@posthog/wizard 2.78.0 → 2.79.1

package/dist/{mint-failure-D4nd2XmZ.js → mint-failure-u8xQKNOn.js}

@@ -1,35 +1,434 @@
-import { a as AgentSignals, d as ErrorCodes } from "./errors-CQ9kttJD.js";
-import { r as debug, s as logToFile, x as regionOption, y as headlessOption } from "./debug-Ch4BDOtD.js";
-import { Q as WIZARD_USER_AGENT, U as WIZARD_INTERACTION_EVENT_NAME, f as EVENTS_AUDIT_REPORT_FILE, h as EVENT_PLAN_FILE, k as POSTHOG_DOCS_URL, w as Integration } from "./constants-jFI2SaE1.js";
+import { I as WIZARD_TOOL_NAMES, n as buildRunTags, nt as LONGER_ASK_TIMEOUT_MS } from "./agent-interface-FkbaBJwz.js";
+import { n as ErrorCodes } from "./emit-BSetXzDV.js";
+import { r as debug, s as logToFile, x as regionOption, y as headlessOption } from "./debug-kAHwWGg7.js";
+import { $ as getSkillsBaseUrl, Q as WIZARD_USER_AGENT, U as WIZARD_INTERACTION_EVENT_NAME, f as EVENTS_AUDIT_REPORT_FILE, h as EVENT_PLAN_FILE, k as POSTHOG_DOCS_URL, n as AGENTIC_DETECTION_RETRY_TIMEOUT_MS, t as AGENTIC_DETECTION_FIRST_ATTEMPT_TIMEOUT_MS, u as DETECTION_TIMEOUT_MS, w as Integration } from "./constants-DHCBSfnx.js";
 import { r as mayReportScanResults } from "./wizard-session-2w4Ru-Wz.js";
-import { n as analytics } from "./analytics-CHCZ_qUR.js";
-import { i as withUtm, n as openTrackedLink } from "./telemetry-D6ruCtnv.js";
-import "./bounded-fs-Bx9zTe6m.js";
-import { i as tryGetPackageJson, n as isUsingTypeScript } from "./setup-utils-CmTCTPkX.js";
-import { a as getBlockingServiceKeys, i as evaluateWizardReadiness, r as SIGNUP_WIZARD_READINESS_CONFIG } from "./logging-ui-_TwoMNbG.js";
-import { t as getUI } from "./ui-BBVuTM1v.js";
-import { i as requestDeepLink } from "./provisioning-B8uSqRZk.js";
-import { s as handleApiError } from "./api-Diy_2fp8.js";
-import { i as wizardAbort } from "./wizard-abort-BBkiUxfS.js";
-import { _ as detectProjectsWithAgent, b as detectFramework, d as findPackageJsons, f as WAREHOUSE_ABORT_CASES, g as AgenticDetectionTimeoutError, h as detectWarehouseSources, m as getDetectedWarehouseSources, o as detectPostHogIntegration, p as detectWarehousePrerequisites, r as AUDIT_CHECKS_KEY, t as runProgramAgent, v as resolveProjectDir, x as authenticate, y as gatherFrameworkContext } from "./run-agent-legacy-d7rWlzQR.js";
-import { I as WIZARD_TOOL_NAMES, nt as LONGER_ASK_TIMEOUT_MS } from "./agent-interface-BAOIHuXS.js";
-import { s as shouldDisableAsk } from "./agent-bCZ3i3fh.js";
-import { g as AUDIT_REPORT_FILE, h as AUDIT_CHECKS_FILE } from "./yara-hooks-DCeMDd1o.js";
-import { y as writeJsonAtomic } from "./queue-tools-9OOVx5TE.js";
-import { i as SPINNER_MESSAGE, t as FRAMEWORK_REGISTRY } from "./registry-8YG-kuXk.js";
+import { n as analytics } from "./analytics-DXK1gc12.js";
+import { i as withUtm, n as openTrackedLink } from "./telemetry-B7zJdRmA.js";
+import "./errors-C2domSkK.js";
+import { a as safeReadFile, o as walkProjectFiles } from "./bounded-fs-vAq-T-K7.js";
+import { a as isUsingTypeScript, g as detectNodePackageManagers, o as tryGetPackageJson } from "./setup-utils-B26Lf2yF.js";
+import { a as getBlockingServiceKeys, i as evaluateWizardReadiness, r as SIGNUP_WIZARD_READINESS_CONFIG } from "./logging-ui-Dza4D0MK.js";
+import { t as getUI } from "./ui-Q6-RvERF.js";
+import { r as requestDeepLink } from "./provisioning-Bo2NRxFz.js";
+import { l as handleApiError } from "./api-CrbCIQOz.js";
+import { i as wizardAbort } from "./wizard-abort-BPdv07np.js";
+import { s as AgentSignals } from "./gateway-C9-GlLO9.js";
+import { c as shouldDisableAsk, i as resolveScanBindings, n as runAgent } from "./agent-BWFhuLgo.js";
+import { g as AUDIT_REPORT_FILE, h as AUDIT_CHECKS_FILE } from "./yara-hooks-BnxejtXK.js";
+import { y as writeJsonAtomic } from "./queue-tools-C8mXOh7e.js";
+import { a as getDetectedWarehouseSources, c as AUDIT_CHECKS_KEY, d as authenticate, i as detectWarehousePrerequisites, m as stampAiSdkDetected, n as DETECTED_WAREHOUSE_SOURCES_KEY, o as detectWarehouseSources, p as createUiReducer, r as WAREHOUSE_ABORT_CASES, s as discoverFeatures, t as runProgramAgent } from "./run-agent-legacy-DOlM6DQu.js";
+import { r as SPINNER_MESSAGE, t as FRAMEWORK_REGISTRY } from "./registry-CD5RQt38.js";
+import * as semver from "semver";
 import { existsSync, readFileSync, readdirSync, statSync } from "fs";
-import path, { join } from "path";
+import path, { isAbsolute, join, relative, resolve, sep } from "path";
 import * as os from "node:os";
 import * as path$2 from "node:path";
 import { spawnSync } from "node:child_process";
 import * as fs$1 from "node:fs";
 import axios from "axios";
 import { z } from "zod";
+import { zodToJsonSchema } from "zod-to-json-schema";
 import { Text } from "ink";
 import { useEffect, useMemo, useRef, useState } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
 import { access, rm } from "node:fs/promises";
-//#region src/lib/detection/project-scope.ts
+//#region src/programs/detection/framework.ts
+/**
+* Framework detection — identify which PostHog-supported framework
+* is present in the project directory.
+*
+* Pure function: takes an install dir, returns the detected integration
+* (or undefined). No store mutations, no UI calls.
+*/
+/**
+* Loop through all registered frameworks and return the first one
+* whose `detect()` predicate matches the given directory.
+* Returns undefined if no framework is detected or detection times out.
+*/
+async function detectFramework(installDir) {
+	for (const integration of Object.values(Integration)) {
+		const config = FRAMEWORK_REGISTRY[integration];
+		try {
+			if (await Promise.race([config.detection.detect({ installDir }), new Promise((resolve) => setTimeout(() => resolve(false), 1e4))])) return integration;
+		} catch {}
+	}
+}
+//#endregion
+//#region src/programs/detection/context.ts
+/**
+* Framework context gathering — run gatherContext and version checks
+* for a detected framework.
+*
+* Pure functions: take a framework config and options, return results.
+* No store mutations, no UI calls.
+*/
+/**
+* Run a framework's `gatherContext()` to collect variant-specific
+* metadata (e.g., router type for Next.js, Expo vs bare for React Native).
+*
+* Returns the gathered context, or an empty object on failure/timeout.
+*/
+async function gatherFrameworkContext(config, options) {
+	if (!config.metadata.gatherContext) return {};
+	try {
+		return await Promise.race([config.metadata.gatherContext(options), new Promise((resolve) => setTimeout(() => resolve({}), DETECTION_TIMEOUT_MS))]);
+	} catch {
+		return {};
+	}
+}
+/**
+* Check whether the installed framework version meets the minimum requirement.
+*
+* Returns `{ supported: true }` if the version is fine (or no check is needed).
+* Returns the version details if unsupported.
+*/
+async function checkFrameworkVersion(config, options) {
+	if (!config.detection.minimumVersion || !config.detection.getInstalledVersion) return { supported: true };
+	const version = await config.detection.getInstalledVersion(options);
+	if (!version) return { supported: true };
+	const coerced = semver.coerce(version);
+	if (coerced && semver.lt(coerced, config.detection.minimumVersion)) return { supported: {
+		current: version,
+		minimum: config.detection.minimumVersion,
+		docsUrl: config.metadata.unsupportedVersionDocsUrl ?? config.metadata.docsUrl
+	} };
+	return { supported: true };
+}
+//#endregion
+//#region src/programs/detection/agentic.ts
+/**
+* Agentic project detection.
+*
+* A reusable detection tool that drives an agent over the repo: it finds
+* project roots, resolves monorepo/workspace markers, reads package manifests,
+* classifies each project against a caller-supplied set of targets, and reports
+* which projects already have a PostHog SDK installed.
+*
+* Product-knowledge-free by design — the caller passes the targets to classify
+* into (e.g. source-map skill variants) and maps the result back. Sits next to
+* the other detection tools (framework, features, package-manager) so it's
+* discoverable. Runs AFTER auth: it goes through the same `runAgent` every
+* program uses, which needs credentials.
+*/
+var AgenticDetectionTimeoutError = class extends Error {
+	constructor(attempt, timeoutMs) {
+		super(`Project scan attempt ${attempt} timed out after ${timeoutMs / 1e3}s`);
+		this.name = "AgenticDetectionTimeoutError";
+	}
+};
+/**
+* Every project-manifest / workspace-marker filename the wizard's frameworks
+* are identified by. One brace-expansion Glob over all of these locates every
+* project root in the repo in a single call, regardless of language.
+*
+* Counterpart: POSTHOG_MANIFESTS in @programs/self-driving/detect (SDK
+* grep); keep the two in sync.
+*/
+const PROJECT_MANIFESTS = [
+	"package.json",
+	"pnpm-workspace.yaml",
+	"turbo.json",
+	"nx.json",
+	"lerna.json",
+	"requirements.txt",
+	"pyproject.toml",
+	"setup.py",
+	"Pipfile",
+	"manage.py",
+	"Gemfile",
+	"composer.json",
+	"pom.xml",
+	"Cargo.toml",
+	"mix.exs",
+	"go.mod",
+	"*.csproj",
+	"Package.swift",
+	"Podfile",
+	"project.yml",
+	"project.pbxproj",
+	"pubspec.yaml",
+	"build.gradle",
+	"build.gradle.kts",
+	"settings.gradle",
+	"settings.gradle.kts",
+	"gradle/libs.versions.toml"
+];
+/** The single brace-expansion glob covering every supported manifest. */
+function manifestGlob() {
+	return `**/{${PROJECT_MANIFESTS.join(",")}}`;
+}
+function buildPrompt$1(cwd, targets, purpose, recommend) {
+	const targetList = targets.map((t) => `- ${t.id} → ${t.name}`).join("\n");
+	const projectShape = `{"path":string,"framework":string,"matchingTargets":string[],"targetId":string|null,"hasPostHog":boolean,"evidence":string${recommend ? ",\"recommended\":boolean" : ""}}`;
+	return [
+		`You are scanning a code repository to ${purpose}. Be fast and mechanical — do not over-explore. Keep any reasoning to one short sentence, then run the tool calls and output the JSON.`,
+		"",
+		`Working directory: ${cwd}`,
+		"",
+		"A \"project\" is a directory containing one or more of the manifest files below. Find projects by their manifests, NOT by walking directories — never report a directory that has no manifest.",
+		"",
+		"Do exactly this:",
+		`1. Run Glob ONCE with this pattern to find every project manifest in the repo in a single call: "${manifestGlob()}". Discard any result whose path contains node_modules/, dist/, build/, .next/, out/, coverage/, vendor/, .venv/, site-packages/, target/, Pods/, Carthage/, or DerivedData/. Group the remaining results by directory — each directory is one project. Three exceptions to "directory = project": a project.pbxproj lives inside a "<Name>.xcodeproj/" wrapper, so the project root is the PARENT of that .xcodeproj directory; a project.yml at a directory root is an XcodeGen-generated Xcode app rooted at that directory; a gradle/libs.versions.toml is a version catalog belonging to the gradle project rooted at the PARENT of that gradle/ directory (read it alongside the build.gradle when deciding hasPostHog), never its own project.`,
+		"2. Decide repoType: \"monorepo\" if the root package.json has a \"workspaces\" field OR a pnpm-workspace.yaml / turbo.json / nx.json / lerna.json was found at the root, else \"single\".",
+		`3. For EACH project directory, ONE AT A TIME: Read its manifest(s) ONCE, decide the fields below, then IMMEDIATELY — before reading any other project — write that project's verdict as one JSON line of shape ${projectShape}. Never write a verdict from memory of an earlier Read; the manifest you just read is the only source. Decide from its dependency lists:`,
+		"   - the human-readable framework name (e.g. \"Next.js\", \"Django\", \"Rails\"),",
+		"   - matchingTargets: EVERY target id from the list below whose technology appears in THIS manifest, in the priority order of the list. An id belongs here only if you can point at the dependency or setting in the manifest you just read — never carry one over from another project,",
+		"   - targetId: the FIRST entry of matchingTargets (the list is ordered by priority, most specific first). null when matchingTargets is empty,",
+		`   - hasPostHog: true if any dependency is a PostHog SDK. This includes: a name containing "posthog" in any ecosystem (e.g. posthog-js, posthog-node, @posthog/*, posthog for pip/gem/hex, a com.posthog:* gradle/maven coordinate, a PostHog NuGet PackageReference); an SPM package named "PostHog" or a repositoryURL of github.com/PostHog/posthog-ios (in Package.swift or a .pbxproj); or a "pod 'PostHog'" line in a Podfile. Else false.`,
+		"   - evidence: the manifest fact that decided targetId, with the file it came from (e.g. \"rollup in devDependencies of backend/package.json\"). When targetId is null, name the closest fact you saw. One short clause, quoted from the manifest you just read.",
+		"   Do NOT read any file other than these manifests.",
+		...recommend ? ["4. Pick exactly ONE project as recommended — the main user-facing client application. Prefer a frontend web app or a mobile app over backend servers/APIs, libraries, CLIs, tooling, and example/demo/docs apps. If several client apps exist, pick the primary production app; if no client app exists, pick the primary application project."] : [],
+		"",
+		"Target ids (id → name), in priority order — most specific first; if several match a project, keep the one listed earliest:",
+		targetList,
+		"",
+		"Output requirements:",
+		"- After the last verdict line, respond with ONLY a single JSON object assembling the verdict lines you wrote, copied VERBATIM — same path, framework, targetId and evidence per project. No prose, no markdown code fences.",
+		`- Shape: {"repoType":"monorepo"|"single","projects":[${projectShape}]}`,
+		"- \"path\" is the project directory relative to the working directory; use \".\" for the repo root.",
+		"- \"targetId\" MUST be exactly one of the target ids above when it matches; if several match, use the one listed earliest; otherwise null.",
+		"- Include projects whose stack matches no target too (targetId: null).",
+		...recommend ? ["- Exactly one project has \"recommended\": true; every other project has \"recommended\": false."] : [],
+		"- If there are no manifests at all, return {\"repoType\":\"single\",\"projects\":[]}."
+	].join("\n");
+}
+/**
+* Build the detection report from the agent's output, or null when it holds
+* neither a project verdict nor a `projects` array. Exported for testing.
+*
+* The verdict lines are far more reliable than the model's final assembly
+* (prose, pretty-printing, per-object fences), so every parseable line
+* contributes: objects with a `path` merge by path (last wins), and a
+* one-line assembly's `projects` merge the same way. `repoType` is
+* approximated from the count — it only feeds telemetry and display.
+*/
+function deriveReportJson(text) {
+	const byPath = /* @__PURE__ */ new Map();
+	let sawReport = false;
+	for (const line of text.split("\n")) {
+		const start = line.indexOf("{");
+		const end = line.lastIndexOf("}");
+		if (start === -1 || end <= start) continue;
+		let parsed;
+		try {
+			parsed = JSON.parse(line.slice(start, end + 1));
+		} catch {
+			continue;
+		}
+		const obj = parsed ?? {};
+		sawReport ||= Array.isArray(obj.projects);
+		const candidates = Array.isArray(obj.projects) ? obj.projects : [obj];
+		for (const candidate of candidates) {
+			const p = candidate ?? {};
+			if (typeof p.path === "string") byPath.set(p.path, p);
+		}
+	}
+	if (byPath.size === 0 && !sawReport) return null;
+	const projects = [...byPath.values()];
+	return {
+		repoType: projects.length > 1 ? "monorepo" : "single",
+		projects
+	};
+}
+/**
+* Clamp an agent-reported project path to a safe repo-relative dir. The path
+* is LLM output: absolute paths or `..` segments could steer later phases
+* (e.g. integrate-run's targetDir) outside the repo, so they clamp to '.'.
+*/
+function coercePath(raw) {
+	if (typeof raw !== "string" || raw.length === 0) return ".";
+	if (isAbsolute(raw) || raw.split(/[\\/]/).includes("..")) return ".";
+	return raw;
+}
+/** Resolve an agent-reported path to an absolute dir clamped to the root — the caller-side counterpart of coercePath. */
+function resolveProjectDir(installDir, rel) {
+	if (typeof rel !== "string" || rel === ".") return installDir;
+	const root = resolve(installDir);
+	const dir = resolve(root, rel);
+	return dir === root || dir.startsWith(root + sep) ? dir : root;
+}
+/**
+* Validate the agent's raw JSON into a report, clamping each targetId to the
+* supplied set and each path to a repo-relative dir. Exported for testing.
+* `recommended` is stripped unless requested; at most one (the first) survives.
+*/
+function coerceAgenticReport(parsed, validTargetIds, options) {
+	const recommend = options?.recommend === true;
+	const rerankIds = options?.rerankIds ?? [];
+	const obj = parsed ?? {};
+	const repoType = obj.repoType === "monorepo" ? "monorepo" : "single";
+	const rawProjects = Array.isArray(obj.projects) ? obj.projects : [];
+	let recommendedSeen = false;
+	return {
+		repoType,
+		projects: rawProjects.map((raw) => {
+			const p = raw ?? {};
+			const pick = typeof p.targetId === "string" && validTargetIds.includes(p.targetId) ? p.targetId : null;
+			const enumerated = Array.isArray(p.matchingTargets) ? validTargetIds.find((id) => p.matchingTargets.includes(id)) ?? null : null;
+			const targetId = pick === null ? enumerated : enumerated !== null && rerankIds.includes(enumerated) && rerankIds.includes(pick) ? enumerated : pick;
+			const recommended = recommend && !recommendedSeen && p.recommended === true;
+			recommendedSeen ||= recommended;
+			return {
+				path: coercePath(p.path),
+				framework: typeof p.framework === "string" ? p.framework : "Unknown",
+				targetId,
+				hasPostHog: p.hasPostHog === true,
+				...recommend ? { recommended } : {}
+			};
+		})
+	};
+}
+function detectionReportSchema(recommend) {
+	return z.object({
+		repoType: z.enum(["monorepo", "single"]),
+		projects: z.array(z.object({
+			path: z.string(),
+			framework: z.string(),
+			matchingTargets: z.array(z.string()),
+			targetId: z.string().nullable(),
+			hasPostHog: z.boolean(),
+			evidence: z.string(),
+			...recommend ? { recommended: z.boolean() } : {}
+		}).strict())
+	}).strict();
+}
+/** Read-only scan with a typed result and transcript recovery. */
+function detectionRunDefinition(prompt) {
+	return {
+		integrationLabel: "agentic-detect",
+		readOnly: true,
+		prompt: () => prompt,
+		collectTranscript: true,
+		requestRemark: false,
+		detectPackageManager: detectNodePackageManagers,
+		spinnerMessage: "Scanning the repo...",
+		successMessage: "Detection complete",
+		errorMessage: "Detection failed",
+		estimatedDurationMinutes: 1,
+		reportFile: "",
+		docsUrl: POSTHOG_DOCS_URL
+	};
+}
+/** What the UI saw before `runAgent`: no run lifecycle, spinner, outro, or setup logs below warn. */
+function reachesUi(event) {
+	switch (event.kind) {
+		case "lifecycle":
+		case "completion":
+		case "spinner": return false;
+		case "log": return event.level === "warn" || event.level === "error";
+		default: return true;
+	}
+}
+/** Scan through `runAgent` with the bound triage model, then the SDK fallback. */
+async function detectProjectsWithAgent(session, options) {
+	if (!session.credentials) throw new Error("Detection requires authenticated credentials.");
+	const { targets, programId, purpose = "set up a PostHog integration", recommend = false, rerankIds, onEvent } = options;
+	const wizardMetadata = {
+		...buildRunTags({
+			programId,
+			integration: "agentic-detect",
+			runId: analytics.runId,
+			build: analytics.build
+		}),
+		call_type: "detection"
+	};
+	const wizardFlags = await analytics.getAllFlagsForWizard();
+	const wizardFlagPayloads = analytics.getWizardFlagPayloads();
+	const switchboard = {
+		program: programId,
+		composed: true,
+		flags: wizardFlags,
+		flagPayloads: wizardFlagPayloads,
+		cliHarness: session.harness
+	};
+	const bindings = resolveScanBindings(switchboard);
+	const reportSchema = detectionReportSchema(recommend);
+	const schema = zodToJsonSchema(reportSchema);
+	const config = {
+		programId,
+		run: detectionRunDefinition(buildPrompt$1(session.installDir, targets, purpose, recommend)),
+		composed: true,
+		binding: bindings[0],
+		switchboard,
+		skillsBaseUrl: getSkillsBaseUrl(),
+		wizardFlags,
+		wizardFlagPayloads,
+		wizardMetadata,
+		scanReport: "defer"
+	};
+	const input = {
+		installDir: session.installDir,
+		credentials: session.credentials,
+		project: null,
+		apiUser: null,
+		flags: {
+			ci: session.ci,
+			signup: session.signup,
+			debug: session.debug,
+			e2eAsk: false,
+			localMcp: session.localMcp,
+			captureAio: false,
+			benchmark: false,
+			yaraReport: session.yaraReport
+		},
+		host: {
+			projectId: session.projectId,
+			apiKey: session.apiKey
+		}
+	};
+	const reduceUi = createUiReducer(getUI());
+	const forward = (event) => {
+		if (event.kind === "activity") onEvent?.(event.line);
+		if (reachesUi(event)) reduceUi(event);
+	};
+	for (let attempt = 0; attempt < 2; attempt++) {
+		const timeoutMs = attempt === 0 ? AGENTIC_DETECTION_FIRST_ATTEMPT_TIMEOUT_MS : AGENTIC_DETECTION_RETRY_TIMEOUT_MS;
+		const result = await runAgent({
+			...config,
+			binding: bindings[attempt],
+			run: {
+				...config.run,
+				structured: {
+					schema,
+					timeoutMs
+				}
+			}
+		}, input, { onProgress: forward });
+		if (result.outcome !== "success" && result.failure.code === ErrorCodes.AgenticDetectionTimeout) {
+			if (attempt === 0) {
+				onEvent?.("Project scan timed out; retrying...");
+				continue;
+			}
+			throw new AgenticDetectionTimeoutError(attempt + 1, timeoutMs);
+		}
+		if (result.outcome !== "success") {
+			if (result.failure.code === ErrorCodes.AgentInvalidStructuredOutput && attempt === 0) {
+				onEvent?.("Project scan returned invalid output; retrying...");
+				continue;
+			}
+			throw result.failure.error ?? new Error(result.failure.message);
+		}
+		if (result.structuredOutput !== void 0) {
+			const structured = reportSchema.safeParse(result.structuredOutput);
+			if (structured.success) return coerceAgenticReport(structured.data, targets.map((t) => t.id), {
+				recommend,
+				rerankIds
+			});
+			if (attempt === 0) onEvent?.("Project scan returned invalid output; retrying...");
+			continue;
+		}
+		const derived = deriveReportJson(result.snapshot.transcriptTail ?? "");
+		if (derived !== null) return coerceAgenticReport(derived, targets.map((t) => t.id), {
+			recommend,
+			rerankIds
+		});
+		if (attempt === 0) onEvent?.("Retrying project scan...");
+	}
+	throw new Error("Agent did not return a JSON object after retry");
+}
+//#endregion
+//#region src/programs/detection/project-scope.ts
 /** Non-interactive project scoping — scan the repo agentically and pick which project the run integrates. */
 /** Integration framework targets for the agentic detector (id → display name). */
 const INTEGRATION_TARGETS = Object.entries(FRAMEWORK_REGISTRY).map(([id, config]) => ({
@@ -66,13 +465,13 @@ function captureOutcome(outcome, properties = {}) {
 	});
 }
 /** Flag-gated non-interactive monorepo phase: scan, auto-choose the recommended project, re-point session.installDir; every failure leaves the session untouched. */
-async function scopeInstallDirToProject(session) {
+async function scopeInstallDirToProject(session, runner) {
 	await authenticate(session, "posthog-integration");
 	if ((await analytics.getAllFlagsForWizard())["wizard-basic-integration-agentic-detection"] !== "true") {
 		captureOutcome("flag-off");
 		return;
 	}
-	getUI().log.info("Scanning the repo for projects...");
+	runner.log.info("Scanning the repo for projects...");
 	const startedAt = Date.now();
 	let report;
 	try {
@@ -85,7 +484,7 @@ async function scopeInstallDirToProject(session) {
 		const error = err instanceof Error ? err : new Error(String(err));
 		if (error instanceof AgenticDetectionTimeoutError) {
 			captureOutcome("timeout", { duration_ms: Date.now() - startedAt });
-			getUI().log.warn(`${error.message}; continuing with the install dir as-is.`);
+			runner.log.warn(`${error.message}; continuing with the install dir as-is.`);
 			return;
 		}
 		analytics.captureException(error, { step: "agentic_detection" });
@@ -93,7 +492,7 @@ async function scopeInstallDirToProject(session) {
 			duration_ms: Date.now() - startedAt,
 			error_message: error.message
 		});
-		getUI().log.warn(`Project scan failed (${error.message}); continuing with the install dir as-is.`);
+		runner.log.warn(`Project scan failed (${error.message}); continuing with the install dir as-is.`);
 		return;
 	}
 	const { projects } = report;
@@ -110,7 +509,7 @@ async function scopeInstallDirToProject(session) {
 	const project = chooseIntegrationProject(projects);
 	if (!project) {
 		captureOutcome("no-project", scanProperties);
-		getUI().log.info("The scan found no supported project; continuing with the install dir as-is.");
+		runner.log.info("The scan found no supported project; continuing with the install dir as-is.");
 		return;
 	}
 	session.installDir = resolveProjectDir(session.installDir, project.path);
@@ -119,10 +518,10 @@ async function scopeInstallDirToProject(session) {
 		chosen_framework: project.targetId,
 		chosen_path: project.path
 	});
-	getUI().log.info(`Continuing with ${project.path} (${project.framework}).`);
+	runner.log.info(`Continuing with ${project.path} (${project.framework}).`);
 }
 //#endregion
-//#region src/lib/programs/shared/health-check-step.ts
+//#region src/programs/shared/health-check-step.ts
 function healthCheckReady(session) {
 	if (!session.readinessResult) return false;
 	if (session.signup) {
@@ -154,7 +553,180 @@ const HEALTH_CHECK_STEP = {
 	}
 };
 //#endregion
-//#region src/lib/programs/posthog-integration/steps.ts
+//#region src/programs/shared/package-scanning.ts
+const POSTHOG_SDKS = new Set([
+	"posthog-js",
+	"posthog-node",
+	"posthog-react-native",
+	"posthog-android",
+	"posthog-ios"
+]);
+const STRIPE_SDKS = new Set([
+	"stripe",
+	"@stripe/stripe-js",
+	"@stripe/react-stripe-js"
+]);
+const MAX_PACKAGE_MATCHES = 500;
+/**
+* Find all package.json files under installDir via the shared bounded walk
+* (depth cap, ignored dirs, symlink-loop protection, per-dir entry cap).
+* Returns matches with detected SDKs.
+*/
+function findPackageJsons(installDir, maxDepth = 3) {
+	const matches = [];
+	walkProjectFiles(installDir, (name, fullPath) => {
+		if (name !== "package.json" || matches.length >= MAX_PACKAGE_MATCHES) return;
+		const content = safeReadFile(fullPath);
+		if (content === null) return;
+		try {
+			const pkg = JSON.parse(content);
+			const depNames = [...Object.keys(pkg.dependencies ?? {}), ...Object.keys(pkg.devDependencies ?? {})];
+			const posthogSdks = depNames.filter((d) => POSTHOG_SDKS.has(d));
+			const stripeSdks = depNames.filter((d) => STRIPE_SDKS.has(d));
+			matches.push({
+				path: relative(installDir, fullPath) || "package.json",
+				posthogSdks,
+				stripeSdks
+			});
+		} catch {}
+	}, maxDepth);
+	return matches;
+}
+//#endregion
+//#region src/programs/posthog-integration/detect.ts
+async function detectPostHogIntegration(ctx) {
+	const session = ctx.session;
+	const installDir = session.installDir;
+	const detectedIntegration = await detectFramework(installDir);
+	if (detectedIntegration) {
+		const config = FRAMEWORK_REGISTRY[detectedIntegration];
+		const sessionOptions = {
+			installDir,
+			debug: session.debug,
+			signup: session.signup,
+			ci: session.ci,
+			benchmark: session.benchmark,
+			yaraReport: session.yaraReport
+		};
+		const context = await gatherFrameworkContext(config, sessionOptions);
+		for (const [key, value] of Object.entries(context)) if (!(key in session.frameworkContext)) ctx.setFrameworkContext(key, value);
+		ctx.setFrameworkConfig(detectedIntegration, config);
+		ctx.setSkillId(detectedIntegration);
+		if (!session.detectedFrameworkLabel) ctx.setDetectedFramework(config.metadata.name);
+		const versionResult = await checkFrameworkVersion(config, sessionOptions);
+		if (versionResult.supported !== true) ctx.setUnsupportedVersion(versionResult.supported);
+	}
+	for (const feature of discoverFeatures(installDir)) ctx.addDiscoveredFeature(feature);
+	detectWarehouseSourcesForSuggestion(ctx, installDir);
+	detectExistingPostHog(ctx, installDir);
+	ctx.setDetectionComplete();
+}
+/**
+* How the scan went, for the reporter to read later. Three states, and the
+* absent one carries the most weight:
+*
+*   absent   this program never scanned. Only `posthog-integration` runs the
+*            scan below, but every program's intro screen resolves consent
+*            through the same store method, so the reporter is reached on runs
+*            where no scan ever happened.
+*   'failed' the scan threw. A zero-count row would read as "scanned, found
+*            nothing", which is a different fact.
+*   'ok'     the scan ran. Zero sources is a real result and gets reported.
+*/
+const WAREHOUSE_SCAN_STATE_KEY = "warehouseScanState";
+/**
+* Scan for data warehouse source signals (Postgres, Stripe, Hubspot, …) and,
+* when found, stash them for a `wizard warehouse` suggestion on the outro.
+* Runs unconditionally during `detect`, before the intro screen has asked
+* about sharing. Reporting what this finds is a separate, later concern.
+* See `reportWarehouseSourcesDetected` below.
+*
+* Deliberately a suggestion, not an inline agent run: a second credential-
+* collecting agent run before the outro could `process.exit()` on any of its
+* failure paths and cost the user the success outro on a run where PostHog
+* installed fine.
+*
+* Calls `detectWarehouseSources` (a pure scan) rather than the warehouse
+* program's `detectWarehousePrerequisites`, which writes a `detectError` when
+* it finds nothing — that's right for `wizard warehouse` but here would show a
+* spurious error and trip the CI prerequisites abort. No sources is a no-op.
+*
+* Best-effort: never let a scan failure break the wizard flow.
+*/
+function detectWarehouseSourcesForSuggestion(ctx, installDir) {
+	try {
+		const sources = detectWarehouseSources(installDir);
+		ctx.setFrameworkContext(WAREHOUSE_SCAN_STATE_KEY, "ok");
+		if (sources.length === 0) return;
+		ctx.setFrameworkContext(DETECTED_WAREHOUSE_SOURCES_KEY, sources);
+	} catch (error) {
+		ctx.setFrameworkContext(WAREHOUSE_SCAN_STATE_KEY, "failed");
+		analytics.captureException(error instanceof Error ? error : new Error(String(error)), { step: "detectWarehouseSourcesForSuggestion" });
+	}
+}
+/**
+* Fires the org stamp once per session, right after `authenticate()` succeeds
+* — never from the consent path, since consent on the intro screen resolves
+* before login and `session.apiUser` is unset there. Called right after
+* `authenticate()` from run-wizard.ts's auth step and from bootstrap.ts,
+* whichever completes it first for a given program; a no-op on every call
+* after that. In the `--ci` path, project-scope.ts authenticates first as a
+* prerequisite (no evidence gathered yet, so nothing would stamp there
+* anyway) and this only ever runs from the later, idempotent bootstrap.ts
+* call — still correctly finding no evidence, since CI skips the detect step.
+*/
+function maybeStampAiSdkDetected(session) {
+	if (session.aiSdkStampReported) return;
+	session.aiSdkStampReported = true;
+	stampAiSdkDetected({
+		apiUser: session.apiUser,
+		discoveredFeatures: session.discoveredFeatures,
+		warehouseSources: getDetectedWarehouseSources(session),
+		mayReportScanResults: mayReportScanResults(session)
+	});
+}
+/**
+* The single place scan results become telemetry. Called from
+* `WizardStore.completeSetup()`, the point consent becomes final — the privacy
+* panel's choice is reversible until then, so nothing may report earlier.
+* The org stamp is a separate concern: see `maybeStampAiSdkDetected`, which
+* runs post-auth rather than at consent resolution.
+*
+* Returns true when consent has resolved and the caller should latch
+* `warehouseSourcesReported`, which is not the same as "this sent something":
+* a decline, a failed scan, and a program that never scanned all resolve
+* without sending.
+*/
+function reportWarehouseSourcesDetected(session) {
+	if (session.warehouseSourcesReported) return false;
+	if (session.scanConsent === "undecided") return false;
+	if (mayReportScanResults(session)) {
+		const sources = getDetectedWarehouseSources(session);
+		if (session.frameworkContext[WAREHOUSE_SCAN_STATE_KEY] !== "ok") return true;
+		analytics.wizardCapture("warehouse sources detected", {
+			warehouse_source_count: sources.length,
+			warehouse_source_kinds: sources.map((s) => s.kind),
+			warehouse_source_modes: sources.map((s) => s.mode)
+		});
+		if (sources.length > 0) {
+			analytics.setTag("warehouse_source_kinds", sources.map((s) => s.kind).join(","));
+			analytics.setTag("warehouse_source_count", sources.length);
+		}
+	}
+	return true;
+}
+/** Dependency-level signal, not a verified install. A failed scan reports false. */
+function detectExistingPostHog(ctx, installDir) {
+	try {
+		const pkgJsons = findPackageJsons(installDir);
+		ctx.setPosthogSdkDetected(pkgJsons.some((p) => p.posthogSdks.length > 0));
+	} catch (error) {
+		analytics.captureException(error instanceof Error ? error : new Error(String(error)), { step: "detectExistingPosthog" });
+		ctx.setPosthogSdkDetected(false);
+	}
+}
+//#endregion
+//#region src/programs/posthog-integration/steps.ts
 function needsSetup$1(session) {
 	const config = session.frameworkConfig;
 	if (!config?.metadata.setup?.questions) return false;
@@ -475,7 +1047,7 @@ const StatusPeekTrigger = ({ store, duration = 1e4 }) => {
 	return /* @__PURE__ */ jsx(Text, { children: "You can view the Wizard's status below." });
 };
 //#endregion
-//#region src/lib/programs/posthog-integration/content/data-flow.tsx
+//#region src/ui/tui/decks/posthog-integration/data-flow.tsx
 /**
 * POSTHOG_DATA_FLOW — ASCII diagram of the PostHog event ingestion flow.
 */
@@ -644,7 +1216,7 @@ const POSTHOG_DATA_FLOW = {
 	]
 };
 //#endregion
-//#region src/lib/programs/posthog-integration/content/product-suite.tsx
+//#region src/ui/tui/decks/posthog-integration/product-suite.tsx
 /**
 * PRODUCT_SUITE_BLOCK — Two-column listing of PostHog products.
 */
@@ -764,7 +1336,7 @@ const PRODUCT_SUITE_BLOCK = {
 	]
 };
 //#endregion
-//#region src/lib/programs/posthog-integration/content/line-chart.tsx
+//#region src/ui/tui/decks/posthog-integration/line-chart.tsx
 /**
 * LINE_CHART_BLOCK — ASCII trends chart illustrating an insight.
 */
@@ -888,7 +1460,7 @@ const LINE_CHART_BLOCK = {
 	]
 };
 //#endregion
-//#region src/lib/programs/posthog-integration/content/funnel.tsx
+//#region src/ui/tui/decks/posthog-integration/funnel.tsx
 /**
 * FUNNEL_BLOCK — ASCII funnel illustrating step conversion.
 */
@@ -1068,7 +1640,7 @@ const FUNNEL_BLOCK = {
 	]
 };
 //#endregion
-//#region src/lib/programs/posthog-integration/content/index.tsx
+//#region src/ui/tui/decks/posthog-integration/index.tsx
 /**
 * Integration learn-deck — the narrative script played while the agent
 * runs the PostHog integration flow. Weaves typewriter lines, pauses,
@@ -1257,7 +1829,7 @@ const getContentBlocks$5 = (store) => [
 	}
 ];
 //#endregion
-//#region src/lib/programs/posthog-integration/handoff.ts
+//#region src/programs/posthog-integration/handoff.ts
 /**
 * The one-line prompt the operator pastes into their own coding agent after a
 * run: open the setup-report notebook, work its "Verify before merging"
@@ -1271,7 +1843,7 @@ function buildCodingAgentPrompt(notebookUrl) {
 	return `Open ${notebookUrl} (the PostHog setup report) and work through its "Verify before merging" checklist: investigate each item, then list the changes you'd make and get my approval before applying any of them.`;
 }
 //#endregion
-//#region src/lib/programs/posthog-integration/index.ts
+//#region src/programs/posthog-integration/index.ts
 const DASHBOARD_DEEP_LINK_KEY = "dashboardDeepLink";
 const WAREHOUSE_SOURCES_DOCS_URL = "https://posthog.com/docs/data-warehouse/sources";
 /** Task type of the seeded step below, matched against the drain's result. */
@@ -1428,8 +2000,8 @@ const posthogIntegrationConfig = {
 	disallowedTools: [WIZARD_TOOL_NAMES.wizardAsk],
 	seedTasks: warehouseSeedTasks,
 	excludedTaskTypes: (flags) => flags["wizard-default-aio-logs"] === "false" ? ["ai-observability", "logs"] : [],
-	ciPreRun: async (session) => {
-		await scopeInstallDirToProject(session);
+	ciPreRun: async (session, runner) => {
+		await scopeInstallDirToProject(session, runner);
 		const integration = await detectFramework(session.installDir);
 		if (!integration) {
 			await wizardAbort({
@@ -1452,7 +2024,7 @@ const posthogIntegrationConfig = {
 		});
 		for (const [key, value] of Object.entries(context)) if (!(key in session.frameworkContext)) session.frameworkContext[key] = value;
 	},
-	run: async (session) => {
+	run: async (session, runner) => {
 		const config = session.frameworkConfig;
 		const typeScriptDetected = isUsingTypeScript({ installDir: session.installDir });
 		session.typescript = typeScriptDetected;
@@ -1462,10 +2034,10 @@ const posthogIntegrationConfig = {
 		if (usesPackageJson) {
 			const packageJson = await tryGetPackageJson({ installDir: session.installDir });
 			if (packageJson) {
-				const { hasDeclaredDependency } = await import("./package-json-DY70kkNp.js").then((n) => n.i);
-				if (!hasDeclaredDependency(config.detection.packageName, packageJson)) getUI().log.warn(`${config.detection.packageDisplayName} does not seem to be installed. Continuing anyway — the agent will handle it.`);
+				const { hasDeclaredDependency } = await import("./package-json-D8Ga03tK.js");
+				if (!hasDeclaredDependency(config.detection.packageName, packageJson)) runner.log.warn(`${config.detection.packageDisplayName} does not seem to be installed. Continuing anyway — the agent will handle it.`);
 				frameworkVersion = config.detection.getVersion(packageJson);
-			} else getUI().log.warn("Could not find package.json. Continuing anyway — the agent will handle it.");
+			} else runner.log.warn("Could not find package.json. Continuing anyway — the agent will handle it.");
 		} else frameworkVersion = config.detection.getVersion(null);
 		if (frameworkVersion && config.detection.getVersionBucket) {
 			const versionBucket = config.detection.getVersionBucket(frameworkVersion);
@@ -1531,7 +2103,7 @@ ${warehouseReportInstruction(session)}
 			postRun: async (sess, credentials) => {
 				const envVars = config.environment.getEnvVars(credentials.projectApiKey, credentials.host.apiHost);
 				if (config.environment.uploadToHosting) {
-					const { uploadEnvironmentVariablesStep } = await import("./steps-BZcXRJNY.js");
+					const { uploadEnvironmentVariablesStep } = await import("./steps-BPcg3_3Q.js");
 					const uploadedEnvVars = await uploadEnvironmentVariablesStep(envVars, {
 						integration: config.metadata.integration,
 						session: sess
@@ -1586,7 +2158,7 @@ const integrationRunStep = {
 	isComplete: (session) => session.runPhase === "completed" || session.runPhase === "error"
 };
 //#endregion
-//#region src/lib/programs/revenue-analytics/detect.ts
+//#region src/programs/revenue-analytics/detect.ts
 /**
 * Revenue analytics prerequisite detection.
 *
@@ -1679,7 +2251,7 @@ function detectRevenuePrerequisites(session, setFrameworkContext) {
 	setFrameworkContext("detectedPackagePaths", matches.filter((m) => m.posthogSdks.length > 0 || m.stripeSdks.length > 0).map((m) => m.path));
 }
 //#endregion
-//#region src/lib/programs/revenue-analytics/steps.ts
+//#region src/programs/revenue-analytics/steps.ts
 const REVENUE_ANALYTICS_PROGRAM = [
 	{
 		id: "detect",
@@ -1718,7 +2290,7 @@ const REVENUE_ANALYTICS_PROGRAM = [
 	}
 ];
 //#endregion
-//#region src/lib/programs/agent-skill/content/index.tsx
+//#region src/ui/tui/decks/agent-skill/index.tsx
 /**
 * Agent-skill learn-deck — the short three-line sequence shown while a
 * skill-based program (audit, revenue-analytics, agent-skill, etc.)
@@ -1750,7 +2322,7 @@ const getContentBlocks$4 = (store) => {
 	];
 };
 //#endregion
-//#region src/lib/programs/revenue-analytics/index.ts
+//#region src/programs/revenue-analytics/index.ts
 const revenueAnalyticsConfig = {
 	command: "revenue-analytics",
 	description: "Set up PostHog for Revenue Analytics",
@@ -1774,7 +2346,7 @@ const revenueAnalyticsConfig = {
 	requires: ["posthog-integration"]
 };
 //#endregion
-//#region src/lib/programs/warehouse-source/steps.ts
+//#region src/programs/warehouse-source/steps.ts
 const WAREHOUSE_SOURCE_PROGRAM = [
 	{
 		id: "detect",
@@ -1812,7 +2384,7 @@ const WAREHOUSE_SOURCE_PROGRAM = [
 	}
 ];
 //#endregion
-//#region src/lib/programs/warehouse-source/index.ts
+//#region src/programs/warehouse-source/index.ts
 /**
 * Inject the detected sources (and their creation mode) into the prompt so the
 * skill knows what to set up. The *how* — in-CLI creation vs deep-link, field
@@ -1855,7 +2427,7 @@ const warehouseSourceConfig = {
 	requires: ["posthog-integration"]
 };
 //#endregion
-//#region src/lib/programs/agent-skill/steps.ts
+//#region src/programs/agent-skill/steps.ts
 const AGENT_SKILL_STEPS = [
 	{
 		id: "intro",
@@ -1889,7 +2461,7 @@ const AGENT_SKILL_STEPS = [
 	}
 ];
 //#endregion
-//#region src/lib/programs/agent-skill/index.ts
+//#region src/programs/agent-skill/index.ts
 function createSkillProgram(opts) {
 	return {
 		command: opts.command,
@@ -1915,7 +2487,7 @@ function createSkillProgram(opts) {
 	};
 }
 //#endregion
-//#region src/lib/programs/audit/detect.ts
+//#region src/programs/audit/detect.ts
 /** `[ABORT] <reason>` cases the audit skill can emit. Reason strings are
 *  defined in the skill's `Abort statuses` section. */
 const AUDIT_ABORT_CASES = [{
@@ -1926,7 +2498,7 @@ const AUDIT_ABORT_CASES = [{
 	docsUrl: "https://posthog.com/docs/getting-started/install"
 }];
 //#endregion
-//#region src/lib/programs/audit/seed.ts
+//#region src/programs/audit/seed.ts
 /**
 * The 10 source-tree checks the audit runs, plus one row for the PostHog-side
 * sweep and two workflow rows at the end (so the skill's
@@ -2042,7 +2614,7 @@ function seedAuditLedger(installDir, checks = AUDIT_SEED_CHECKS) {
 	logToFile(`seedAuditLedger: wrote ${checks.length} entries to ${target}`);
 }
 //#endregion
-//#region src/lib/programs/audit/index.ts
+//#region src/programs/audit/index.ts
 /** Audit-specific screens for the shared agent-skill pipeline. */
 const AUDIT_SCREEN_BY_STEP = {
 	intro: "audit-intro",
@@ -2076,10 +2648,10 @@ const baseConfig = createSkillProgram({
 	requires: ["posthog-integration"],
 	abortCases: AUDIT_ABORT_CASES
 });
-const auditRun = async (session) => {
+const auditRun = async (session, runner) => {
 	seedBeforeAuditRun(session);
 	if (!baseConfig.run) throw new Error("Audit program has no run configuration.");
-	const baseRun = typeof baseConfig.run === "function" ? await baseConfig.run(session) : baseConfig.run;
+	const baseRun = typeof baseConfig.run === "function" ? await baseConfig.run(session, runner) : baseConfig.run;
 	return {
 		...baseRun,
 		buildOutroData: (sess, credentials) => {
@@ -2115,7 +2687,7 @@ const auditConfig = {
 	}
 };
 //#endregion
-//#region src/lib/programs/events-audit/steps.ts
+//#region src/programs/events-audit/steps.ts
 function needsSetup(session) {
 	const config = session.frameworkConfig;
 	if (!config?.metadata.setup?.questions) return false;
@@ -2167,7 +2739,7 @@ const EVENTS_AUDIT_PROGRAM = [
 	}
 ];
 //#endregion
-//#region src/lib/programs/events-audit/seed.ts
+//#region src/programs/events-audit/seed.ts
 /**
 * The 7 phases the events-audit skill marches through. One check per area
 * so PendingChecksList renders a clean linear pipeline (area = bold header,
@@ -2223,7 +2795,7 @@ const EVENTS_AUDIT_SEED_CHECKS = [
 	}
 ];
 //#endregion
-//#region src/lib/programs/events-audit/index.ts
+//#region src/programs/events-audit/index.ts
 const DOCS_URL$3 = "https://posthog.com/docs/product-analytics/best-practices";
 /**
 * No CLI word of its own since the audit family took over: `wizard audit
@@ -2284,7 +2856,7 @@ Project context:
 	}
 };
 //#endregion
-//#region src/lib/programs/posthog-doctor/steps.ts
+//#region src/programs/posthog-doctor/steps.ts
 const POSTHOG_DOCTOR_PROGRAM = [
 	{
 		id: "intro",
@@ -2313,7 +2885,7 @@ const POSTHOG_DOCTOR_PROGRAM = [
 	}
 ];
 //#endregion
-//#region src/lib/programs/posthog-doctor/types.ts
+//#region src/programs/posthog-doctor/types.ts
 const HealthIssueSeveritySchema = z.enum([
 	"critical",
 	"warning",
@@ -2337,7 +2909,7 @@ const HealthIssueListResponseSchema = z.object({
 	previous: z.string().nullable().optional()
 });
 //#endregion
-//#region src/lib/programs/posthog-doctor/fetch.ts
+//#region src/programs/posthog-doctor/fetch.ts
 async function fetchHealthIssues(accessToken, baseUrl, projectId) {
 	const endpoint = `/api/environments/${projectId}/health_issues/`;
 	const url = `${baseUrl}${endpoint}?status=active&dismissed=false&limit=250`;
@@ -2358,7 +2930,7 @@ async function fetchHealthIssues(accessToken, baseUrl, projectId) {
 	}
 }
 //#endregion
-//#region src/lib/programs/posthog-doctor/kind-metadata.ts
+//#region src/programs/posthog-doctor/kind-metadata.ts
 const KIND_METADATA = {
 	ingestion_lag: {
 		title: "Ingestion is delayed",
@@ -2428,7 +3000,7 @@ function getKindMeta(kind) {
 	};
 }
 //#endregion
-//#region src/lib/programs/posthog-doctor/index.ts
+//#region src/programs/posthog-doctor/index.ts
 const posthogDoctorConfig = {
 	command: "doctor",
 	description: "Diagnose your PostHog project setup",
@@ -2439,7 +3011,7 @@ const posthogDoctorConfig = {
 	disallowedTools: [WIZARD_TOOL_NAMES.wizardAsk]
 };
 //#endregion
-//#region src/lib/programs/web-analytics-doctor/detect.ts
+//#region src/programs/web-analytics-doctor/detect.ts
 const WEB_ANALYTICS_ABORT_CASES = [
 	{
 		match: /^no web analytics events$/i,
@@ -2506,7 +3078,7 @@ function detectWebAnalyticsPrerequisites(session, setFrameworkContext) {
 	setFrameworkContext("detectedPosthogSdks", sdks);
 }
 //#endregion
-//#region src/lib/programs/web-analytics-doctor/steps.ts
+//#region src/programs/web-analytics-doctor/steps.ts
 const WEB_ANALYTICS_DOCTOR_PROGRAM = [{
 	id: "detect",
 	label: "Detecting prerequisites",
@@ -2532,7 +3104,7 @@ const webAnalyticsDoctorConfig = {
 	parentCommand: "audit"
 };
 //#endregion
-//#region src/lib/programs/migration/steps.ts
+//#region src/programs/migration/steps.ts
 const MIGRATION_PROGRAM = [
 	{
 		id: "intro",
@@ -2566,7 +3138,7 @@ const MIGRATION_PROGRAM = [
 	}
 ];
 //#endregion
-//#region src/lib/programs/migration/content/vendor-stack.tsx
+//#region src/ui/tui/decks/migration/vendor-stack.tsx
 /**
 * Vendor cost stack — the multi-tool baseline a typical migration target has
 * before consolidating onto PostHog. Numbers from each vendor's published
@@ -2646,7 +3218,7 @@ const VENDOR_STACK_BLOCK = {
 	]
 };
 //#endregion
-//#region src/lib/programs/migration/content/free-tier.tsx
+//#region src/ui/tui/decks/migration/free-tier.tsx
 /**
 * PostHog free-tier highlights — the numbers a migrating team gets back when
 * they consolidate. Sourced from posthog.com/pricing.md.
@@ -2752,7 +3324,7 @@ const FREE_TIER_BLOCK = {
 	]
 };
 //#endregion
-//#region src/lib/programs/migration/content/pricing-structure.tsx
+//#region src/ui/tui/decks/migration/pricing-structure.tsx
 /**
 * Pricing structure block — what happens after the free tier.
 */
@@ -2793,7 +3365,7 @@ const PRICING_STRUCTURE_BLOCK = {
 	]
 };
 //#endregion
-//#region src/lib/programs/migration/content/index.tsx
+//#region src/ui/tui/decks/migration/index.tsx
 /**
 * Migration learn deck (statsig variant). Statsig is the only `migrate`
 * variant today, so this deck plays as-is when the wizard runs
@@ -3041,7 +3613,7 @@ const getContentBlocks$3 = (store) => [
 	FUNNEL_BLOCK
 ];
 //#endregion
-//#region src/lib/programs/migration/index.ts
+//#region src/programs/migration/index.ts
 const MIGRATION_REPORT_FILE = "migration-report.md";
 const MIGRATION_ABORT_CASES = [{
 	match: /^no source-sdk calls found$/i,
@@ -3073,7 +3645,7 @@ const migrationConfig = {
 	requires: ["posthog-integration"]
 };
 //#endregion
-//#region src/lib/programs/error-tracking-upload-source-maps/detect.ts
+//#region src/programs/error-tracking-upload-source-maps/detect.ts
 const DISPLAY_NAME = {
 	web: "Web (JavaScript)",
 	nextjs: "Next.js",
@@ -3182,7 +3754,7 @@ const SOURCE_MAPS_CONTEXT_KEYS = {
 	selectedPath: "sourceMapsSelectedPath"
 };
 //#endregion
-//#region src/lib/programs/error-tracking-upload-source-maps/steps.ts
+//#region src/programs/error-tracking-upload-source-maps/steps.ts
 function projectSelected(session) {
 	return session.frameworkContext[SOURCE_MAPS_CONTEXT_KEYS.selectedVariant] != null;
 }
@@ -3225,7 +3797,7 @@ const ERROR_TRACKING_UPLOAD_SOURCE_MAPS_PROGRAM = [
 	}
 ];
 //#endregion
-//#region src/lib/programs/error-tracking-upload-source-maps/prompt.ts
+//#region src/programs/error-tracking-upload-source-maps/prompt.ts
 const SOURCE_MAPS_DETECTION_FAILED_PROMPT = `Detection did not pick a source maps skill variant for this project.
 Emit: ${AgentSignals.ABORT} unsupported-platform
 Then halt.`;
@@ -3423,7 +3995,7 @@ STEP 9 — Summarise and hand off. (skill: "Verify and hand off")
 `;
 }
 //#endregion
-//#region src/lib/programs/error-tracking-upload-source-maps/content/index.tsx
+//#region src/ui/tui/decks/error-tracking-upload-source-maps/index.tsx
 /**
 * Source-maps learn-deck — the narrative played in the run screen's left
 * pane (LearnCard) while the agent wires source-map upload into the build.
@@ -3860,18 +4432,9 @@ function installSteeringSnippet(filePath) {
 	};
 }
 //#endregion
-//#region src/lib/programs/shared/posthog-cli-preinstall.ts
-/**
-* Machine-global posthog-cli pre-install, shared by the programs whose symbol
-* upload shells out to it (error-tracking and error-tracking-upload-source-maps).
-*
-* The agent cannot install a global package — warlock blocks `npm install -g`
-* — so the wizard does it in-process, at most once per process. Warn, don't
-* fail: the run still instruments capture, and only the release build's upload
-* needs the CLI.
-*/
+//#region src/programs/shared/posthog-cli-preinstall.ts
 let attempted = false;
-function preinstallPostHogCliOnce(failureEvent, properties) {
+function preinstallPostHogCliOnce(failureEvent, properties, log) {
 	if (attempted) return;
 	attempted = true;
 	const result = installOrUpdatePostHogCli();
@@ -3880,10 +4443,10 @@ function preinstallPostHogCliOnce(failureEvent, properties) {
 		...properties,
 		error: String(result.error).slice(0, 500)
 	});
-	getUI().log.warn(`Could not pre-install posthog-cli (${result.error}). Your release build will fail to upload debug symbols until it's installed: npm install -g @posthog/cli@latest`);
+	log.warn(`Could not pre-install posthog-cli (${result.error}). Your release build will fail to upload debug symbols until it's installed: npm install -g @posthog/cli@latest`);
 }
 //#endregion
-//#region src/lib/programs/error-tracking-upload-source-maps/index.ts
+//#region src/programs/error-tracking-upload-source-maps/index.ts
 const REPORT_FILE$1 = "posthog-source-maps-report.md";
 const DOCS_URL$1 = "https://posthog.com/docs/error-tracking/upload-source-maps";
 /**
@@ -3891,8 +4454,8 @@ const DOCS_URL$1 = "https://posthog.com/docs/error-tracking/upload-source-maps";
 * (`VARIANTS_REQUIRING_POSTHOG_CLI`). See `preinstallPostHogCliOnce` for the
 * once-per-process guard and the warn-don't-fail handling.
 */
-function ensurePostHogCli(variant) {
-	preinstallPostHogCliOnce("source maps posthog-cli preinstall failed", { variant });
+function ensurePostHogCli(variant, log) {
+	preinstallPostHogCliOnce("source maps posthog-cli preinstall failed", { variant }, log);
 }
 const errorTrackingUploadSourceMapsConfig = {
 	command: "upload-source-maps",
@@ -3903,13 +4466,13 @@ const errorTrackingUploadSourceMapsConfig = {
 	reportFile: REPORT_FILE$1,
 	getContentBlocks: getContentBlocks$2,
 	requires: ["posthog-integration"],
-	run: (_session) => {
+	run: (_session, runner) => {
 		const readSelection = () => {
-			const variant = getUI().getFrameworkContext(SOURCE_MAPS_CONTEXT_KEYS.selectedVariant);
+			const variant = runner.getFrameworkContext(SOURCE_MAPS_CONTEXT_KEYS.selectedVariant);
 			return {
 				variant,
-				displayName: getUI().getFrameworkContext(SOURCE_MAPS_CONTEXT_KEYS.selectedDisplayName),
-				projectPath: getUI().getFrameworkContext(SOURCE_MAPS_CONTEXT_KEYS.selectedPath),
+				displayName: runner.getFrameworkContext(SOURCE_MAPS_CONTEXT_KEYS.selectedDisplayName),
+				projectPath: runner.getFrameworkContext(SOURCE_MAPS_CONTEXT_KEYS.selectedPath),
 				skillId: variant ? `error-tracking-upload-source-maps-${variant}` : void 0
 			};
 		};
@@ -3925,7 +4488,7 @@ const errorTrackingUploadSourceMapsConfig = {
 			customPrompt: (ctx) => {
 				const { variant, displayName, projectPath, skillId } = readSelection();
 				if (!skillId || !variant) return SOURCE_MAPS_DETECTION_FAILED_PROMPT;
-				if (VARIANTS_REQUIRING_POSTHOG_CLI.has(variant)) ensurePostHogCli(variant);
+				if (VARIANTS_REQUIRING_POSTHOG_CLI.has(variant)) ensurePostHogCli(variant, runner.log);
 				const uiHost = ctx.host.appHost.replace(/\/$/, "");
 				return buildSourceMapsUploadPrompt({
 					displayName,
@@ -3941,7 +4504,7 @@ const errorTrackingUploadSourceMapsConfig = {
 			},
 			postRun: () => {
 				const { variant } = readSelection();
-				if (variant) getUI().setFrameworkContext("sourceMapsCompletedVariant", variant);
+				if (variant) runner.setFrameworkContext("sourceMapsCompletedVariant", variant);
 				return Promise.resolve();
 			},
 			buildOutroData: () => {
@@ -3956,13 +4519,13 @@ const errorTrackingUploadSourceMapsConfig = {
 	}
 };
 //#endregion
-//#region src/lib/programs/error-tracking/content/index.tsx
+//#region src/ui/tui/decks/error-tracking/index.tsx
 const getContentBlocks$1 = (store) => buildSourceMapsDeck(store, {
 	intro: "I'm wiring PostHog Error Tracking into your project.",
 	wiring: "If your platform ships minified code or stripped binaries, I also hook source-map or debug-symbol upload into your build, tied to each release you ship."
 });
 //#endregion
-//#region src/lib/programs/replay-vision/index.ts
+//#region src/programs/replay-vision/index.ts
 const REPLAY_VISION_REPORT_FILE = "posthog-replay-vision-report.md";
 /**
 * The platforms session replay can actually record on. Replay vision watches
@@ -4075,8 +4638,8 @@ const replayVisionConfig = {
 	}),
 	agentFlow: "replay-vision",
 	steps: [DETECT_STEP, ...AGENT_SKILL_STEPS],
-	ciPreRun: async (session) => {
-		await scopeInstallDirToProject(session);
+	ciPreRun: async (session, runner) => {
+		await scopeInstallDirToProject(session, runner);
 		const integration = await detectFramework(session.installDir);
 		if (!integration) {
 			await wizardAbort({
@@ -4106,7 +4669,7 @@ const replayVisionConfig = {
 	}
 };
 //#endregion
-//#region src/lib/programs/error-tracking/content/tips.ts
+//#region src/ui/tui/decks/error-tracking/tips.ts
 const ERROR_TRACKING_TIPS = [
 	{
 		id: "session-replay",
@@ -4130,7 +4693,7 @@ const ERROR_TRACKING_TIPS = [
 ];
 const getTips$1 = () => ERROR_TRACKING_TIPS;
 //#endregion
-//#region src/lib/programs/error-tracking/detect-agentic.ts
+//#region src/programs/error-tracking/detect-agentic.ts
 /** frameworkContext key for the picked project's path, relative to the repo root. */
 const ERROR_TRACKING_PROJECT_PATH_KEY = "errorTrackingProjectPath";
 /** KMP skill variants carry no `framework` tag, so orchestrator preflight aborts every KMP run. */
@@ -4175,7 +4738,7 @@ async function gatherErrorTrackingContext(session) {
 	for (const [key, value] of Object.entries(context)) if (!(key in session.frameworkContext)) session.frameworkContext[key] = value;
 }
 //#endregion
-//#region src/lib/programs/error-tracking/index.ts
+//#region src/programs/error-tracking/index.ts
 const ERROR_TRACKING_REPORT_FILE = "posthog-error-tracking-report.md";
 const ERROR_TRACKING_DOCS_URL = "https://posthog.com/docs/error-tracking";
 /**
@@ -4207,9 +4770,9 @@ async function abortUnsupportedPlatform(integration) {
 * shell out to it. See `preinstallPostHogCliOnce` for the once-per-process
 * guard and the warn-don't-fail handling.
 */
-function maybePreinstallPostHogCli(integration) {
+function maybePreinstallPostHogCli(integration, log) {
 	if (!integration || !SYMBOL_UPLOAD_CLI_FRAMEWORKS.has(integration)) return;
-	preinstallPostHogCliOnce("error tracking posthog-cli preinstall failed", { integration });
+	preinstallPostHogCliOnce("error tracking posthog-cli preinstall failed", { integration }, log);
 }
 /**
 * After login, the scan lists the repo's projects and the user picks one, as in
@@ -4304,12 +4867,12 @@ const errorTrackingConfig = {
 	reportFile: ERROR_TRACKING_REPORT_FILE,
 	getContentBlocks: getContentBlocks$1,
 	getTips: getTips$1,
-	run: (session) => {
-		maybePreinstallPostHogCli(session.integration);
+	run: (session, runner) => {
+		maybePreinstallPostHogCli(session.integration, runner.log);
 		return Promise.resolve(ERROR_TRACKING_RUN);
 	},
-	ciPreRun: async (session) => {
-		await scopeInstallDirToProject(session);
+	ciPreRun: async (session, runner) => {
+		await scopeInstallDirToProject(session, runner);
 		const integration = await detectFramework(session.installDir);
 		if (!integration) {
 			await wizardAbort({
@@ -4330,7 +4893,7 @@ const errorTrackingConfig = {
 	}
 };
 //#endregion
-//#region src/lib/programs/self-driving/detect.ts
+//#region src/programs/self-driving/detect.ts
 /**
 * Self-driving prerequisite detection + abort vocabulary.
 *
@@ -4596,7 +5159,7 @@ function detectConnectedTools(installDir, setFrameworkContext) {
 	}
 }
 //#endregion
-//#region src/lib/programs/self-driving/detect-agentic.ts
+//#region src/programs/self-driving/detect-agentic.ts
 function classify(integration, hasPostHog) {
 	if (integration == null) return {
 		instrumentable: false,
@@ -4651,7 +5214,7 @@ async function prepSelfDrivingIntegration(session) {
 	for (const [key, value] of Object.entries(context)) if (!(key in session.frameworkContext)) session.frameworkContext[key] = value;
 }
 //#endregion
-//#region src/lib/programs/self-driving/steps.ts
+//#region src/programs/self-driving/steps.ts
 /** True once detection found PostHog already present in the project. */
 const postHogPresent = (session) => session.frameworkContext[POSTHOG_PRESENT_KEY] === true;
 /** Absolute dir to integrate into: the picked sub-app (LLM output — the shared resolver clamps escapes), else the repo root. */
@@ -4727,7 +5290,7 @@ const SELF_DRIVING_PROGRAM = [
 	}
 ];
 //#endregion
-//#region src/lib/programs/self-driving/prompt.ts
+//#region src/programs/self-driving/prompt.ts
 /**
 * Render the deterministic codebase-tool scan for the prompt. STEP 4 and
 * STEP 5 read this instead of the agent doing its own flaky "light scan":
@@ -4930,7 +5493,7 @@ STEP 7 — Write the report and hand off. (skill: "Report")
    at ${inboxUrl} within about 30 minutes.`;
 }
 //#endregion
-//#region src/lib/programs/self-driving/step-keys.ts
+//#region src/programs/self-driving/step-keys.ts
 /**
 * First match wins, so order is the rule. Entity words come before verbs: "Checking GitHub
 * connection" is the GitHub step, not the access-check step, and "Connecting issue trackers" must
@@ -4999,7 +5562,7 @@ const PRICING_LONG = `A report that ships a pull request costs a flat $15. Every
 */
 const NO_DEFAULT_LIMIT = "A paid plan has no monthly cap until you set one. Add a PR limit in your inbox sidebar, and agents pause when they hit it.";
 //#endregion
-//#region src/lib/programs/self-driving/content/tips.ts
+//#region src/ui/tui/decks/self-driving/tips.ts
 const SELF_DRIVING_TIPS = [
 	{
 		id: "signal-source",
@@ -5039,7 +5602,7 @@ const SELF_DRIVING_TIPS = [
 ];
 const getTips = () => SELF_DRIVING_TIPS;
 //#endregion
-//#region src/lib/programs/self-driving/content/pipeline-diagram.tsx
+//#region src/ui/tui/decks/self-driving/pipeline-diagram.tsx
 /**
 * PIPELINE_BLOCK — ASCII diagram of the Self-driving loop: sources feed
 * scouts, scouts raise signals, signals group into reports, reports land
@@ -5127,7 +5690,7 @@ const PIPELINE_BLOCK = {
 	]
 };
 //#endregion
-//#region src/lib/programs/self-driving/content/index.tsx
+//#region src/ui/tui/decks/self-driving/index.tsx
 /**
 * Self-driving learn-deck — the narrative script played while the agent
 * sets up Self-driving. Teaches the vocabulary ladder (signal source →
@@ -5353,7 +5916,7 @@ const getContentBlocks = (store) => {
 	];
 };
 //#endregion
-//#region src/lib/programs/self-driving/index.ts
+//#region src/programs/self-driving/index.ts
 const SELF_DRIVING_SKILL_ID = "self-driving-setup";
 const REPORT_FILE = "posthog-self-driving-report.md";
 const DOCS_URL = "https://posthog.com/docs";
@@ -5440,7 +6003,7 @@ const selfDrivingConfig = {
 	getContentBlocks
 };
 //#endregion
-//#region src/lib/programs/mcp/index.ts
+//#region src/programs/mcp/index.ts
 const mcpAddConfig = {
 	id: "mcp-add",
 	requiresAi: false,
@@ -5521,7 +6084,7 @@ const mcpTutorialConfig = {
 	}]
 };
 //#endregion
-//#region src/lib/programs/mcp-analytics/index.ts
+//#region src/programs/mcp-analytics/index.ts
 const MCP_ANALYTICS_REPORT_FILE = "posthog-mcp-analytics-report.md";
 /**
 * `[ABORT]` reasons the mcp-analytics skill emits when the project can't be
@@ -5575,7 +6138,7 @@ const mcpAnalyticsConfig = createSkillProgram({
 	abortCases: MCP_ANALYTICS_ABORT_CASES
 });
 //#endregion
-//#region src/lib/programs/ai-observability/index.ts
+//#region src/programs/ai-observability/index.ts
 const AI_OBSERVABILITY_STEPS = AGENT_SKILL_STEPS.map((step) => step.id === "intro" ? {
 	...step,
 	screenId: "ai-observability-intro"
@@ -5634,7 +6197,7 @@ final report is written to ./${AI_OBSERVABILITY_REPORT_FILE}.`,
 	}
 };
 //#endregion
-//#region src/lib/programs/metrics/index.ts
+//#region src/programs/metrics/index.ts
 const METRICS_STEPS = AGENT_SKILL_STEPS.map((step) => step.id === "intro" ? {
 	...step,
 	screenId: "metrics-intro"
@@ -5698,7 +6261,7 @@ is written to ./${METRICS_REPORT_FILE}.`,
 	}
 };
 //#endregion
-//#region src/lib/programs/slack/index.ts
+//#region src/programs/slack/index.ts
 const slackConnectConfig = {
 	id: "slack",
 	description: "Connect PostHog to your Slack",
@@ -5710,7 +6273,7 @@ const slackConnectConfig = {
 	}]
 };
 //#endregion
-//#region src/lib/programs/program-registry.ts
+//#region src/programs/program-registry.ts
 const agentSkillConfig = {
 	id: "agent-skill",
 	description: "Run an arbitrary context-mill skill",
@@ -5824,6 +6387,6 @@ function isRunFailure(session) {
 	return session.outroData?.kind === "error" && session.credentials !== null;
 }
 //#endregion
-export { wordWrap as $, installOrUpdatePostHogCli as A, webAnalyticsDoctorConfig as B, ERROR_TRACKING_PROJECT_PATH_KEY as C, CLI_STEERING_TARGETS as D, errorTrackingUploadSourceMapsConfig as E, MANUAL_SDK_INSTALL as F, createSkillProgram as G, getKindMeta as H, MANUAL_SDK_VARIANTS as I, getContentBlocks$4 as J, warehouseSourceConfig as K, RUST_SDK_CRATE as L, AUTOMATABLE_VARIANTS as M, DISPLAY_NAME as N, detectTargets as O, GO_SDK_MODULE as P, computeVisibleRange as Q, SOURCE_MAPS_CONTEXT_KEYS as R, errorTrackingConfig as S, replayVisionConfig as T, fetchHealthIssues as U, posthogDoctorConfig as V, auditConfig as W, posthogIntegrationConfig as X, SETUP_REPORT_FILE as Y, TextBlock as Z, PRICING_SHORT as _, PROGRAM_REGISTRY as a, GITHUB_REQUIRED_MESSAGE as b, getCommandPath as c, metricsConfig as d, isClearBlock as et, aiObservabilityConfig as f, PRICING_LONG as g, NO_DEFAULT_LIMIT as h, isRunFailure as i, Icons as it, installSteeringSnippet as j, findTarget as k, getLaunchablePrograms as l, selfDrivingConfig as m, MINT_FAILURE_CONTACT as n, isObjectBlock as nt, Program as o, mcpAnalyticsConfig as p, revenueAnalyticsConfig as q, MINT_FAILURE_MESSAGE as r, Colors as rt, agentSkillConfig as s, MINT_FAILURE_BODY as t, isLinesBlock as tt, getProgramConfig as u, detectSelfDrivingIntegrationProjects as v, detectErrorTrackingProjects as w, SELF_DRIVING_INTEGRATE_PATH_KEY as x, GITHUB_REQUIRED_BODY as y, migrationConfig as z };
+export { wordWrap as $, installOrUpdatePostHogCli as A, webAnalyticsDoctorConfig as B, ERROR_TRACKING_PROJECT_PATH_KEY as C, CLI_STEERING_TARGETS as D, errorTrackingUploadSourceMapsConfig as E, MANUAL_SDK_INSTALL as F, createSkillProgram as G, getKindMeta as H, MANUAL_SDK_VARIANTS as I, getContentBlocks$4 as J, warehouseSourceConfig as K, RUST_SDK_CRATE as L, AUTOMATABLE_VARIANTS as M, DISPLAY_NAME as N, detectTargets as O, GO_SDK_MODULE as P, computeVisibleRange as Q, SOURCE_MAPS_CONTEXT_KEYS as R, errorTrackingConfig as S, replayVisionConfig as T, fetchHealthIssues as U, posthogDoctorConfig as V, auditConfig as W, posthogIntegrationConfig as X, SETUP_REPORT_FILE as Y, TextBlock as Z, PRICING_SHORT as _, PROGRAM_REGISTRY as a, maybeStampAiSdkDetected as at, GITHUB_REQUIRED_MESSAGE as b, getCommandPath as c, STRIPE_SDKS as ct, metricsConfig as d, isClearBlock as et, aiObservabilityConfig as f, PRICING_LONG as g, NO_DEFAULT_LIMIT as h, isRunFailure as i, Icons as it, installSteeringSnippet as j, findTarget as k, getLaunchablePrograms as l, detectProjectsWithAgent as lt, selfDrivingConfig as m, MINT_FAILURE_CONTACT as n, isObjectBlock as nt, Program as o, reportWarehouseSourcesDetected as ot, mcpAnalyticsConfig as p, revenueAnalyticsConfig as q, MINT_FAILURE_MESSAGE as r, Colors as rt, agentSkillConfig as s, POSTHOG_SDKS as st, MINT_FAILURE_BODY as t, isLinesBlock as tt, getProgramConfig as u, detectSelfDrivingIntegrationProjects as v, detectErrorTrackingProjects as w, SELF_DRIVING_INTEGRATE_PATH_KEY as x, GITHUB_REQUIRED_BODY as y, migrationConfig as z };
 
-//# sourceMappingURL=mint-failure-D4nd2XmZ.js.map
+//# sourceMappingURL=mint-failure-u8xQKNOn.js.map