@posthog/wizard 2.77.0 → 2.78.0

package/dist/bin.js

@@ -1,23 +1,32 @@
 #!/usr/bin/env node
-import { d as ErrorCodes, i as detectErrorCode, t as classifyRunFailure, u as emitWizardError } from "./errors-BoJvrdw8.js";
-import { Et as regionOption, Tt as isHeadless, a as getLogFilePath, gt as getSkillsBaseUrl, h as LoggingUI, m as setUI, p as getUI, q as POSTHOG_DOCS_URL, s as logToFile, vt as VERSION, wt as headlessOption } from "./debug-B4kzIZPi.js";
-import { a as getLocalDev, i as checkLocalServices, o as initLocalDev, r as POSTHOG_LOCAL_URL, s as localMcpSkillsNotice } from "./local-dev-DPZiIPCK.js";
-import "./wizard-session-FSJCkTcP.js";
-import { n as analytics } from "./analytics-C67F2vee.js";
-import { r as setEntryCommand } from "./telemetry-BRnxBRWK.js";
-import { r as runCleanups } from "./wizard-abort-lE6umflt.js";
-import { n as isNonInteractiveEnvironment } from "./environment-BEvsey6i.js";
-import { G as fetchSkillMenu, R as WIZARD_TOOL_NAMES, u as recoverOrphanedSettingsBackups } from "./agent-interface-Avtr_5M5.js";
-import { C as authenticate, l as maybeStampAiSdkDetected, n as runAgent } from "./agent-runner-COOIUJCP.js";
-import { g as AUDIT_CHECKS_FILE, x as getAuditChecks } from "./yara-hooks-BTNJ6MGW.js";
-import { $ as wordWrap, A as installOrUpdatePostHogCli, B as webAnalyticsDoctorConfig, D as CLI_STEERING_TARGETS, E as errorTrackingUploadSourceMapsConfig, G as createSkillProgram, H as getKindMeta, K as warehouseSourceConfig, O as detectTargets, S as errorTrackingConfig, T as replayVisionConfig, U as fetchHealthIssues, V as posthogDoctorConfig, W as auditConfig, d as metricsConfig, f as aiObservabilityConfig, i as isRunFailure, it as Icons, j as installSteeringSnippet, k as findTarget, m as selfDrivingConfig, o as Program, p as mcpAnalyticsConfig, q as revenueAnalyticsConfig, rt as Colors, s as agentSkillConfig, u as getProgramConfig, z as migrationConfig } from "./mint-failure-BrleGqMd.js";
-import { n as readApiKeyFromEnv } from "./env-api-key-BZ5wE3Y4.js";
-import { satisfies } from "semver";
+import { d as ErrorCodes, t as classifyRunFailure, u as emitWizardError } from "./errors-CQ9kttJD.js";
+import { a as getLogFilePath, b as isHeadless, s as logToFile, v as runtimeEnv, x as regionOption, y as headlessOption } from "./debug-Ch4BDOtD.js";
+import { t as VERSION } from "./version-aXxpgRKx.js";
+import { a as getLocalDev, i as checkLocalServices, o as initLocalDev, r as POSTHOG_LOCAL_URL, s as localMcpSkillsNotice } from "./local-dev-McsurOC-.js";
+import { $ as getSkillsBaseUrl, k as POSTHOG_DOCS_URL } from "./constants-jFI2SaE1.js";
+import "./wizard-session-2w4Ru-Wz.js";
+import { n as analytics } from "./analytics-CHCZ_qUR.js";
+import { r as setEntryCommand } from "./telemetry-D6ruCtnv.js";
+import { t as LoggingUI } from "./logging-ui-_TwoMNbG.js";
+import { n as setUI, t as getUI } from "./ui-BBVuTM1v.js";
+import { n as registerShutdown, r as runCleanups } from "./wizard-abort-BBkiUxfS.js";
+import { n as isNonInteractiveEnvironment } from "./environment-B07Bmxae.js";
+import { a as getAuditChecks, s as maybeStampAiSdkDetected, t as runProgramAgent, x as authenticate } from "./run-agent-legacy-d7rWlzQR.js";
+import { r as currentCredentials } from "./oauth-session-DJ8h6GFa.js";
+import { I as WIZARD_TOOL_NAMES, et as fetchSkillMenu, m as isGrantRevoked, u as recoverOrphanedSettingsBackups } from "./agent-interface-BAOIHuXS.js";
+import "./agent-bCZ3i3fh.js";
+import { h as AUDIT_CHECKS_FILE } from "./yara-hooks-DCeMDd1o.js";
+import { $ as wordWrap, A as installOrUpdatePostHogCli, B as webAnalyticsDoctorConfig, D as CLI_STEERING_TARGETS, E as errorTrackingUploadSourceMapsConfig, G as createSkillProgram, H as getKindMeta, K as warehouseSourceConfig, O as detectTargets, S as errorTrackingConfig, T as replayVisionConfig, U as fetchHealthIssues, V as posthogDoctorConfig, W as auditConfig, d as metricsConfig, f as aiObservabilityConfig, i as isRunFailure, it as Icons, j as installSteeringSnippet, k as findTarget, m as selfDrivingConfig, o as Program, p as mcpAnalyticsConfig, q as revenueAnalyticsConfig, rt as Colors, s as agentSkillConfig, u as getProgramConfig, z as migrationConfig } from "./mint-failure-D4nd2XmZ.js";
+import { n as parseRetryAfter } from "./posthog-DNn574nW.js";
+import { n as readApiKeyFromEnv } from "./env-api-key-Qx8NnYHm.js";
+import { satisfies, valid } from "semver";
 import { Agent, setGlobalDispatcher } from "undici";
 import yargs from "yargs";
 import { hideBin } from "yargs/helpers";
+import { validate } from "uuid";
 import * as path$1 from "node:path";
-import { join } from "node:path";
+import { basename, join, resolve } from "node:path";
+import { randomUUID } from "node:crypto";
 import { Box, Text, render, useInput, useStdout } from "ink";
 import { createContext, createElement, useCallback, useContext, useEffect, useMemo, useRef, useState } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
@@ -93,6 +102,11 @@ const GLOBAL_OPTIONS = {
 		type: "string",
 		hidden: true
 	},
+	"run-id": {
+		describe: "Assigned cloud WizardRun UUID",
+		type: "string",
+		hidden: true
+	},
 	benchmark: {
 		default: false,
 		describe: "Run in benchmark mode with per-phase token tracking\nenv: POSTHOG_WIZARD_BENCHMARK",
@@ -230,7 +244,7 @@ function runProvision(argv) {
 }
 async function provision({ email, region, name, baseUrl, jsonMode }) {
 	try {
-		const { provisionNewAccount } = await import("./provisioning-xfdjhFtA.js").then((n) => n.r);
+		const { provisionNewAccount } = await import("./provisioning-B8uSqRZk.js").then((n) => n.r);
 		if (!jsonMode) getUI().log.info(`Provisioning account for ${email} in ${region}...`);
 		emitResult(await provisionNewAccount(email, name, region, { baseUrl }), jsonMode);
 		process.exit(0);
@@ -297,22 +311,22 @@ const basicIntegrationCommand = {
 		setEntryCommand("integrate");
 		(async () => {
 			if (isHeadless(argv)) {
-				const { runHeadlessInstall } = await import("./ci-install-CvXL5h13.js");
+				const { runHeadlessInstall } = await import("./ci-install-CDdQYsPe.js");
 				return runHeadlessInstall(argv);
 			}
 			if (argv.ci) {
-				const { runCIInstall } = await import("./ci-install-CvXL5h13.js");
+				const { runCIInstall } = await import("./ci-install-CDdQYsPe.js");
 				return runCIInstall(argv);
 			}
 			if (isNonInteractiveEnvironment()) {
-				const { failNonInteractive } = await import("./non-interactive-DcOjH2fw.js");
+				const { failNonInteractive } = await import("./non-interactive-Dzow7YKY.js");
 				return failNonInteractive();
 			}
 			if (argv.playground) {
-				const { runPlayground } = await import("./playground-CDUUKLkC.js");
+				const { runPlayground } = await import("./playground-5AB4WgNF.js");
 				return runPlayground();
 			}
-			const { runInteractive } = await import("./interactive-Dej-sxvR.js");
+			const { runInteractive } = await import("./interactive-D6zV7brJ.js");
 			runInteractive(argv);
 		})();
 	}
@@ -354,7 +368,7 @@ const mcpAddCommand = {
 function runMcpAdd(argv) {
 	const features = parseFeatures(argv.features);
 	(async () => {
-		const { readApiKeyFromEnv } = await import("./env-api-key-BZ5wE3Y4.js").then((n) => n.t);
+		const { readApiKeyFromEnv } = await import("./env-api-key-Qx8NnYHm.js").then((n) => n.t);
 		const apiKey = argv.apiKey || readApiKeyFromEnv();
 		const debug = argv.debug;
 		const localMcp = argv.local;
@@ -368,8 +382,8 @@ function runMcpAdd(argv) {
 			return;
 		}
 		try {
-			const { startTUI } = await import("./start-tui-UNe2xQ0U.js");
-			const { buildSession } = await import("./wizard-session-CYvyYnti.js");
+			const { startTUI } = await import("./start-tui-CB2PZs1x.js");
+			const { buildSession } = await import("./wizard-session-DGaUHOF3.js");
 			const tui = startTUI(VERSION, Program.McpAdd);
 			tui.store.session = buildSession({
 				debug,
@@ -386,7 +400,7 @@ function runMcpAdd(argv) {
 }
 async function runHeadlessAdd(args) {
 	setUI(new LoggingUI());
-	const { addMCPServerToClientsStep } = await import("./add-mcp-server-to-clients-BnRyE4pw.js").then((n) => n.r);
+	const { addMCPServerToClientsStep } = await import("./add-mcp-server-to-clients-JMv8LP-O.js").then((n) => n.r);
 	const { installed, failed } = await addMCPServerToClientsStep(args);
 	if (failed.length > 0 || installed.length === 0) process.exitCode = 1;
 }
@@ -418,8 +432,8 @@ function runMcpRemove(argv) {
 			return;
 		}
 		try {
-			const { startTUI } = await import("./start-tui-UNe2xQ0U.js");
-			const { buildSession } = await import("./wizard-session-CYvyYnti.js");
+			const { startTUI } = await import("./start-tui-CB2PZs1x.js");
+			const { buildSession } = await import("./wizard-session-DGaUHOF3.js");
 			const tui = startTUI(VERSION, Program.McpRemove);
 			tui.store.session = buildSession({
 				debug,
@@ -435,7 +449,7 @@ function runMcpRemove(argv) {
 /** No exit code on an empty result: nothing to remove is the requested end state. */
 async function runHeadlessRemove(local) {
 	setUI(new LoggingUI());
-	const { removeMCPServerFromClientsStep } = await import("./add-mcp-server-to-clients-BnRyE4pw.js").then((n) => n.r);
+	const { removeMCPServerFromClientsStep } = await import("./add-mcp-server-to-clients-JMv8LP-O.js").then((n) => n.r);
 	await removeMCPServerFromClientsStep({ local });
 }
 //#endregion
@@ -455,8 +469,8 @@ function runMcpTutorial(argv) {
 		const debug = argv.debug;
 		const localMcp = argv.local;
 		try {
-			const { startTUI } = await import("./start-tui-UNe2xQ0U.js");
-			const { buildSession } = await import("./wizard-session-CYvyYnti.js");
+			const { startTUI } = await import("./start-tui-CB2PZs1x.js");
+			const { buildSession } = await import("./wizard-session-DGaUHOF3.js");
 			const tui = startTUI(VERSION, Program.McpTutorial);
 			tui.store.session = buildSession({
 				debug,
@@ -500,6 +514,270 @@ function resolveNoTelemetry(options) {
 	return norm !== "0" && norm !== "false";
 }
 //#endregion
+//#region src/lib/task-stream/wizard-run-sync.ts
+const STATUS = {
+	pending: "created",
+	in_progress: "running",
+	completed: "completed",
+	failed: "failed",
+	skipped: "completed"
+};
+var RunTaskNames = class {
+	names = /* @__PURE__ */ new Map();
+	used = /* @__PURE__ */ new Set();
+	snapshot(items) {
+		if (items.length > 100) throw new Error("task limit exceeded (100)");
+		const occurrences = /* @__PURE__ */ new Map();
+		const ids = /* @__PURE__ */ new Set();
+		return items.map((item) => {
+			const subject = item.label.trim();
+			if (!subject) throw new Error("blank task name");
+			const rawStatus = item.sourceStatus ?? item.status;
+			const status = STATUS[rawStatus];
+			if (!Object.hasOwn(STATUS, rawStatus)) throw new Error("invalid task status");
+			const occurrence = (occurrences.get(subject) ?? 0) + 1;
+			occurrences.set(subject, occurrence);
+			const id = item.id ? JSON.stringify([item.source, item.id]) : JSON.stringify([subject, occurrence]);
+			if (ids.has(id)) throw new Error("duplicate task identity");
+			ids.add(id);
+			let name = this.names.get(id);
+			if (!name) {
+				name = subject.slice(0, 255);
+				for (let n = 2; this.used.has(name); n++) {
+					const suffix = ` (${n})`;
+					name = subject.slice(0, 255 - suffix.length) + suffix;
+				}
+				this.names.set(id, name);
+				this.used.add(name);
+			}
+			return {
+				name,
+				status
+			};
+		});
+	}
+};
+function createWizardRunSync(options) {
+	if (options.noTelemetry || options.mode === "ci") return;
+	if (options.mode === "headless" && options.assignedId === void 0) return;
+	return new WizardRunSync({
+		...options,
+		mode: options.assignedId !== void 0 ? "cloud" : "local"
+	});
+}
+var WizardRunSync = class {
+	names = new RunTaskNames();
+	tasksAbort = new AbortController();
+	reported = /* @__PURE__ */ new Set();
+	context;
+	queue = Promise.resolve();
+	lastBody;
+	stopped = false;
+	tasksDisabled = false;
+	authDisabled = false;
+	closing;
+	constructor(options) {
+		this.options = options;
+	}
+	capture(items) {
+		if (this.stopped || this.tasksDisabled || !items) return;
+		if (this.options.mode === "cloud" && !validate(this.options.assignedId ?? "")) {
+			this.tasksDisabled = true;
+			this.report("invalid cloud run assignment");
+			return;
+		}
+		const session = this.options.getSession();
+		if (session.runPhase === "idle") return;
+		if (!this.context) {
+			if (session.runPhase !== "running" || !session.credentials) return;
+			const { host, projectId } = session.credentials;
+			this.context = {
+				apiHost: host.appHost.replace(/\/$/, ""),
+				projectId,
+				programId: this.options.programId,
+				mode: this.options.mode,
+				id: this.options.assignedId
+			};
+			this.queue = this.initialize(session);
+		}
+		try {
+			const body = JSON.stringify({ tasks: this.names.snapshot(items) });
+			if (body === this.lastBody) return;
+			this.lastBody = body;
+			this.queue = this.queue.then(async () => {
+				if (this.tasksDisabled || this.tasksAbort.signal.aborted || !this.context?.id) return;
+				if (!await this.request("PUT", `${this.context.id}/tasks/`, body, this.tasksAbort.signal)) this.tasksDisabled = true;
+			});
+		} catch {
+			this.report("invalid task snapshot (names, statuses, identities or 100-task limit)");
+		}
+	}
+	shutdown(outcome, timeoutMs) {
+		if (this.closing) return this.closing;
+		this.stopped = true;
+		this.closing = this.finish(outcome, Math.max(0, timeoutMs));
+		return this.closing;
+	}
+	async initialize(session) {
+		const context = this.context;
+		if (!context || context.mode === "cloud") return;
+		const projectName = basename(resolve(session.installDir)).trim().slice(0, 255);
+		if (!projectName) {
+			this.tasksDisabled = true;
+			this.report("unsupported program or workspace configuration");
+			return;
+		}
+		const body = JSON.stringify({
+			program_id: context.programId,
+			environment: "local",
+			workspace: {
+				type: "local_folder",
+				project_name: projectName
+			},
+			...valid("2.78.0") ? { wizard_version: VERSION } : {},
+			idempotency_key: randomUUID()
+		});
+		const result = await this.request("POST", "", body, this.tasksAbort.signal);
+		if (result && typeof result === "object" && "id" in result && typeof result.id === "string" && validate(result.id)) context.id = result.id;
+		else {
+			this.tasksDisabled = true;
+			this.report("local creation failed or returned an invalid ID; creation was not retried");
+		}
+	}
+	credentials(creds = this.options.getSession().credentials) {
+		const context = this.context;
+		if (!context) return;
+		if (!creds || creds.host.appHost.replace(/\/$/, "") !== context.apiHost || creds.projectId !== context.projectId) {
+			this.report("execution credentials changed host or project");
+			return;
+		}
+		if (creds.missingScopes?.includes("wizard_run:write") || !creds.accessToken.startsWith("pha_")) {
+			this.authDisabled = true;
+			this.report("wizard_run:write OAuth grant required; authorize again");
+			return;
+		}
+		return creds;
+	}
+	async request(method, suffix, body, signal) {
+		const context = this.context;
+		if (!context || this.authDisabled || signal.aborted) return;
+		let refreshed = false;
+		let rateLimited = false;
+		const attempts = method === "POST" ? 1 : 3;
+		for (let attempt = 0; attempt < attempts && !signal.aborted; attempt++) {
+			let retryMs = 500 * 2 ** attempt;
+			try {
+				const creds = this.credentials();
+				if (!creds) return;
+				const { res, data, current } = await this.bounded(async (requestSignal) => {
+					const current = this.credentials(await currentCredentials(creds));
+					if (!current) throw new Error("credentials unavailable");
+					const res = await (this.options.fetchImpl ?? fetch)(`${context.apiHost}/api/projects/${context.projectId}/wizard/runs/${suffix}`, {
+						method,
+						body,
+						signal: requestSignal,
+						headers: {
+							Authorization: `Bearer ${current.accessToken}`,
+							"Content-Type": "application/json"
+						}
+					});
+					return {
+						res,
+						data: method === "POST" && (res.status === 200 || res.status === 201) ? await res.json() : void 0,
+						current
+					};
+				}, signal, 5e3);
+				if (method === "POST" && [200, 201].includes(res.status) || method === "PUT" && res.status === 204 || method === "PATCH" && res.status === 200) return data ?? true;
+				if (res.status === 401 && current.refreshToken && !isGrantRevoked() && !refreshed && method !== "POST") {
+					refreshed = true;
+					if ((await this.bounded(() => currentCredentials(current, true), signal, 5e3)).accessToken === current.accessToken) {
+						this.authDisabled = true;
+						this.report("OAuth refresh could not recover the grant; authorize again");
+						return;
+					}
+					continue;
+				}
+				if (res.status === 401 || res.status === 403) this.authDisabled = true;
+				if (res.status === 429 && !rateLimited) {
+					rateLimited = true;
+					retryMs = parseRetryAfter(res.headers.get("Retry-After"));
+				} else if (res.status < 500 || res.status >= 600) {
+					this.report(`${method} rejected (${res.status}); check assignment, grant and program configuration`);
+					return;
+				}
+			} catch {
+				if (signal.aborted) return;
+			}
+			if (attempt + 1 < attempts) try {
+				await this.sleep(retryMs, signal);
+			} catch {
+				return;
+			}
+		}
+		this.report(`${method} delivery exhausted`);
+	}
+	async finish(outcome, timeoutMs) {
+		const deadline = Date.now() + timeoutMs;
+		try {
+			await this.bounded(() => this.queue, new AbortController().signal, Math.floor(timeoutMs * .75));
+		} catch {
+			this.report("task drain timed out");
+		}
+		this.tasksAbort.abort();
+		if (this.context?.mode !== "local" || !this.context.id || this.authDisabled) return;
+		if (Date.now() >= deadline) {
+			this.report("terminal update budget exhausted");
+			return;
+		}
+		const finalAbort = new AbortController();
+		const timer = setTimeout(() => finalAbort.abort(), Math.max(0, deadline - Date.now()));
+		try {
+			await this.request("PATCH", `${this.context.id}/`, JSON.stringify({ status: outcome }), finalAbort.signal);
+		} finally {
+			clearTimeout(timer);
+			finalAbort.abort();
+		}
+	}
+	async bounded(operation, parent, ms) {
+		const controller = new AbortController();
+		const abort = () => controller.abort();
+		parent.addEventListener("abort", abort, { once: true });
+		if (parent.aborted) controller.abort();
+		const timer = setTimeout(abort, ms);
+		let onAbort = () => void 0;
+		const cancelled = new Promise((_, reject) => {
+			onAbort = () => reject(/* @__PURE__ */ new Error("request cancelled"));
+			controller.signal.addEventListener("abort", onAbort, { once: true });
+			if (controller.signal.aborted) onAbort();
+		});
+		try {
+			return await Promise.race([operation(controller.signal), cancelled]);
+		} finally {
+			clearTimeout(timer);
+			parent.removeEventListener("abort", abort);
+			controller.signal.removeEventListener("abort", onAbort);
+			controller.abort();
+		}
+	}
+	sleep(ms, signal) {
+		return new Promise((resolve) => {
+			const finish = () => {
+				clearTimeout(timer);
+				signal.removeEventListener("abort", finish);
+				resolve();
+			};
+			const timer = setTimeout(finish, ms);
+			signal.addEventListener("abort", finish, { once: true });
+			if (signal.aborted) finish();
+		});
+	}
+	report(message) {
+		if (this.reported.has(message)) return;
+		this.reported.add(message);
+		(this.options.onError ?? ((m) => logToFile(`[wizard-run-sync] ${m}`)))(message);
+	}
+};
+//#endregion
 //#region src/lib/runners/run-wizard.ts
 const WIZARD_VERSION = VERSION;
 /** The session a run step's agent runs in: scoped to the step's target dir
@@ -527,7 +805,7 @@ async function advanceStep(step, store, config) {
 	} else if (step.run) {
 		await step.run(await prepareRunSession(step, store.session));
 		store.completeRunStep(step.id);
-	} else if (step.screenId === "run") await runAgent(config, await prepareRunSession(step, store.session));
+	} else if (step.screenId === "run") await runProgramAgent(config, await prepareRunSession(step, store.session));
 	else if (step.isComplete) await store.waitUntil(step.isComplete);
 }
 /**
@@ -540,25 +818,27 @@ function runWizard(config, options) {
 	let taskStream = null;
 	let onSignal = null;
 	let exitInProgress = false;
+	let signalled = false;
+	let unregisterShutdown;
 	(async () => {
 		try {
 			const installDir = options.installDir || process.cwd();
-			const { startTUI } = await import("./start-tui-UNe2xQ0U.js");
-			const { buildSession, RunPhase } = await import("./wizard-session-CYvyYnti.js");
-			const { TaskStreamPush } = await import("./task-stream-dVzl6b_q.js");
-			const { PostHogDestination } = await import("./posthog-Hc_-9wrr.js");
-			const { createFileDestination } = await import("./file-BoD3REGB.js");
+			const { startTUI } = await import("./start-tui-CB2PZs1x.js");
+			const { buildSession, RunPhase } = await import("./wizard-session-DGaUHOF3.js");
+			const { TaskStreamPush } = await import("./task-stream-CMUilu54.js");
+			const { PostHogDestination } = await import("./posthog-DNn574nW.js").then((n) => n.r);
+			const { createFileDestination } = await import("./file-BcLTjU16.js");
 			const local = getLocalDev();
 			const localServicesError = await checkLocalServices({
 				...local,
 				localPosthog: local.localPosthog && !options.baseUrl
 			});
 			if (localServicesError) {
-				const { wizardAbort } = await import("./wizard-abort-CAcInAxg.js");
+				const { wizardAbort } = await import("./wizard-abort-BU4aLyvh.js");
 				await wizardAbort({ message: localServicesError });
 				return;
 			}
-			tui = startTUI(WIZARD_VERSION, config.id);
+			tui = startTUI(WIZARD_VERSION, config.id, () => onSignal?.());
 			const activeTui = tui;
 			const session = buildSession({
 				debug: options.debug,
@@ -585,7 +865,6 @@ function runWizard(config, options) {
 			if (options.skillId) session.skillId = options.skillId;
 			else if (config.skillId) session.skillId = config.skillId;
 			activeTui.store.session = session;
-			let signalled = false;
 			onSignal = () => {
 				if (signalled || exitInProgress) return;
 				signalled = true;
@@ -593,17 +872,17 @@ function runWizard(config, options) {
 				runCleanups();
 				if (activeTui.store.session.runPhase === RunPhase.Running) activeTui.store.setRunPhase(RunPhase.Error);
 				const teardown = () => {
+					unregisterShutdown?.();
+					if (onSignal) {
+						process.off("SIGINT", onSignal);
+						process.off("SIGTERM", onSignal);
+					}
 					try {
 						activeTui.unmount();
 					} catch {}
 					process.exit(130);
 				};
-				const stream = taskStream;
-				if (!stream) {
-					teardown();
-					return;
-				}
-				stream.shutdown(2e3).catch((e) => logToFile("[run-wizard] task stream shutdown error on signal:", e)).finally(teardown);
+				Promise.all([taskStream?.shutdown(2e3, "cancelled"), analytics.shutdown("cancelled")]).catch(() => logToFile("[run-wizard] cancellation shutdown failed")).finally(teardown);
 			};
 			process.on("SIGINT", onSignal);
 			process.on("SIGTERM", onSignal);
@@ -622,7 +901,15 @@ function runWizard(config, options) {
 			const taskStreamEnabled = destinations.length > 0;
 			const activeStream = new TaskStreamPush({
 				store: activeTui.store,
+				getFlags: () => analytics.getCachedWizardFlags(),
 				programId: config.streamWorkflowId ?? config.id,
+				runSync: createWizardRunSync({
+					mode: "local",
+					programId: config.id,
+					assignedId: options.runId ?? runtimeEnv("POSTHOG_WIZARD_RUN_ID"),
+					noTelemetry: session.noTelemetry,
+					getSession: () => activeTui.store.session
+				}),
 				destinations,
 				eventPlanPath: config.eventPlanFile ? join(session.installDir, config.eventPlanFile) : void 0,
 				auditChecks: config.auditLedgerFile ? () => getAuditChecks(activeTui.store.session) : void 0,
@@ -630,6 +917,10 @@ function runWizard(config, options) {
 			});
 			taskStream = activeStream;
 			activeStream.attach();
+			unregisterShutdown = registerShutdown((outcome) => {
+				if (activeTui.store.session.runPhase === RunPhase.Running) activeTui.store.setRunPhase(RunPhase.Error);
+				return activeStream.shutdown(2e3, outcome);
+			});
 			await activeTui.store.getGate("integration-check");
 			await activeTui.store.getGate("health-check");
 			const skipAgent = config.run == null;
@@ -639,7 +930,7 @@ function runWizard(config, options) {
 				if (shown(step)) await advanceStep(step, activeTui.store, config);
 			}
 			else if (skipAgent) {
-				const { getOrAskForProjectData } = await import("./setup-utils-fjJTBhaB.js").then((n) => n.r);
+				const { getOrAskForProjectData } = await import("./setup-utils-CmTCTPkX.js").then((n) => n.r);
 				const { projectApiKey, host, accessToken, projectId } = await getOrAskForProjectData({
 					signup: session.signup,
 					ci: session.ci,
@@ -655,7 +946,7 @@ function runWizard(config, options) {
 					projectId
 				});
 			} else try {
-				await runAgent(config, activeTui.store.session);
+				await runProgramAgent(config, activeTui.store.session);
 			} catch (error) {
 				const failure = classifyRunFailure(error);
 				logToFile("[run-wizard] run failed, handing off:", error);
@@ -667,7 +958,9 @@ function runWizard(config, options) {
 					message: failure.message
 				});
 			}
+			if (signalled) return;
 			const runFailed = isRunFailure(activeTui.store.session);
+			await activeStream.finishRun(runFailed ? "failed" : "completed");
 			await activeTui.store.waitUntil((s) => {
 				if (s.mintHandoff === "exit") return true;
 				if (skipAgent && !runFailed) return s.outroDismissed;
@@ -675,12 +968,14 @@ function runWizard(config, options) {
 			});
 			exitInProgress = true;
 			await activeStream.shutdown(2e3);
+			unregisterShutdown?.();
 			process.off("SIGINT", onSignal);
 			process.off("SIGTERM", onSignal);
 			if (runFailed) await analytics.shutdown("error");
 			activeTui.unmount();
 			process.exit(runFailed ? 1 : 0);
 		} catch (err) {
+			if (signalled) return;
 			logToFile("[run-wizard] FATAL:", err);
 			runCleanups();
 			exitInProgress = true;
@@ -689,8 +984,9 @@ function runWizard(config, options) {
 				process.off("SIGTERM", onSignal);
 			}
 			if (taskStream) try {
-				await taskStream.shutdown(2e3);
+				await taskStream.shutdown(2e3, "failed");
 			} catch {}
+			unregisterShutdown?.();
 			if (tui) try {
 				tui.unmount();
 			} catch {}
@@ -707,6 +1003,30 @@ function runWizard(config, options) {
 	})();
 }
 //#endregion
+//#region src/lib/programs/detect-map.ts
+const DETECT_CODES = {
+	"bad-directory": ErrorCodes.DetectBadDirectory,
+	"unsupported-platform": ErrorCodes.DetectUnsupportedPlatform,
+	"no-project-files": ErrorCodes.DetectNoProjectFiles,
+	"no-sources": ErrorCodes.DetectNoSources,
+	"no-package-json": ErrorCodes.DetectNoPackageJson,
+	"no-sdks": ErrorCodes.DetectNoSdks,
+	"missing-stripe": ErrorCodes.DetectMissingStripe,
+	"no-posthog-sdk": ErrorCodes.DetectNoPosthogSdk,
+	"no-posthog": ErrorCodes.DetectNoPosthogSdk,
+	"missing-posthog": ErrorCodes.DetectNoPosthogSdk
+};
+/**
+* `kind` arrives as a bare string — `frameworkContext.detectError` is untyped
+* storage — so the lookup can still miss. It falls back to a detect-group code
+* with `retry: 'no'`, never to `InternalUnhandled`: an unrecognized precondition
+* failure is still a precondition failure, and telling a sandbox to retry one
+* costs it the whole budget.
+*/
+function detectErrorCode(kind) {
+	return DETECT_CODES[kind] ?? ErrorCodes.DetectUnclassified;
+}
+//#endregion
 //#region src/lib/runners/run-non-interactive.ts
 /** User-facing label for a non-interactive mode. */
 function modeLabel(mode) {
@@ -746,7 +1066,7 @@ function validateNonInteractiveOptions(options, mode) {
 * (`runWizardHeadless`) runs.
 *
 * Validates flags, builds a `ci:true` session, runs `config.ciPreRun` (or the
-* program's `onReady` hooks by default), executes `runAgent`, and routes any
+* program's `onReady` hooks by default), executes `runProgramAgent`, and routes any
 * failure through `wizardAbort`. `wizardAbort` owns all exits — never add a
 * raw `process.exit` here.
 *
@@ -761,11 +1081,11 @@ function runNonInteractive(config, options, mode) {
 	analytics.setTag("build", mode);
 	(async () => {
 		const path = await import("path");
-		const { buildSession, RunPhase, OutroKind } = await import("./wizard-session-CYvyYnti.js");
-		const { readEnvironment } = await import("./environment-BEvsey6i.js").then((n) => n.t);
-		const { readApiKeyFromEnv } = await import("./env-api-key-BZ5wE3Y4.js").then((n) => n.t);
-		const { configureLogFileFromEnvironment, logToFile } = await import("./debug-CziFS0cA.js");
-		const { wizardAbort, WizardError } = await import("./wizard-abort-CAcInAxg.js");
+		const { buildSession, RunPhase, OutroKind } = await import("./wizard-session-DGaUHOF3.js");
+		const { readEnvironment } = await import("./environment-B07Bmxae.js").then((n) => n.t);
+		const { readApiKeyFromEnv } = await import("./env-api-key-Qx8NnYHm.js").then((n) => n.t);
+		const { configureLogFileFromEnvironment, logToFile } = await import("./debug-M2gV2iDq.js");
+		const { wizardAbort, WizardError } = await import("./wizard-abort-BU4aLyvh.js");
 		configureLogFileFromEnvironment();
 		const env = readEnvironment();
 		const apiKey = options.apiKey ?? readApiKeyFromEnv() ?? void 0;
@@ -812,12 +1132,12 @@ function runNonInteractive(config, options, mode) {
 		let store = null;
 		let taskStream = null;
 		{
-			const { WizardStore } = await import("./store-Bic4Cr3L.js").then((n) => n.n);
-			const { HeadlessUI } = await import("./headless-ui-CsmQrDIl.js");
-			const { TaskStreamPush, PostHogDestination, createFileDestination } = await import("./task-stream-dVzl6b_q.js");
+			const { WizardStore } = await import("./store-UN7c-ASf.js").then((n) => n.n);
+			const { HeadlessUI } = await import("./headless-ui-BFFmYC4v.js");
+			const { TaskStreamPush, PostHogDestination, createFileDestination } = await import("./task-stream-CMUilu54.js");
 			const fileDestination = createFileDestination(mode === "ci" ? options.taskStreamLog ?? "" : options.taskStreamLog);
 			const posthogDestination = mode === "headless" && !session.noTelemetry ? new PostHogDestination({
-				getCredentials: () => session.credentials,
+				getCredentials: () => store?.session.credentials ?? session.credentials,
 				onError: (e) => logToFile("[headless task-stream]", e.message)
 			}) : null;
 			const destinations = [...posthogDestination ? [posthogDestination] : [], ...fileDestination ? [fileDestination] : []];
@@ -827,25 +1147,45 @@ function runNonInteractive(config, options, mode) {
 			setUI(new HeadlessUI(headlessStore));
 			taskStream = new TaskStreamPush({
 				store: headlessStore,
+				getFlags: () => analytics.getCachedWizardFlags(),
 				programId: config.streamWorkflowId ?? config.id,
+				runSync: createWizardRunSync({
+					mode,
+					programId: config.id,
+					assignedId: options.runId ?? runtimeEnv("POSTHOG_WIZARD_RUN_ID"),
+					noTelemetry: session.noTelemetry,
+					getSession: () => headlessStore.session
+				}),
 				destinations,
 				eventPlanPath: config.eventPlanFile ? join(session.installDir, config.eventPlanFile) : void 0,
 				auditChecks: config.auditLedgerFile ? () => getAuditChecks(headlessStore.session) : void 0,
 				enabled: destinations.length > 0
 			});
 			taskStream.attach();
-			headlessStore.setRunPhase(RunPhase.Running);
 			if (fileDestination) logToFile(`[task-stream] ${mode} dump: ${fileDestination.path}`);
 		}
-		const settleStream = async (phase, outroData) => {
+		const settleStream = async (phase, outroData, outcome = phase === RunPhase.Completed ? "completed" : "failed") => {
 			if (!store || !taskStream) return;
 			if (outroData) store.setOutroData(outroData);
 			store.setRunPhase(phase);
-			await taskStream.shutdown(2e3);
+			await taskStream.shutdown(2e3, outcome);
+			process.off("SIGINT", onSignal);
+			process.off("SIGTERM", onSignal);
+			unregisterShutdown();
+		};
+		const unregisterShutdown = registerShutdown((outcome) => settleStream(RunPhase.Error, void 0, outcome));
+		let signalled = false;
+		const onSignal = () => {
+			if (signalled) return;
+			signalled = true;
+			runCleanups();
+			settleStream(RunPhase.Error, void 0, "cancelled").then(() => wizardAbort({ exitCode: 130 }));
 		};
+		process.on("SIGINT", onSignal);
+		process.on("SIGTERM", onSignal);
 		try {
 			if (mode === "ci") {
-				const { configureGatewayFromCIEnvironment } = await import("./gateway-session-C118uACz.js");
+				const { configureGatewayFromCIEnvironment } = await import("./agent-bCZ3i3fh.js").then((n) => n.t);
 				configureGatewayFromCIEnvironment(Number(session.projectId), session.region ?? "us");
 			}
 			if (config.ciPreRun) await config.ciPreRun(session);
@@ -910,10 +1250,12 @@ function runNonInteractive(config, options, mode) {
 					});
 				}
 			}
-			const { runAgent } = await import("./agent-runner-COOIUJCP.js").then((n) => n.t);
-			await runAgent(config, session);
+			const { runProgramAgent } = await import("./run-agent-legacy-d7rWlzQR.js").then((n) => n.n);
+			await runProgramAgent(config, session);
+			if (signalled) return;
 			await settleStream(RunPhase.Completed);
 		} catch (error) {
+			if (signalled) return;
 			const errorMessage = error instanceof Error ? error.message : String(error);
 			const errorStack = error instanceof Error && error.stack ? error.stack : void 0;
 			logToFile(`[${mode}] ERROR: ${errorMessage}`);
@@ -2174,7 +2516,7 @@ async function runDoctorCI(options) {
 	getUI().intro("Welcome to the PostHog setup wizard");
 	getUI().log.info("Running posthog-doctor in CI mode");
 	try {
-		const { getOrAskForProjectData } = await import("./setup-utils-fjJTBhaB.js").then((n) => n.r);
+		const { getOrAskForProjectData } = await import("./setup-utils-CmTCTPkX.js").then((n) => n.r);
 		const { host, accessToken, projectId } = await getOrAskForProjectData({
 			signup: false,
 			ci: true,
@@ -2192,7 +2534,7 @@ async function runDoctorCI(options) {
 		for (const issue of sorted) getUI().log.info(`  • [${issue.severity}] ${getKindMeta(issue.kind).title}`);
 		process.exit(1);
 	} catch (error) {
-		const { ApiError } = await import("./api-Dj1yabTj.js").then((n) => n.n);
+		const { ApiError } = await import("./api-Diy_2fp8.js").then((n) => n.n);
 		const message = error instanceof ApiError && error.statusCode === 401 ? "Your PostHog API key is invalid or expired." : error instanceof Error ? error.message : String(error);
 		getUI().log.error(`Doctor failed: ${message}`);
 		emitWizardError({
@@ -2278,8 +2620,8 @@ function runSlackConnect(argv) {
 	(async () => {
 		const debug = argv.debug;
 		try {
-			const { startTUI } = await import("./start-tui-UNe2xQ0U.js");
-			const { buildSession } = await import("./wizard-session-CYvyYnti.js");
+			const { startTUI } = await import("./start-tui-CB2PZs1x.js");
+			const { buildSession } = await import("./wizard-session-DGaUHOF3.js");
 			const tui = startTUI(VERSION, Program.SlackConnect);
 			tui.store.session = buildSession({
 				debug,