAIpC,SAAS,QAAsB;CAI/B,eAAe,MAAoB;CAInC,cAAc,QAA+B;CAI7C,qBAAqB,UAAwB;CAI7C,aAAa,OAAsD;CAInE,oBAAoB,MAAc,QAAuB;CAIzD,oBAAoB,MAAuB;CAK3C,YAAY,SAAgC;AAE1C,SAAO,QAAQ,SAAS;;;;;AC9R5B,IAAI,YAAsB,IAAI,WAAW;AAEzC,SAAgB,QAAkB;AAChC,QAAO;;AAGT,SAAgB,MAAM,IAAoB;AACxC,aAAY;;;;ACXd,MAAM,MAAM,QAAQ,aAAa,UAAU,QAAQ,GAAG;AAEtD,MAAa,kBAAkBC,OAAK,KAAK,qBAAqB;AAC9D,MAAa,wBAAwBA,OAAK,KAAK,gCAAgC;AAC/E,MAAa,0BAA0BA,OACrC,KACA,kCACD;;;;;;;AAOD,SAAgB,qBAAqB,MAAc,YAA4B;CAC7E,MAAM,SAAS,WAAW,SAASC,MAAI,GAAG,aAAa,aAAaA;AACpE,QAAO,KAAK,WAAW,OAAO,GAAG,KAAK,MAAM,OAAO,OAAO,GAAG;;;;ACZ/D,IAAI,cACiD;AACrD,IAAI,qBAAqB;AACzB,IAAI,wBAAwB;AAE5B,SAAS,UAAU,OAAwB;AACzC,KAAI,OAAO,UAAU,SAAU,QAAO;AACtC,KAAI,iBAAiB,MAAO,QAAO,MAAM,SAAS,OAAO,MAAM;AAC/D,KAAI;AAGF,SAAO,KAAK,UAAU,OAAO,MAAM,EAAE,IAAI,QAAQ,OAAO,EAAE,OAAO,GAAG,CAAC;SAC/D;AACN,SAAO,QAAQ,OAAO,EAAE,OAAO,GAAG,CAAC;;;AAIvC,SAAS,WAAW,MAAkC;AACpD,QAAO,KAAK,IAAI,UAAU,CAAC,KAAK,IAAI;;AAGtC,SAAgB,iBAAyB;AACvC,QAAO;;AAGT,SAAgB,iBAAiB,MAGxB;AACP,KAAI,KAAK,SAAS,KAAA,GAAW;AAC3B,gBAAc,KAAK;AACnB,kBAAgB;;AAElB,KAAI,KAAK,YAAY,KAAA,EAAW,sBAAqB,KAAK;;AAG5D,IAAI,gBAAgB;AACpB,IAAI,qBAAqB;AAIzB,SAAS,qBAAqB,KAAoB;AAChD,KAAI,mBAAoB;AACxB,sBAAqB;AAChB,QAAO,2BACT,MAAM,EAAE,gBACP,UAAU,iBACR,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,IAAI,CAAC,EACnD;EACE,QAAQ;EACR,UAAU;EACV,UAAU,QAAQ;EACnB,CACF,CACF,CACA,YAAY,GAEX;;AAKN,SAAS,WAAW,MAAoB;AACtC,KAAI;AACF,iBAAe,aAAa,KAAK;UAC1B,KAAK;AACZ,MAAI,eAAe;AACjB,wBAAqB,IAAI;AACzB;;AAEF,kBAAgB;AAChB,MAAI;AACF,aAAU,KAAK,QAAQ,YAAY,EAAE,EAAE,WAAW,MAAM,CAAC;AACzD,kBAAe,aAAa,KAAK;WAC1B,UAAU;AACjB,wBAAqB,SAAS;;;;AAKpC,SAAgB,kCAAwC;CACtD,MAAM,MAAM,WAAW,yBAAyB;AAChD,KAAI,IACF,kBAAiB,EAAE,MAAM,KAAK,KAAK,KAAK,qBAAqB,EAAE,CAAC;;AAIpE,SAAgB,cAAoB;AAClC,KAAI,CAAC,mBAAoB;CACzB,MAAM,UAAU,IAAI,OAAO,GAAG;AAC9B,YACE,KAAK,QAAQ,yCAAwB,IAAI,MAAM,EAAC,aAAa,CAAC,IAAI,QAAQ,IAC3E;;AAGH,SAAgB,UAAU,GAAG,MAAuB;AAClD,KAAI,CAAC,mBAAoB;AAEzB,YAAW,qBADA,IAAI,MAAM,EAAC,aAAa,CACjB,IAAI,WAAW,KAAK,CAAC,IAAI;;AAG7C,SAAgB,MAAM,GAAG,MAAuB;AAC9C,KAAI,CAAC,sBAAuB;AAC5B,QAAO,CAAC,IAAI,KAAK,WAAW,KAAK,CAAC;;AAGpC,SAAgB,kBAAwB;AACtC,yBAAwB"}

package/dist/pi-2hh_NXKT.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pi-2hh_NXKT.js","names":[],"sources":["../src/lib/agent/runner/harness/pi/completion.ts","../src/lib/agent/runner/harness/pi/index.ts"],"sourcesContent":["import { AgentErrorType } from '@lib/agent/signals';\n\n/** Which completion guard should fail a pi run, or undefined for a clean finish. */\nexport function completionFailure(args: {\n  toolCalls: number;\n  openTasks: boolean;\n}): AgentErrorType | undefined {\n  // No tool call at all — the project was never touched.\n  if (args.toolCalls === 0) return AgentErrorType.NO_PROGRESS;\n  // Acted but left tasks in its own plan unfinished (skill install not required).\n  if (args.openTasks) return AgentErrorType.INCOMPLETE_TASKS;\n  return undefined;\n}\n","/**\n * The `pi` backend — the challenger. Drives pi.dev's coding agent\n * (`@earendil-works/pi-coding-agent`) against the PostHog LLM gateway, behind\n * `wizard-orchestrator`. It owns the agent loop and model transport; prompt\n * assembly, error routing, and the outro stay in `linear.ts`, shared with the\n * `anthropic` control.\n *\n * Transport: the gateway is registered as an `anthropic-messages` provider\n * (same protocol the claude-agent-sdk path uses), bearer auth, Bedrock-fallback\n * + wizard metadata/flag headers, model id matched to `anthropic` for a clean\n * A/B. Security parity (canUseTool + YARA) and skills/MCP discovery are\n * follow-ups (#525, #524 skills) — v1 uses pi's built-in coding tools.\n */\n\nimport fs from 'fs';\nimport path from 'path';\nimport { getUI } from '@ui';\nimport { getLogFilePath, logToFile } from '@utils/debug';\nimport {\n  Harness,\n  Sequence,\n  WIZARD_REMARK_EVENT_NAME,\n  WIZARD_USER_AGENT,\n} from '@lib/constants';\nimport { analytics } from '@utils/analytics';\nimport { AgentErrorType } from '@lib/agent/agent-interface';\nimport { AgentSignals, REMARK_INSTRUCTION } from '@lib/agent/signals';\nimport { AgentOutputSignals } from '@lib/agent/output-signals';\nimport { assembleCommandments } from '../../switchboard/commandments';\nimport { buildGatewayProvider, GATEWAY_PROVIDER } from './gateway';\nimport type {\n  AgentResult,\n  AgentHarness,\n  BackendRunInputs,\n  TaskRunInputs,\n} from '../types';\nimport type { BootstrapResult } from '@lib/agent/runner/shared/types';\nimport type { TaskStore } from './tasks';\nimport { completionFailure } from './completion';\n\n/** Injects the MCP server `instructions` pi-mcp-adapter drops (project env, skill steer, tool domains) into the system prompt, falling back to a bootstrap-derived project block when the warm-connect captured none. */\nfunction piMcpContext(boot: BootstrapResult, instructions?: string): string {\n  if (instructions) {\n    // Heading + verbatim server instructions (see PR #862 for a full sample).\n    return ['', '## PostHog MCP server', instructions].join('\\n');\n  }\n  const project = boot.project?.name\n    ? `${boot.project.name} (id ${boot.credentials.projectId})`\n    : `id ${boot.credentials.projectId}`;\n  // Fallback: a `## PostHog project` block with name/id, host, region.\n  return [\n    '',\n    '## PostHog project',\n    'Your `posthog_exec` calls run against this project:',\n    `- Project: ${project}`,\n    `- Host: ${boot.credentials.host.apiHost}`,\n    `- Region: ${boot.credentials.host.region}`,\n  ].join('\\n');\n}\n\n/**\n * The ONLY environment variables pi's tool subprocesses (bash → npm/pip/…) are\n * allowed to see. Everything else — every secret (POSTHOG_PERSONAL_API_KEY,\n * ANTHROPIC_*, AWS_*), every ambient credential, the parent process's whole env\n * — is dropped before a child is spawned. pi's own gateway auth is programmatic\n * (the access token never lives in env), so a minimal env costs the agent\n * nothing while closing the leak that exposed the key before. Kept to what a\n * package manager genuinely needs to run.\n */\nconst ALLOWED_SUBPROCESS_ENV_KEYS = [\n  'PATH',\n  'HOME',\n  'SHELL',\n  'USER',\n  'LOGNAME',\n  'TMPDIR',\n  'TMP',\n  'TEMP',\n  'TERM',\n  'LANG',\n  'LC_ALL',\n  'LC_CTYPE',\n  'NODE_EXTRA_CA_CERTS',\n  'SSL_CERT_FILE',\n  'SSL_CERT_DIR',\n  'HTTP_PROXY',\n  'HTTPS_PROXY',\n  'NO_PROXY',\n  'http_proxy',\n  'https_proxy',\n  'no_proxy',\n];\n\n/** A fresh subprocess env holding only the allowlisted keys present in process.env. */\nexport function buildScrubbedEnv(): NodeJS.ProcessEnv {\n  const env: NodeJS.ProcessEnv = {};\n  for (const key of ALLOWED_SUBPROCESS_ENV_KEYS) {\n    const value = process.env[key];\n    if (value !== undefined) env[key] = value;\n  }\n  return env;\n}\n\n/**\n * Tag a tool with an execution mode (mutates + returns it). Read-only tools are\n * `parallel` so a single turn that batches independent reads/searches runs them\n * at once; mutating/install tools are `sequential` so a batch never races writes\n * or concurrent installs. pi-agent-core runs a batch in parallel only when no\n * tool in it is `sequential`.\n */\nexport function withMode<T>(tool: T, mode: 'sequential' | 'parallel'): T {\n  (tool as { executionMode?: 'sequential' | 'parallel' }).executionMode = mode;\n  return tool;\n}\n\n/** Pull plain text out of a pi AgentMessage (content is text/image blocks). */\nexport function extractText(message: unknown): string {\n  const content = (message as { content?: unknown })?.content;\n  if (typeof content === 'string') return content;\n  if (Array.isArray(content)) {\n    return content\n      .filter((c): c is { type: string; text: string } => {\n        const block = c as { type?: string; text?: unknown };\n        return block?.type === 'text' && typeof block.text === 'string';\n      })\n      .map((c) => c.text)\n      .join('');\n  }\n  return '';\n}\n\n/**\n * Surface `[DASHBOARD_URL]` / `[NOTEBOOK_URL]` markers the agent prints (after\n * the MCP creates them) into the outro link, mirroring the anthropic path's\n * signal parsing (#9). The marker carries the URL the MCP returned.\n */\nexport function applyOutroMarkers(textBlock: string): void {\n  const markers: Array<[string, (url: string) => void]> = [\n    [AgentSignals.DASHBOARD_URL, (url) => getUI().setDashboardUrl(url)],\n    [AgentSignals.NOTEBOOK_URL, (url) => getUI().setNotebookUrl(url)],\n  ];\n  for (const [marker, apply] of markers) {\n    const idx = textBlock.indexOf(marker);\n    if (idx === -1) continue;\n    const url = textBlock\n      .slice(idx + marker.length)\n      .trim()\n      .split(/\\s/)[0];\n    if (url) apply(url);\n  }\n}\n\n/**\n * The text of the last `[STATUS] …` line in a block, if any. Last wins so the\n * spinner shows the most recent action when a turn prints several.\n */\nexport function lastStatusLine(textBlock: string): string | undefined {\n  let status: string | undefined;\n  for (const line of textBlock.split('\\n')) {\n    const idx = line.indexOf(AgentSignals.STATUS);\n    if (idx !== -1) {\n      status = line.slice(idx + AgentSignals.STATUS.length).trim();\n    }\n  }\n  return status || undefined;\n}\n\n/** Cap on completion-guard re-prompts while tasks remain open (see the run loop). */\nconst MAX_CONTINUE_NUDGES = 20;\n\n/** Nudge re-sent when the agent stops early with tasks still open. */\nconst CONTINUE_INSTRUCTION =\n  'You still have open tasks in your list (not all are marked `completed`). Do not stop — pick up the next `in_progress` or `pending` task and keep working until every task is `completed`. Continue now.';\n\n/** True while any task in the store is not yet `completed`. */\nfunction hasOpenTasks(store: TaskStore): boolean {\n  for (const t of store.values()) if (t.status !== 'completed') return true;\n  return false;\n}\n\nexport const piBackend: AgentHarness = {\n  name: Harness.pi,\n\n  async run(inputs: BackendRunInputs): Promise<AgentResult> {\n    const { session, boot, prompt, spinner, config, programConfig } = inputs;\n    const modelId = inputs.model;\n\n    // Init banner (parity #5).\n    getUI().log.step('Initializing Wizard agent...');\n    getUI().log.step(`Verbose logs: ${getLogFilePath()}`);\n    getUI().log.success(\"Agent initialized. Let's get cooking!\");\n\n    spinner.start(config.spinnerMessage ?? 'Customizing your PostHog setup...');\n\n    // Same `agent completed`/`agent aborted` shape as anthropic.\n    const startTime = Date.now();\n    const signals = new AgentOutputSignals();\n    let assistantTurns = 0;\n    // Tool calls across the whole run. Zero means the agent only ever produced\n    // text and never acted — a no-op that leaves the project untouched.\n    let toolCalls = 0;\n    const runDurations = () => {\n      const durationMs = Date.now() - startTime;\n      return {\n        duration_ms: durationMs,\n        duration_seconds: Math.round(durationMs / 1000),\n      };\n    };\n    const captureAborted = () =>\n      analytics.wizardCapture('agent aborted', {\n        ...runDurations(),\n        model: modelId,\n      });\n\n    try {\n      const {\n        createAgentSession,\n        DefaultResourceLoader,\n        SessionManager,\n        AuthStorage,\n        ModelRegistry,\n        getAgentDir,\n        createLsToolDefinition,\n        createFindToolDefinition,\n        createGrepToolDefinition,\n        createBashToolDefinition,\n        createReadToolDefinition,\n        createEditToolDefinition,\n        createWriteToolDefinition,\n      } = await import('@earendil-works/pi-coding-agent');\n\n      // the claude-agent-sdk path. The provider spec is shared with the\n      // orchestrator's per-task sessions (gateway.ts).\n      const { provider, caps } = buildGatewayProvider({\n        gatewayUrl: boot.credentials.host.gatewayUrl,\n        accessToken: boot.credentials.accessToken,\n        wizardMetadata: boot.wizardMetadata,\n        wizardFlags: boot.wizardFlags,\n        modelId,\n        effort: inputs.thinkingLevel,\n      });\n      const registry = ModelRegistry.inMemory(AuthStorage.create());\n      registry.registerProvider(GATEWAY_PROVIDER, provider as never);\n\n      const model = registry.find(GATEWAY_PROVIDER, modelId);\n      if (!model) {\n        return {\n          error: AgentErrorType.API_ERROR,\n          message: 'pi: gateway model could not be resolved',\n        };\n      }\n\n      // System prompt = wizard commandments. Skip project context files /\n      // user extensions / skills so the run is hermetic; skills discovery is a\n      // follow-up (#524).\n      //\n      // Fail-closed security (#525): an extension intercepts EVERY tool call —\n      // built-in and custom — and reuses the anthropic policy (canUseTool\n      // allowlist + .env fencing + YARA). `noExtensions: true` only suppresses\n      // disk-discovered extensions; explicit `extensionFactories` still load,\n      // so the fence is on while the target project can't inject its own.\n      // Shared flag: true while a wizard_ask overlay is open. The ask tool\n      // flips it; the security gate reads it to block Write/Edit meanwhile.\n      const askState = { pending: false };\n\n      const { createSecurityExtension } = await import('./security');\n      const security = createSecurityExtension({\n        disallowedTools: programConfig.disallowedTools,\n        getWizardAskPending: () => askState.pending,\n        triageProvider: boot.triageProvider,\n        // Where pi's bash runs; the rm allowance is confined to this tree.\n        workingDirectory: session.installDir,\n      });\n\n      // Pay warlock's WASM-init + rule-compile cost now, off the tool-call\n      // path, so the first scanned call doesn't eat cold-start latency.\n      const { prewarmYaraScanner } = await import('@lib/yara-hooks');\n      void prewarmYaraScanner();\n\n      // Wire the real PostHog MCP into pi (#10): load pi's MCP adapter and point\n      // it at the hosted MCP the anthropic path uses, so dashboards/insights are\n      // created through the sanctioned MCP. Best-effort — if it can't load or\n      // connect, the run continues (minus the dashboard step) rather than failing\n      // the whole integration. The security factory is always first.\n      const extensionFactories = [security.factory] as Array<\n        (pi: unknown) => void\n      >;\n      let mcpCleanup: (() => void) | undefined;\n      let mcpInstructions: string | undefined;\n      try {\n        const { setupPostHogMcp, fetchInstructions } = await import('./mcp');\n        // Overlaps the network handshake with the adapter's jiti load.\n        const instructionsPromise = fetchInstructions(\n          boot.credentials.host.mcpUrl,\n          boot.credentials.accessToken,\n          WIZARD_USER_AGENT,\n        );\n        const mcp = await setupPostHogMcp({\n          mcpUrl: boot.credentials.host.mcpUrl,\n          accessToken: boot.credentials.accessToken,\n          userAgent: WIZARD_USER_AGENT,\n        });\n        extensionFactories.push(mcp.extensionFactory);\n        mcpCleanup = mcp.cleanup;\n        mcpInstructions = await instructionsPromise;\n      } catch (err) {\n        logToFile(`[pi] PostHog MCP setup skipped: ${String(err)}`);\n        analytics.wizardCapture('mcp setup failed', {\n          harness: 'pi',\n          scope: 'run',\n          error: String(err).slice(0, 300),\n        });\n      }\n\n      const resourceLoader = new DefaultResourceLoader({\n        cwd: session.installDir,\n        agentDir: getAgentDir(),\n        systemPrompt:\n          assembleCommandments({\n            program: programConfig.id,\n            sequence: Sequence.linear,\n            harness: Harness.pi,\n            caps: { bash: true, posthogMcp: true },\n          }) +\n          '\\n' +\n          piMcpContext(boot, mcpInstructions),\n        noExtensions: true,\n        noSkills: true,\n        noContextFiles: true,\n        noPromptTemplates: true,\n        noThemes: true,\n        extensionFactories,\n      });\n      await resourceLoader.reload();\n\n      // Wizard capabilities as custom tools (pi has no MCP): skill\n      // discovery/install + fenced .env edits, same names as the MCP server so\n      // the shared prompt is unchanged. pi's built-in Read/Write/Edit/Bash do\n      // the code changes. Loaded lazily — it pulls in typebox (ESM), which must\n      // stay out of the static module graph so CommonJS unit tests can load the\n      // backend seam without parsing it.\n      const { createWizardPiTools } = await import('./tools');\n      const { createWizardPiTaskTools } = await import('./tasks');\n      const { createDispatchAgentTool } = await import('./subagent');\n      // Created once so the run loop can read the store for the completion guard.\n      const wizardTaskTools = createWizardPiTaskTools();\n      // The one bash the agent (and its subagents) may use: every subprocess it\n      // spawns gets a scrubbed env, so no secret or ambient variable reaches an\n      // `npm install`. Shared with the subagent so the lockdown is inherited.\n      const scrubbedBash = withMode(\n        createBashToolDefinition(session.installDir, {\n          spawnHook: (ctx) => ({ ...ctx, env: buildScrubbedEnv() }),\n        }),\n        'sequential',\n      );\n\n      const customTools = [\n        // Built-ins re-registered explicitly. `noTools: 'builtin'` disables pi's\n        // defaults so we can supply the env-scrubbed bash above; read/edit/write\n        // are the stock definitions. Reads run in parallel so a batched turn of\n        // independent reads executes at once; edit/write/bash stay sequential.\n        withMode(createReadToolDefinition(session.installDir), 'parallel'),\n        withMode(createEditToolDefinition(session.installDir), 'sequential'),\n        withMode(createWriteToolDefinition(session.installDir), 'sequential'),\n        scrubbedBash,\n        // Native ls/find/grep so the agent explores with proper tools instead\n        // of fence-blocked `bash {ls/find}` (the profiled retry-spirals came\n        // from this gap). Parallel — exploration batches cleanly.\n        withMode(createLsToolDefinition(session.installDir), 'parallel'),\n        withMode(createFindToolDefinition(session.installDir), 'parallel'),\n        withMode(createGrepToolDefinition(session.installDir), 'parallel'),\n        ...createWizardPiTools({\n          workingDirectory: session.installDir,\n          skillsBaseUrl: boot.skillsBaseUrl,\n          triageProvider: boot.triageProvider,\n          detectPackageManager: config.detectPackageManager,\n          // The host ask bridge — lets interactive programs (self-driving) ask\n          // the user through pi. Threaded from the runner, same path as the\n          // anthropic harness. Absent in CI → the tool errors on call.\n          askBridge: inputs.askBridge,\n          maxQuestions: config.maxQuestions,\n          onAskPendingChange: (pending) => {\n            askState.pending = pending;\n          },\n          // Skip wizard_ask when the program disallows it (bare pi tool names\n          // don't match the MCP-prefixed disallow list at the security gate).\n          disallowedTools: programConfig.disallowedTools,\n        }),\n        // Task/todo tools (#526): render the todo list live in the TUI, parity\n        // with the anthropic path.\n        ...wizardTaskTools.tools,\n        // Controlled subagent dispatch (#526): a nested fenced session with a\n        // read-only toolset and no dispatch_agent of its own, so it can't\n        // escape the fence or recurse.\n        createDispatchAgentTool({\n          model,\n          modelRegistry: registry,\n          cwd: session.installDir,\n          agentDir: getAgentDir(),\n          securityFactory: security.factory as (pi: unknown) => void,\n          bashTool: scrubbedBash,\n          sdk: { createAgentSession, DefaultResourceLoader, SessionManager },\n        }),\n      ];\n\n      const { session: agentSession } = await createAgentSession({\n        model,\n        modelRegistry: registry,\n        // Reasoning effort from the switchboard capability matrix (undefined =\n        // pi's default). Sent as `reasoning_effort` for openai-completions.\n        thinkingLevel: caps.thinkingLevel,\n        cwd: session.installDir,\n        sessionManager: SessionManager.inMemory(session.installDir),\n        resourceLoader,\n        // Disable the default built-in tools; `customTools` re-registers\n        // read/edit/write + an env-scrubbed bash, so no subprocess inherits the\n        // host env. Custom + extension tools stay enabled.\n        noTools: 'builtin',\n        customTools,\n      });\n\n      // Fire the extension lifecycle — what interactive mode does via\n      // rebindCurrentSession. createAgentSession builds the session but does not\n      // emit session_start on its own, and the MCP adapter connects on that\n      // event; without this its tools report \"MCP not initialized\".\n      await agentSession.bindExtensions({});\n\n      // Map pi events onto the run spinner + the log file, mirroring the\n      // anthropic path's log shape (assistant turns + tool I/O) and driving the\n      // single run spinner with one stable status at a time (no overlap).\n      const unsubscribe = agentSession.subscribe((event) => {\n        switch (event.type) {\n          case 'message_end': {\n            // User prompts also emit message_end; only assistant turns count.\n            if ((event.message as { role?: string })?.role !== 'assistant') {\n              break;\n            }\n            assistantTurns += 1;\n            const assistant = extractText(event.message).trim();\n            if (assistant) {\n              logToFile(`[pi] assistant: ${assistant.slice(0, 1000)}`);\n              applyOutroMarkers(assistant);\n              // Surface [STATUS] lines into the live spinner + status history,\n              // mirroring the anthropic path — pi otherwise drops them.\n              const statusText = lastStatusLine(assistant);\n              if (statusText) {\n                getUI().pushStatus(statusText);\n                spinner.message(statusText);\n              }\n              for (const line of assistant.split('\\n')) signals.push(line);\n            }\n            break;\n          }\n          case 'tool_execution_start': {\n            toolCalls += 1;\n            const args = JSON.stringify(event.args ?? {}).slice(0, 200);\n            logToFile(`[pi] → ${event.toolName} ${args}`);\n            // Don't surface raw tool names in the spinner — the anthropic path\n            // doesn't, and it reads as noise. The Task panel (syncTodos) is the\n            // visible progress, matching the anthropic presentation.\n            break;\n          }\n          case 'tool_execution_end': {\n            // Log every result in full, matching the anthropic path's\n            // SDK-message logging. Call-only logs make failed runs\n            // undiagnosable: a tool can fail (or return something the model\n            // misreads) with no trace of what came back.\n            logToFile(\n              `[pi] ${event.isError ? '✗' : '←'} ${event.toolName}: ${\n                typeof event.result === 'string'\n                  ? event.result\n                  : JSON.stringify(event.result ?? '')\n              }`,\n            );\n            break;\n          }\n          case 'agent_end': {\n            logToFile(`[pi] agent_end (willRetry=${String(event.willRetry)})`);\n            break;\n          }\n          default:\n            break;\n        }\n      });\n\n      try {\n        // Non-streaming: resolves when the agent run completes. Throws if no\n        // model/api key, or on a transport error.\n        await agentSession.prompt(prompt);\n\n        // Completion guard: pi's prompt() resolves the moment the model returns\n        // a turn with no tool call (e.g. a lone [STATUS] line), even mid-plan.\n        // While tasks remain open and we're under the cap, nudge it to continue.\n        let continueNudges = 0;\n        while (\n          continueNudges < MAX_CONTINUE_NUDGES &&\n          !security.state.criticalViolation &&\n          hasOpenTasks(wizardTaskTools.store)\n        ) {\n          continueNudges += 1;\n          logToFile(\n            `[pi] completion guard: tasks still open, nudge ${continueNudges}/${MAX_CONTINUE_NUDGES}`,\n          );\n          await agentSession.prompt(CONTINUE_INSTRUCTION);\n        }\n\n        // Best-effort remark ask — a failed turn never fails a successful run.\n        if (!security.state.criticalViolation) {\n          try {\n            await agentSession.prompt(REMARK_INSTRUCTION);\n          } catch (err) {\n            logToFile(`[pi] remark request failed: ${String(err)}`);\n          }\n        }\n      } finally {\n        unsubscribe();\n        mcpCleanup?.();\n      }\n\n      // A latched post-scan violation terminates the run as a YARA violation,\n      // matching the anthropic path's AgentErrorType.YARA_VIOLATION.\n      if (security.state.criticalViolation) {\n        spinner.stop('Security violation detected');\n        logToFile(\n          `[pi] terminated: YARA violation (blocked ${security.state.blockedCount} call(s))`,\n        );\n        captureAborted();\n        return { error: AgentErrorType.YARA_VIOLATION };\n      }\n\n      // pi ends a run on any tool-call-less turn, so guard against a hollow\n      // success reaching the outro (nothing done, or stopped mid-plan).\n      const openTasks = hasOpenTasks(wizardTaskTools.store);\n      const failure = completionFailure({ toolCalls, openTasks });\n      if (failure === AgentErrorType.NO_PROGRESS) {\n        spinner.stop('Agent made no changes');\n        logToFile(\n          `[pi] no progress: ${assistantTurns} assistant turn(s), 0 tool calls`,\n        );\n        analytics.wizardCapture('agent no progress', {\n          assistant_turns: assistantTurns,\n        });\n        captureAborted();\n        return { error: failure };\n      }\n      if (failure === AgentErrorType.INCOMPLETE_TASKS) {\n        spinner.stop('Agent stopped before finishing');\n        logToFile('[pi] incomplete: tasks left open');\n        analytics.wizardCapture('agent incomplete tasks', { open_tasks: true });\n        captureAborted();\n        return { error: failure };\n      }\n\n      const remark = signals.remark();\n      if (remark) {\n        analytics.capture(WIZARD_REMARK_EVENT_NAME, { remark });\n      }\n\n      // A failed install_skill is non-fatal — the agent continues best-effort\n      // without the skill — but every such run must be measurable.\n      const skillFailure = signals.skillInstallFailure();\n      if (skillFailure !== undefined) {\n        analytics.wizardCapture('agent continued without skill', {\n          detail: skillFailure,\n        });\n      }\n\n      // The skill plans events into .posthog-events.json then asks to remove it\n      // on completion; pi's `rm` is fence-blocked, so the agent can't — clean it\n      // up host-side rather than leave a stale (often empty) artifact (#15).\n      try {\n        const planFile = path.join(session.installDir, '.posthog-events.json');\n        if (fs.existsSync(planFile)) await fs.promises.rm(planFile);\n      } catch (err) {\n        logToFile(`[pi] .posthog-events.json cleanup skipped: ${String(err)}`);\n      }\n\n      const stats = agentSession.getSessionStats();\n      analytics.wizardCapture('agent completed', {\n        ...runDurations(),\n        model: modelId,\n        num_turns: assistantTurns,\n        // API-reported tokens only; no total_cost_usd — the API returns no\n        // cost, and $ai_generation already prices the run authoritatively.\n        input_tokens: stats.tokens.input,\n        output_tokens: stats.tokens.output,\n        cache_creation_input_tokens: stats.tokens.cacheWrite,\n        cache_read_input_tokens: stats.tokens.cacheRead,\n      });\n      spinner.stop(config.successMessage ?? 'PostHog integration complete');\n      return {};\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      logToFile(`[pi] run error: ${message}`);\n      spinner.stop(config.errorMessage ?? `${config.integrationLabel} failed`);\n      getUI().log.error(`pi backend error: ${message}`);\n      captureAborted();\n\n      const lower = message.toLowerCase();\n      if (lower.includes('rate limit') || lower.includes('429')) {\n        return { error: AgentErrorType.RATE_LIMIT, message };\n      }\n      return { error: AgentErrorType.API_ERROR, message };\n    }\n  },\n\n  // Orchestrator mode: one fresh pi session per seed plan / drained task, with\n  // the in-process queue tools registered as pi custom tools. Lazily imported —\n  // task.ts pulls in typebox (ESM), which must stay out of the static module\n  // graph so CommonJS unit tests can load the backend seam without parsing it.\n  async runTask(inputs: TaskRunInputs): Promise<AgentResult> {\n    const { runPiTask } = await import('./task');\n    return runPiTask(inputs);\n  },\n};\n"],"mappings":";;;;;;;AAGA,SAAgB,kBAAkB,MAGH;AAE7B,KAAI,KAAK,cAAc,EAAG,QAAA;AAE1B,KAAI,KAAK,UAAW,QAAA;;;;;;;;;;;;;;;;;;AC+BtB,SAAS,aAAa,MAAuB,cAA+B;AAC1E,KAAI,aAEF,QAAO;EAAC;EAAI;EAAyB;EAAa,CAAC,KAAK,KAAK;AAM/D,QAAO;EACL;EACA;EACA;EACA,cARc,KAAK,SAAS,OAC1B,GAAG,KAAK,QAAQ,KAAK,OAAO,KAAK,YAAY,UAAU,KACvD,MAAM,KAAK,YAAY;EAOzB,WAAW,KAAK,YAAY,KAAK;EACjC,aAAa,KAAK,YAAY,KAAK;EACpC,CAAC,KAAK,KAAK;;;;;;;;;;;AAYd,MAAM,8BAA8B;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;AAGD,SAAgB,mBAAsC;CACpD,MAAM,MAAyB,EAAE;AACjC,MAAK,MAAM,OAAO,6BAA6B;EAC7C,MAAM,QAAQ,QAAQ,IAAI;AAC1B,MAAI,UAAU,KAAA,EAAW,KAAI,OAAO;;AAEtC,QAAO;;;;;;;;;AAUT,SAAgB,SAAY,MAAS,MAAoC;AACtE,MAAuD,gBAAgB;AACxE,QAAO;;;AAIT,SAAgB,YAAY,SAA0B;CACpD,MAAM,UAAW,SAAmC;AACpD,KAAI,OAAO,YAAY,SAAU,QAAO;AACxC,KAAI,MAAM,QAAQ,QAAQ,CACxB,QAAO,QACJ,QAAQ,MAA2C;EAClD,MAAM,QAAQ;AACd,SAAO,OAAO,SAAS,UAAU,OAAO,MAAM,SAAS;GACvD,CACD,KAAK,MAAM,EAAE,KAAK,CAClB,KAAK,GAAG;AAEb,QAAO;;;;;;;AAQT,SAAgB,kBAAkB,WAAyB;CACzD,MAAM,UAAkD,CACtD,CAAC,aAAa,gBAAgB,QAAQ,OAAO,CAAC,gBAAgB,IAAI,CAAC,EACnE,CAAC,aAAa,eAAe,QAAQ,OAAO,CAAC,eAAe,IAAI,CAAC,CAClE;AACD,MAAK,MAAM,CAAC,QAAQ,UAAU,SAAS;EACrC,MAAM,MAAM,UAAU,QAAQ,OAAO;AACrC,MAAI,QAAQ,GAAI;EAChB,MAAM,MAAM,UACT,MAAM,MAAM,OAAO,OAAO,CAC1B,MAAM,CACN,MAAM,KAAK,CAAC;AACf,MAAI,IAAK,OAAM,IAAI;;;;;;;AAQvB,SAAgB,eAAe,WAAuC;CACpE,IAAI;AACJ,MAAK,MAAM,QAAQ,UAAU,MAAM,KAAK,EAAE;EACxC,MAAM,MAAM,KAAK,QAAQ,aAAa,OAAO;AAC7C,MAAI,QAAQ,GACV,UAAS,KAAK,MAAM,MAAM,aAAa,OAAO,OAAO,CAAC,MAAM;;AAGhE,QAAO,UAAU,KAAA;;;AAInB,MAAM,sBAAsB;;AAG5B,MAAM,uBACJ;;AAGF,SAAS,aAAa,OAA2B;AAC/C,MAAK,MAAM,KAAK,MAAM,QAAQ,CAAE,KAAI,EAAE,WAAW,YAAa,QAAO;AACrE,QAAO;;AAGT,MAAa,YAA0B;CACrC,MAAA;CAEA,MAAM,IAAI,QAAgD;EACxD,MAAM,EAAE,SAAS,MAAM,QAAQ,SAAS,QAAQ,kBAAkB;EAClE,MAAM,UAAU,OAAO;AAGvB,SAAO,CAAC,IAAI,KAAK,+BAA+B;AAChD,SAAO,CAAC,IAAI,KAAK,iBAAiB,gBAAgB,GAAG;AACrD,SAAO,CAAC,IAAI,QAAQ,wCAAwC;AAE5D,UAAQ,MAAM,OAAO,kBAAkB,oCAAoC;EAG3E,MAAM,YAAY,KAAK,KAAK;EAC5B,MAAM,UAAU,IAAI,oBAAoB;EACxC,IAAI,iBAAiB;EAGrB,IAAI,YAAY;EAChB,MAAM,qBAAqB;GACzB,MAAM,aAAa,KAAK,KAAK,GAAG;AAChC,UAAO;IACL,aAAa;IACb,kBAAkB,KAAK,MAAM,aAAa,IAAK;IAChD;;EAEH,MAAM,uBACJ,UAAU,cAAc,iBAAiB;GACvC,GAAG,cAAc;GACjB,OAAO;GACR,CAAC;AAEJ,MAAI;GACF,MAAM,EACJ,oBACA,uBACA,gBACA,aACA,eACA,aACA,wBACA,0BACA,0BACA,0BACA,0BACA,0BACA,8BACE,MAAM,OAAO;GAIjB,MAAM,EAAE,UAAU,SAAS,qBAAqB;IAC9C,YAAY,KAAK,YAAY,KAAK;IAClC,aAAa,KAAK,YAAY;IAC9B,gBAAgB,KAAK;IACrB,aAAa,KAAK;IAClB;IACA,QAAQ,OAAO;IAChB,CAAC;GACF,MAAM,WAAW,cAAc,SAAS,YAAY,QAAQ,CAAC;AAC7D,YAAS,iBAAiB,kBAAkB,SAAkB;GAE9D,MAAM,QAAQ,SAAS,KAAK,kBAAkB,QAAQ;AACtD,OAAI,CAAC,MACH,QAAO;IACL,OAAA;IACA,SAAS;IACV;GAcH,MAAM,WAAW,EAAE,SAAS,OAAO;GAEnC,MAAM,EAAE,4BAA4B,MAAM,OAAO;GACjD,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,cAAc;IAC/B,2BAA2B,SAAS;IACpC,gBAAgB,KAAK;IAErB,kBAAkB,QAAQ;IAC3B,CAAC;GAIF,MAAM,EAAE,uBAAuB,MAAM,OAAO;AACvC,uBAAoB;GAOzB,MAAM,qBAAqB,CAAC,SAAS,QAAQ;GAG7C,IAAI;GACJ,IAAI;AACJ,OAAI;IACF,MAAM,EAAE,iBAAiB,sBAAsB,MAAM,OAAO;IAE5D,MAAM,sBAAsB,kBAC1B,KAAK,YAAY,KAAK,QACtB,KAAK,YAAY,aACjB,kBACD;IACD,MAAM,MAAM,MAAM,gBAAgB;KAChC,QAAQ,KAAK,YAAY,KAAK;KAC9B,aAAa,KAAK,YAAY;KAC9B,WAAW;KACZ,CAAC;AACF,uBAAmB,KAAK,IAAI,iBAAiB;AAC7C,iBAAa,IAAI;AACjB,sBAAkB,MAAM;YACjB,KAAK;AACZ,cAAU,mCAAmC,OAAO,IAAI,GAAG;AAC3D,cAAU,cAAc,oBAAoB;KAC1C,SAAS;KACT,OAAO;KACP,OAAO,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI;KACjC,CAAC;;GAGJ,MAAM,iBAAiB,IAAI,sBAAsB;IAC/C,KAAK,QAAQ;IACb,UAAU,aAAa;IACvB,cACE,qBAAqB;KACnB,SAAS,cAAc;KACvB,UAAA;KACA,SAAA;KACA,MAAM;MAAE,MAAM;MAAM,YAAY;MAAM;KACvC,CAAC,GACF,OACA,aAAa,MAAM,gBAAgB;IACrC,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,UAAU;IACV;IACD,CAAC;AACF,SAAM,eAAe,QAAQ;GAQ7B,MAAM,EAAE,wBAAwB,MAAM,OAAO;GAC7C,MAAM,EAAE,4BAA4B,MAAM,OAAO;GACjD,MAAM,EAAE,4BAA4B,MAAM,OAAO;GAEjD,MAAM,kBAAkB,yBAAyB;GAIjD,MAAM,eAAe,SACnB,yBAAyB,QAAQ,YAAY,EAC3C,YAAY,SAAS;IAAE,GAAG;IAAK,KAAK,kBAAkB;IAAE,GACzD,CAAC,EACF,aACD;GAED,MAAM,cAAc;IAKlB,SAAS,yBAAyB,QAAQ,WAAW,EAAE,WAAW;IAClE,SAAS,yBAAyB,QAAQ,WAAW,EAAE,aAAa;IACpE,SAAS,0BAA0B,QAAQ,WAAW,EAAE,aAAa;IACrE;IAIA,SAAS,uBAAuB,QAAQ,WAAW,EAAE,WAAW;IAChE,SAAS,yBAAyB,QAAQ,WAAW,EAAE,WAAW;IAClE,SAAS,yBAAyB,QAAQ,WAAW,EAAE,WAAW;IAClE,GAAG,oBAAoB;KACrB,kBAAkB,QAAQ;KAC1B,eAAe,KAAK;KACpB,gBAAgB,KAAK;KACrB,sBAAsB,OAAO;KAI7B,WAAW,OAAO;KAClB,cAAc,OAAO;KACrB,qBAAqB,YAAY;AAC/B,eAAS,UAAU;;KAIrB,iBAAiB,cAAc;KAChC,CAAC;IAGF,GAAG,gBAAgB;IAInB,wBAAwB;KACtB;KACA,eAAe;KACf,KAAK,QAAQ;KACb,UAAU,aAAa;KACvB,iBAAiB,SAAS;KAC1B,UAAU;KACV,KAAK;MAAE;MAAoB;MAAuB;MAAgB;KACnE,CAAC;IACH;GAED,MAAM,EAAE,SAAS,iBAAiB,MAAM,mBAAmB;IACzD;IACA,eAAe;IAGf,eAAe,KAAK;IACpB,KAAK,QAAQ;IACb,gBAAgB,eAAe,SAAS,QAAQ,WAAW;IAC3D;IAIA,SAAS;IACT;IACD,CAAC;AAMF,SAAM,aAAa,eAAe,EAAE,CAAC;GAKrC,MAAM,cAAc,aAAa,WAAW,UAAU;AACpD,YAAQ,MAAM,MAAd;KACE,KAAK,eAAe;AAElB,UAAK,MAAM,SAA+B,SAAS,YACjD;AAEF,wBAAkB;MAClB,MAAM,YAAY,YAAY,MAAM,QAAQ,CAAC,MAAM;AACnD,UAAI,WAAW;AACb,iBAAU,mBAAmB,UAAU,MAAM,GAAG,IAAK,GAAG;AACxD,yBAAkB,UAAU;OAG5B,MAAM,aAAa,eAAe,UAAU;AAC5C,WAAI,YAAY;AACd,eAAO,CAAC,WAAW,WAAW;AAC9B,gBAAQ,QAAQ,WAAW;;AAE7B,YAAK,MAAM,QAAQ,UAAU,MAAM,KAAK,CAAE,SAAQ,KAAK,KAAK;;AAE9D;;KAEF,KAAK,wBAAwB;AAC3B,mBAAa;MACb,MAAM,OAAO,KAAK,UAAU,MAAM,QAAQ,EAAE,CAAC,CAAC,MAAM,GAAG,IAAI;AAC3D,gBAAU,UAAU,MAAM,SAAS,GAAG,OAAO;AAI7C;;KAEF,KAAK;AAKH,gBACE,QAAQ,MAAM,UAAU,MAAM,IAAI,GAAG,MAAM,SAAS,IAClD,OAAO,MAAM,WAAW,WACpB,MAAM,SACN,KAAK,UAAU,MAAM,UAAU,GAAG,GAEzC;AACD;KAEF,KAAK;AACH,gBAAU,6BAA6B,OAAO,MAAM,UAAU,CAAC,GAAG;AAClE;KAEF,QACE;;KAEJ;AAEF,OAAI;AAGF,UAAM,aAAa,OAAO,OAAO;IAKjC,IAAI,iBAAiB;AACrB,WACE,iBAAiB,uBACjB,CAAC,SAAS,MAAM,qBAChB,aAAa,gBAAgB,MAAM,EACnC;AACA,uBAAkB;AAClB,eACE,kDAAkD,eAAe,GAAG,sBACrE;AACD,WAAM,aAAa,OAAO,qBAAqB;;AAIjD,QAAI,CAAC,SAAS,MAAM,kBAClB,KAAI;AACF,WAAM,aAAa,OAAO,mBAAmB;aACtC,KAAK;AACZ,eAAU,+BAA+B,OAAO,IAAI,GAAG;;aAGnD;AACR,iBAAa;AACb,kBAAc;;AAKhB,OAAI,SAAS,MAAM,mBAAmB;AACpC,YAAQ,KAAK,8BAA8B;AAC3C,cACE,4CAA4C,SAAS,MAAM,aAAa,WACzE;AACD,oBAAgB;AAChB,WAAO,EAAE,OAAA,yBAAsC;;GAKjD,MAAM,YAAY,aAAa,gBAAgB,MAAM;GACrD,MAAM,UAAU,kBAAkB;IAAE;IAAW;IAAW,CAAC;AAC3D,OAAI,YAAA,sBAAwC;AAC1C,YAAQ,KAAK,wBAAwB;AACrC,cACE,qBAAqB,eAAe,kCACrC;AACD,cAAU,cAAc,qBAAqB,EAC3C,iBAAiB,gBAClB,CAAC;AACF,oBAAgB;AAChB,WAAO,EAAE,OAAO,SAAS;;AAE3B,OAAI,YAAA,2BAA6C;AAC/C,YAAQ,KAAK,iCAAiC;AAC9C,cAAU,mCAAmC;AAC7C,cAAU,cAAc,0BAA0B,EAAE,YAAY,MAAM,CAAC;AACvE,oBAAgB;AAChB,WAAO,EAAE,OAAO,SAAS;;GAG3B,MAAM,SAAS,QAAQ,QAAQ;AAC/B,OAAI,OACF,WAAU,QAAQ,0BAA0B,EAAE,QAAQ,CAAC;GAKzD,MAAM,eAAe,QAAQ,qBAAqB;AAClD,OAAI,iBAAiB,KAAA,EACnB,WAAU,cAAc,iCAAiC,EACvD,QAAQ,cACT,CAAC;AAMJ,OAAI;IACF,MAAM,WAAW,KAAK,KAAK,QAAQ,YAAY,uBAAuB;AACtE,QAAI,GAAG,WAAW,SAAS,CAAE,OAAM,GAAG,SAAS,GAAG,SAAS;YACpD,KAAK;AACZ,cAAU,8CAA8C,OAAO,IAAI,GAAG;;GAGxE,MAAM,QAAQ,aAAa,iBAAiB;AAC5C,aAAU,cAAc,mBAAmB;IACzC,GAAG,cAAc;IACjB,OAAO;IACP,WAAW;IAGX,cAAc,MAAM,OAAO;IAC3B,eAAe,MAAM,OAAO;IAC5B,6BAA6B,MAAM,OAAO;IAC1C,yBAAyB,MAAM,OAAO;IACvC,CAAC;AACF,WAAQ,KAAK,OAAO,kBAAkB,+BAA+B;AACrE,UAAO,EAAE;WACF,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,aAAU,mBAAmB,UAAU;AACvC,WAAQ,KAAK,OAAO,gBAAgB,GAAG,OAAO,iBAAiB,SAAS;AACxE,UAAO,CAAC,IAAI,MAAM,qBAAqB,UAAU;AACjD,mBAAgB;GAEhB,MAAM,QAAQ,QAAQ,aAAa;AACnC,OAAI,MAAM,SAAS,aAAa,IAAI,MAAM,SAAS,MAAM,CACvD,QAAO;IAAE,OAAA;IAAkC;IAAS;AAEtD,UAAO;IAAE,OAAA;IAAiC;IAAS;;;CAQvD,MAAM,QAAQ,QAA6C;EACzD,MAAM,EAAE,cAAc,MAAM,OAAO;AACnC,SAAO,UAAU,OAAO;;CAE3B"}

package/dist/task-BZ77d7rm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"task-BZ77d7rm.js","names":[],"sources":["../src/lib/agent/runner/harness/pi/task.ts"],"sourcesContent":["/**\n * Orchestrator-mode execution on pi: one fresh pi session per unit of work —\n * the seed plan, or one drained task. The linear pipeline's concerns (skill\n * menu, todo panel, event-plan cleanup) stay in `index.ts`; this module builds\n * the leaner per-task session: gateway model, security fence, the task's\n * allowed coding tools, the wizard env tools, and the in-process orchestrator\n * queue tools.\n *\n * The task's `allowedTools` / `disallowedTools` arrive in the wizard's tool\n * vocabulary (`Read`, `Edit`, `Glob`, …, plus MCP-qualified orchestrator names\n * from `agentRunTools`). pi is where they become real: allowed names decide\n * which pi tool definitions get registered at all, and the disallow list is\n * ALSO handed to the security fence, so a name that never got registered stays\n * blocked even if the model hallucinates it.\n *\n * Loaded lazily from `index.ts` (typebox/ESM constraint, same as tools.ts).\n */\n\nimport { getUI } from '@ui';\nimport { logToFile } from '@utils/debug';\nimport { analytics } from '@utils/analytics';\nimport {\n  Harness,\n  Sequence,\n  WIZARD_REMARK_EVENT_NAME,\n  WIZARD_USER_AGENT,\n} from '@lib/constants';\nimport {\n  queueTools,\n  renderToolInventory,\n} from '@lib/agent/agent-prompt-loader';\nimport { AgentErrorType } from '@lib/agent/agent-interface';\nimport { REMARK_INSTRUCTION } from '@lib/agent/signals';\nimport { AgentOutputSignals } from '@lib/agent/output-signals';\nimport { TaskStatus } from '../../sequence/orchestrator/queue';\nimport type { OrchestratorToolsContext } from '../../sequence/orchestrator/queue-tools';\nimport type { AgentResult, TaskRunInputs } from '../types';\nimport { buildGatewayProvider, GATEWAY_PROVIDER } from './gateway';\nimport { assembleCommandments } from '../../switchboard/commandments';\nimport {\n  applyOutroMarkers,\n  buildScrubbedEnv,\n  extractText,\n  lastStatusLine,\n  withMode,\n} from './index';\n\n/** wizard tool vocabulary → the pi tool definitions it unlocks. */\nconst CODING_TOOL_MAP: Record<string, readonly string[]> = {\n  Read: ['read'],\n  Edit: ['edit'],\n  Write: ['write'],\n  Bash: ['bash'],\n  Glob: ['find', 'ls'],\n  Grep: ['grep'],\n};\n\n/** `mcp__posthog-wizard__enqueue_task` → `enqueue_task`; native names pass through. */\nfunction shortToolName(name: string): string {\n  return name.replace(/^mcp__posthog-wizard__/, '');\n}\n\n/**\n * The pi coding tools a task may use. An empty allow list means \"no\n * restriction\" (mirrors the SDK), so every coding tool registers.\n */\nexport function allowedPiCodingTools(\n  allowedTools: readonly string[] | undefined,\n): Set<string> {\n  const allowed = (allowedTools ?? []).map(shortToolName);\n  const names = allowed.length\n    ? allowed.flatMap((name) => CODING_TOOL_MAP[name] ?? [])\n    : Object.values(CODING_TOOL_MAP).flat();\n  return new Set(names);\n}\n\n/**\n * The orchestrator queue tools this agent gets. Everything not disallowed:\n * the seed's frontmatter disallows `complete_task` (it is not a task), a\n * task's disallows `enqueue_task` (the seed owns the graph).\n */\nexport function allowedOrchestratorTools(\n  disallowedTools: readonly string[] | undefined,\n): Set<string> {\n  return new Set(queueTools(disallowedTools ?? []));\n}\n\n/**\n * The disallow list for the security fence: the wizard-vocabulary names as\n * given (the fence translates pi built-ins to the same vocabulary) plus the\n * short names, so a disallowed orchestrator tool is blocked under the name pi\n * would call it by.\n */\nexport function fenceDisallowList(\n  disallowedTools: readonly string[] | undefined,\n): string[] {\n  const names = disallowedTools ?? [];\n  return [...new Set([...names, ...names.map(shortToolName)])];\n}\n\n/** Nudges when the session returns without the work reaching a terminal state. */\nconst MAX_TASK_NUDGES = 3;\n\nconst TASK_NUDGE =\n  'You have not called complete_task yet. Finish your task now: if the work is done, call complete_task with your handoff; if it cannot be done, call it with status \"failed\" or \"not needed\" and say why.';\n\nconst SEED_NUDGE =\n  'The queue is still empty. Seed it now with enqueue_task calls for the task graph you planned.';\n\n/** Whether this unit of work has reached its terminal state. */\nfunction isSettled(ctx: OrchestratorToolsContext): boolean {\n  if (!ctx.currentTaskId) {\n    // The seed's job is a seeded queue, not a complete_task call.\n    return ctx.store.list().length > 0;\n  }\n  const task = ctx.store.get(ctx.currentTaskId);\n  return (\n    !!task &&\n    (task.status === TaskStatus.Done ||\n      task.status === TaskStatus.Failed ||\n      task.status === TaskStatus.Skipped)\n  );\n}\n\nexport async function runPiTask(inputs: TaskRunInputs): Promise<AgentResult> {\n  const {\n    session,\n    programConfig,\n    boot,\n    prompt,\n    spinner,\n    model: modelId,\n    effort,\n    allowedTools,\n    disallowedTools,\n    orchestrator,\n    spinnerMessage,\n    successMessage,\n    errorMessage,\n    requestRemark,\n    analyticsProperties,\n  } = inputs;\n\n  if (spinnerMessage) spinner.start(spinnerMessage);\n\n  const startTime = Date.now();\n  const signals = new AgentOutputSignals();\n  let assistantTurns = 0;\n  const runDurations = () => {\n    const durationMs = Date.now() - startTime;\n    return {\n      duration_ms: durationMs,\n      duration_seconds: Math.round(durationMs / 1000),\n    };\n  };\n  const captureAborted = () =>\n    analytics.wizardCapture('agent aborted', {\n      ...runDurations(),\n      model: modelId,\n      ...analyticsProperties,\n    });\n\n  try {\n    const sdk = await import('@earendil-works/pi-coding-agent');\n    const {\n      createAgentSession,\n      DefaultResourceLoader,\n      SessionManager,\n      AuthStorage,\n      ModelRegistry,\n      getAgentDir,\n      createLsToolDefinition,\n      createFindToolDefinition,\n      createGrepToolDefinition,\n      createBashToolDefinition,\n      createReadToolDefinition,\n      createEditToolDefinition,\n      createWriteToolDefinition,\n    } = sdk;\n\n    const { provider, caps } = buildGatewayProvider({\n      gatewayUrl: boot.credentials.host.gatewayUrl,\n      accessToken: boot.credentials.accessToken,\n      wizardMetadata: boot.wizardMetadata,\n      wizardFlags: boot.wizardFlags,\n      modelId,\n      // Per-task agents own their effort via the prompt frontmatter, falling\n      // back to the model table.\n      effort,\n    });\n    const registry = ModelRegistry.inMemory(AuthStorage.create());\n    registry.registerProvider(GATEWAY_PROVIDER, provider as never);\n    const model = registry.find(GATEWAY_PROVIDER, modelId);\n    if (!model) {\n      return {\n        error: AgentErrorType.API_ERROR,\n        message: 'pi: gateway model could not be resolved',\n      };\n    }\n\n    // The same fail-closed fence as the linear run, with the task's disallow\n    // list layered in (both the wizard-vocabulary and pi-short names).\n    const { createSecurityExtension } = await import('./security');\n    const security = createSecurityExtension({\n      disallowedTools: fenceDisallowList(disallowedTools),\n      triageProvider: boot.triageProvider,\n    });\n    const { prewarmYaraScanner } = await import('@lib/yara-hooks');\n    void prewarmYaraScanner();\n\n    // PostHog MCP, best-effort — the dashboard task creates real dashboards\n    // through it; every other task simply never calls a posthog_* tool.\n    const extensionFactories = [security.factory] as Array<\n      (pi: unknown) => void\n    >;\n    let mcpCleanup: (() => void) | undefined;\n    let posthogMcp = false;\n    try {\n      const { setupPostHogMcp } = await import('./mcp');\n      const mcp = await setupPostHogMcp({\n        mcpUrl: boot.credentials.host.mcpUrl,\n        accessToken: boot.credentials.accessToken,\n        userAgent: WIZARD_USER_AGENT,\n      });\n      extensionFactories.push(mcp.extensionFactory);\n      mcpCleanup = mcp.cleanup;\n      posthogMcp = true;\n    } catch (err) {\n      // Silent here reads as a task failure minutes later: dashboard and report\n      // need `posthog_exec` and can only skip or fail without it.\n      logToFile(`[pi-task] PostHog MCP setup skipped: ${String(err)}`);\n      analytics.wizardCapture('mcp setup failed', {\n        harness: 'pi',\n        scope: 'task',\n        error: String(err).slice(0, 300),\n      });\n    }\n\n    const codingTools = allowedPiCodingTools(allowedTools);\n    const orchestratorTools = allowedOrchestratorTools(disallowedTools);\n\n    const resourceLoader = new DefaultResourceLoader({\n      cwd: session.installDir,\n      agentDir: getAgentDir(),\n      systemPrompt: assembleCommandments({\n        program: programConfig.id,\n        sequence: Sequence.orchestrator,\n        harness: Harness.pi,\n        caps: { bash: codingTools.has('bash'), posthogMcp },\n      }),\n      noExtensions: true,\n      noSkills: true,\n      noContextFiles: true,\n      noPromptTemplates: true,\n      noThemes: true,\n      extensionFactories,\n    });\n    await resourceLoader.reload();\n\n    // The task's coding tools, gated by its allow list. Reads and searches run\n    // in parallel; mutating tools stay sequential. Bash subprocesses get the\n    // scrubbed env, same as the linear run.\n    const dir = session.installDir;\n    const codingToolFactories = {\n      read: () => withMode(createReadToolDefinition(dir), 'parallel'),\n      edit: () => withMode(createEditToolDefinition(dir), 'sequential'),\n      write: () => withMode(createWriteToolDefinition(dir), 'sequential'),\n      bash: () =>\n        withMode(\n          createBashToolDefinition(dir, {\n            spawnHook: (ctx) => ({ ...ctx, env: buildScrubbedEnv() }),\n          }),\n          'sequential',\n        ),\n      ls: () => withMode(createLsToolDefinition(dir), 'parallel'),\n      find: () => withMode(createFindToolDefinition(dir), 'parallel'),\n      grep: () => withMode(createGrepToolDefinition(dir), 'parallel'),\n    } as const;\n    const codingToolDefs = Object.entries(codingToolFactories)\n      .filter(([name]) => codingTools.has(name))\n      .map(([, make]) => make());\n\n    // Wizard env + package-manager tools are always on — their handlers are\n    // fenced, and init/build tasks depend on them.\n    const { createWizardPiTools } = await import('./tools');\n    const wizardTools = createWizardPiTools({\n      workingDirectory: dir,\n      skillsBaseUrl: boot.skillsBaseUrl,\n      triageProvider: boot.triageProvider,\n    }).filter((t) =>\n      ['check_env_keys', 'set_env_values', 'detect_package_manager'].includes(\n        t.name,\n      ),\n    );\n\n    const { createPiOrchestratorTools } = await import('./orchestrator-tools');\n    const queueTools = createPiOrchestratorTools(orchestrator).filter((t) =>\n      orchestratorTools.has(t.name),\n    );\n\n    const customTools = [...codingToolDefs, ...wizardTools, ...queueTools];\n    const { session: agentSession } = await createAgentSession({\n      model,\n      modelRegistry: registry,\n      thinkingLevel: caps.thinkingLevel,\n      cwd: dir,\n      sessionManager: SessionManager.inMemory(dir),\n      resourceLoader,\n      noTools: 'builtin',\n      customTools,\n    });\n    await agentSession.bindExtensions({});\n\n    // The one complete list: exactly the tools registered on this session, in\n    // the names the agent will call them by. posthog_exec binds as an extension.\n    const toolNames = [\n      ...customTools.map((t) => t.name),\n      ...(posthogMcp ? ['posthog_exec'] : []),\n    ];\n    logToFile(`[pi-task] tools passed to model: ${toolNames.join(', ')}`);\n    const taskPrompt = `${prompt}\\n\\n${renderToolInventory(toolNames)}`;\n\n    const unsubscribe = agentSession.subscribe((event) => {\n      switch (event.type) {\n        case 'message_end': {\n          // User prompts also emit message_end; only assistant turns count.\n          if ((event.message as { role?: string })?.role !== 'assistant') {\n            break;\n          }\n          assistantTurns += 1;\n          const assistant = extractText(event.message).trim();\n          if (assistant) {\n            logToFile(`[pi-task] assistant: ${assistant.slice(0, 1000)}`);\n            applyOutroMarkers(assistant);\n            const statusText = lastStatusLine(assistant);\n            if (statusText) {\n              getUI().pushStatus(statusText);\n              spinner.message(statusText);\n            }\n            for (const line of assistant.split('\\n')) signals.push(line);\n          }\n          break;\n        }\n        case 'tool_execution_start': {\n          const args = JSON.stringify(event.args ?? {}).slice(0, 200);\n          logToFile(`[pi-task] → ${event.toolName} ${args}`);\n          break;\n        }\n        case 'tool_execution_end': {\n          if (event.isError) {\n            const detail =\n              typeof event.result === 'string'\n                ? event.result\n                : JSON.stringify(event.result ?? '');\n            logToFile(`[pi-task] ✗ ${event.toolName}: ${detail.slice(0, 300)}`);\n          }\n          break;\n        }\n        default:\n          break;\n      }\n    });\n\n    try {\n      await agentSession.prompt(taskPrompt);\n\n      // pi's prompt() resolves the moment a turn carries no tool call — which\n      // an agent mid-plan does emit. While the work has not reached its\n      // terminal state (task not reported, seed queue still empty), nudge.\n      let nudges = 0;\n      while (\n        nudges < MAX_TASK_NUDGES &&\n        !security.state.criticalViolation &&\n        !isSettled(orchestrator)\n      ) {\n        nudges += 1;\n        logToFile(\n          `[pi-task] completion guard: not settled, nudge ${nudges}/${MAX_TASK_NUDGES}`,\n        );\n        await agentSession.prompt(\n          orchestrator.currentTaskId ? TASK_NUDGE : SEED_NUDGE,\n        );\n      }\n\n      if (requestRemark && !security.state.criticalViolation) {\n        try {\n          await agentSession.prompt(REMARK_INSTRUCTION);\n        } catch (err) {\n          logToFile(`[pi-task] remark request failed: ${String(err)}`);\n        }\n      }\n    } finally {\n      unsubscribe();\n      mcpCleanup?.();\n    }\n\n    if (security.state.criticalViolation) {\n      spinner.stop('Security violation detected');\n      logToFile(\n        `[pi-task] terminated: YARA violation (blocked ${security.state.blockedCount} call(s))`,\n      );\n      captureAborted();\n      return { error: AgentErrorType.YARA_VIOLATION };\n    }\n\n    const remark = signals.remark();\n    if (remark) {\n      analytics.capture(WIZARD_REMARK_EVENT_NAME, { remark });\n    }\n\n    const stats = agentSession.getSessionStats();\n    const durations = runDurations();\n    analytics.wizardCapture('agent completed', {\n      ...durations,\n      model: modelId,\n      num_turns: assistantTurns,\n      input_tokens: stats.tokens.input,\n      output_tokens: stats.tokens.output,\n      cache_creation_input_tokens: stats.tokens.cacheWrite,\n      cache_read_input_tokens: stats.tokens.cacheRead,\n      ...analyticsProperties,\n    });\n    // Per-task usage on one parseable line so a run's per-task time and cost are\n    // observable from the log, not only from analytics.\n    const taskType =\n      typeof (analyticsProperties as { task_type?: unknown })?.task_type ===\n      'string'\n        ? (analyticsProperties as { task_type: string }).task_type\n        : modelId;\n    logToFile(\n      `[pi-task] usage task=${taskType} model=${modelId} effort=${caps.thinkingLevel} dur=${durations.duration_seconds}s turns=${assistantTurns} in=${stats.tokens.input} out=${stats.tokens.output} cacheR=${stats.tokens.cacheRead} cacheW=${stats.tokens.cacheWrite}`,\n    );\n    if (successMessage) spinner.stop(successMessage);\n    return {};\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    logToFile(`[pi-task] run error: ${message}`);\n    if (errorMessage || spinnerMessage) {\n      spinner.stop(errorMessage ?? 'Task failed');\n    }\n    captureAborted();\n    const lower = message.toLowerCase();\n    if (lower.includes('rate limit') || lower.includes('429')) {\n      return { error: AgentErrorType.RATE_LIMIT, message };\n    }\n    return { error: AgentErrorType.API_ERROR, message };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAgDA,MAAM,kBAAqD;CACzD,MAAM,CAAC,OAAO;CACd,MAAM,CAAC,OAAO;CACd,OAAO,CAAC,QAAQ;CAChB,MAAM,CAAC,OAAO;CACd,MAAM,CAAC,QAAQ,KAAK;CACpB,MAAM,CAAC,OAAO;CACf;;AAGD,SAAS,cAAc,MAAsB;AAC3C,QAAO,KAAK,QAAQ,0BAA0B,GAAG;;;;;;AAOnD,SAAgB,qBACd,cACa;CACb,MAAM,WAAW,gBAAgB,EAAE,EAAE,IAAI,cAAc;CACvD,MAAM,QAAQ,QAAQ,SAClB,QAAQ,SAAS,SAAS,gBAAgB,SAAS,EAAE,CAAC,GACtD,OAAO,OAAO,gBAAgB,CAAC,MAAM;AACzC,QAAO,IAAI,IAAI,MAAM;;;;;;;AAQvB,SAAgB,yBACd,iBACa;AACb,QAAO,IAAI,IAAI,WAAW,mBAAmB,EAAE,CAAC,CAAC;;;;;;;;AASnD,SAAgB,kBACd,iBACU;CACV,MAAM,QAAQ,mBAAmB,EAAE;AACnC,QAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,OAAO,GAAG,MAAM,IAAI,cAAc,CAAC,CAAC,CAAC;;;AAI9D,MAAM,kBAAkB;AAExB,MAAM,aACJ;AAEF,MAAM,aACJ;;AAGF,SAAS,UAAU,KAAwC;AACzD,KAAI,CAAC,IAAI,cAEP,QAAO,IAAI,MAAM,MAAM,CAAC,SAAS;CAEnC,MAAM,OAAO,IAAI,MAAM,IAAI,IAAI,cAAc;AAC7C,QACE,CAAC,CAAC,SACD,KAAK,WAAW,WAAW,QAC1B,KAAK,WAAW,WAAW,UAC3B,KAAK,WAAW,WAAW;;AAIjC,eAAsB,UAAU,QAA6C;CAC3E,MAAM,EACJ,SACA,eACA,MACA,QACA,SACA,OAAO,SACP,QACA,cACA,iBACA,cACA,gBACA,gBACA,cACA,eACA,wBACE;AAEJ,KAAI,eAAgB,SAAQ,MAAM,eAAe;CAEjD,MAAM,YAAY,KAAK,KAAK;CAC5B,MAAM,UAAU,IAAI,oBAAoB;CACxC,IAAI,iBAAiB;CACrB,MAAM,qBAAqB;EACzB,MAAM,aAAa,KAAK,KAAK,GAAG;AAChC,SAAO;GACL,aAAa;GACb,kBAAkB,KAAK,MAAM,aAAa,IAAK;GAChD;;CAEH,MAAM,uBACJ,UAAU,cAAc,iBAAiB;EACvC,GAAG,cAAc;EACjB,OAAO;EACP,GAAG;EACJ,CAAC;AAEJ,KAAI;EAEF,MAAM,EACJ,oBACA,uBACA,gBACA,aACA,eACA,aACA,wBACA,0BACA,0BACA,0BACA,0BACA,0BACA,8BAdU,MAAM,OAAO;EAiBzB,MAAM,EAAE,UAAU,SAAS,qBAAqB;GAC9C,YAAY,KAAK,YAAY,KAAK;GAClC,aAAa,KAAK,YAAY;GAC9B,gBAAgB,KAAK;GACrB,aAAa,KAAK;GAClB;GAGA;GACD,CAAC;EACF,MAAM,WAAW,cAAc,SAAS,YAAY,QAAQ,CAAC;AAC7D,WAAS,iBAAiB,kBAAkB,SAAkB;EAC9D,MAAM,QAAQ,SAAS,KAAK,kBAAkB,QAAQ;AACtD,MAAI,CAAC,MACH,QAAO;GACL,OAAA;GACA,SAAS;GACV;EAKH,MAAM,EAAE,4BAA4B,MAAM,OAAO;EACjD,MAAM,WAAW,wBAAwB;GACvC,iBAAiB,kBAAkB,gBAAgB;GACnD,gBAAgB,KAAK;GACtB,CAAC;EACF,MAAM,EAAE,uBAAuB,MAAM,OAAO;AACvC,sBAAoB;EAIzB,MAAM,qBAAqB,CAAC,SAAS,QAAQ;EAG7C,IAAI;EACJ,IAAI,aAAa;AACjB,MAAI;GACF,MAAM,EAAE,oBAAoB,MAAM,OAAO;GACzC,MAAM,MAAM,MAAM,gBAAgB;IAChC,QAAQ,KAAK,YAAY,KAAK;IAC9B,aAAa,KAAK,YAAY;IAC9B,WAAW;IACZ,CAAC;AACF,sBAAmB,KAAK,IAAI,iBAAiB;AAC7C,gBAAa,IAAI;AACjB,gBAAa;WACN,KAAK;AAGZ,aAAU,wCAAwC,OAAO,IAAI,GAAG;AAChE,aAAU,cAAc,oBAAoB;IAC1C,SAAS;IACT,OAAO;IACP,OAAO,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI;IACjC,CAAC;;EAGJ,MAAM,cAAc,qBAAqB,aAAa;EACtD,MAAM,oBAAoB,yBAAyB,gBAAgB;EAEnE,MAAM,iBAAiB,IAAI,sBAAsB;GAC/C,KAAK,QAAQ;GACb,UAAU,aAAa;GACvB,cAAc,qBAAqB;IACjC,SAAS,cAAc;IACvB,UAAA;IACA,SAAA;IACA,MAAM;KAAE,MAAM,YAAY,IAAI,OAAO;KAAE;KAAY;IACpD,CAAC;GACF,cAAc;GACd,UAAU;GACV,gBAAgB;GAChB,mBAAmB;GACnB,UAAU;GACV;GACD,CAAC;AACF,QAAM,eAAe,QAAQ;EAK7B,MAAM,MAAM,QAAQ;EAgBpB,MAAM,iBAAiB,OAAO,QAfF;GAC1B,YAAY,SAAS,yBAAyB,IAAI,EAAE,WAAW;GAC/D,YAAY,SAAS,yBAAyB,IAAI,EAAE,aAAa;GACjE,aAAa,SAAS,0BAA0B,IAAI,EAAE,aAAa;GACnE,YACE,SACE,yBAAyB,KAAK,EAC5B,YAAY,SAAS;IAAE,GAAG;IAAK,KAAK,kBAAkB;IAAE,GACzD,CAAC,EACF,aACD;GACH,UAAU,SAAS,uBAAuB,IAAI,EAAE,WAAW;GAC3D,YAAY,SAAS,yBAAyB,IAAI,EAAE,WAAW;GAC/D,YAAY,SAAS,yBAAyB,IAAI,EAAE,WAAW;GAChE,CACyD,CACvD,QAAQ,CAAC,UAAU,YAAY,IAAI,KAAK,CAAC,CACzC,KAAK,GAAG,UAAU,MAAM,CAAC;EAI5B,MAAM,EAAE,wBAAwB,MAAM,OAAO;EAC7C,MAAM,cAAc,oBAAoB;GACtC,kBAAkB;GAClB,eAAe,KAAK;GACpB,gBAAgB,KAAK;GACtB,CAAC,CAAC,QAAQ,MACT;GAAC;GAAkB;GAAkB;GAAyB,CAAC,SAC7D,EAAE,KACH,CACF;EAED,MAAM,EAAE,8BAA8B,MAAM,OAAO;EACnD,MAAM,aAAa,0BAA0B,aAAa,CAAC,QAAQ,MACjE,kBAAkB,IAAI,EAAE,KAAK,CAC9B;EAED,MAAM,cAAc;GAAC,GAAG;GAAgB,GAAG;GAAa,GAAG;GAAW;EACtE,MAAM,EAAE,SAAS,iBAAiB,MAAM,mBAAmB;GACzD;GACA,eAAe;GACf,eAAe,KAAK;GACpB,KAAK;GACL,gBAAgB,eAAe,SAAS,IAAI;GAC5C;GACA,SAAS;GACT;GACD,CAAC;AACF,QAAM,aAAa,eAAe,EAAE,CAAC;EAIrC,MAAM,YAAY,CAChB,GAAG,YAAY,KAAK,MAAM,EAAE,KAAK,EACjC,GAAI,aAAa,CAAC,eAAe,GAAG,EAAE,CACvC;AACD,YAAU,oCAAoC,UAAU,KAAK,KAAK,GAAG;EACrE,MAAM,aAAa,GAAG,OAAO,MAAM,oBAAoB,UAAU;EAEjE,MAAM,cAAc,aAAa,WAAW,UAAU;AACpD,WAAQ,MAAM,MAAd;IACE,KAAK,eAAe;AAElB,SAAK,MAAM,SAA+B,SAAS,YACjD;AAEF,uBAAkB;KAClB,MAAM,YAAY,YAAY,MAAM,QAAQ,CAAC,MAAM;AACnD,SAAI,WAAW;AACb,gBAAU,wBAAwB,UAAU,MAAM,GAAG,IAAK,GAAG;AAC7D,wBAAkB,UAAU;MAC5B,MAAM,aAAa,eAAe,UAAU;AAC5C,UAAI,YAAY;AACd,cAAO,CAAC,WAAW,WAAW;AAC9B,eAAQ,QAAQ,WAAW;;AAE7B,WAAK,MAAM,QAAQ,UAAU,MAAM,KAAK,CAAE,SAAQ,KAAK,KAAK;;AAE9D;;IAEF,KAAK,wBAAwB;KAC3B,MAAM,OAAO,KAAK,UAAU,MAAM,QAAQ,EAAE,CAAC,CAAC,MAAM,GAAG,IAAI;AAC3D,eAAU,eAAe,MAAM,SAAS,GAAG,OAAO;AAClD;;IAEF,KAAK;AACH,SAAI,MAAM,SAAS;MACjB,MAAM,SACJ,OAAO,MAAM,WAAW,WACpB,MAAM,SACN,KAAK,UAAU,MAAM,UAAU,GAAG;AACxC,gBAAU,eAAe,MAAM,SAAS,IAAI,OAAO,MAAM,GAAG,IAAI,GAAG;;AAErE;IAEF,QACE;;IAEJ;AAEF,MAAI;AACF,SAAM,aAAa,OAAO,WAAW;GAKrC,IAAI,SAAS;AACb,UACE,SAAS,mBACT,CAAC,SAAS,MAAM,qBAChB,CAAC,UAAU,aAAa,EACxB;AACA,cAAU;AACV,cACE,kDAAkD,OAAO,GAAG,kBAC7D;AACD,UAAM,aAAa,OACjB,aAAa,gBAAgB,aAAa,WAC3C;;AAGH,OAAI,iBAAiB,CAAC,SAAS,MAAM,kBACnC,KAAI;AACF,UAAM,aAAa,OAAO,mBAAmB;YACtC,KAAK;AACZ,cAAU,oCAAoC,OAAO,IAAI,GAAG;;YAGxD;AACR,gBAAa;AACb,iBAAc;;AAGhB,MAAI,SAAS,MAAM,mBAAmB;AACpC,WAAQ,KAAK,8BAA8B;AAC3C,aACE,iDAAiD,SAAS,MAAM,aAAa,WAC9E;AACD,mBAAgB;AAChB,UAAO,EAAE,OAAA,yBAAsC;;EAGjD,MAAM,SAAS,QAAQ,QAAQ;AAC/B,MAAI,OACF,WAAU,QAAQ,0BAA0B,EAAE,QAAQ,CAAC;EAGzD,MAAM,QAAQ,aAAa,iBAAiB;EAC5C,MAAM,YAAY,cAAc;AAChC,YAAU,cAAc,mBAAmB;GACzC,GAAG;GACH,OAAO;GACP,WAAW;GACX,cAAc,MAAM,OAAO;GAC3B,eAAe,MAAM,OAAO;GAC5B,6BAA6B,MAAM,OAAO;GAC1C,yBAAyB,MAAM,OAAO;GACtC,GAAG;GACJ,CAAC;AAQF,YACE,wBALA,OAAQ,qBAAiD,cACzD,WACK,oBAA8C,YAC/C,QAE6B,SAAS,QAAQ,UAAU,KAAK,cAAc,OAAO,UAAU,iBAAiB,UAAU,eAAe,MAAM,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,OAAO,UAAU,MAAM,OAAO,UAAU,UAAU,MAAM,OAAO,aACvP;AACD,MAAI,eAAgB,SAAQ,KAAK,eAAe;AAChD,SAAO,EAAE;UACF,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,YAAU,wBAAwB,UAAU;AAC5C,MAAI,gBAAgB,eAClB,SAAQ,KAAK,gBAAgB,cAAc;AAE7C,kBAAgB;EAChB,MAAM,QAAQ,QAAQ,aAAa;AACnC,MAAI,MAAM,SAAS,aAAa,IAAI,MAAM,SAAS,MAAM,CACvD,QAAO;GAAE,OAAA;GAAkC;GAAS;AAEtD,SAAO;GAAE,OAAA;GAAiC;GAAS"}

package/dist/task-stream-5k_cd_Wz.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"task-stream-5k_cd_Wz.js","names":[],"sources":["../src/lib/task-stream/event-plan-watcher.ts","../src/lib/task-stream/task-stream-push.ts"],"sourcesContent":["import type { PlannedEvent, WizardStore } from '@ui/tui/store';\nimport {\n  startFileWatcher,\n  type FileWatcherHandle,\n  type FileWatcherOptions,\n} from '@lib/file-watcher';\n\nconst MAX_EVENT_PLAN_FILE_BYTES = 256 * 1024;\nconst MAX_EVENT_COUNT = 50;\nconst MAX_EVENT_NAME_LENGTH = 400;\nconst MAX_EVENT_DESCRIPTION_LENGTH = 4000;\n\nfunction firstString(...values: unknown[]): string | null {\n  const value = values.find((candidate) => typeof candidate === 'string');\n  return typeof value === 'string' ? value : null;\n}\n\nexport function normalizeEventPlan(parsed: unknown): PlannedEvent[] | null {\n  if (!Array.isArray(parsed)) return null;\n\n  const events: PlannedEvent[] = [];\n  for (const value of parsed) {\n    if (events.length >= MAX_EVENT_COUNT) break;\n\n    const entry =\n      value && typeof value === 'object'\n        ? (value as Record<string, unknown>)\n        : {};\n    const name = firstString(entry.event_name, entry.name, entry.event);\n    if (!name || !name.trim() || name.length > MAX_EVENT_NAME_LENGTH) continue;\n\n    const description =\n      firstString(entry.event_description, entry.description) ?? '';\n    events.push({\n      name,\n      description: description.slice(0, MAX_EVENT_DESCRIPTION_LENGTH),\n    });\n  }\n\n  return events;\n}\n\nexport class EventPlanWatcher {\n  private handle: FileWatcherHandle | null = null;\n  private captured = false;\n\n  constructor(\n    private readonly store: WizardStore,\n    private readonly path: string,\n    private readonly options: FileWatcherOptions = {},\n  ) {}\n\n  start(): void {\n    if (this.handle || this.captured) return;\n\n    this.handle = startFileWatcher(\n      this.path,\n      (parsed) => {\n        const events = normalizeEventPlan(parsed);\n        if (!events || events.length === 0) return;\n\n        this.captured = true;\n        this.store.setEventPlan(events);\n        this.stop();\n      },\n      {\n        ignoreInitialFile: true,\n        maxFileSizeBytes: MAX_EVENT_PLAN_FILE_BYTES,\n        ...this.options,\n      },\n    );\n  }\n\n  refresh(): void {\n    if (this.captured) return;\n    this.handle?.refresh();\n  }\n\n  stop(): void {\n    this.handle?.stop();\n    this.handle = null;\n  }\n}\n","/**\n * Task-stream push — subscribes to WizardStore, builds payloads,\n * and fans out async to all registered destinations.\n *\n * Behaviour:\n *   - `attach(store)`            subscribe to store changes\n *   - task updates               debounced 250ms (trailing edge)\n *   - phase transitions          flush immediately, bypass debounce\n *   - RunPhase.Idle              skipped (no push)\n *   - enabled === false          destination delivery is disabled\n *   - shutdown(timeoutMs)        cancel pending, flush terminal phase\n *                                with timeout, never throw\n *\n * Concurrency: only one fan-out at a time. Emits during an in-flight\n * push are coalesced — at most one follow-up push fires with the\n * latest state once the current one settles.\n */\n\nimport type { WizardStore, TaskItem } from '@ui/tui/store';\nimport { TaskStatus } from '@ui/wizard-ui';\nimport { RunPhase, OutroKind, type OutroData } from '@lib/wizard-session';\nimport {\n  type TaskStreamDestination,\n  type TaskStreamUpdate,\n  type StreamTask,\n  type TaskStreamError,\n  StreamTaskStatus,\n  StreamEvent,\n} from './types';\nimport { EventPlanWatcher } from './event-plan-watcher';\n\n/** Trailing-edge debounce window for non-phase-change emits. */\nconst DEBOUNCE_MS = 250;\n/** Default shutdown timeout for the final terminal flush. */\nconst DEFAULT_SHUTDOWN_TIMEOUT_MS = 2000;\n\nconst STATUS_MAP: Record<TaskStatus, StreamTaskStatus> = {\n  [TaskStatus.Pending]: StreamTaskStatus.Pending,\n  [TaskStatus.InProgress]: StreamTaskStatus.InProgress,\n  [TaskStatus.Completed]: StreamTaskStatus.Completed,\n  // The stream has no skipped state; skipped is terminal, so report it resolved.\n  [TaskStatus.Skipped]: StreamTaskStatus.Completed,\n};\n\nfunction buildTasks(items: TaskItem[]): StreamTask[] {\n  return items.map((item, i) => ({\n    id: String(i),\n    title: item.label,\n    status: STATUS_MAP[item.status] ?? StreamTaskStatus.Pending,\n  }));\n}\n\n/** Drop \".SSSZ\" → \"Z\" so session_id segments stay routing-safe. */\nfunction secondPrecisionIso(d: Date): string {\n  return d.toISOString().replace(/\\.\\d{3}Z$/, 'Z');\n}\n\n/**\n * `workflow_id` and `skill_id` end up unescaped in Redis pub/sub\n * channel names, so the backend rejects anything outside\n * `^[A-Za-z0-9_.-]{1,255}$` with a 400. All current values already\n * comply; this is defence in depth in case a future caller passes\n * something with `:`, spaces, or other separators.\n */\nfunction sanitizeChannelId(value: string): string {\n  return value.replace(/[^A-Za-z0-9_.-]/g, '-').slice(0, 255);\n}\n\nfunction buildError(\n  phase: RunPhase,\n  outroData: OutroData | null,\n): TaskStreamError | undefined {\n  if (phase !== RunPhase.Error) return undefined;\n  if (outroData?.kind === OutroKind.Error) {\n    const message = outroData.message ?? outroData.body ?? 'Wizard run failed';\n    return { type: 'wizard_error', message };\n  }\n  return { type: 'wizard_error', message: 'Wizard run failed' };\n}\n\nexport interface TaskStreamPushOptions {\n  store: WizardStore;\n  programId: string;\n  destinations: TaskStreamDestination[];\n  /** Optional absolute event-plan path to load into the store once. */\n  eventPlanPath?: string;\n  /** When false, destination subscription/delivery remains disabled. */\n  enabled?: boolean;\n}\n\nexport class TaskStreamPush {\n  private readonly store: WizardStore;\n  private readonly destinations: TaskStreamDestination[];\n  private readonly startedAt: string;\n  private readonly programId: string;\n  private readonly sessionId: string;\n  private readonly eventPlanWatcher: EventPlanWatcher | null;\n\n  private enabled: boolean;\n  private created = false;\n  private lastPushedPhase: RunPhase | null = null;\n\n  private unsubscribe: (() => void) | null = null;\n  private debounceTimer: ReturnType<typeof setTimeout> | null = null;\n  private inFlight: Promise<void> | null = null;\n  private needsAnotherPush = false;\n  private shuttingDown = false;\n\n  constructor(opts: TaskStreamPushOptions) {\n    this.store = opts.store;\n    this.programId = sanitizeChannelId(opts.programId);\n    this.destinations = opts.destinations;\n    this.enabled = opts.enabled ?? true;\n    const startedAt = new Date();\n    this.eventPlanWatcher = opts.eventPlanPath\n      ? new EventPlanWatcher(this.store, opts.eventPlanPath)\n      : null;\n    this.startedAt = secondPrecisionIso(startedAt);\n    // skillId may not be set yet — fall back to programId so the\n    // session_id is stable for the whole run regardless of when the\n    // program metadata is populated.\n    const skillId = sanitizeChannelId(\n      this.store.session.skillId ?? this.programId,\n    );\n    this.sessionId = `${this.programId}-${skillId}-${this.startedAt}`;\n  }\n\n  /**\n   * Load the event plan and subscribe to store changes. Destination delivery\n   * remains disabled when `enabled === false`, but the plan still populates the\n   * store for local and headless consumers.\n   */\n  attach(store?: WizardStore): void {\n    this.eventPlanWatcher?.start();\n    if (!this.enabled) return;\n    if (this.unsubscribe) return;\n    const target = store ?? this.store;\n    this.unsubscribe = target.subscribe(() => this.onStoreChange());\n  }\n\n  /** Stop subscribing. Does not flush. */\n  detach(): void {\n    this.eventPlanWatcher?.stop();\n    if (this.unsubscribe) {\n      this.unsubscribe();\n      this.unsubscribe = null;\n    }\n    if (this.debounceTimer) {\n      clearTimeout(this.debounceTimer);\n      this.debounceTimer = null;\n    }\n  }\n\n  /**\n   * Cancel pending debounce, flush one final push if the current\n   * phase is terminal, and resolve. Never throws. Bounded by\n   * `timeoutMs` — if a destination hangs, this returns anyway.\n   */\n  async shutdown(\n    timeoutMs: number = DEFAULT_SHUTDOWN_TIMEOUT_MS,\n  ): Promise<void> {\n    this.shuttingDown = true;\n    this.eventPlanWatcher?.refresh();\n    if (this.debounceTimer) {\n      clearTimeout(this.debounceTimer);\n      this.debounceTimer = null;\n    }\n    this.detach();\n    if (!this.enabled) return;\n\n    const phase = this.store.session.runPhase;\n    const isTerminal = phase === RunPhase.Completed || phase === RunPhase.Error;\n    if (!isTerminal) return;\n\n    const flush = this.flush();\n    if (timeoutMs <= 0) return;\n    await Promise.race([\n      flush,\n      new Promise<void>((resolve) => setTimeout(resolve, timeoutMs)),\n    ]);\n  }\n\n  /**\n   * Imperative push — fires immediately regardless of phase. Kept as\n   * the building block for both subscription-driven and direct calls.\n   */\n  async push(): Promise<void> {\n    await this.flush();\n  }\n\n  // ── Internal ────────────────────────────────────────────────────\n\n  private onStoreChange(): void {\n    if (!this.enabled || this.shuttingDown) return;\n    const phase = this.store.session.runPhase;\n    if (phase === RunPhase.Idle) return;\n\n    // A push is already in flight — coalesce. The in-flight push's\n    // settle handler will trigger one follow-up with the latest state.\n    if (this.inFlight) {\n      if (this.debounceTimer) {\n        clearTimeout(this.debounceTimer);\n        this.debounceTimer = null;\n      }\n      this.needsAnotherPush = true;\n      return;\n    }\n\n    const phaseChanged = phase !== this.lastPushedPhase;\n    if (phaseChanged) {\n      // Phase transitions bypass the debounce: the web app needs to\n      // see Running → Completed as soon as it lands.\n      if (this.debounceTimer) {\n        clearTimeout(this.debounceTimer);\n        this.debounceTimer = null;\n      }\n      void this.flush();\n      return;\n    }\n\n    // Task updates can arrive faster than we want to push. Debounce\n    // them — the last update in a burst wins.\n    if (this.debounceTimer) return;\n    this.debounceTimer = setTimeout(() => {\n      this.debounceTimer = null;\n      void this.flush();\n    }, DEBOUNCE_MS);\n  }\n\n  /**\n   * Fan out the current state to every destination. Serialized — if\n   * a flush is already running, mark \"needs another\" and let the\n   * in-flight one schedule the follow-up when it settles.\n   */\n  private flush(): Promise<void> {\n    if (this.inFlight) {\n      this.needsAnotherPush = true;\n      return this.inFlight;\n    }\n\n    const run = async (): Promise<void> => {\n      try {\n        await this.sendOnce();\n      } finally {\n        this.inFlight = null;\n        if (this.needsAnotherPush) {\n          this.needsAnotherPush = false;\n          // Re-enter to push the latest snapshot.\n          await this.flush();\n        }\n      }\n    };\n\n    this.inFlight = run();\n    return this.inFlight;\n  }\n\n  private async sendOnce(): Promise<void> {\n    const { session, tasks, eventPlan } = this.store;\n    const skillId = sanitizeChannelId(session.skillId ?? this.programId);\n    const phase = session.runPhase;\n\n    const payload: TaskStreamUpdate = {\n      session_id: this.sessionId,\n      workflow_id: this.programId,\n      skill_id: skillId,\n      started_at: this.startedAt,\n      run_phase: phase,\n      tasks: buildTasks(tasks),\n      event_plan: eventPlan.length > 0 ? { events: eventPlan } : undefined,\n      error: buildError(phase, session.outroData),\n      timestamp: new Date().toISOString(),\n    };\n\n    let event: StreamEvent;\n    if (!this.created) {\n      this.created = true;\n      event = StreamEvent.Create;\n    } else if (phase === RunPhase.Completed) {\n      event = StreamEvent.Complete;\n    } else if (phase === RunPhase.Error) {\n      event = StreamEvent.Error;\n    } else {\n      event = StreamEvent.Update;\n    }\n\n    this.lastPushedPhase = phase;\n\n    await Promise.all(\n      this.destinations.map((d) =>\n        // eslint-disable-next-line @typescript-eslint/no-empty-function\n        d.send(event, payload).catch(() => {}),\n      ),\n    );\n  }\n}\n"],"mappings":";;;;;AAOA,MAAM,4BAA4B,MAAM;AACxC,MAAM,kBAAkB;AACxB,MAAM,wBAAwB;AAC9B,MAAM,+BAA+B;AAErC,SAAS,YAAY,GAAG,QAAkC;CACxD,MAAM,QAAQ,OAAO,MAAM,cAAc,OAAO,cAAc,SAAS;AACvE,QAAO,OAAO,UAAU,WAAW,QAAQ;;AAG7C,SAAgB,mBAAmB,QAAwC;AACzE,KAAI,CAAC,MAAM,QAAQ,OAAO,CAAE,QAAO;CAEnC,MAAM,SAAyB,EAAE;AACjC,MAAK,MAAM,SAAS,QAAQ;AAC1B,MAAI,OAAO,UAAU,gBAAiB;EAEtC,MAAM,QACJ,SAAS,OAAO,UAAU,WACrB,QACD,EAAE;EACR,MAAM,OAAO,YAAY,MAAM,YAAY,MAAM,MAAM,MAAM,MAAM;AACnE,MAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,KAAK,SAAS,sBAAuB;EAElE,MAAM,cACJ,YAAY,MAAM,mBAAmB,MAAM,YAAY,IAAI;AAC7D,SAAO,KAAK;GACV;GACA,aAAa,YAAY,MAAM,GAAG,6BAA6B;GAChE,CAAC;;AAGJ,QAAO;;AAGT,IAAa,mBAAb,MAA8B;CAC5B,SAA2C;CAC3C,WAAmB;CAEnB,YACE,OACA,MACA,UAA+C,EAAE,EACjD;AAHiB,OAAA,QAAA;AACA,OAAA,OAAA;AACA,OAAA,UAAA;;CAGnB,QAAc;AACZ,MAAI,KAAK,UAAU,KAAK,SAAU;AAElC,OAAK,SAAS,iBACZ,KAAK,OACJ,WAAW;GACV,MAAM,SAAS,mBAAmB,OAAO;AACzC,OAAI,CAAC,UAAU,OAAO,WAAW,EAAG;AAEpC,QAAK,WAAW;AAChB,QAAK,MAAM,aAAa,OAAO;AAC/B,QAAK,MAAM;KAEb;GACE,mBAAmB;GACnB,kBAAkB;GAClB,GAAG,KAAK;GACT,CACF;;CAGH,UAAgB;AACd,MAAI,KAAK,SAAU;AACnB,OAAK,QAAQ,SAAS;;CAGxB,OAAa;AACX,OAAK,QAAQ,MAAM;AACnB,OAAK,SAAS;;;;;;AChDlB,MAAM,cAAc;;AAEpB,MAAM,8BAA8B;AAEpC,MAAM,aAAmD;;;;;CAMxD;AAED,SAAS,WAAW,OAAiC;AACnD,QAAO,MAAM,KAAK,MAAM,OAAO;EAC7B,IAAI,OAAO,EAAE;EACb,OAAO,KAAK;EACZ,QAAQ,WAAW,KAAK,WAAA;EACzB,EAAE;;;AAIL,SAAS,mBAAmB,GAAiB;AAC3C,QAAO,EAAE,aAAa,CAAC,QAAQ,aAAa,IAAI;;;;;;;;;AAUlD,SAAS,kBAAkB,OAAuB;AAChD,QAAO,MAAM,QAAQ,oBAAoB,IAAI,CAAC,MAAM,GAAG,IAAI;;AAG7D,SAAS,WACP,OACA,WAC6B;AAC7B,KAAI,UAAA,QAA0B,QAAO,KAAA;AACrC,KAAI,WAAW,SAAA,QAEb,QAAO;EAAE,MAAM;EAAgB,SADf,UAAU,WAAW,UAAU,QAAQ;EACf;AAE1C,QAAO;EAAE,MAAM;EAAgB,SAAS;EAAqB;;AAa/D,IAAa,iBAAb,MAA4B;CAC1B;CACA;CACA;CACA;CACA;CACA;CAEA;CACA,UAAkB;CAClB,kBAA2C;CAE3C,cAA2C;CAC3C,gBAA8D;CAC9D,WAAyC;CACzC,mBAA2B;CAC3B,eAAuB;CAEvB,YAAY,MAA6B;AACvC,OAAK,QAAQ,KAAK;AAClB,OAAK,YAAY,kBAAkB,KAAK,UAAU;AAClD,OAAK,eAAe,KAAK;AACzB,OAAK,UAAU,KAAK,WAAW;EAC/B,MAAM,4BAAY,IAAI,MAAM;AAC5B,OAAK,mBAAmB,KAAK,gBACzB,IAAI,iBAAiB,KAAK,OAAO,KAAK,cAAc,GACpD;AACJ,OAAK,YAAY,mBAAmB,UAAU;EAI9C,MAAM,UAAU,kBACd,KAAK,MAAM,QAAQ,WAAW,KAAK,UACpC;AACD,OAAK,YAAY,GAAG,KAAK,UAAU,GAAG,QAAQ,GAAG,KAAK;;;;;;;CAQxD,OAAO,OAA2B;AAChC,OAAK,kBAAkB,OAAO;AAC9B,MAAI,CAAC,KAAK,QAAS;AACnB,MAAI,KAAK,YAAa;EACtB,MAAM,SAAS,SAAS,KAAK;AAC7B,OAAK,cAAc,OAAO,gBAAgB,KAAK,eAAe,CAAC;;;CAIjE,SAAe;AACb,OAAK,kBAAkB,MAAM;AAC7B,MAAI,KAAK,aAAa;AACpB,QAAK,aAAa;AAClB,QAAK,cAAc;;AAErB,MAAI,KAAK,eAAe;AACtB,gBAAa,KAAK,cAAc;AAChC,QAAK,gBAAgB;;;;;;;;CASzB,MAAM,SACJ,YAAoB,6BACL;AACf,OAAK,eAAe;AACpB,OAAK,kBAAkB,SAAS;AAChC,MAAI,KAAK,eAAe;AACtB,gBAAa,KAAK,cAAc;AAChC,QAAK,gBAAgB;;AAEvB,OAAK,QAAQ;AACb,MAAI,CAAC,KAAK,QAAS;EAEnB,MAAM,QAAQ,KAAK,MAAM,QAAQ;AAEjC,MAAI,EADe,UAAA,eAAgC,UAAA,SAClC;EAEjB,MAAM,QAAQ,KAAK,OAAO;AAC1B,MAAI,aAAa,EAAG;AACpB,QAAM,QAAQ,KAAK,CACjB,OACA,IAAI,SAAe,YAAY,WAAW,SAAS,UAAU,CAAC,CAC/D,CAAC;;;;;;CAOJ,MAAM,OAAsB;AAC1B,QAAM,KAAK,OAAO;;CAKpB,gBAA8B;AAC5B,MAAI,CAAC,KAAK,WAAW,KAAK,aAAc;EACxC,MAAM,QAAQ,KAAK,MAAM,QAAQ;AACjC,MAAI,UAAA,OAAyB;AAI7B,MAAI,KAAK,UAAU;AACjB,OAAI,KAAK,eAAe;AACtB,iBAAa,KAAK,cAAc;AAChC,SAAK,gBAAgB;;AAEvB,QAAK,mBAAmB;AACxB;;AAIF,MADqB,UAAU,KAAK,iBAClB;AAGhB,OAAI,KAAK,eAAe;AACtB,iBAAa,KAAK,cAAc;AAChC,SAAK,gBAAgB;;AAElB,QAAK,OAAO;AACjB;;AAKF,MAAI,KAAK,cAAe;AACxB,OAAK,gBAAgB,iBAAiB;AACpC,QAAK,gBAAgB;AAChB,QAAK,OAAO;KAChB,YAAY;;;;;;;CAQjB,QAA+B;AAC7B,MAAI,KAAK,UAAU;AACjB,QAAK,mBAAmB;AACxB,UAAO,KAAK;;EAGd,MAAM,MAAM,YAA2B;AACrC,OAAI;AACF,UAAM,KAAK,UAAU;aACb;AACR,SAAK,WAAW;AAChB,QAAI,KAAK,kBAAkB;AACzB,UAAK,mBAAmB;AAExB,WAAM,KAAK,OAAO;;;;AAKxB,OAAK,WAAW,KAAK;AACrB,SAAO,KAAK;;CAGd,MAAc,WAA0B;EACtC,MAAM,EAAE,SAAS,OAAO,cAAc,KAAK;EAC3C,MAAM,UAAU,kBAAkB,QAAQ,WAAW,KAAK,UAAU;EACpE,MAAM,QAAQ,QAAQ;EAEtB,MAAM,UAA4B;GAChC,YAAY,KAAK;GACjB,aAAa,KAAK;GAClB,UAAU;GACV,YAAY,KAAK;GACjB,WAAW;GACX,OAAO,WAAW,MAAM;GACxB,YAAY,UAAU,SAAS,IAAI,EAAE,QAAQ,WAAW,GAAG,KAAA;GAC3D,OAAO,WAAW,OAAO,QAAQ,UAAU;GAC3C,4BAAW,IAAI,MAAM,EAAC,aAAa;GACpC;EAED,IAAI;AACJ,MAAI,CAAC,KAAK,SAAS;AACjB,QAAK,UAAU;AACf,WAAA;aACS,UAAA,YACT,SAAA;WACS,UAAA,QACT,SAAA;MAEA,SAAA;AAGF,OAAK,kBAAkB;AAEvB,QAAM,QAAQ,IACZ,KAAK,aAAa,KAAK,MAErB,EAAE,KAAK,OAAO,QAAQ,CAAC,YAAY,GAAG,CACvC,CACF"}

package/dist/wizard-session-BAZql11N.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"wizard-session-BAZql11N.js","names":[],"sources":["../src/lib/wizard-session.ts"],"sourcesContent":["/**\n * WizardSession — single source of truth for every decision the wizard needs.\n *\n * Populated in layers:\n *   CLI args / env vars  →  populate fields directly\n *   Auto-detection       →  framework, typescript, package manager\n *   TUI screens          →  region, framework disambiguation, etc.\n *   OAuth                →  credentials\n *\n * Business logic reads from the session. Never calls a prompt.\n */\n\nimport type { Harness, Integration, Sequence } from './constants';\nimport type { FrameworkConfig } from './framework-config';\nimport type { WizardReadinessResult } from './health-checks/readiness';\nimport type { SettingsConflict } from './agent/claude-settings';\nimport type { ApiUser, ApiProject } from './api';\nimport type { HostResolution } from './host-resolution';\n\nexport interface Credentials {\n  accessToken: string;\n  projectApiKey: string;\n  /** Resolved at auth time and immutable thereafter — see {@link HostResolution}. */\n  host: HostResolution;\n  projectId: number;\n}\n\nfunction parseProjectIdArg(value: string | undefined): number | undefined {\n  if (value === undefined || value === '') return undefined;\n  const n = Number(value);\n  return Number.isInteger(n) && n > 0 ? n : undefined;\n}\n\nexport type CloudRegion = 'us' | 'eu';\n\n/** Lifecycle phase of the main work (agent run, MCP install, etc.) */\nexport enum RunPhase {\n  /** Still gathering input (intro, setup screens) */\n  Idle = 'idle',\n  /** Main work is in progress */\n  Running = 'running',\n  /** Main work finished successfully */\n  Completed = 'completed',\n  /** Main work finished with an error */\n  Error = 'error',\n}\n\n/** Features discovered by the feature-discovery subagent */\nexport enum DiscoveredFeature {\n  Stripe = 'stripe',\n  LLM = 'llm',\n}\n\n/** Additional features the agent can integrate after the main setup */\nexport enum AdditionalFeature {\n  LLM = 'llm',\n}\n\n/** Human-readable labels for additional features (used in TUI progress) */\nexport const ADDITIONAL_FEATURE_LABELS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: 'AI observability',\n};\n\n/** Agent prompts for each additional feature, injected via the stop hook */\nexport const ADDITIONAL_FEATURE_PROMPTS: Record<AdditionalFeature, string> = {\n  [AdditionalFeature.LLM]: `Now integrate AI observability with PostHog. Use the PostHog MCP server to find the appropriate AI observability skill, install it, and follow its workflow. PostHog basics are already installed. Update the setup report markdown file when complete with additions from this task. `,\n};\n\n/** Outcome of the MCP server installation step */\nexport enum McpOutcome {\n  NoClients = 'no_clients',\n  Skipped = 'skipped',\n  Installed = 'installed',\n  Failed = 'failed',\n}\n\n/** Outcome kind for the outro screen */\nexport enum OutroKind {\n  Success = 'success',\n  Error = 'error',\n  Cancel = 'cancel',\n}\n\nexport interface OutroData {\n  kind: OutroKind;\n  /** Main headline (green check for Success, red X for Error, etc.) */\n  message?: string;\n  /** Free-form body text shown under the headline. Use \\n for paragraph breaks. */\n  body?: string;\n  /** Success-only: bulleted list of \"what the agent did\" */\n  changes?: string[];\n  /**\n   * Success-only: a prominent, labeled link to where the user should go\n   * next (e.g. an inbox the program just configured). Rendered right under\n   * the headline and shown verbatim — no UTM tagging — so the URL stays\n   * clean and copy-pasteable. Set per-program in buildOutroData.\n   */\n  primaryLink?: { label: string; url: string };\n  /**\n   * Success-only: a short \"what to do next\" checklist with its own heading,\n   * rendered as a bulleted list. Distinct from `changes`, which recaps what\n   * the agent already did.\n   */\n  nextSteps?: { heading: string; items: string[] };\n  docsUrl?: string;\n  continueUrl?: string;\n  /** Report file the agent wrote (e.g. \"posthog-setup-report.md\") */\n  reportFile?: string;\n  /** PostHog dashboard URL the program created on the user's behalf. */\n  dashboardUrl?: string;\n  /** PostHog notebook URL the program uploaded the report to. */\n  notebookUrl?: string;\n  /**\n   * Copy-paste prompt the operator hands to their coding agent to finish the\n   * job (work the report's checklist). Printed to the terminal's main buffer on\n   * exit (see getExitLine in start-tui.ts) — the TUI's alternate screen is wiped\n   * on exit, so the scrollback line is where it survives and can be\n   * triple-click-selected. Set per-program in buildOutroData.\n   */\n  handoffPrompt?: string;\n}\n\n/** A single question rendered by the WizardAsk overlay. */\nexport interface AskQuestion {\n  /** Key for the response map */\n  id: string;\n  prompt: string;\n  /** text = single-line free input; single/multi = picker */\n  kind: 'single' | 'multi' | 'text';\n  /** Required for `single` and `multi`. Ignored for `text`. */\n  options?: { label: string; value: string; description?: string }[];\n  /** Defaults to true */\n  required?: boolean;\n  /**\n   * Only meaningful for kind='text'. When true, the wizard-tools `wizard_ask`\n   * tool stores the user's answer in the session secret vault and returns\n   * `{ secretRef }` to the agent instead of the plain string — so the value\n   * never enters the LLM conversation. The TUI may also mask input\n   * accordingly. See `secret-vault.ts`.\n   */\n  sensitive?: boolean;\n}\n\n/** Map of question id → answer (string for single/text, string[] for multi). */\nexport type AskAnswers = Record<string, string | string[]>;\n\n/** A pending wizard_ask request held by the store. */\nexport interface PendingQuestion {\n  id: string;\n  questions: AskQuestion[];\n  /** Skill id of the caller. Set by the wizard from session.skillId. */\n  source: string;\n  /**\n   * When true, the ask overlay renders standalone URLs in prompt text as\n   * OSC 8 hyperlinks and copies a lone URL to the clipboard. Opt-in per\n   * program (set from `ProgramRun.richLinks` via the ask bridge); defaults\n   * to false so existing flows render prompts exactly as before. See\n   * `LinkText` / `link-helpers`.\n   */\n  richLinks?: boolean;\n}\n\n/**\n * PostHog dashboard URL emitted by the agent during a program run.\n * Populated via the `[DASHBOARD_URL]` text marker in agent assistant messages\n * — see `handleSDKMessage` in `agent/agent-interface.ts`. Read by programs\n * (e.g. events-audit) inside `buildOutroData` to surface a dashboard link\n * the agent actually created.\n */\n\nexport interface WizardSession {\n  // From CLI args\n  debug: boolean;\n  installDir: string;\n  ci: boolean;\n  signup: boolean;\n  localMcp: boolean;\n  mcpFeatures?: string[];\n  apiKey?: string;\n  email?: string;\n  region?: CloudRegion;\n  /**\n   * Explicit PostHog base URL (`--base-url`). When set, it pins every PostHog\n   * origin — API host, cloud/app URL, OAuth server — and `region` is ignored.\n   * The runtime equivalent of the dev-build localhost routing; lets the shipped\n   * wizard target a local/self-hosted stack. Threaded into the URL helpers in\n   * `@utils/urls`. Empty/unset → region-based resolution.\n   */\n  baseUrl?: string;\n  benchmark: boolean;\n  yaraReport: boolean;\n  projectId?: number;\n  noTelemetry: boolean;\n\n  /** `--harness` override, read by `resolveHarness`. Wins over the runner flag. */\n  harness?: Harness;\n  /** `--sequence` override, read in `runProgram`. Wins over the orchestrator flag. */\n  sequence?: Sequence;\n  /** `--model` override (gateway id), read by `resolveHarness`. Wins over the binding's model. */\n  model?: string;\n\n  // From detection + screens\n  setupConfirmed: boolean;\n  integration: Integration | null;\n  frameworkContext: Record<string, unknown>;\n  typescript: boolean;\n\n  /** Human-readable label for the detected framework variant (e.g., \"Django with Wagtail CMS\") */\n  detectedFrameworkLabel: string | null;\n\n  /** True once framework detection has run (whether it found something or not) */\n  detectionComplete: boolean;\n\n  /** Set when the detected framework version is too old for the wizard */\n  unsupportedVersion: {\n    current: string;\n    minimum: string;\n    docsUrl: string;\n  } | null;\n\n  // From OAuth\n  credentials: Credentials | null;\n\n  /**\n   * `role_at_organization` from `/api/users/@me/`. Null when the upstream\n   * value is missing (older accounts, fresh signups before onboarding).\n   * Drives role-tailored MCP prompt suggestions on the McpSuggestedPromptsScreen.\n   *\n   * Mirrors `apiUser?.role_at_organization` — kept as a top-level convenience\n   * because it has dedicated UI semantics (role-tailored kits) and pre-dates\n   * the broader `apiUser` plumbing.\n   */\n  roleAtOrganization: string | null;\n\n  /**\n   * Full user payload from `/api/users/@me/` — identifiers, profile,\n   * current team + organization, preferences, etc. Null until OAuth /\n   * CI-key auth populates it. Schema lives in `src/lib/api.ts` and\n   * passes through unknown upstream fields so downstream features can\n   * read account context (plan, org name, email, etc.) without\n   * re-fetching.\n   */\n  apiUser: ApiUser | null;\n\n  /**\n   * Project payload resolved at authentication, kept so a second agent run in\n   * the same invocation (e.g. self-driving's integration phase) reuses the\n   * first login wholesale instead of re-authenticating. The resolved region\n   * lives on `credentials.host.region`.\n   */\n  apiProject: ApiProject | null;\n\n  // Lifecycle\n  runPhase: RunPhase;\n  loginUrl: string | null;\n  // Direct PostHog authorize URL, shown in the manual-paste modal for\n  // headless/remote shells (the localhost loginUrl is unreachable there).\n  authorizeUrl: string | null;\n\n  // Feature discovery\n  discoveredFeatures: DiscoveredFeature[];\n  llmOptIn: boolean;\n\n  // ScreenId completion\n  mcpComplete: boolean;\n  mcpOutcome: McpOutcome | null;\n  mcpInstalledClients: string[];\n  mcpSuggestedPromptsDismissed: boolean;\n  /** True once the user has acted on (opened or skipped) the Connect-Slack step. */\n  slackStepDismissed: boolean;\n  /**\n   * Whether the project already has a Slack integration connected.\n   * `null` until detected. Prefetched by the tutorial screen as soon as\n   * credentials exist so the Connect-Slack step renders the right\n   * variant immediately instead of flashing the nudge first.\n   */\n  slackConnected: boolean | null;\n  skillsComplete: boolean;\n  outroDismissed: boolean;\n\n  /**\n   * Self-driving only: whether to integrate PostHog as part of this run.\n   * `null` until decided. When detection finds no PostHog SDK, the\n   * integration-check screen sets this to `true` (Self-driving needs an SDK,\n   * so we always integrate in that case) — and, on the same screen, asks\n   * whether the user already has a PostHog account: \"yes\" leaves `signup`\n   * false (OAuth login); \"no\" flips `signup` and collects `email`/`region`\n   * so auth provisions a new account. The `--integrate` flag pre-sets this to\n   * `true`, skipping the screen entirely and defaulting to the OAuth login.\n   * When `true`, the self-driving prompt has the agent set up the SDK before\n   * the Self-driving steps. Unused by other programs.\n   */\n  integrate: boolean | null;\n\n  /**\n   * Ids of composed run steps that have completed — e.g. self-driving's\n   * `integrate-run`. Lets a run step's `isComplete` hold after it ran,\n   * independent of the shared `runPhase`.\n   */\n  completedRuns: string[];\n\n  /**\n   * Self-driving only: whether the user confirmed the handoff screen shown\n   * after the integration run (\"PostHog is installed — now set up Self-driving\").\n   * Gates the Self-driving run so it doesn't start until acknowledged. Only\n   * reached in the integrate path; the already-has-PostHog path skips it.\n   */\n  selfDrivingHandoffConfirmed: boolean;\n\n  // Runtime\n  readinessResult: WizardReadinessResult | null;\n  outageDismissed: boolean;\n  settingsOverrideKeys: string[] | null;\n  settingsConflicts: SettingsConflict[] | null;\n  authErrorDetail: {\n    hasSettingsConflict: boolean;\n    conflicts?: SettingsConflict[];\n    logFilePath: string;\n  } | null;\n  portConflictProcess: {\n    command: string;\n    pid: string;\n    port: number;\n    user: string;\n  } | null;\n  outroData: OutroData | null;\n  dashboardUrl: string | null;\n  notebookUrl: string | null;\n\n  // Additional features queue (drained via stop hook after main integration)\n  additionalFeatureQueue: AdditionalFeature[];\n\n  // Program metadata (set by runWizard in bin.ts)\n  programLabel: string | null;\n  skillId: string | null;\n\n  // Resolved framework config (set after integration is known)\n  frameworkConfig: FrameworkConfig | null;\n\n  /** Active wizard_ask request, set by the bridge when the agent calls the tool. */\n  pendingQuestion: PendingQuestion | null;\n}\n\n/**\n * Build a WizardSession from CLI args, pre-populating whatever is known.\n */\nexport function buildSession(args: {\n  debug?: boolean;\n  installDir?: string;\n  ci?: boolean;\n  signup?: boolean;\n  localMcp?: boolean;\n  mcpFeatures?: string[];\n  apiKey?: string;\n  email?: string;\n  region?: CloudRegion;\n  baseUrl?: string;\n  integration?: Integration;\n  benchmark?: boolean;\n  yaraReport?: boolean;\n  projectId?: string;\n  noTelemetry?: boolean;\n  harness?: Harness;\n  sequence?: Sequence;\n  model?: string;\n  integrate?: boolean;\n}): WizardSession {\n  return {\n    debug: args.debug ?? false,\n    installDir: args.installDir ?? process.cwd(),\n    ci: args.ci ?? false,\n    signup: args.signup ?? false,\n    localMcp: args.localMcp ?? false,\n    mcpFeatures: args.mcpFeatures,\n    apiKey: args.apiKey,\n    email: args.email,\n    region: args.region,\n    baseUrl: args.baseUrl,\n    benchmark: args.benchmark ?? false,\n    yaraReport: args.yaraReport ?? false,\n    projectId: parseProjectIdArg(args.projectId),\n    noTelemetry: args.noTelemetry ?? false,\n    harness: args.harness,\n    sequence: args.sequence,\n    model: args.model,\n\n    setupConfirmed: false,\n    integration: args.integration ?? null,\n    frameworkContext: {},\n    typescript: false,\n    detectedFrameworkLabel: null,\n    detectionComplete: false,\n    unsupportedVersion: null,\n\n    runPhase: RunPhase.Idle,\n    discoveredFeatures: [],\n    llmOptIn: false,\n    mcpComplete: false,\n    mcpOutcome: null,\n    mcpInstalledClients: [],\n    mcpSuggestedPromptsDismissed: false,\n    slackStepDismissed: false,\n    slackConnected: null,\n    skillsComplete: false,\n    outroDismissed: false,\n    // `--integrate` forces integration (skip the question); otherwise the\n    // integration-check screen resolves it from null.\n    integrate: args.integrate === true ? true : null,\n    completedRuns: [],\n    selfDrivingHandoffConfirmed: false,\n    loginUrl: null,\n    authorizeUrl: null,\n    credentials: null,\n    roleAtOrganization: null,\n    apiUser: null,\n    apiProject: null,\n    readinessResult: null,\n    outageDismissed: false,\n    settingsOverrideKeys: null,\n    settingsConflicts: null,\n    authErrorDetail: null,\n    portConflictProcess: null,\n    outroData: null,\n    dashboardUrl: null,\n    notebookUrl: null,\n    additionalFeatureQueue: [],\n    programLabel: null,\n    skillId: null,\n    frameworkConfig: null,\n    pendingQuestion: null,\n  };\n}\n"],"mappings":";AA2BA,SAAS,kBAAkB,OAA+C;AACxE,KAAI,UAAU,KAAA,KAAa,UAAU,GAAI,QAAO,KAAA;CAChD,MAAM,IAAI,OAAO,MAAM;AACvB,QAAO,OAAO,UAAU,EAAE,IAAI,IAAI,IAAI,IAAI,KAAA;;;AAM5C,IAAY,WAAL,yBAAA,UAAA;;AAEL,UAAA,UAAA;;AAEA,UAAA,aAAA;;AAEA,UAAA,eAAA;;AAEA,UAAA,WAAA;;KACD;;AAcD,MAAa,4BAA+D,GAAA,QACjD,oBAC1B;;AAGD,MAAa,6BAAgE,GAAA,QAClD,0RAC1B;;AAWD,IAAY,YAAL,yBAAA,WAAA;AACL,WAAA,aAAA;AACA,WAAA,WAAA;AACA,WAAA,YAAA;;KACD;;;;AAyQD,SAAgB,aAAa,MAoBX;AAChB,QAAO;EACL,OAAO,KAAK,SAAS;EACrB,YAAY,KAAK,cAAc,QAAQ,KAAK;EAC5C,IAAI,KAAK,MAAM;EACf,QAAQ,KAAK,UAAU;EACvB,UAAU,KAAK,YAAY;EAC3B,aAAa,KAAK;EAClB,QAAQ,KAAK;EACb,OAAO,KAAK;EACZ,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,WAAW,KAAK,aAAa;EAC7B,YAAY,KAAK,cAAc;EAC/B,WAAW,kBAAkB,KAAK,UAAU;EAC5C,aAAa,KAAK,eAAe;EACjC,SAAS,KAAK;EACd,UAAU,KAAK;EACf,OAAO,KAAK;EAEZ,gBAAgB;EAChB,aAAa,KAAK,eAAe;EACjC,kBAAkB,EAAE;EACpB,YAAY;EACZ,wBAAwB;EACxB,mBAAmB;EACnB,oBAAoB;EAEpB,UAAA;EACA,oBAAoB,EAAE;EACtB,UAAU;EACV,aAAa;EACb,YAAY;EACZ,qBAAqB,EAAE;EACvB,8BAA8B;EAC9B,oBAAoB;EACpB,gBAAgB;EAChB,gBAAgB;EAChB,gBAAgB;EAGhB,WAAW,KAAK,cAAc,OAAO,OAAO;EAC5C,eAAe,EAAE;EACjB,6BAA6B;EAC7B,UAAU;EACV,cAAc;EACd,aAAa;EACb,oBAAoB;EACpB,SAAS;EACT,YAAY;EACZ,iBAAiB;EACjB,iBAAiB;EACjB,sBAAsB;EACtB,mBAAmB;EACnB,iBAAiB;EACjB,qBAAqB;EACrB,WAAW;EACX,cAAc;EACd,aAAa;EACb,wBAAwB,EAAE;EAC1B,cAAc;EACd,SAAS;EACT,iBAAiB;EACjB,iBAAiB;EAClB"}

package/dist/yara-hooks-Cj7xUAKE.js

@@ -1,2 +0,0 @@
-import { l as prewarmYaraScanner } from "./yara-hooks-Cu0rEw1L.js";
-export { prewarmYaraScanner };