@posthog/wizard 2.76.1 → 2.78.0

package/dist/debug-DWYDVp0B.js

@@ -1,750 +0,0 @@
-import { a as getLocalDev, t as CONTEXT_MILL_LOCAL_URL } from "./local-dev-DPZiIPCK.js";
-import { appendFileSync, mkdirSync } from "fs";
-import path from "path";
-import { inspect } from "node:util";
-import { tmpdir } from "node:os";
-import { join as join$1, sep as sep$1 } from "node:path";
-//#region src/lib/headless-mode.ts
-/**
-* The on-CLI flag name. Intentionally ugly + undocumented; do not surface it in
-* `--help`, the README, or user-facing error messages.
-*/
-const HEADLESS_FLAG = "headless-DONOTUSE-EXPERIMENTAL";
-/**
-* The yargs option declaration for the headless flag. Commands opt in so that
-* unsupported commands reject headless execution instead of starting it.
-*/
-const headlessOption = { [HEADLESS_FLAG]: {
-	default: false,
-	describe: "EXPERIMENTAL — do not use. Unstable, subject to breaking changes.",
-	type: "boolean",
-	hidden: true
-} };
-/**
-* Read the headless signal off a parsed argv / options bag. yargs always sets
-* the value under the declared key (`HEADLESS_FLAG`), so reading that key is
-* reliable regardless of camel-case expansion.
-*/
-function isHeadless(options) {
-	return options[HEADLESS_FLAG] === true;
-}
-const regionOption = { region: {
-	describe: "PostHog cloud region\nenv: POSTHOG_WIZARD_REGION",
-	choices: ["us", "eu"],
-	type: "string",
-	hidden: true
-} };
-//#endregion
-//#region src/env.ts
-/**
-* Central environment variable access for the PostHog wizard.
-*
-* ── Build-time constants ────────────────────────────────────────────
-* Inlined by tsdown's `env` option at compile time. After build, the
-* runtime value of these env vars has zero effect on the wizard.
-*
-* ── Runtime variables ───────────────────────────────────────────────
-* Read through `runtimeEnv()` with a typed allowlist. This makes every
-* runtime dependency on the environment explicit and grep-able.
-*
-* ── Direct process.env access ───────────────────────────────────────
-* Reserved for subprocess environment configuration (writes) and
-* vendored code. Production source outside those cases should use
-* this module instead.
-*/
-const NODE_ENV = "production";
-/** 'cloud' when launched with the experimental headless flag, else 'local' — resolved once from argv at launch. */
-const RUN_SURFACE = process.argv.some((a) => a === `--headless-DONOTUSE-EXPERIMENTAL` || a.startsWith(`--headless-DONOTUSE-EXPERIMENTAL=`)) ? "cloud" : "local";
-/** Read a runtime environment variable. Only allowlisted keys compile. */
-function runtimeEnv(key) {
-	return process.env[key];
-}
-/**
-* The PostHog task run that launched this wizard, when one did. A cloud run's
-* sandbox exports both ids into the wizard's environment; every local run
-* leaves them undefined. Resolved once at launch, like RUN_SURFACE above.
-*/
-const TASK_RUN_ID = runtimeEnv("POSTHOG_TASK_RUN_ID") || void 0;
-const TASK_ID = runtimeEnv("POSTHOG_TASK_ID") || void 0;
-//#endregion
-//#region src/lib/version.ts
-const VERSION = "2.76.1";
-//#endregion
-//#region src/lib/constants.ts
-/**
-* Shared constants for the PostHog wizard.
-*/
-/** Next sonnet generation (a `MODEL_FLAG_VARIANTS` key in the switchboard). */
-const SONNET_5_MODEL = "claude-sonnet-5";
-/**
-* Default model for agent runs. Bare model IDs (no `anthropic/` prefix) so the
-* LLM gateway's Bedrock fallback can match map_to_bedrock_model().
-*/
-const DEFAULT_AGENT_MODEL = SONNET_5_MODEL;
-/** Undated haiku, for scan triage. The alias tracks the current 4.5 release rather than pinning one. */
-const HAIKU_TRIAGE_MODEL = "claude-haiku-4-5";
-/**
-* Cheaper, faster model for mechanical agent work (e.g. repo classification
-* during source-map detection). Passed via AgentConfig.modelOverride.
-*/
-const HAIKU_MODEL = HAIKU_TRIAGE_MODEL;
-const GPT5_6_LUNA_MODEL = "openai/gpt-5.6-luna";
-const GPT5_6_TERRA_MODEL = "openai/gpt-5.6-terra";
-const GPT5_6_SOL_MODEL = "openai/gpt-5.6-sol";
-/**
-* The two agent runner routing axes: **harness** (which agent SDK drives the LLM)
-* and **sequence** (which pipeline shape orchestrates the work). Single source
-* of truth for yargs `choices`, session fields, the runner registry, and tests
-* — `Object.values(Harness)` gives an iterable of the values when an array is
-* needed. Adding a member is enough to pick it up everywhere.
-*
-* Naming matches the directory layout — see `src/lib/agent/runner/harness/`
-* and `src/lib/agent/runner/sequence/`.
-*/
-let Harness = /* @__PURE__ */ function(Harness) {
-	Harness["anthropic"] = "anthropic";
-	Harness["pi"] = "pi";
-	return Harness;
-}({});
-let Sequence = /* @__PURE__ */ function(Sequence) {
-	Sequence["linear"] = "linear";
-	Sequence["orchestrator"] = "orchestrator";
-	return Sequence;
-}({});
-/**
-* Detection order matters: put framework-specific integrations BEFORE basic language fallbacks.
-*/
-let Integration = /* @__PURE__ */ function(Integration) {
-	Integration["nextjs"] = "nextjs";
-	Integration["nuxt"] = "nuxt";
-	Integration["vue"] = "vue";
-	Integration["reactRouter"] = "react-router";
-	Integration["tanstackStart"] = "tanstack-start";
-	Integration["tanstackRouter"] = "tanstack-router";
-	Integration["reactNative"] = "react-native";
-	Integration["angular"] = "angular";
-	Integration["astro"] = "astro";
-	Integration["django"] = "django";
-	Integration["flask"] = "flask";
-	Integration["fastapi"] = "fastapi";
-	Integration["laravel"] = "laravel";
-	Integration["sveltekit"] = "sveltekit";
-	Integration["flutter"] = "flutter";
-	Integration["kmp"] = "kmp";
-	Integration["swift"] = "swift";
-	Integration["android"] = "android";
-	Integration["rails"] = "rails";
-	Integration["elixir"] = "elixir";
-	Integration["go"] = "go";
-	Integration["rust"] = "rust";
-	Integration["java"] = "java";
-	Integration["python"] = "python";
-	Integration["ruby"] = "ruby";
-	Integration["javascript_web"] = "javascript_web";
-	Integration["javascriptNode"] = "javascript_node";
-	return Integration;
-}({});
-/**
-* Region-agnostic PostHog app URL. Resolves to us.posthog.com or
-* eu.posthog.com server-side based on the signed-in user's profile.
-* Use this for share-with-user links (e.g. settings pages) so they
-* land on the right region without us needing to know it client-side.
-*/
-const POSTHOG_APP_URL = "https://app.posthog.com";
-const ISSUES_URL = "https://github.com/posthog/wizard/issues";
-/** Public status page, linked from transient-failure guidance (e.g. OAuth server_error). */
-const POSTHOG_STATUS_PAGE_URL = "https://www.posthogstatus.com";
-const CONTEXT_MILL_URL = "https://github.com/PostHog/context-mill";
-/**
-* Latest context-mill release page — the BYOAI download link shown in
-* the privacy panel. Deliberately the release PAGE, not a direct asset
-* URL: asset URLs are ~89 chars and hard-wrap inside the 64-col panel,
-* which corrupts terminal copy/paste with a mid-URL line break. This
-* stays under one line; the panel names the exact asset to grab.
-*/
-const CONTEXT_MILL_RELEASES_URL = "https://github.com/PostHog/context-mill/releases/latest";
-const POSTHOG_DOCS_URL = "https://posthog.com/docs";
-const POSTHOG_TERMS_URL = "https://posthog.com/terms";
-const POSTHOG_PRIVACY_URL = "https://posthog.com/privacy";
-const POSTHOG_ORG_AI_SETTINGS_URL = "https://app.posthog.com/settings/organization-details#setting=organization-ai-consent";
-const WIZARD_CONTACT_EMAIL = "wizard@posthog.com";
-/**
-* Two origins for the same release, same filenames. Interchangeable bases, so
-* making AWS primary is a `getSkillsBaseUrl` change, not a code change.
-*/
-const GITHUB_SKILLS_BASE_URL = "https://github.com/PostHog/context-mill/releases/latest/download";
-const AWS_SKILLS_BASE_URL = "https://context-mill.posthog.com/latest";
-/** Alias of `@lib/local-dev`'s constant, kept for existing importers. */
-const LOCAL_SKILLS_BASE_URL = CONTEXT_MILL_LOCAL_URL;
-/**
-* Driven by `--local-context-mill`, NOT `--local-mcp` (which used to select
-* both). Takes no argument on purpose: callers can't pass the wrong flag.
-*/
-function getSkillsBaseUrl() {
-	return getLocalDev().localContextMill ? LOCAL_SKILLS_BASE_URL : GITHUB_SKILLS_BASE_URL;
-}
-const ANALYTICS_POSTHOG_PUBLIC_PROJECT_WRITE_KEY = "sTMFPsFhdP1Ssg";
-const ANALYTICS_HOST_URL = "https://internal-j.posthog.com";
-const ANALYTICS_TEAM_TAG = "docs-and-wizard";
-const OAUTH_PORTS = [
-	8239,
-	8238,
-	8240,
-	8237,
-	8236,
-	8235
-];
-const POSTHOG_US_CLIENT_ID = "c4Rdw8DIxgtQfA80IiSnGKlNX8QN00cFWF00QQhM";
-const POSTHOG_EU_CLIENT_ID = "bx2C5sZRN03TkdjraCcetvQFPGH6N2Y9vRLkcKEy";
-const POSTHOG_DEV_CLIENT_ID = "DC5uRLVbGI02YQ82grxgnK6Qn12SXWpCqdPb60oZ";
-const POSTHOG_PROXY_CLIENT_ID = POSTHOG_US_CLIENT_ID;
-const DUMMY_PROJECT_API_KEY = "_YOUR_POSTHOG_PROJECT_TOKEN_";
-/**
-* Scopes the wizard requests during the agentic provisioning signup flow.
-*
-* Each entry is justified by what the wizard's agent step does after signup:
-* - user:read         identify the user for analytics + agent context
-* - project:read      look up the freshly-provisioned project
-* - llm_gateway:read  authenticate to gateway.{us,eu}.posthog.com/wizard
-*                     (the agent's LLM calls — without this scope, every
-*                     agent message returns 401)
-* - query:read        run HogQL queries when the agent needs data
-* - dashboard:write   create the onboarding dashboard during setup
-* - insight:write     create the onboarding insights during setup
-* - notebook:write    upload the events-audit report as a PostHog notebook
-*                     in step 6 of the events-audit skill (notebooks-create
-*                     MCP tool requires this scope)
-* - event_definition:write
-*                     create event definitions from the completed wizard
-*                     session's event plan
-*
-* Must be a subset of `ALLOWED_PROVISIONING_SCOPES` in
-* `ee/api/agentic_provisioning/views.py` on the backend.
-*/
-const WIZARD_PROVISIONING_SCOPES = [
-	"user:read",
-	"project:read",
-	"llm_gateway:read",
-	"dashboard:write",
-	"insight:write",
-	"query:read",
-	"notebook:write",
-	"event_definition:write"
-];
-/**
-* Scopes the wizard requests during the OAuth login flow. Superset of
-* `WIZARD_PROVISIONING_SCOPES` with scopes that only apply to the login
-* path and are not in the provisioning allowlist:
-* - health_issue:read     used by `wizard doctor`
-* - wizard_session:read   list / retrieve / stream sessions
-* - wizard_session:write  stream run state to /api/projects/{id}/wizard/sessions/
-* - event_definition:write
-*                          create event definitions when a session completes
-* - organization:read     read `organization.is_ai_data_processing_approved`
-*                         from /api/users/@me/ for the AI opt-in gate
-*
-* NOTE: every scope here must be within the wizard OAuth application's
-* server-side scope ceiling (`OAuthApplication.scopes` in posthog, set
-* via Django admin on BOTH prod regions). A scope outside the ceiling
-* does NOT fail the authorize request — the server silently clamps the
-* request to the ceiling (`clamp_scopes_to_ceiling` in posthog) and the
-* token comes back without it. Separately, the consent screen lets the
-* user deselect any scope the app doesn't mark required. Both paths
-* yield a granted `scope` narrower than requested, with no error, so
-* never assume the token carries this list — the token response's
-* `scope` field is the truth, and `missingOAuthScopes` (utils/oauth.ts)
-* diffs it at login. Ceiling procedure: the "scope-ceiling-invalid-scope"
-* runbook in PostHog/runbooks. Keep its worked example in sync when this
-* list changes.
-*/
-const WIZARD_OAUTH_SCOPES = [
-	...WIZARD_PROVISIONING_SCOPES,
-	"health_issue:read",
-	"wizard_session:read",
-	"wizard_session:write",
-	"organization:read"
-];
-const WIZARD_INTERACTION_EVENT_NAME = "wizard interaction";
-const WIZARD_REMARK_EVENT_NAME = "wizard remark";
-/** Boolean feature flag that routes a run to the experimental orchestrator runner. */
-const WIZARD_ORCHESTRATOR_FLAG_KEY = "wizard-orchestrator";
-/** Multivariate flag: per-stage orchestrator overrides ride each variant's JSON payload (`{stage: {model?, effort?}}`). */
-const WIZARD_ORCHESTRATOR_OVERRIDE_FLAG_KEY = "wizard-orchestrator-override";
-/** Boolean flag: on → pi for self-driving. Payload carries `{model, effort?, harness?, sequence?}` (model = a `MODEL_FLAG_VARIANTS` key); missing/invalid payload keeps the non-flagged default. */
-const WIZARD_SELF_DRIVING_USE_PI_HARNESS_FLAG_KEY = "wizard-self-driving-use-pi-harness";
-/** Boolean flag: agentic project scoping for non-interactive basic-integration runs. */
-const WIZARD_BASIC_INTEGRATION_AGENTIC_DETECTION_FLAG_KEY = "wizard-basic-integration-agentic-detection";
-/** Boolean flag: the orchestrator queues the program's runner-seeded tasks (the warehouse step). Off, no task is queued and the run is byte-identical to a no-sources project. */
-const WIZARD_ORCHESTRATOR_SEEDED_TASKS_FLAG_KEY = "wizard-orchestrator-seeded-tasks";
-const WIZARD_FLAG_KEYS = [
-	WIZARD_ORCHESTRATOR_FLAG_KEY,
-	WIZARD_ORCHESTRATOR_OVERRIDE_FLAG_KEY,
-	WIZARD_ORCHESTRATOR_SEEDED_TASKS_FLAG_KEY,
-	WIZARD_SELF_DRIVING_USE_PI_HARNESS_FLAG_KEY,
-	WIZARD_BASIC_INTEGRATION_AGENTIC_DETECTION_FLAG_KEY
-];
-/** User-Agent for wizard HTTP requests and MCP server identification. */
-const WIZARD_USER_AGENT = `posthog/wizard; version: ${VERSION}`;
-/**
-* User-Agent for a specific program's MCP calls, tagged with `program: <id>` so the
-* backend can attribute work per program (e.g. the `self-driving` program's warehouse
-* sources are recorded as `created_via=self_driving` rather than plain `wizard`). The
-* base `posthog/wizard` token is preserved, so anything keying only on that still matches.
-*/
-function wizardUserAgentForProgram(programId) {
-	return programId ? `${WIZARD_USER_AGENT}; program: ${programId}` : WIZARD_USER_AGENT;
-}
-/** Timeout for framework / project detection probes (ms). */
-const DETECTION_TIMEOUT_MS = 1e4;
-/** Timeout for the agentic project scan (ms); past it the run falls back to root detection. */
-const AGENTIC_DETECTION_TIMEOUT_MS = 6e4;
-/**
-* Timeout for the OAuth authorization flow (ms).
-*
-* How long the user has to complete the browser login. The authorization
-* code is minted at approval and exchanged immediately on callback, so the
-* server-side code expiry (`AUTHORIZATION_CODE_EXPIRE_SECONDS`, 5 minutes)
-* bounds only the approval→exchange gap — manual-paste users have 5 minutes
-* from approval to submit the code — not how long this window may stay open.
-*/
-const OAUTH_TIMEOUT_MS = 18e5;
-//#endregion
-//#region src/ui/wizard-ui.ts
-let TaskStatus = /* @__PURE__ */ function(TaskStatus) {
-	TaskStatus["Pending"] = "pending";
-	TaskStatus["InProgress"] = "in_progress";
-	TaskStatus["Completed"] = "completed";
-	TaskStatus["Skipped"] = "skipped";
-	return TaskStatus;
-}({});
-function isTaskStatus(value) {
-	return Object.values(TaskStatus).includes(value);
-}
-//#endregion
-//#region src/lib/health-checks/endpoints.ts
-function noConnectionResult(error, attempts) {
-	return {
-		status: "no-connection",
-		error,
-		rawIndicator: attempts > 1 ? `attempts=${attempts}` : void 0
-	};
-}
-function downResult(error) {
-	return {
-		status: "down",
-		error
-	};
-}
-const RETRY_BACKOFFS_MS = [500, 2e3];
-async function attemptFetch(url, timeoutMs, redirect) {
-	const controller = new AbortController();
-	const tid = setTimeout(() => controller.abort(), timeoutMs);
-	try {
-		const res = await fetch(url, {
-			signal: controller.signal,
-			redirect
-		});
-		clearTimeout(tid);
-		return {
-			kind: "response",
-			res
-		};
-	} catch (e) {
-		clearTimeout(tid);
-		const err = e instanceof Error ? e : /* @__PURE__ */ new Error("Unknown error");
-		return {
-			kind: "error",
-			error: err,
-			timedOut: err.name === "AbortError"
-		};
-	}
-}
-async function fetchEndpointHealth(url, timeoutMs = 5e3, isExpectedStatus = (s) => s === 200, redirect = "follow") {
-	let lastHttpStatus = null;
-	let lastError = "Unknown error";
-	let attempts = 0;
-	for (let i = 0; i <= RETRY_BACKOFFS_MS.length; i++) {
-		if (i > 0) {
-			const wait = RETRY_BACKOFFS_MS[i - 1];
-			logToFile(`[health-checks] retry ${i}/${RETRY_BACKOFFS_MS.length} for ${url} in ${wait}ms (last: ${lastError})`);
-			await new Promise((r) => setTimeout(r, wait));
-		}
-		attempts++;
-		const outcome = await attemptFetch(url, timeoutMs, redirect);
-		if (outcome.kind === "response") {
-			const res = outcome.res;
-			if (isExpectedStatus(res.status)) {
-				const result = {
-					status: "healthy",
-					rawIndicator: attempts > 1 ? `HTTP ${res.status} (attempts=${attempts})` : `HTTP ${res.status}`
-				};
-				logToFile(`[health-checks] GET ${url} -> ${result.status} (${result.rawIndicator})`);
-				return result;
-			}
-			lastHttpStatus = res.status;
-			lastError = `HTTP ${res.status}`;
-			continue;
-		}
-		lastError = outcome.timedOut ? `Request timed out after ${timeoutMs}ms` : outcome.error.message;
-	}
-	const result = lastHttpStatus !== null ? downResult(`HTTP ${lastHttpStatus} (attempts=${attempts})`) : noConnectionResult(lastError, attempts);
-	logToFile(`[health-checks] GET ${url} -> ${result.status} (attempts=${attempts}, ${result.error})`);
-	return result;
-}
-const checkLlmGatewayHealth = (gatewayUrl) => fetchEndpointHealth(new URL("/readyz", gatewayUrl).href);
-/**
-* Skills are published to two origins under the same filenames and
-* `fetchWithRetry` fails over between them, so the run is only blocked when
-* neither answers. Probed in parallel — sequential probes would double the
-* worst case past `READINESS_TIMEOUT_MS`.
-*/
-const checkSkillsOriginHealth = async () => {
-	const [github, aws] = await Promise.all([fetchEndpointHealth(`${GITHUB_SKILLS_BASE_URL}/skill-menu.json`), fetchEndpointHealth(`${AWS_SKILLS_BASE_URL}/skill-menu.json`)]);
-	return combineOriginHealth(github, aws);
-};
-/**
-* Mirrors `fetchWithRetry`: a download tries GitHub, then AWS, so the run is
-* only blocked when neither origin answers. Whichever failure the probes saw,
-* one origin serving means skills are reachable.
-*/
-function combineOriginHealth(github, aws) {
-	if (github.status === "healthy") return aws.status === "healthy" ? github : withIndicatorSuffix(github, "aws unavailable");
-	if (aws.status === "healthy") return withIndicatorSuffix(aws, "via aws, github unavailable");
-	const error = `github: ${github.error ?? "unknown"} | aws: ${aws.error ?? "unknown"}`;
-	return {
-		status: github.status === "down" || aws.status === "down" ? "down" : "no-connection",
-		error,
-		rawIndicator: github.rawIndicator ?? aws.rawIndicator
-	};
-}
-function withIndicatorSuffix(result, suffix) {
-	return {
-		...result,
-		rawIndicator: result.rawIndicator ? `${result.rawIndicator} (${suffix})` : suffix
-	};
-}
-//#endregion
-//#region src/lib/health-checks/readiness.ts
-const SERVICE_LABELS = { skillsOrigin: "Skills download" };
-const DEFAULT_WIZARD_READINESS_CONFIG = { downBlocksRun: ["skillsOrigin"] };
-const SIGNUP_WIZARD_READINESS_CONFIG = DEFAULT_WIZARD_READINESS_CONFIG;
-async function checkAllExternalServices() {
-	return { skillsOrigin: await checkSkillsOriginHealth() };
-}
-function describeResult(label, h) {
-	const parts = [`${label}: ${h.status}`];
-	if (h.rawIndicator) parts.push(`indicator=${h.rawIndicator}`);
-	if (h.error) parts.push(h.error);
-	return parts.join(" — ");
-}
-const READINESS_TIMEOUT_MS = 2e4;
-async function evaluateWizardReadiness(config = DEFAULT_WIZARD_READINESS_CONFIG) {
-	try {
-		const health = await Promise.race([checkAllExternalServices(), new Promise((resolve) => setTimeout(() => resolve(allUnknown("Health check timed out")), READINESS_TIMEOUT_MS))]);
-		const blockingKeys = getBlockingServiceKeys(health, config);
-		const reasons = blockingKeys.map((key) => describeResult(SERVICE_LABELS[key], health[key]));
-		if (blockingKeys.length > 0) {
-			logToFile(`[health-checks] blocked by: ${blockingKeys.map((key) => {
-				const h = health[key];
-				return `${key} (${h.status}${h.error ? ` — ${h.error}` : ""})`;
-			}).join(", ")}`);
-			return {
-				decision: "no",
-				health,
-				reasons
-			};
-		}
-		return {
-			decision: "yes",
-			health,
-			reasons
-		};
-	} catch (err) {
-		logToFile(`[health-checks] error: ${err instanceof Error ? err.message : err}`);
-		return {
-			decision: "yes",
-			health: allUnknown("Unexpected error"),
-			reasons: []
-		};
-	}
-}
-function getBlockingServiceKeys(health, config = DEFAULT_WIZARD_READINESS_CONFIG) {
-	return Object.keys(health).filter((key) => {
-		const result = health[key];
-		if (config.downBlocksRun.includes(key) && (result.status === "down" || result.status === "no-connection")) return true;
-		if ((config.degradedBlocksRun ?? []).includes(key) && result.status !== "healthy") return true;
-		return false;
-	});
-}
-/** Build an AllServicesHealth where every service is Degraded with the given error. */
-function allUnknown(error) {
-	return { skillsOrigin: {
-		status: "degraded",
-		error
-	} };
-}
-//#endregion
-//#region src/ui/logging-ui.ts
-var LoggingUI = class {
-	intro(message) {
-		console.log(`┌  ${message}`);
-	}
-	outro(message) {
-		console.log(`└  ${message}`);
-	}
-	outroError(data) {
-		console.log(`✖  ${data.message ?? "Wizard aborted"}`);
-		if (data.body) console.log(`│  ${data.body}`);
-		if (data.docsUrl) console.log(`│  Docs: ${data.docsUrl}`);
-	}
-	waitForOutroDismissed() {
-		return Promise.resolve();
-	}
-	waitForAiOptIn() {
-		return Promise.resolve();
-	}
-	cancel(message) {
-		console.log(`■  ${message}`);
-	}
-	log = {
-		info(message) {
-			console.log(`│  ${message}`);
-		},
-		warn(message) {
-			console.log(`▲  ${message}`);
-		},
-		error(message) {
-			console.log(`✖  ${message}`);
-		},
-		success(message) {
-			console.log(`✔  ${message}`);
-		},
-		step(message) {
-			console.log(`◇  ${message}`);
-		}
-	};
-	note(message) {
-		console.log(`│  ${message}`);
-	}
-	spinner() {
-		return {
-			start(message) {
-				if (message) console.log(`◌  ${message}`);
-			},
-			stop(message) {
-				if (message) console.log(`●  ${message}`);
-			},
-			message(msg) {
-				if (msg) console.log(`◌  ${msg}`);
-			}
-		};
-	}
-	pushStatus(message) {
-		console.log(`◇  ${message}`);
-	}
-	setDetectedFramework(label) {
-		console.log(`✔  Framework: ${label}`);
-	}
-	onEnterScreen(_screen, _fn) {}
-	setLoginUrl(url) {
-		if (url) {
-			console.log(`│  If the browser didn't open automatically, use this link:`);
-			console.log(`│  ${url}`);
-		}
-	}
-	setAuthorizeUrl(_url) {}
-	showBlockingOutage(result) {
-		console.log(`▲  Service health issues detected.`);
-		const blockingKeys = getBlockingServiceKeys(result.health);
-		if (blockingKeys.length > 0) {
-			console.log(`│`);
-			console.log(`│  Blocking services:`);
-			for (const key of blockingKeys) {
-				const status = result.health[key].status;
-				const error = result.health[key].error;
-				const label = SERVICE_LABELS[key];
-				const detail = error ? ` — ${error}` : "";
-				console.log(`│    ✖ ${label}: ${status}${detail}`);
-			}
-			console.log(`│`);
-		}
-		for (const reason of result.reasons) console.log(`│  ${reason}`);
-		console.log(`│  Continuing anyway — health checks are advisory in non-interactive runs.`);
-		return Promise.resolve();
-	}
-	setReadinessWarnings(result) {
-		console.log(`▲  Service health warnings detected.`);
-		for (const reason of result.reasons) console.log(`│  ${reason}`);
-	}
-	showPortConflict(_processInfo) {
-		return Promise.resolve();
-	}
-	waitForManualAuthCode() {
-		return new Promise(() => {});
-	}
-	showTaskNotice(_notice) {
-		return Promise.resolve(false);
-	}
-	cancelTaskNotice() {}
-	showSettingsOverride(_conflicts, _backupAndFix) {
-		return Promise.resolve();
-	}
-	requestQuestion(_question) {
-		return Promise.reject(/* @__PURE__ */ new Error("wizard_ask is not available in CI / non-interactive mode. Re-run the wizard without --ci to answer interactively."));
-	}
-	cancelPendingQuestion() {}
-	showAuthError(detail) {
-		console.log(`✖  Authentication failed (401)`);
-		if (detail?.hasSettingsConflict) {
-			console.log(`│  Claude Code auth is conflicting with the wizard. Please try again after logging out:`);
-			console.log(`│    claude auth logout`);
-		} else {
-			console.log(`│  The PostHog LLM Gateway rejected the API key. Common causes:`);
-			console.log(`│    - Wrong key type: pass a personal API key (phx_xxx). pha_ is an OAuth access token, phc_ is a project key.`);
-			console.log(`│    - Missing scope: the personal API key needs the "llm_gateway:read" scope.`);
-			console.log(`│    - Expired or revoked key.`);
-			console.log(`│    - Region mismatch: --region must match the region the key was issued in (us vs eu).`);
-		}
-		if (detail?.logFilePath) console.log(`│  Verbose log: ${detail.logFilePath}`);
-	}
-	showSessionTimeout() {
-		const minutes = Math.round(OAUTH_TIMEOUT_MS / 6e4);
-		console.log(`✖  Login timed out. The OAuth link timed out after ${minutes} minutes.`);
-		console.log(`│  Re-run the wizard to get a fresh link and try again.`);
-	}
-	startRun() {}
-	setCredentials(_credentials) {}
-	setAccessToken(_credentials) {}
-	setRoleAtOrganization(_role) {}
-	setApiUser(_user) {}
-	lastTodoLine = "";
-	syncTodos(todos) {
-		const completed = todos.filter((t) => t.status === "completed").length;
-		const active = todos.filter((t) => t.status === "in_progress");
-		if (active.length === 0) return;
-		const labels = active.map((t) => t.activeForm || t.content).join(" · ");
-		const line = `◌  [${completed}/${todos.length}] ${labels}`;
-		if (line === this.lastTodoLine) return;
-		this.lastTodoLine = line;
-		console.log(line);
-	}
-	setEventPlan(_events) {}
-	setDashboardUrl(_url) {}
-	setStage(_stage) {}
-	setNotebookUrl(_url) {}
-	setHandoffText(_text) {}
-	addTokenUsage(_delta) {}
-	setFinalTokenCostUsd(_costUsd) {}
-	setOutroData(_data) {}
-	setFrameworkContext(_key, _value) {}
-	getFrameworkContext(_key) {}
-	waitForGate(_stepId) {
-		return Promise.resolve();
-	}
-};
-//#endregion
-//#region src/ui/index.ts
-let currentUI = new LoggingUI();
-function getUI() {
-	return currentUI;
-}
-function setUI(ui) {
-	currentUI = ui;
-}
-//#endregion
-//#region src/utils/paths.ts
-const TMP = process.platform === "win32" ? tmpdir() : "/tmp";
-const WIZARD_LOG_FILE = join$1(TMP, "posthog-wizard.log");
-const WIZARD_BENCHMARK_FILE = join$1(TMP, "posthog-wizard-benchmark.json");
-/** Default target of `--task-stream-log`. Dev builds only. */
-const WIZARD_TASK_STREAM_FILE = join$1(TMP, "posthog-wizard-task-stream.jsonl");
-const WIZARD_YARA_REPORT_FILE = join$1(TMP, "posthog-wizard-yara-report.json");
-/**
-* Strip an absolute installDir prefix off a project file path so the UI
-* renders `index.js:12` instead of `/Users/.../index.js:12`. Defends
-* against false matches like `/Users/foo` ⊂ `/Users/foobar/x.js` by
-* normalizing to a trailing path separator before the prefix check.
-*/
-function relativeToInstallDir(file, installDir) {
-	const prefix = installDir.endsWith(sep$1) ? installDir : installDir + sep$1;
-	return file.startsWith(prefix) ? file.slice(prefix.length) : file;
-}
-//#endregion
-//#region src/utils/debug.ts
-let logFilePath = WIZARD_LOG_FILE;
-let fileLoggingEnabled = true;
-let consoleLoggingEnabled = false;
-function stringify(value) {
-	if (typeof value === "string") return value;
-	if (value instanceof Error) return value.stack ?? String(value);
-	try {
-		return JSON.stringify(value, null, 2) ?? inspect(value, { depth: 3 });
-	} catch {
-		return inspect(value, { depth: 3 });
-	}
-}
-function renderLine(args) {
-	return args.map(stringify).join(" ");
-}
-function getLogFilePath() {
-	return logFilePath;
-}
-function configureLogFile(opts) {
-	if (opts.path !== void 0) {
-		logFilePath = opts.path;
-		ensuredLogDir = false;
-	}
-	if (opts.enabled !== void 0) fileLoggingEnabled = opts.enabled;
-}
-let ensuredLogDir = false;
-let reportedLogFailure = false;
-function reportLogFailureOnce(err) {
-	if (reportedLogFailure) return;
-	reportedLogFailure = true;
-	import("./analytics-CcHoyhE_.js").then(({ analytics }) => analytics.captureException(err instanceof Error ? err : new Error(String(err)), {
-		source: "log-file-write",
-		log_path: logFilePath,
-		platform: process.platform
-	})).catch(() => {});
-}
-function appendLine(text) {
-	try {
-		appendFileSync(logFilePath, text);
-	} catch (err) {
-		if (ensuredLogDir) {
-			reportLogFailureOnce(err);
-			return;
-		}
-		ensuredLogDir = true;
-		try {
-			mkdirSync(path.dirname(logFilePath), { recursive: true });
-			appendFileSync(logFilePath, text);
-		} catch (retryErr) {
-			reportLogFailureOnce(retryErr);
-		}
-	}
-}
-function configureLogFileFromEnvironment() {
-	const dir = runtimeEnv("POSTHOG_WIZARD_LOG_DIR");
-	if (dir) configureLogFile({ path: path.join(dir, "posthog-wizard.log") });
-}
-function initLogFile() {
-	if (!fileLoggingEnabled) return;
-	const divider = "=".repeat(60);
-	appendLine(`\n${divider}\nPostHog Wizard Run: ${(/* @__PURE__ */ new Date()).toISOString()}\n${divider}\n`);
-}
-function logToFile(...args) {
-	if (!fileLoggingEnabled) return;
-	appendLine(`[${(/* @__PURE__ */ new Date()).toISOString()}] ${renderLine(args)}\n`);
-}
-function debug(...args) {
-	if (!consoleLoggingEnabled) return;
-	getUI().log.info(renderLine(args));
-}
-function enableDebugLogs() {
-	consoleLoggingEnabled = true;
-}
-//#endregion
-export { POSTHOG_US_CLIENT_ID as $, DEFAULT_AGENT_MODEL as A, ISSUES_URL as B, AGENTIC_DETECTION_TIMEOUT_MS as C, isHeadless as Ct, AWS_SKILLS_BASE_URL as D, ANALYTICS_TEAM_TAG as E, GPT5_6_SOL_MODEL as F, POSTHOG_DEV_CLIENT_ID as G, OAUTH_PORTS as H, GPT5_6_TERRA_MODEL as I, POSTHOG_ORG_AI_SETTINGS_URL as J, POSTHOG_DOCS_URL as K, HAIKU_MODEL as L, DUMMY_PROJECT_API_KEY as M, GITHUB_SKILLS_BASE_URL as N, CONTEXT_MILL_RELEASES_URL as O, GPT5_6_LUNA_MODEL as P, POSTHOG_TERMS_URL as Q, HAIKU_TRIAGE_MODEL as R, isTaskStatus as S, headlessOption as St, ANALYTICS_POSTHOG_PUBLIC_PROJECT_WRITE_KEY as T, OAUTH_TIMEOUT_MS as U, Integration as V, POSTHOG_APP_URL as W, POSTHOG_PROXY_CLIENT_ID as X, POSTHOG_PRIVACY_URL as Y, POSTHOG_STATUS_PAGE_URL as Z, SIGNUP_WIZARD_READINESS_CONFIG as _, NODE_ENV as _t, getLogFilePath as a, WIZARD_INTERACTION_EVENT_NAME as at, checkLlmGatewayHealth as b, TASK_RUN_ID as bt, WIZARD_BENCHMARK_FILE as c, WIZARD_ORCHESTRATOR_OVERRIDE_FLAG_KEY as ct, WIZARD_YARA_REPORT_FILE as d, WIZARD_REMARK_EVENT_NAME as dt, SONNET_5_MODEL as et, relativeToInstallDir as f, WIZARD_SELF_DRIVING_USE_PI_HARNESS_FLAG_KEY as ft, SERVICE_LABELS as g, VERSION as gt, LoggingUI as h, wizardUserAgentForProgram as ht, enableDebugLogs as i, WIZARD_FLAG_KEYS as it, DETECTION_TIMEOUT_MS as j, CONTEXT_MILL_URL as k, WIZARD_LOG_FILE as l, WIZARD_ORCHESTRATOR_SEEDED_TASKS_FLAG_KEY as lt, setUI as m, getSkillsBaseUrl as mt, configureLogFileFromEnvironment as n, WIZARD_BASIC_INTEGRATION_AGENTIC_DETECTION_FLAG_KEY as nt, initLogFile as o, WIZARD_OAUTH_SCOPES as ot, getUI as p, WIZARD_USER_AGENT as pt, POSTHOG_EU_CLIENT_ID as q, debug as r, WIZARD_CONTACT_EMAIL as rt, logToFile as s, WIZARD_ORCHESTRATOR_FLAG_KEY as st, configureLogFile as t, Sequence as tt, WIZARD_TASK_STREAM_FILE as u, WIZARD_PROVISIONING_SCOPES as ut, evaluateWizardReadiness as v, RUN_SURFACE as vt, ANALYTICS_HOST_URL as w, regionOption as wt, TaskStatus as x, runtimeEnv as xt, getBlockingServiceKeys as y, TASK_ID as yt, Harness as z };
-
-//# sourceMappingURL=debug-DWYDVp0B.js.map