@posthog/wizard 2.79.0 → 2.79.1

package/dist/bin.js

@@ -1,2954 +1,8 @@
 #!/usr/bin/env node
-import { o as emitWizardError, s as ErrorCodes, t as classifyRunFailure } from "./errors-ddDE6MbA.js";
-import { a as getLogFilePath, b as isHeadless, s as logToFile, v as runtimeEnv, x as regionOption, y as headlessOption } from "./debug-Cj-8vfXY.js";
-import { t as VERSION } from "./version-Cadof0Z_.js";
-import { a as getLocalDev, i as checkLocalServices, o as initLocalDev, r as POSTHOG_LOCAL_URL, s as localMcpSkillsNotice } from "./local-dev-McsurOC-.js";
-import { $ as getSkillsBaseUrl, k as POSTHOG_DOCS_URL } from "./constants-CuJfQEcC.js";
-import "./wizard-session-2w4Ru-Wz.js";
-import { n as analytics } from "./analytics-VRYdebXW.js";
-import { r as setEntryCommand } from "./telemetry-Bpv-Mh5B.js";
-import { t as LoggingUI } from "./logging-ui-CUxNYF2t.js";
-import { n as setUI, t as getUI } from "./ui-CGXtC7Vn.js";
-import { n as registerShutdown, r as runCleanups } from "./wizard-abort-HDbP3YcS.js";
-import { n as isNonInteractiveEnvironment } from "./environment-DZYUSCpV.js";
-import { r as currentCredentials } from "./oauth-session-CQTFOk-I.js";
-import { I as WIZARD_TOOL_NAMES, et as fetchSkillMenu, m as isGrantRevoked, u as recoverOrphanedSettingsBackups } from "./agent-interface-BXvmAm4c.js";
-import "./agent-CNrEC-9v.js";
-import { h as AUDIT_CHECKS_FILE } from "./yara-hooks-DCfROpZt.js";
-import { d as getAuditChecks, f as authenticate, t as runProgramAgent } from "./run-agent-legacy-6WcYMaR9.js";
-import { $ as wordWrap, A as installOrUpdatePostHogCli, B as webAnalyticsDoctorConfig, D as CLI_STEERING_TARGETS, E as errorTrackingUploadSourceMapsConfig, G as createSkillProgram, H as getKindMeta, K as warehouseSourceConfig, O as detectTargets, S as errorTrackingConfig, T as replayVisionConfig, U as fetchHealthIssues, V as posthogDoctorConfig, W as auditConfig, at as maybeStampAiSdkDetected, d as metricsConfig, f as aiObservabilityConfig, i as isRunFailure, it as Icons, j as installSteeringSnippet, k as findTarget, m as selfDrivingConfig, o as Program, p as mcpAnalyticsConfig, q as revenueAnalyticsConfig, rt as Colors, s as agentSkillConfig, u as getProgramConfig, z as migrationConfig } from "./mint-failure-CZFZpHpW.js";
-import { n as parseRetryAfter } from "./posthog-6Uqw_Eux.js";
-import { n as readApiKeyFromEnv } from "./env-api-key-BWdKpGEr.js";
-import { satisfies, valid } from "semver";
-import { Agent, setGlobalDispatcher } from "undici";
-import yargs from "yargs";
-import { hideBin } from "yargs/helpers";
-import { validate } from "uuid";
-import * as path$1 from "node:path";
-import { basename, join, resolve } from "node:path";
-import { randomUUID } from "node:crypto";
-import { Box, Text, render, useInput, useStdout } from "ink";
-import { createContext, createElement, useCallback, useContext, useEffect, useMemo, useRef, useState } from "react";
-import { jsx, jsxs } from "react/jsx-runtime";
-import Fuse from "fuse.js";
-import * as readline from "node:readline/promises";
-//#region src/commands/command.ts
-/** Extract the bare command word(s) from a yargs name spec, dropping positionals and aliases' arg syntax. */
-function commandKeys(name) {
-	return (typeof name === "string" ? [name] : name).map((n) => n.trim().split(/\s+/)[0]);
-}
-function toCommandModule(cmd, parentPath) {
-	const entryCommand = [...parentPath, commandKeys(cmd.name)[0]].filter((key) => key !== "$0").join("-");
-	return {
-		command: cmd.name,
-		describe: cmd.description,
-		builder: (y) => {
-			let next = cmd.options ? y.options(cmd.options) : y;
-			for (const [key, opts] of Object.entries(cmd.positionals ?? {})) next = next.positional(key, opts);
-			if (cmd.check) next = next.check(cmd.check);
-			for (const [usage, description] of cmd.examples ?? []) next = next.example(usage, description);
-			const ownPath = [...parentPath, commandKeys(cmd.name)[0]];
-			for (const child of cmd.children ?? []) next = next.command(toCommandModule(child, ownPath));
-			if (cmd.children?.length && !cmd.handler && !cmd.interactiveDefault) next = next.demandCommand(1);
-			return next;
-		},
-		handler: (argv) => {
-			if (entryCommand) setEntryCommand(entryCommand);
-			(cmd.handler ?? cmd.interactiveDefault ?? (() => void 0))(argv);
-		}
-	};
-}
-//#endregion
-//#region src/wizard.ts
-/**
-* Global yargs options applied to every command. These are read from the
-* `POSTHOG_WIZARD` env prefix as well as flags.
-*
-* Options with `hidden: true` are "internal modes" — they don't show up in
-* `--help` but are still accepted on every command. The `--local-*` flags live
-* in the constructor's `!IS_PRODUCTION_BUILD` block instead, so published
-* builds reject them; see `docs/local-dev.md`.
-*/
-const GLOBAL_OPTIONS = {
-	debug: {
-		default: false,
-		describe: "Enable verbose logging\nenv: POSTHOG_WIZARD_DEBUG",
-		type: "boolean"
-	},
-	signup: {
-		default: false,
-		describe: "Create a new PostHog account during setup\nenv: POSTHOG_WIZARD_SIGNUP",
-		type: "boolean"
-	},
-	telemetry: {
-		default: true,
-		describe: "Send wizard run state to PostHog (pass --no-telemetry to disable)\nenv: POSTHOG_WIZARD_TELEMETRY",
-		type: "boolean"
-	},
-	"api-key": {
-		describe: "PostHog personal API key (phx_xxx) for authentication\nenv: POSTHOG_WIZARD_API_KEY",
-		type: "string"
-	},
-	"project-id": {
-		describe: "PostHog project ID to use (optional; when not set, uses default from API key or OAuth)\nenv: POSTHOG_WIZARD_PROJECT_ID",
-		type: "string"
-	},
-	email: {
-		describe: "Email address for signup (used with --signup)\nenv: POSTHOG_WIZARD_EMAIL",
-		type: "string"
-	},
-	"base-url": {
-		describe: "Override the PostHog base URL (e.g. http://localhost:8010), bypassing region resolution. Pins the API host, cloud URL, and OAuth server.\nenv: POSTHOG_WIZARD_BASE_URL",
-		type: "string",
-		hidden: true
-	},
-	"run-id": {
-		describe: "Assigned cloud WizardRun UUID",
-		type: "string",
-		hidden: true
-	},
-	benchmark: {
-		default: false,
-		describe: "Run in benchmark mode with per-phase token tracking\nenv: POSTHOG_WIZARD_BENCHMARK",
-		type: "boolean",
-		hidden: true
-	},
-	"yara-report": {
-		default: false,
-		describe: "Print YARA scanner summary after the agent run\nenv: POSTHOG_WIZARD_YARA_REPORT",
-		type: "boolean",
-		hidden: true
-	}
-};
-var Wizard = class Wizard {
-	cli;
-	constructor() {
-		let cli = yargs(hideBin(process.argv)).env("POSTHOG_WIZARD").options(GLOBAL_OPTIONS);
-		this.cli = cli.middleware((argv) => {
-			initLocalDev(argv);
-			const notice = localMcpSkillsNotice({
-				localDev: argv.localDev,
-				localMcp: argv.localMcp,
-				localContextMill: argv.localContextMill
-			});
-			if (notice) process.stderr.write(`\n\x1b[33m! ${notice}\x1b[0m\n\n`);
-		}).strictOptions().strictCommands().fail((msg, err) => {
-			const text = msg || err && err.message || "Invalid arguments";
-			process.stderr.write(`\n\x1b[1;91m✖ ${text}\x1b[0m\n  Run \`wizard --help\` to see available commands and options.\n\n`);
-			emitWizardError({
-				code: ErrorCodes.CliBadArgs,
-				message: text
-			});
-			process.exit(1);
-		}).help().alias("help", "h").version().alias("version", "v");
-	}
-	/** Start a chain; equivalent to `new Wizard().use(...cmds)`. */
-	static use(...cmds) {
-		return new Wizard().use(...cmds);
-	}
-	/** Register one or more commands with yargs. */
-	use(...cmds) {
-		for (const cmd of cmds) this.cli = this.cli.command(toCommandModule(cmd, []));
-		return this;
-	}
-	/** Parse argv and dispatch to the matching registered command. */
-	init() {
-		{
-			const args = process.argv.slice(2);
-			const argvHasCI = args.some((a) => a === "--ci" || a === "--no-ci" || a.startsWith("--ci="));
-			const envHasCI = process.env.POSTHOG_WIZARD_CI != null && process.env.POSTHOG_WIZARD_CI !== "";
-			if (argvHasCI || envHasCI) {
-				process.stderr.write(`\n\x1b[1;91m✖ CI mode is not currently supported in published builds.\x1b[0m\n\n`);
-				emitWizardError({
-					code: ErrorCodes.CliFlagUnavailable,
-					message: "CI mode is not supported in published builds."
-				});
-				process.exit(1);
-			}
-			const argvHasOverride = args.some((a) => a === "--harness" || a.startsWith("--harness=") || a === "--sequence" || a.startsWith("--sequence=") || a === "--model" || a.startsWith("--model=") || a === "--capture-aio" || a === "--no-capture-aio" || a.startsWith("--capture-aio="));
-			const envHasOverride = process.env.POSTHOG_WIZARD_HARNESS != null && process.env.POSTHOG_WIZARD_HARNESS !== "" || process.env.POSTHOG_WIZARD_SEQUENCE != null && process.env.POSTHOG_WIZARD_SEQUENCE !== "" || process.env.POSTHOG_WIZARD_MODEL != null && process.env.POSTHOG_WIZARD_MODEL !== "" || process.env.POSTHOG_WIZARD_CAPTURE_AIO != null && process.env.POSTHOG_WIZARD_CAPTURE_AIO !== "";
-			if (argvHasOverride || envHasOverride) {
-				process.stderr.write(`\n\x1b[1;91m✖ The --harness, --sequence, --model, and --capture-aio overrides are not available in published builds.\x1b[0m\n\n`);
-				emitWizardError({
-					code: ErrorCodes.CliFlagUnavailable,
-					message: "The --harness, --sequence, --model, and --capture-aio overrides are not available in published builds."
-				});
-				process.exit(1);
-			}
-			const argvHasLocalTarget = args.some((a) => LOCAL_TARGET_FLAGS.some((f) => a === `--${f}` || a === `--no-${f}` || a.startsWith(`--${f}=`)));
-			const envHasLocalTarget = LOCAL_TARGET_ENV_VARS.some((k) => process.env[k] != null && process.env[k] !== "");
-			if (argvHasLocalTarget || envHasLocalTarget) {
-				process.stderr.write("\n\x1B[1;91m✖ The --local-dev, --local-context-mill, --local-mcp, and --local-posthog targets are not available in published builds.\x1B[0m\n  They point the wizard at development servers on localhost.\n\n");
-				emitWizardError({
-					code: ErrorCodes.CliFlagUnavailable,
-					message: "The --local-dev, --local-context-mill, --local-mcp, and --local-posthog targets are not available in published builds."
-				});
-				process.exit(1);
-			}
-		}
-		this.cli.wrap(process.stdout.isTTY ? this.cli.terminalWidth() : 80).argv;
-	}
-};
-/** Excludes bare `local`: `wizard mcp add --local` stays available in prod. */
-const LOCAL_TARGET_FLAGS = [
-	"local-dev",
-	"local-context-mill",
-	"local-mcp",
-	"local-posthog"
-];
-const LOCAL_TARGET_ENV_VARS = [
-	"POSTHOG_WIZARD_LOCAL_DEV",
-	"POSTHOG_WIZARD_LOCAL_CONTEXT_MILL",
-	"POSTHOG_WIZARD_LOCAL_MCP",
-	"POSTHOG_WIZARD_LOCAL_POSTHOG"
-];
-//#endregion
-//#region src/commands/provision.ts
-const provisionCommand = {
-	name: "provision",
-	description: "Create a new PostHog account (headless, no TUI)",
-	options: {
-		email: {
-			describe: "Email address for the new account",
-			type: "string",
-			demandOption: true
-		},
-		region: {
-			describe: "Cloud region (us or eu)",
-			choices: ["us", "eu"],
-			default: "us"
-		},
-		name: {
-			describe: "Name for the new account",
-			type: "string",
-			default: ""
-		},
-		json: {
-			describe: "Emit JSON result to stdout (defaults to true when stdout is not a TTY)",
-			type: "boolean"
-		}
-	},
-	examples: [["wizard provision --email matt+test@posthog.com --region us", ""], ["wizard provision --email user@example.com --region eu --json", ""]],
-	handler: runProvision
-};
-function runProvision(argv) {
-	const jsonMode = argv.json === void 0 ? !process.stdout.isTTY : Boolean(argv.json);
-	if (!jsonMode) setUI(new LoggingUI());
-	provision({
-		email: argv.email,
-		region: argv.region.toUpperCase(),
-		name: argv.name ?? "",
-		baseUrl: argv.baseUrl,
-		jsonMode
-	});
-}
-async function provision({ email, region, name, baseUrl, jsonMode }) {
-	try {
-		const { provisionNewAccount } = await import("./provisioning-Zf7yPcEs.js").then((n) => n.r);
-		if (!jsonMode) getUI().log.info(`Provisioning account for ${email} in ${region}...`);
-		emitResult(await provisionNewAccount(email, name, region, { baseUrl }), jsonMode);
-		process.exit(0);
-	} catch (error) {
-		emitError(error, jsonMode);
-		process.exit(1);
-	}
-}
-function emitResult(result, jsonMode) {
-	if (jsonMode) {
-		process.stdout.write(`${JSON.stringify(result)}\n`);
-		return;
-	}
-	getUI().log.success("Account provisioned successfully:");
-	getUI().log.info(`  API Key:       ${result.projectApiKey}`);
-	getUI().log.info(`  Host:          ${result.host}`);
-	getUI().log.info(`  Project ID:    ${result.projectId}`);
-	getUI().log.info(`  Account ID:    ${result.accountId}`);
-	getUI().log.info(`  Access Token:  ${result.accessToken}`);
-	getUI().log.info(`  Refresh Token: ${result.refreshToken}`);
-	if (result.personalApiKey) getUI().log.info(`  Personal API Key: ${result.personalApiKey}`);
-}
-function emitError(error, jsonMode) {
-	const msg = error instanceof Error ? error.message : String(error);
-	const code = msg.includes("already associated") ? "email_exists" : "provisioning_failed";
-	if (jsonMode) {
-		process.stderr.write(`${JSON.stringify({
-			error: msg,
-			code
-		})}\n`);
-		return;
-	}
-	getUI().log.error(`Provisioning failed: ${msg}`);
-}
-//#endregion
-//#region src/commands/basic-integration/index.ts
-const basicIntegrationCommand = {
-	name: ["$0"],
-	description: "Run the PostHog setup wizard",
-	children: [provisionCommand],
-	options: {
-		"install-dir": {
-			describe: "Directory to install PostHog in\nenv: POSTHOG_WIZARD_INSTALL_DIR",
-			type: "string"
-		},
-		name: {
-			describe: "Name for account creation with --ci --signup\nenv: POSTHOG_WIZARD_NAME",
-			type: "string"
-		},
-		playground: {
-			default: false,
-			describe: "Launch the TUI primitives playground",
-			type: "boolean",
-			hidden: true
-		},
-		...headlessOption,
-		...regionOption
-	},
-	check: (argv) => {
-		if (argv.playground && (argv.ci || isHeadless(argv))) throw new Error("--playground cannot be combined with a headless run.");
-		return true;
-	},
-	handler: (argv) => {
-		setEntryCommand("integrate");
-		(async () => {
-			if (isHeadless(argv)) {
-				const { runHeadlessInstall } = await import("./ci-install-BPA6gzEq.js");
-				return runHeadlessInstall(argv);
-			}
-			if (argv.ci) {
-				const { runCIInstall } = await import("./ci-install-BPA6gzEq.js");
-				return runCIInstall(argv);
-			}
-			if (isNonInteractiveEnvironment()) {
-				const { failNonInteractive } = await import("./non-interactive-DR1CWXY1.js");
-				return failNonInteractive();
-			}
-			if (argv.playground) {
-				const { runPlayground } = await import("./playground-Dz-ZVjBk.js");
-				return runPlayground();
-			}
-			const { runInteractive } = await import("./interactive-BOGlinZe.js");
-			runInteractive(argv);
-		})();
-	}
-};
-//#endregion
-//#region src/commands/mcp/tui-availability.ts
-/**
-* Ink throws "Raw mode is not supported" when stdin has no TTY (piped input,
-* CI, some IDE terminals). That is the only TUI failure the mcp commands
-* degrade to LoggingUI for — any other error from the TUI path is a real bug
-* and must surface rather than be silently swallowed.
-*/
-function isTUIUnavailable(error) {
-	return error instanceof Error && /raw mode is not supported/i.test(error.message);
-}
-//#endregion
-//#region src/commands/mcp/add.ts
-const mcpAddCommand = {
-	name: "add",
-	description: "Install PostHog MCP server to supported clients",
-	options: {
-		local: {
-			default: false,
-			describe: "Add local development MCP server (http://localhost:8787)",
-			type: "boolean"
-		},
-		features: {
-			describe: "Comma-separated list of features to enable (default: all)",
-			type: "string"
-		},
-		"api-key": {
-			describe: "PostHog personal API key (phx_xxx) for MCP authentication",
-			type: "string"
-		},
-		...headlessOption
-	},
-	handler: runMcpAdd
-};
-function runMcpAdd(argv) {
-	const features = parseFeatures(argv.features);
-	(async () => {
-		const { readApiKeyFromEnv } = await import("./env-api-key-BWdKpGEr.js").then((n) => n.t);
-		const apiKey = argv.apiKey || readApiKeyFromEnv();
-		const debug = argv.debug;
-		const localMcp = argv.local;
-		const args = {
-			local: localMcp,
-			features,
-			apiKey
-		};
-		if (isHeadless(argv)) {
-			await runHeadlessAdd(args);
-			return;
-		}
-		try {
-			const { startTUI } = await import("./start-tui-oCWMgsDP.js");
-			const { buildSession } = await import("./wizard-session-DGaUHOF3.js");
-			const tui = startTUI(VERSION, Program.McpAdd);
-			tui.store.session = buildSession({
-				debug,
-				localMcp,
-				mcpFeatures: features,
-				apiKey,
-				baseUrl: argv.baseUrl
-			});
-		} catch (error) {
-			if (!isTUIUnavailable(error)) throw error;
-			await runHeadlessAdd(args);
-		}
-	})();
-}
-async function runHeadlessAdd(args) {
-	setUI(new LoggingUI());
-	const { addMCPServerToClientsStep } = await import("./add-mcp-server-to-clients-amlJWW7W.js").then((n) => n.r);
-	const { installed, failed } = await addMCPServerToClientsStep(args);
-	if (failed.length > 0 || installed.length === 0) process.exitCode = 1;
-}
-function parseFeatures(raw) {
-	if (typeof raw !== "string") return void 0;
-	return raw.split(",").map((s) => s.trim()).filter(Boolean);
-}
-//#endregion
-//#region src/commands/mcp/remove.ts
-const mcpRemoveCommand = {
-	name: "remove",
-	description: "Remove PostHog MCP server from supported clients",
-	options: {
-		local: {
-			default: false,
-			describe: "Remove local development MCP server (http://localhost:8787)",
-			type: "boolean"
-		},
-		...headlessOption
-	},
-	handler: runMcpRemove
-};
-function runMcpRemove(argv) {
-	(async () => {
-		const debug = argv.debug;
-		const localMcp = argv.local;
-		if (isHeadless(argv)) {
-			await runHeadlessRemove(localMcp);
-			return;
-		}
-		try {
-			const { startTUI } = await import("./start-tui-oCWMgsDP.js");
-			const { buildSession } = await import("./wizard-session-DGaUHOF3.js");
-			const tui = startTUI(VERSION, Program.McpRemove);
-			tui.store.session = buildSession({
-				debug,
-				localMcp,
-				baseUrl: argv.baseUrl
-			});
-		} catch (error) {
-			if (!isTUIUnavailable(error)) throw error;
-			await runHeadlessRemove(localMcp);
-		}
-	})();
-}
-/** No exit code on an empty result: nothing to remove is the requested end state. */
-async function runHeadlessRemove(local) {
-	setUI(new LoggingUI());
-	const { removeMCPServerFromClientsStep } = await import("./add-mcp-server-to-clients-amlJWW7W.js").then((n) => n.r);
-	await removeMCPServerFromClientsStep({ local });
-}
-//#endregion
-//#region src/commands/mcp/tutorial.ts
-const mcpTutorialCommand = {
-	name: "tutorial",
-	description: "Try the PostHog MCP with your agent (no install needed)",
-	options: { local: {
-		default: false,
-		describe: "Point the tutorial at the local MCP server (http://localhost:8787)",
-		type: "boolean"
-	} },
-	handler: runMcpTutorial
-};
-function runMcpTutorial(argv) {
-	(async () => {
-		const debug = argv.debug;
-		const localMcp = argv.local;
-		try {
-			const { startTUI } = await import("./start-tui-oCWMgsDP.js");
-			const { buildSession } = await import("./wizard-session-DGaUHOF3.js");
-			const tui = startTUI(VERSION, Program.McpTutorial);
-			tui.store.session = buildSession({
-				debug,
-				localMcp,
-				baseUrl: argv.baseUrl
-			});
-		} catch (err) {
-			setUI(new LoggingUI());
-			getUI().log.error(`The MCP tutorial requires an interactive terminal. ${err instanceof Error ? err.message : String(err)}`);
-			emitWizardError({
-				code: ErrorCodes.CliInteractiveRequired,
-				message: "The MCP tutorial requires an interactive terminal."
-			});
-			process.exit(1);
-		}
-	})();
-}
-//#endregion
-//#region src/commands/mcp/index.ts
-const mcpCommand = {
-	name: "mcp",
-	description: "MCP server management commands",
-	children: [
-		mcpAddCommand,
-		mcpRemoveCommand,
-		mcpTutorialCommand
-	]
-};
-//#endregion
-//#region src/lib/runners/resolve-no-telemetry.ts
-/**
-* `--no-telemetry` flips `telemetry: false` via yargs negation;
-* `POSTHOG_WIZARD_NO_TELEMETRY` is honoured separately so the env-var
-* form documented in the README keeps working.
-*/
-function resolveNoTelemetry(options) {
-	if (options.telemetry === false) return true;
-	const env = process.env.POSTHOG_WIZARD_NO_TELEMETRY;
-	if (env == null || env === "") return false;
-	const norm = env.toLowerCase();
-	return norm !== "0" && norm !== "false";
-}
-//#endregion
-//#region src/programs/task-stream/wizard-run-sync.ts
-const STATUS = {
-	pending: "created",
-	in_progress: "running",
-	completed: "completed",
-	failed: "failed",
-	skipped: "completed"
-};
-var RunTaskNames = class {
-	names = /* @__PURE__ */ new Map();
-	used = /* @__PURE__ */ new Set();
-	snapshot(items) {
-		if (items.length > 100) throw new Error("task limit exceeded (100)");
-		const occurrences = /* @__PURE__ */ new Map();
-		const ids = /* @__PURE__ */ new Set();
-		return items.map((item) => {
-			const subject = item.label.trim();
-			if (!subject) throw new Error("blank task name");
-			const rawStatus = item.sourceStatus ?? item.status;
-			const status = STATUS[rawStatus];
-			if (!Object.hasOwn(STATUS, rawStatus)) throw new Error("invalid task status");
-			const occurrence = (occurrences.get(subject) ?? 0) + 1;
-			occurrences.set(subject, occurrence);
-			const id = item.id ? JSON.stringify([item.source, item.id]) : JSON.stringify([subject, occurrence]);
-			if (ids.has(id)) throw new Error("duplicate task identity");
-			ids.add(id);
-			let name = this.names.get(id);
-			if (!name) {
-				name = subject.slice(0, 255);
-				for (let n = 2; this.used.has(name); n++) {
-					const suffix = ` (${n})`;
-					name = subject.slice(0, 255 - suffix.length) + suffix;
-				}
-				this.names.set(id, name);
-				this.used.add(name);
-			}
-			return {
-				name,
-				status
-			};
-		});
-	}
-};
-function createWizardRunSync(options) {
-	if (options.noTelemetry || options.mode === "ci") return;
-	if (options.mode === "headless" && options.assignedId === void 0) return;
-	return new WizardRunSync({
-		...options,
-		mode: options.assignedId !== void 0 ? "cloud" : "local"
-	});
-}
-var WizardRunSync = class {
-	names = new RunTaskNames();
-	tasksAbort = new AbortController();
-	reported = /* @__PURE__ */ new Set();
-	context;
-	queue = Promise.resolve();
-	lastBody;
-	stopped = false;
-	tasksDisabled = false;
-	authDisabled = false;
-	closing;
-	constructor(options) {
-		this.options = options;
-	}
-	capture(items) {
-		if (this.stopped || this.tasksDisabled || !items) return;
-		if (this.options.mode === "cloud" && !validate(this.options.assignedId ?? "")) {
-			this.tasksDisabled = true;
-			this.report("invalid cloud run assignment");
-			return;
-		}
-		const session = this.options.getSession();
-		if (session.runPhase === "idle") return;
-		if (!this.context) {
-			if (session.runPhase !== "running" || !session.credentials) return;
-			const { host, projectId } = session.credentials;
-			this.context = {
-				apiHost: host.appHost.replace(/\/$/, ""),
-				projectId,
-				programId: this.options.programId,
-				mode: this.options.mode,
-				id: this.options.assignedId
-			};
-			this.queue = this.initialize(session);
-		}
-		try {
-			const body = JSON.stringify({ tasks: this.names.snapshot(items) });
-			if (body === this.lastBody) return;
-			this.lastBody = body;
-			this.queue = this.queue.then(async () => {
-				if (this.tasksDisabled || this.tasksAbort.signal.aborted || !this.context?.id) return;
-				if (!await this.request("PUT", `${this.context.id}/tasks/`, body, this.tasksAbort.signal)) this.tasksDisabled = true;
-			});
-		} catch {
-			this.report("invalid task snapshot (names, statuses, identities or 100-task limit)");
-		}
-	}
-	shutdown(outcome, timeoutMs) {
-		if (this.closing) return this.closing;
-		this.stopped = true;
-		this.closing = this.finish(outcome, Math.max(0, timeoutMs));
-		return this.closing;
-	}
-	async initialize(session) {
-		const context = this.context;
-		if (!context || context.mode === "cloud") return;
-		const projectName = basename(resolve(session.installDir)).trim().slice(0, 255);
-		if (!projectName) {
-			this.tasksDisabled = true;
-			this.report("unsupported program or workspace configuration");
-			return;
-		}
-		const body = JSON.stringify({
-			program_id: context.programId,
-			environment: "local",
-			workspace: {
-				type: "local_folder",
-				project_name: projectName
-			},
-			...valid("2.79.0") ? { wizard_version: VERSION } : {},
-			idempotency_key: randomUUID()
-		});
-		const result = await this.request("POST", "", body, this.tasksAbort.signal);
-		if (result && typeof result === "object" && "id" in result && typeof result.id === "string" && validate(result.id)) context.id = result.id;
-		else {
-			this.tasksDisabled = true;
-			this.report("local creation failed or returned an invalid ID; creation was not retried");
-		}
-	}
-	credentials(creds = this.options.getSession().credentials) {
-		const context = this.context;
-		if (!context) return;
-		if (!creds || creds.host.appHost.replace(/\/$/, "") !== context.apiHost || creds.projectId !== context.projectId) {
-			this.report("execution credentials changed host or project");
-			return;
-		}
-		if (creds.missingScopes?.includes("wizard_run:write") || !creds.accessToken.startsWith("pha_")) {
-			this.authDisabled = true;
-			this.report("wizard_run:write OAuth grant required; authorize again");
-			return;
-		}
-		return creds;
-	}
-	async request(method, suffix, body, signal) {
-		const context = this.context;
-		if (!context || this.authDisabled || signal.aborted) return;
-		let refreshed = false;
-		let rateLimited = false;
-		const attempts = method === "POST" ? 1 : 3;
-		for (let attempt = 0; attempt < attempts && !signal.aborted; attempt++) {
-			let retryMs = 500 * 2 ** attempt;
-			try {
-				const creds = this.credentials();
-				if (!creds) return;
-				const { res, data, current } = await this.bounded(async (requestSignal) => {
-					const current = this.credentials(await currentCredentials(creds));
-					if (!current) throw new Error("credentials unavailable");
-					const res = await (this.options.fetchImpl ?? fetch)(`${context.apiHost}/api/projects/${context.projectId}/wizard/runs/${suffix}`, {
-						method,
-						body,
-						signal: requestSignal,
-						headers: {
-							Authorization: `Bearer ${current.accessToken}`,
-							"Content-Type": "application/json"
-						}
-					});
-					return {
-						res,
-						data: method === "POST" && (res.status === 200 || res.status === 201) ? await res.json() : void 0,
-						current
-					};
-				}, signal, 5e3);
-				if (method === "POST" && [200, 201].includes(res.status) || method === "PUT" && res.status === 204 || method === "PATCH" && res.status === 200) return data ?? true;
-				if (res.status === 401 && current.refreshToken && !isGrantRevoked() && !refreshed && method !== "POST") {
-					refreshed = true;
-					if ((await this.bounded(() => currentCredentials(current, true), signal, 5e3)).accessToken === current.accessToken) {
-						this.authDisabled = true;
-						this.report("OAuth refresh could not recover the grant; authorize again");
-						return;
-					}
-					continue;
-				}
-				if (res.status === 401 || res.status === 403) this.authDisabled = true;
-				if (res.status === 429 && !rateLimited) {
-					rateLimited = true;
-					retryMs = parseRetryAfter(res.headers.get("Retry-After"));
-				} else if (res.status < 500 || res.status >= 600) {
-					this.report(`${method} rejected (${res.status}); check assignment, grant and program configuration`);
-					return;
-				}
-			} catch {
-				if (signal.aborted) return;
-			}
-			if (attempt + 1 < attempts) try {
-				await this.sleep(retryMs, signal);
-			} catch {
-				return;
-			}
-		}
-		this.report(`${method} delivery exhausted`);
-	}
-	async finish(outcome, timeoutMs) {
-		const deadline = Date.now() + timeoutMs;
-		try {
-			await this.bounded(() => this.queue, new AbortController().signal, Math.floor(timeoutMs * .75));
-		} catch {
-			this.report("task drain timed out");
-		}
-		this.tasksAbort.abort();
-		if (this.context?.mode !== "local" || !this.context.id || this.authDisabled) return;
-		if (Date.now() >= deadline) {
-			this.report("terminal update budget exhausted");
-			return;
-		}
-		const finalAbort = new AbortController();
-		const timer = setTimeout(() => finalAbort.abort(), Math.max(0, deadline - Date.now()));
-		try {
-			await this.request("PATCH", `${this.context.id}/`, JSON.stringify({ status: outcome }), finalAbort.signal);
-		} finally {
-			clearTimeout(timer);
-			finalAbort.abort();
-		}
-	}
-	async bounded(operation, parent, ms) {
-		const controller = new AbortController();
-		const abort = () => controller.abort();
-		parent.addEventListener("abort", abort, { once: true });
-		if (parent.aborted) controller.abort();
-		const timer = setTimeout(abort, ms);
-		let onAbort = () => void 0;
-		const cancelled = new Promise((_, reject) => {
-			onAbort = () => reject(/* @__PURE__ */ new Error("request cancelled"));
-			controller.signal.addEventListener("abort", onAbort, { once: true });
-			if (controller.signal.aborted) onAbort();
-		});
-		try {
-			return await Promise.race([operation(controller.signal), cancelled]);
-		} finally {
-			clearTimeout(timer);
-			parent.removeEventListener("abort", abort);
-			controller.signal.removeEventListener("abort", onAbort);
-			controller.abort();
-		}
-	}
-	sleep(ms, signal) {
-		return new Promise((resolve) => {
-			const finish = () => {
-				clearTimeout(timer);
-				signal.removeEventListener("abort", finish);
-				resolve();
-			};
-			const timer = setTimeout(finish, ms);
-			signal.addEventListener("abort", finish, { once: true });
-			if (signal.aborted) finish();
-		});
-	}
-	report(message) {
-		if (this.reported.has(message)) return;
-		this.reported.add(message);
-		(this.options.onError ?? ((m) => logToFile(`[wizard-run-sync] ${m}`)))(message);
-	}
-};
-//#endregion
-//#region src/lib/runners/run-wizard.ts
-const WIZARD_VERSION = VERSION;
-/** The session a run step's agent runs in: scoped to the step's target dir
-* (e.g. a monorepo sub-app) with its own framework context, after any prep.
-* A step without `targetDir` runs in the live session, unchanged.
-* The frameworkContext copy is shallow and unfiltered — name keys per owning program. */
-async function prepareRunSession(step, live) {
-	const session = step.targetDir ? {
-		...live,
-		installDir: step.targetDir(live),
-		frameworkContext: { ...live.frameworkContext }
-	} : live;
-	if (step.onRunPrep) await step.onRunPrep(session);
-	return session;
-}
-/** Advance one step of a composed run to completion: the auth screen
-* authenticates (every later run reuses it); a step carrying its own `run`
-* thunk runs that agent in its dir and is recorded in `completedRuns`; the
-* host program's own run screen runs `config.run`; any other screen waits for
-* the user to satisfy `isComplete`. */
-async function advanceStep(step, store, config) {
-	if (step.screenId === "auth") {
-		await authenticate(store.session, config.id);
-		maybeStampAiSdkDetected(store.session);
-	} else if (step.run) {
-		await step.run(await prepareRunSession(step, store.session));
-		store.completeRunStep(step.id);
-	} else if (step.screenId === "run") await runProgramAgent(config, await prepareRunSession(step, store.session));
-	else if (step.isComplete) await store.waitUntil(step.isComplete);
-}
-/**
-* Run a full wizard program in the TUI. Handles the full lifecycle: start TUI,
-* build session, run detection, wait for intro gate, execute the
-* agent pipeline, wait for outro dismissal, then exit.
-*/
-function runWizard(config, options) {
-	let tui = null;
-	let taskStream = null;
-	let onSignal = null;
-	let exitInProgress = false;
-	let signalled = false;
-	let unregisterShutdown;
-	(async () => {
-		try {
-			const installDir = options.installDir || process.cwd();
-			const { startTUI } = await import("./start-tui-oCWMgsDP.js");
-			const { buildSession, RunPhase } = await import("./wizard-session-DGaUHOF3.js");
-			const { TaskStreamPush } = await import("./task-stream-kYlm9qd0.js");
-			const { PostHogDestination } = await import("./posthog-6Uqw_Eux.js").then((n) => n.r);
-			const { createFileDestination } = await import("./file-dEhr-l3n.js");
-			const local = getLocalDev();
-			const localServicesError = await checkLocalServices({
-				...local,
-				localPosthog: local.localPosthog && !options.baseUrl
-			});
-			if (localServicesError) {
-				const { wizardAbort } = await import("./wizard-abort-Y-Ip2K4z.js");
-				await wizardAbort({ message: localServicesError });
-				return;
-			}
-			tui = startTUI(WIZARD_VERSION, config.id, () => onSignal?.());
-			const activeTui = tui;
-			const session = buildSession({
-				debug: options.debug,
-				localDev: options.localDev,
-				localMcp: options.localMcp,
-				localPosthog: options.localPosthog,
-				installDir,
-				ci: false,
-				signup: options.signup,
-				apiKey: options.apiKey,
-				projectId: options.projectId,
-				email: options.email,
-				baseUrl: options.baseUrl,
-				benchmark: options.benchmark,
-				yaraReport: options.yaraReport,
-				noTelemetry: resolveNoTelemetry(options),
-				harness: options.harness,
-				sequence: options.sequence,
-				model: options.model,
-				integrate: options.integrate,
-				captureAio: options.captureAio
-			});
-			session.programLabel = config.id;
-			if (options.skillId) session.skillId = options.skillId;
-			else if (config.skillId) session.skillId = config.skillId;
-			activeTui.store.session = session;
-			onSignal = () => {
-				if (signalled || exitInProgress) return;
-				signalled = true;
-				logToFile("[run-wizard] signal received, flushing task stream");
-				runCleanups();
-				if (activeTui.store.session.runPhase === RunPhase.Running) activeTui.store.setRunPhase(RunPhase.Error);
-				const teardown = () => {
-					unregisterShutdown?.();
-					if (onSignal) {
-						process.off("SIGINT", onSignal);
-						process.off("SIGTERM", onSignal);
-					}
-					try {
-						activeTui.unmount();
-					} catch {}
-					process.exit(130);
-				};
-				Promise.all([taskStream?.shutdown(2e3, "cancelled"), analytics.shutdown("cancelled")]).catch(() => logToFile("[run-wizard] cancellation shutdown failed")).finally(teardown);
-			};
-			process.on("SIGINT", onSignal);
-			process.on("SIGTERM", onSignal);
-			for (;;) {
-				await activeTui.store.runReadyHooks();
-				await activeTui.store.getGate("intro");
-				const active = activeTui.store.router.activeProgram;
-				if (active === config.id) break;
-				config = getProgramConfig(active);
-			}
-			const fileDestination = createFileDestination(options.taskStreamLog);
-			const destinations = [...session.noTelemetry ? [] : [new PostHogDestination({
-				getCredentials: () => activeTui.store.session.credentials,
-				onError: (err) => logToFile("[task-stream-push]", err.message)
-			})], ...fileDestination ? [fileDestination] : []];
-			const taskStreamEnabled = destinations.length > 0;
-			const activeStream = new TaskStreamPush({
-				store: activeTui.store,
-				getFlags: () => analytics.getCachedWizardFlags(),
-				programId: config.streamWorkflowId ?? config.id,
-				runSync: createWizardRunSync({
-					mode: "local",
-					programId: config.id,
-					assignedId: options.runId ?? runtimeEnv("POSTHOG_WIZARD_RUN_ID"),
-					noTelemetry: session.noTelemetry,
-					getSession: () => activeTui.store.session
-				}),
-				destinations,
-				eventPlanPath: config.eventPlanFile ? join(session.installDir, config.eventPlanFile) : void 0,
-				auditChecks: config.auditLedgerFile ? () => getAuditChecks(activeTui.store.session) : void 0,
-				enabled: taskStreamEnabled
-			});
-			taskStream = activeStream;
-			activeStream.attach();
-			unregisterShutdown = registerShutdown((outcome) => {
-				if (activeTui.store.session.runPhase === RunPhase.Running) activeTui.store.setRunPhase(RunPhase.Error);
-				return activeStream.shutdown(2e3, outcome);
-			});
-			await activeTui.store.getGate("integration-check");
-			await activeTui.store.getGate("health-check");
-			const skipAgent = config.run == null;
-			const shown = (s) => !s.show || s.show(activeTui.store.session);
-			if (config.steps.some((s) => s.run || s.targetDir)) for (const step of config.steps) {
-				if (step.screenId === "outro") break;
-				if (shown(step)) await advanceStep(step, activeTui.store, config);
-			}
-			else if (skipAgent) {
-				const { getOrAskForProjectData } = await import("./setup-utils-dCViCC6s.js").then((n) => n.r);
-				const { projectApiKey, host, accessToken, projectId } = await getOrAskForProjectData({
-					signup: session.signup,
-					ci: session.ci,
-					apiKey: session.apiKey,
-					projectId: session.projectId,
-					baseUrl: session.baseUrl,
-					programId: config.id
-				});
-				activeTui.store.setCredentials({
-					accessToken,
-					projectApiKey,
-					host,
-					projectId
-				});
-			} else try {
-				await runProgramAgent(config, activeTui.store.session);
-			} catch (error) {
-				const failure = classifyRunFailure(error);
-				logToFile("[run-wizard] run failed, handing off:", error);
-				runCleanups();
-				analytics.captureException(error instanceof Error ? error : new Error(String(error)), { error_code: failure.code });
-				getUI().outroError({
-					kind: "error",
-					errorCode: failure.code,
-					message: failure.message
-				});
-			}
-			if (signalled) return;
-			const runFailed = isRunFailure(activeTui.store.session);
-			await activeStream.finishRun(runFailed ? "failed" : "completed");
-			await activeTui.store.waitUntil((s) => {
-				if (s.mintHandoff === "exit") return true;
-				if (skipAgent && !runFailed) return s.outroDismissed;
-				return s.skillsComplete;
-			});
-			exitInProgress = true;
-			await activeStream.shutdown(2e3);
-			unregisterShutdown?.();
-			process.off("SIGINT", onSignal);
-			process.off("SIGTERM", onSignal);
-			if (runFailed) await analytics.shutdown("error");
-			activeTui.unmount();
-			process.exit(runFailed ? 1 : 0);
-		} catch (err) {
-			if (signalled) return;
-			logToFile("[run-wizard] FATAL:", err);
-			runCleanups();
-			exitInProgress = true;
-			if (onSignal) {
-				process.off("SIGINT", onSignal);
-				process.off("SIGTERM", onSignal);
-			}
-			if (taskStream) try {
-				await taskStream.shutdown(2e3, "failed");
-			} catch {}
-			unregisterShutdown?.();
-			if (tui) try {
-				tui.unmount();
-			} catch {}
-			const failure = classifyRunFailure(err);
-			if (failure.coded) console.error(failure.message);
-			else console.error("Wizard run failed:", err);
-			console.error(`Full logs: ${getLogFilePath()}`);
-			emitWizardError({
-				code: failure.code,
-				message: failure.message
-			});
-			process.exit(1);
-		}
-	})();
-}
-//#endregion
-//#region src/programs/detect-map.ts
-const DETECT_CODES = {
-	"bad-directory": ErrorCodes.DetectBadDirectory,
-	"unsupported-platform": ErrorCodes.DetectUnsupportedPlatform,
-	"no-project-files": ErrorCodes.DetectNoProjectFiles,
-	"no-sources": ErrorCodes.DetectNoSources,
-	"no-package-json": ErrorCodes.DetectNoPackageJson,
-	"no-sdks": ErrorCodes.DetectNoSdks,
-	"missing-stripe": ErrorCodes.DetectMissingStripe,
-	"no-posthog-sdk": ErrorCodes.DetectNoPosthogSdk,
-	"no-posthog": ErrorCodes.DetectNoPosthogSdk,
-	"missing-posthog": ErrorCodes.DetectNoPosthogSdk
-};
-/**
-* `kind` arrives as a bare string — `frameworkContext.detectError` is untyped
-* storage — so the lookup can still miss. It falls back to a detect-group code
-* with `retry: 'no'`, never to `InternalUnhandled`: an unrecognized precondition
-* failure is still a precondition failure, and telling a sandbox to retry one
-* costs it the whole budget.
-*/
-function detectErrorCode(kind) {
-	return DETECT_CODES[kind] ?? ErrorCodes.DetectUnclassified;
-}
-//#endregion
-//#region src/lib/runners/run-non-interactive.ts
-/** User-facing label for a non-interactive mode. */
-function modeLabel(mode) {
-	return mode === "headless" ? "Headless" : "CI";
-}
-/** The credentials every non-interactive mode accepts, for error messages. */
-const API_KEY_HINT = "personal API key phx_xxx or wizard-app OAuth access token pha_xxx";
-/**
-* The single non-interactive validation layer: requires api-key and
-* install-dir. Every non-interactive entry point routes through
-* `runNonInteractive`, so this is the one place these checks live. UI must be
-* initialized before calling.
-*/
-function validateNonInteractiveOptions(options, mode) {
-	const label = modeLabel(mode);
-	if (!options.apiKey) {
-		getUI().intro("PostHog Wizard");
-		getUI().log.error(`${label} mode requires --api-key (${API_KEY_HINT})`);
-		emitWizardError({
-			code: ErrorCodes.ArgsMissingApiKey,
-			message: `${label} mode requires --api-key (${API_KEY_HINT})`
-		});
-		process.exit(1);
-	}
-	if (!options.installDir) {
-		getUI().intro("PostHog Wizard");
-		getUI().log.error(`${label} mode requires --install-dir (directory to install in)`);
-		emitWizardError({
-			code: ErrorCodes.ArgsMissingInstallDir,
-			message: `${label} mode requires --install-dir`
-		});
-		process.exit(1);
-	}
-}
-/**
-* Non-interactive pipeline shared by CI (`runWizardCI`) and headless
-* (`runWizardHeadless`) runs.
-*
-* Validates flags, builds a `ci:true` session, runs `config.ciPreRun` (or the
-* program's `onReady` hooks by default), executes `runProgramAgent`, and routes any
-* failure through `wizardAbort`. `wizardAbort` owns all exits — never add a
-* raw `process.exit` here.
-*
-* `mode` is the only difference between the two callers today (it sets the
-* analytics build tag and the user-facing label). Keeping it a parameter is
-* what lets CI and headless share this body now and diverge later — branch on
-* `mode` here, or stop sharing this function entirely.
-*/
-function runNonInteractive(config, options, mode) {
-	setUI(new LoggingUI());
-	validateNonInteractiveOptions(options, mode);
-	analytics.setTag("build", mode);
-	(async () => {
-		const path = await import("path");
-		const { buildSession, RunPhase, OutroKind } = await import("./wizard-session-DGaUHOF3.js");
-		const { readEnvironment } = await import("./environment-DZYUSCpV.js").then((n) => n.t);
-		const { readApiKeyFromEnv } = await import("./env-api-key-BWdKpGEr.js").then((n) => n.t);
-		const { configureLogFileFromEnvironment, logToFile } = await import("./debug-B9k4ideV.js");
-		const { wizardAbort, WizardError } = await import("./wizard-abort-Y-Ip2K4z.js");
-		configureLogFileFromEnvironment();
-		const env = readEnvironment();
-		const apiKey = options.apiKey ?? readApiKeyFromEnv() ?? void 0;
-		const installDir = path.isAbsolute(options.installDir) ? options.installDir : path.join(process.cwd(), options.installDir);
-		const session = buildSession({
-			debug: options.debug,
-			installDir,
-			ci: true,
-			signup: options.signup,
-			localDev: options.localDev,
-			localMcp: options.localMcp,
-			localPosthog: options.localPosthog,
-			apiKey,
-			email: options.email,
-			projectId: options.projectId,
-			baseUrl: options.baseUrl,
-			benchmark: options.benchmark,
-			yaraReport: options.yaraReport,
-			noTelemetry: resolveNoTelemetry(options),
-			harness: options.harness,
-			sequence: options.sequence,
-			model: options.model,
-			captureAio: options.captureAio,
-			...env,
-			region: options.region ?? env.region
-		});
-		session.programLabel = config.id;
-		if (config.skillId) session.skillId = config.skillId;
-		const runDef = typeof config.run === "object" ? config.run : null;
-		getUI().intro("Welcome to the PostHog setup wizard");
-		getUI().log.info(`Running ${config.id} in ${modeLabel(mode)} mode`);
-		const localServicesError = await checkLocalServices({
-			...getLocalDev(),
-			localMcp: session.localMcp,
-			localPosthog: session.baseUrl === POSTHOG_LOCAL_URL
-		});
-		if (localServicesError) {
-			await wizardAbort({
-				code: ErrorCodes.EnvLocalServicesDown,
-				message: localServicesError
-			});
-			return;
-		}
-		let store = null;
-		let taskStream = null;
-		{
-			const { WizardStore } = await import("./store-xYy_6Ruv.js").then((n) => n.n);
-			const { HeadlessUI } = await import("./headless-ui-pY2xB5ug.js");
-			const { TaskStreamPush, PostHogDestination, createFileDestination } = await import("./task-stream-kYlm9qd0.js");
-			const fileDestination = createFileDestination(mode === "ci" ? options.taskStreamLog ?? "" : options.taskStreamLog);
-			const posthogDestination = mode === "headless" && !session.noTelemetry ? new PostHogDestination({
-				getCredentials: () => store?.session.credentials ?? session.credentials,
-				onError: (e) => logToFile("[headless task-stream]", e.message)
-			}) : null;
-			const destinations = [...posthogDestination ? [posthogDestination] : [], ...fileDestination ? [fileDestination] : []];
-			const headlessStore = new WizardStore(config.id);
-			store = headlessStore;
-			headlessStore.session = session;
-			setUI(new HeadlessUI(headlessStore));
-			taskStream = new TaskStreamPush({
-				store: headlessStore,
-				getFlags: () => analytics.getCachedWizardFlags(),
-				programId: config.streamWorkflowId ?? config.id,
-				runSync: createWizardRunSync({
-					mode,
-					programId: config.id,
-					assignedId: options.runId ?? runtimeEnv("POSTHOG_WIZARD_RUN_ID"),
-					noTelemetry: session.noTelemetry,
-					getSession: () => headlessStore.session
-				}),
-				destinations,
-				eventPlanPath: config.eventPlanFile ? join(session.installDir, config.eventPlanFile) : void 0,
-				auditChecks: config.auditLedgerFile ? () => getAuditChecks(headlessStore.session) : void 0,
-				enabled: destinations.length > 0
-			});
-			taskStream.attach();
-			if (fileDestination) logToFile(`[task-stream] ${mode} dump: ${fileDestination.path}`);
-		}
-		const settleStream = async (phase, outroData, outcome = phase === RunPhase.Completed ? "completed" : "failed") => {
-			if (!store || !taskStream) return;
-			if (outroData) store.setOutroData(outroData);
-			store.setRunPhase(phase);
-			await taskStream.shutdown(2e3, outcome);
-			process.off("SIGINT", onSignal);
-			process.off("SIGTERM", onSignal);
-			unregisterShutdown();
-		};
-		const unregisterShutdown = registerShutdown((outcome) => settleStream(RunPhase.Error, void 0, outcome));
-		let signalled = false;
-		const onSignal = () => {
-			if (signalled) return;
-			signalled = true;
-			runCleanups();
-			settleStream(RunPhase.Error, void 0, "cancelled").then(() => wizardAbort({ exitCode: 130 }));
-		};
-		process.on("SIGINT", onSignal);
-		process.on("SIGTERM", onSignal);
-		try {
-			if (mode === "ci") {
-				const { configureGatewayFromCIEnvironment } = await import("./agent-CNrEC-9v.js").then((n) => n.t);
-				configureGatewayFromCIEnvironment(Number(session.projectId), session.region ?? "us");
-			}
-			if (config.ciPreRun) await config.ciPreRun(session, { log: {
-				info: (message) => getUI().log.info(message),
-				warn: (message) => getUI().log.warn(message)
-			} });
-			else {
-				const readyCtx = {
-					session,
-					setFrameworkContext: (key, value) => {
-						session.frameworkContext[key] = value;
-					},
-					setFrameworkConfig: () => void 0,
-					setDetectedFramework: () => void 0,
-					setSkillId: (skillId) => {
-						session.skillId = skillId;
-					},
-					setUnsupportedVersion: (info) => {
-						session.unsupportedVersion = info;
-					},
-					addDiscoveredFeature: () => void 0,
-					setDetectionComplete: () => void 0,
-					setPosthogSdkDetected: (detected) => {
-						session.posthogSdkDetected = detected;
-					}
-				};
-				for (const step of config.steps) if (step.onReady) await step.onReady(readyCtx);
-				const detectError = session.frameworkContext.detectError;
-				if (session.unsupportedVersion) {
-					const { current, minimum, docsUrl } = session.unsupportedVersion;
-					const message = `Detected framework version ${current} is not supported. Minimum supported version is ${minimum}.`;
-					await settleStream(RunPhase.Error, {
-						kind: OutroKind.Error,
-						message,
-						errorCode: ErrorCodes.DetectUnsupportedVersion
-					});
-					await wizardAbort({
-						code: ErrorCodes.DetectUnsupportedVersion,
-						message: `${message}\n\nSee ${docsUrl}`,
-						error: new WizardError(`${config.id} unsupported framework version`, {
-							integration: config.id,
-							current,
-							minimum
-						}, ErrorCodes.DetectUnsupportedVersion)
-					});
-				}
-				if (detectError) {
-					const code = detectErrorCode(detectError.kind);
-					const detectKind = detectError.kind;
-					const detail = { ...detectError };
-					await settleStream(RunPhase.Error, {
-						kind: OutroKind.Error,
-						message: `Prerequisites not met: ${detectKind}`,
-						errorCode: code,
-						errorDetail: detail
-					});
-					await wizardAbort({
-						code,
-						detail,
-						message: `Prerequisites not met: ${detectKind}\n\nSee ${runDef?.docsUrl ?? "https://posthog.com/docs"}`,
-						error: new WizardError(`${config.id} prerequisites failed`, {
-							integration: config.id,
-							detect_error_kind: detectKind
-						}, code)
-					});
-				}
-			}
-			const { runProgramAgent } = await import("./run-agent-legacy-6WcYMaR9.js").then((n) => n.n);
-			await runProgramAgent(config, session);
-			if (signalled) return;
-			await settleStream(RunPhase.Completed);
-		} catch (error) {
-			if (signalled) return;
-			const errorMessage = error instanceof Error ? error.message : String(error);
-			const errorStack = error instanceof Error && error.stack ? error.stack : void 0;
-			logToFile(`[${mode}] ERROR: ${errorMessage}`);
-			if (errorStack) logToFile(`[${mode}] STACK: ${errorStack}`);
-			const debugInfo = session.debug && errorStack ? `\n\n${errorStack}` : "";
-			const docsUrl = session.frameworkConfig?.metadata.docsUrl ?? runDef?.docsUrl ?? "https://posthog.com/docs";
-			const failure = classifyRunFailure(error);
-			await settleStream(RunPhase.Error, {
-				kind: OutroKind.Error,
-				message: errorMessage,
-				errorCode: failure.code
-			});
-			await wizardAbort({
-				code: failure.code,
-				message: failure.coded ? `${errorMessage}${debugInfo}` : `Something went wrong: ${errorMessage}\n\nYou can read the documentation at ${docsUrl} to set up manually.${debugInfo}`,
-				error
-			});
-		}
-	})().catch((error) => {
-		emitWizardError({
-			code: ErrorCodes.InternalUnhandled,
-			message: error instanceof Error ? error.message : String(error)
-		});
-		process.exit(1);
-	});
-}
-//#endregion
-//#region src/lib/runners/run-wizard-ci.ts
-/**
-* CI-mode entry point (`--ci`, dev/test builds). A thin shell over the shared
-* non-interactive pipeline — see `runNonInteractive`. Kept as its own function
-* so CI and headless (`runWizardHeadless`) can diverge without re-threading the
-* many callers that route here.
-*/
-function runWizardCI(config, options) {
-	runNonInteractive(config, options, "ci");
-}
-//#endregion
-//#region src/lib/runners/run-wizard-headless.ts
-/**
-* Headless entry point (the experimental published-build, non-interactive run
-* path; see @lib/headless-mode). A thin shell over the shared non-interactive
-* pipeline — see `runNonInteractive`. Today it behaves exactly like
-* `runWizardCI`; it exists as a separate function so headless can diverge later
-* (its own auth handling, telemetry, prompts, …) without touching CI or its
-* callers. Diverge by branching on the mode inside `runNonInteractive`, or by
-* giving this function its own body.
-*/
-function runWizardHeadless(config, options) {
-	runNonInteractive(config, options, "headless");
-}
-//#endregion
-//#region src/commands/skill-program-options.ts
-/**
-* Per-command options shared by every skill-based program command
-* (`audit events`, `migrate statsig`, `revenue`, `source-maps`, …).
-*
-* Only flags unique to skill commands live here. Global flags are declared
-* once in `wizard.ts` — both in `GLOBAL_OPTIONS` and, for the dev-only ones,
-* the `Wizard` constructor — and apply to every command automatically.
-*/
-const skillProgramOptions = { "install-dir": {
-	describe: "Directory to install in",
-	type: "string"
-} };
-//#endregion
-//#region src/commands/factories/shared.ts
-/**
-* Dispatch a parsed yargs invocation to the wizard runner. Applies the
-* program's `mapCliOptions` transform, then routes to `runWizardHeadless`,
-* `runWizardCI`, or `runWizard` based on the headless / `--ci` flags.
-*
-* Every command file used to inline this; the factories call it instead.
-*/
-/**
-* Run a command's async body as fire-and-forget while still surfacing failures.
-* yargs handlers are synchronous, so async work kicks off a detached promise —
-* without this, a rejection becomes an unhandled promise rejection (no message,
-* wrong exit code). This awaits the work and turns any error into a clean
-* message + non-zero exit.
-*/
-function runCommandHandler(work) {
-	(async () => {
-		try {
-			await work();
-		} catch (err) {
-			const msg = err instanceof Error ? err.message : String(err);
-			process.stderr.write(`\n\x1b[1;91m✖ ${msg}\x1b[0m\n\n`);
-			emitWizardError({
-				code: ErrorCodes.InternalUnhandled,
-				message: msg
-			});
-			process.exit(1);
-		}
-	})();
-}
-function dispatchProgram(config, argv) {
-	const argvRecord = { ...argv };
-	const extras = config.mapCliOptions?.(argvRecord) ?? {};
-	const options = {
-		...argvRecord,
-		...extras
-	};
-	if (isHeadless(options)) runWizardHeadless(config, options);
-	else if (options.ci) runWizardCI(config, options);
-	else runWizard(config, options);
-}
-/**
-* Merge the standard skill-program flags (`--debug`, `--install-dir`, etc.)
-* with any program-specific options declared on `cliOptions`.
-*
-* Program-specific options shadow the standard ones — that's intentional, so
-* a program can override a default flag if it ever needs to.
-*/
-function mergeCommandOptions(config) {
-	return {
-		...skillProgramOptions,
-		...config.cliOptions ?? {}
-	};
-}
-//#endregion
-//#region src/commands/factories/native-command-factory.ts
-/**
-* Build a yargs `Command` from a wizard-native `ProgramConfig`.
-*
-* Collapses the previously duplicated boilerplate (read `config.command`,
-* merge skill-program flags with program-specific options, dispatch via
-* `runWizard` / `runWizardCI`) into a single call.
-*/
-function nativeCommandFactory(config, opts = {}) {
-	if (!config.command) throw new Error(`nativeCommandFactory: program "${config.id}" has no \`command\` — wizard-native programs must declare a CLI name`);
-	return {
-		name: config.command,
-		description: config.description,
-		options: mergeCommandOptions(config),
-		children: opts.children,
-		handler: (argv) => dispatchProgram(config, argv)
-	};
-}
-//#endregion
-//#region src/commands/mcp-analytics.ts
-/**
-* `wizard mcp-analytics` — flat skill command, instrument-an-MCP-server today.
-*
-* Distinct from `wizard mcp add`: this instruments the user's own MCP server
-* with the `@posthog/mcp` SDK, rather than installing the PostHog MCP server
-* into a coding agent. Stays flat while instrumenting is the only action.
-*/
-const mcpAnalyticsCommand = nativeCommandFactory(mcpAnalyticsConfig);
-//#endregion
-//#region src/commands/replay-vision.ts
-/**
-* `wizard replay-vision` — flat skill command, set up Replay vision today.
-*
-* Enables session replay recording and creates vision scanners tailored to
-* the product's key flows. Runs the `replay-vision` orchestrator flow, which
-* reuses the integration-v2 install/init mini-agents when the repo has no
-* PostHog integration yet.
-*/
-const replayVisionCommand = nativeCommandFactory(replayVisionConfig);
-//#endregion
-//#region src/commands/ai-observability.ts
-/**
-* `wizard ai-observability` — flat skill command, wire AI Observability into a
-* project today.
-*
-* Installs the OpenTelemetry SDK, the PostHog span processor, and the
-* provider-specific instrumentation so LLM calls emit `$ai_generation` events.
-* The `ai-observability` context-mill skill has one variant per (LLM provider ×
-* language); the agent picks the right one at run time by scanning the
-* project's manifest and (when ambiguous) asking the user via `wizard_ask`.
-* Stays flat while a single "add AIO to a project" flow is the only action.
-*/
-const aiObservabilityCommand = nativeCommandFactory(aiObservabilityConfig);
-//#endregion
-//#region src/commands/metrics.ts
-/**
-* `wizard metrics` — flat skill command, wire PostHog application metrics
-* (counters, gauges, histograms via \`posthog.metrics\`) into a project.
-*
-* The `metrics` context-mill skill has one variant per platform (python,
-* nodejs, javascript, kubernetes, other/OTLP); the agent picks the right one
-* at run time by scanning the project's manifest and (when ambiguous) asking
-* the user via `wizard_ask`. Stays flat while a single "add metrics to a
-* project" flow is the only action.
-*/
-const metricsCommand = nativeCommandFactory(metricsConfig);
-//#endregion
-//#region src/programs/dispatch-family.ts
-/**
-* Capture a CLI dispatch error, flush analytics, and exit. The wizard never
-* starts a run from these paths — use flush() (not shutdown()) so we don't
-* fire a "setup wizard finished" event for a parse error that didn't run.
-*/
-async function exitDispatchError(reason, properties, message, code = 1) {
-	analytics.wizardCapture("cli dispatch error", {
-		reason,
-		...properties
-	});
-	try {
-		await analytics.flush();
-	} catch {}
-	process.stderr.write(message);
-	emitWizardError({
-		code: ErrorCodes.CliBadArgs,
-		message: reason
-	});
-	return process.exit(code);
-}
-/**
-* Family commands (`wizard audit`, `wizard migrate`, ...) resolve their
-* subcommands at runtime against the published `cliEntries` inside
-* `skill-menu.json`. Adding a subcommand is a context-mill release — no
-* wizard release needed.
-*
-* Wizard-native subcommands (programs that aren't backed by a single skill,
-* e.g. `wizard audit web-analytics`) live here in code, dispatched directly
-* without touching the registry. Adding a native is a wizard PR.
-*/
-/** Wizard-native subcommands keyed by family. */
-const NATIVE_HANDLERS = { audit: { "web-analytics": webAnalyticsDoctorConfig } };
-/**
-* Resolve a fetched CliEntry to the ProgramConfig that actually runs it.
-* Most entries run via the generic agent-skill program with the entry's
-* `skillId` injected. The comprehensive `audit all` is the one exception —
-* skillId 'audit' triggers the specialized auditConfig (custom hooks,
-* content blocks, screens).
-*
-* This is the one place that knows a subcommand belongs to `audit`, so the
-* generic skill program picks up the ledger here rather than for every skill.
-*/
-function configForCliEntry(entry, family) {
-	if (entry.skillId === "audit") return auditConfig;
-	return {
-		...agentSkillConfig,
-		skillId: entry.skillId,
-		...family === "audit" ? {
-			auditLedgerFile: AUDIT_CHECKS_FILE,
-			streamWorkflowId: family,
-			allowedTools: [
-				...agentSkillConfig.allowedTools ?? [],
-				WIZARD_TOOL_NAMES.auditSeedChecks,
-				WIZARD_TOOL_NAMES.auditAddChecks,
-				WIZARD_TOOL_NAMES.auditResolveChecks
-			]
-		} : {}
-	};
-}
-function familyEntries(family, entries) {
-	return entries.filter((e) => e.role === "command" && e.parentCommand === family && Boolean(e.command));
-}
-/**
-* Dispatch `wizard <family> <sub>` to the right program.
-*
-* Order:
-*   1. Native handler for (family, sub) — runs immediately, no network.
-*   2. Fetched CliEntry — runs the resolved skill.
-*   3. Unknown — prints the available list and exits non-zero.
-*/
-async function dispatchFamily(family, argv) {
-	const sub = argv.skill?.trim();
-	if (!sub) return exitDispatchError("missing subcommand", { family }, `\n\x1b[1;91m✖ \`wizard ${family}\` requires a subcommand.\x1b[0m\n  Pass one (e.g. \`wizard ${family} <subcommand>\`), or run it in an interactive terminal to pick from a menu.\n\n`);
-	const native = NATIVE_HANDLERS[family]?.[sub];
-	if (native) {
-		dispatchProgram(native, argv);
-		return;
-	}
-	const skillsBaseUrl = getSkillsBaseUrl();
-	const menu = await fetchSkillMenu(skillsBaseUrl);
-	if (!menu) return exitDispatchError("registry unreachable", {
-		family,
-		sub,
-		skillsBaseUrl
-	}, `\n\x1b[1;91m✖ Couldn't reach the skill registry at ${skillsBaseUrl}.\x1b[0m\n  Check your network connection and try again.\n\n`);
-	const entries = menu.cliEntries ?? [];
-	const entry = familyEntries(family, entries).find((e) => e.command === sub);
-	if (entry) {
-		dispatchProgram(configForCliEntry(entry, family), argv);
-		return;
-	}
-	const available = [...Object.keys(NATIVE_HANDLERS[family] ?? {}), ...familyEntries(family, entries).map((e) => e.command)].sort();
-	return exitDispatchError("unknown subcommand", {
-		family,
-		sub,
-		available
-	}, `\n\x1b[1;91m✖ Unknown subcommand "${sub}" under \`${family}\`.\x1b[0m\n` + (available.length ? `  Available: ${available.join(", ")}\n\n` : `  No subcommands published for "${family}" yet.\n\n`));
-}
-/**
-* Build the children list shown in the family's interactive picker.
-* Combines native handlers with skill-backed entries from the live registry.
-* Used by `familyCommandFactory`'s `interactiveDefault`.
-*/
-function buildFamilyPickerChildren(family, entries) {
-	const natives = Object.entries(NATIVE_HANDLERS[family] ?? {}).map(([cmd, program]) => ({
-		name: cmd,
-		description: program.description,
-		handler: (argv) => dispatchProgram(program, argv)
-	}));
-	const live = familyEntries(family, entries).map((entry) => ({
-		name: entry.command,
-		description: entry.description,
-		handler: (argv) => {
-			dispatchFamily(family, {
-				...argv,
-				skill: entry.command
-			});
-		},
-		default: entry.default
-	}));
-	return [...natives, ...live];
-}
-/**
-* The children the family picker shows **today**: only the leaf marked
-* `default` (e.g. `audit events`). Every other subcommand stays runnable
-* directly (`wizard audit <name>`) — they just aren't listed in the picker yet.
-* Falls back to all children when nothing is marked `default`.
-*
-* Temporary: when we're ready to surface the full menu, return `children`
-* unchanged (and delete this note).
-*/
-function pickerChildrenToShow(children) {
-	const defaults = children.filter((c) => c.default);
-	return defaults.length > 0 ? [...defaults] : [...children];
-}
-//#endregion
-//#region src/ui/tui/primitives/picker-filter.ts
-/**
-* Filter-as-you-type matching for PickerMenu. Split out from the component so the
-* ranking is testable on its own — the component only decides when to call it.
-*/
-/**
-* Fuzzy fallback config. `ignoreLocation` because a term matching at the end of a
-* description is as good as one at the start, and Fuse's default distance window
-* would score the late match away. 0.5 is the loosest threshold that still bottoms
-* out: below it `gthb` misses `GitHub` entirely, which is the whole point of having
-* a fuzzy pass; above it the tail grows without surfacing anything new at the top.
-*/
-const FUSE_OPTIONS = {
-	keys: [
-		{
-			name: "label",
-			weight: 3
-		},
-		{
-			name: "hint",
-			weight: 1
-		},
-		{
-			name: "description",
-			weight: 1
-		}
-	],
-	ignoreLocation: true,
-	threshold: .5,
-	includeScore: true
-};
-function buildPickerIndex(options) {
-	return new Fuse(options, FUSE_OPTIONS);
-}
-function haystack(option) {
-	return `${option.label} ${option.hint ?? ""} ${option.description ?? ""}`.toLowerCase();
-}
-/**
-* Rank options against a query, best first, or `null` for an empty query.
-*
-* Two passes, literal before fuzzy. Anything that literally contains every
-* whitespace-separated term wins outright, in the list's own order — that covers how
-* people actually type (`git iss` → `GitHub issues`) and keeps the common case as
-* tight as a plain substring filter, which fuzzy matching on its own is not: Fuse at
-* a threshold loose enough to forgive `gthb` also lets a third of the list through
-* on `replay`.
-*
-* Only when nothing matches literally does Fuse get a turn, so a typo degrades to a
-* ranked guess instead of an empty list. Terms are AND-ed there too, each matched
-* fuzzily on its own — Fuse's bitap pass over the whole query would otherwise need
-* `git iss` to be a near-edit of the text it's matching. Scores are distances (0 is
-* exact) and sum across terms, hence the ascending sort; ties keep the order the
-* first term put them in, since the sort is stable.
-*/
-function rankOptions(fuse, options, query) {
-	const terms = query.toLowerCase().split(/\s+/).filter(Boolean);
-	if (!terms.length) return null;
-	const literal = options.filter((option) => terms.every((term) => haystack(option).includes(term)));
-	if (literal.length) return literal;
-	let surviving = null;
-	for (const term of terms) {
-		const hits = new Map(fuse.search(term).map(({ item, score }) => [item, score ?? 0]));
-		if (surviving === null) {
-			surviving = hits;
-			continue;
-		}
-		for (const [option, total] of surviving) {
-			const score = hits.get(option);
-			if (score === void 0) surviving.delete(option);
-			else surviving.set(option, total + score);
-		}
-	}
-	return [...surviving ?? []].sort(([, a], [, b]) => a - b).map(([option]) => option);
-}
-//#endregion
-//#region src/ui/tui/primitives/PromptLabel.tsx
-/**
-* PromptLabel — Compact inline label for input prompts.
-*
-* Renders: [!] message
-* where [!] is black text on accent background.
-*/
-const PromptLabel = ({ message }) => {
-	if (!message) return null;
-	return /* @__PURE__ */ jsx(Box, { children: /* @__PURE__ */ jsxs(Text, {
-		bold: true,
-		color: Colors.accent,
-		children: [" ", message]
-	}) });
-};
-//#endregion
-//#region src/ui/tui/primitives/ConfirmButton.tsx
-/**
-* ConfirmButton — the confirm row used to submit a selection.
-*
-* Pure render. Multi-select menus (PickerMenu mode="multi", GroupedPickerMenu)
-* append this below their options as the final focusable row: the user toggles
-* options with enter, then arrows down onto this row and presses enter to
-* submit. This replaces the older "enter anywhere submits" pattern, which
-* confused people who expected enter to toggle the focused item.
-*
-* Renders flat, mirroring the option rows — a focus triangle and the label,
-* accent and bold when focused, dimmed otherwise — so it lines up under the
-* options instead of sitting in a separate boxed target.
-*/
-const ConfirmButton = ({ label = "Confirm", focused, count }) => {
-	const text = count && count > 0 ? `${label} (${count})` : label;
-	return /* @__PURE__ */ jsxs(Text, {
-		color: focused ? Colors.accent : void 0,
-		bold: focused,
-		dimColor: !focused,
-		children: [
-			focused ? Icons.triangleSmallRight : " ",
-			" ",
-			text
-		]
-	});
-};
-//#endregion
-//#region src/ui/tui/hooks/useStdoutDimensions.ts
-/**
-* useStdoutDimensions — Returns [columns, rows] and re-renders on terminal resize.
-*
-* Ink's useStdout() does not subscribe to resize events, so layout only updates
-* when something else causes a re-render. This hook listens to the stream's
-* 'resize' event (Node TTY) and updates state so the component re-renders
-* with the new dimensions.
-*/
-function useStdoutDimensions() {
-	const { stdout } = useStdout();
-	const [size, setSize] = useState(() => [stdout.columns || 80, stdout.rows || 24]);
-	useEffect(() => {
-		setSize([stdout.columns || 80, stdout.rows || 24]);
-		const stream = stdout;
-		if (typeof stream.on !== "function") return;
-		const onResize = () => {
-			const c = stdout.columns || 80;
-			const r = stdout.rows || 24;
-			if (c > 0 && r > 0) setSize([c, r]);
-		};
-		stream.on("resize", onResize);
-		return () => {
-			stream.off?.("resize", onResize);
-		};
-	}, [stdout]);
-	return size;
-}
-//#endregion
-//#region src/ui/tui/hooks/keyboard-hints-utils.ts
-/** Default priorities by key type. */
-const DEFAULT_PRIORITY = {
-	["upArrow"]: 0,
-	["downArrow"]: 0,
-	["leftArrow"]: 1,
-	["rightArrow"]: 1,
-	["space"]: 10,
-	["printable"]: 12,
-	["backspace"]: 13,
-	["escape"]: 20,
-	["return"]: 21
-};
-/** Get the default display priority for a key match. */
-function getDefaultPriority(match) {
-	return DEFAULT_PRIORITY[Array.isArray(match) ? match[0] : match] ?? 15;
-}
-/** Check if a KeyMatchOrChar matches the given input string and key flags. */
-function matchesKey(m, input, key) {
-	switch (m) {
-		case "upArrow": return !!key.upArrow;
-		case "downArrow": return !!key.downArrow;
-		case "leftArrow": return !!key.leftArrow;
-		case "rightArrow": return !!key.rightArrow;
-		case "return": return !!key.return;
-		case "escape": return !!key.escape;
-		case "space": return input === " ";
-		case "backspace": return !!key.backspace || !!key.delete;
-		case "printable": return input.length === 1 && input >= " " && input !== "" && Object.entries(key).every(([flag, on]) => !on || flag === "shift");
-		default: return input === m;
-	}
-}
-/** Serialize hints for comparison. */
-function hintsKey(hints) {
-	return hints.map((h) => `${h.label}:${h.action}`).join("|");
-}
-/** Deduplicate hints by label+action and sort by priority. */
-function deduplicateAndSort(hints) {
-	const seen = /* @__PURE__ */ new Set();
-	const deduped = [];
-	for (const hint of hints) {
-		const k = `${hint.label}:${hint.action}`;
-		if (!seen.has(k)) {
-			seen.add(k);
-			deduped.push(hint);
-		}
-	}
-	deduped.sort((a, b) => a.priority - b.priority);
-	return deduped;
-}
-//#endregion
-//#region src/ui/tui/hooks/useKeyboardHints.tsx
-/**
-* KeyboardHintsProvider — Context for collecting and displaying keyboard hints.
-*
-* Input components register their hints via useKeyBindings. The provider
-* flattens, deduplicates, and sorts them. The hints bar stays visible for as
-* long as a screen has registered hints — it never auto-dismisses.
-*/
-const KeyboardHintsContext = createContext({
-	register: () => void 0,
-	unregister: () => void 0,
-	hints: []
-});
-const useKeyboardHintsContext = () => useContext(KeyboardHintsContext);
-const KeyboardHintsProvider = ({ children }) => {
-	const registrationsRef = useRef(/* @__PURE__ */ new Map());
-	const [hints, setHints] = useState([]);
-	const prevHintsKeyRef = useRef("");
-	const recompute = useCallback(() => {
-		const all = [];
-		for (const h of registrationsRef.current.values()) all.push(...h);
-		const deduped = deduplicateAndSort(all);
-		const newKey = hintsKey(deduped);
-		if (newKey !== prevHintsKeyRef.current) {
-			prevHintsKeyRef.current = newKey;
-			setHints(deduped);
-		}
-	}, []);
-	const register = useCallback((id, h) => {
-		registrationsRef.current.set(id, h);
-		recompute();
-	}, [recompute]);
-	const unregister = useCallback((id) => {
-		registrationsRef.current.delete(id);
-		recompute();
-	}, [recompute]);
-	return /* @__PURE__ */ jsx(KeyboardHintsContext.Provider, {
-		value: {
-			register,
-			unregister,
-			hints
-		},
-		children
-	});
-};
-//#endregion
-//#region src/ui/tui/hooks/useKeyBindings.ts
-/**
-* useKeyBindings — Declarative keyboard input + automatic hint registration.
-*
-* Replaces raw `useInput` in input components. Define bindings as data;
-* the hook wires up the Ink input handler AND registers hints in the
-* KeyboardHintsProvider. One source of truth for keys and their labels.
-*/
-/**
-* Declarative key bindings hook. Replaces `useInput` in input components.
-* Registers hints automatically with the KeyboardHintsProvider.
-*
-* @param id Unique identifier for this component's hints registration
-* @param bindings Array of key binding definitions
-*/
-function useKeyBindings(id, bindings) {
-	const ctx = useKeyboardHintsContext();
-	const hintsRef = useRef("");
-	const hints = bindings.map((b) => ({
-		label: b.label,
-		action: b.action,
-		priority: b.priority ?? getDefaultPriority(b.match)
-	}));
-	const serialized = hints.map((h) => `${h.label}:${h.action}:${h.priority}`).join("|");
-	useEffect(() => {
-		if (serialized !== hintsRef.current) {
-			hintsRef.current = serialized;
-			ctx.register(id, hints);
-		}
-		return () => ctx.unregister(id);
-	}, [id, serialized]);
-	useInput((input, key) => {
-		for (const binding of bindings) if ((Array.isArray(binding.match) ? binding.match : [binding.match]).some((m) => matchesKey(m, input, key))) {
-			binding.handler(input, key);
-			return;
-		}
-	});
-}
-//#endregion
-//#region src/ui/tui/primitives/PickerMenu.tsx
-/**
-* PickerMenu — Single and multi select.
-* Single mode: custom renderer with small triangle indicator; enter selects.
-* Multi mode: checkbox glyphs toggled with enter, plus a focusable
-*   Confirm button below the options. The cursor moves onto the button and
-*   enter submits — see MultiPickerMenu for the rationale.
-*
-* Key bindings are declared via useKeyBindings, which auto-registers
-* hints in the KeyboardHintsBar.
-*/
-/**
-* Step through a column's options in `dir`, wrapping, until an enabled
-* option is found. Returns `from` unchanged if the column is entirely
-* disabled.
-*/
-function stepEnabled(options, rows, from, dir) {
-	const colStart = Math.floor(from / rows) * rows;
-	const colLen = Math.min(rows, options.length - colStart);
-	let row = from % rows;
-	for (let i = 0; i < colLen; i++) {
-		row = (row + dir + colLen) % colLen;
-		const idx = colStart + row;
-		if (!options[idx]?.disabled) return idx;
-	}
-	return from;
-}
-/** First enabled option in [start, end), for initial focus and for entering
-*  a page from the Confirm button. */
-function firstEnabled(options, start = 0, end = options.length) {
-	for (let i = start; i < end; i++) if (!options[i]?.disabled) return i;
-	return start;
-}
-/** Last enabled option in [start, end), for wrapping from the button onto
-*  the bottom of the page. */
-function lastEnabled(options, start = 0, end = options.length) {
-	for (let i = end - 1; i >= start; i--) if (!options[i]?.disabled) return i;
-	return end - 1;
-}
-/**
-* Rows the surrounding screen or overlay consumes above and below a picker —
-* border + padding, title, prompt text, and the keyboard-hints bar. A
-* deliberately generous estimate: overshooting just shows a few fewer rows,
-* whereas undershooting lets a long list overflow the viewport (the bug this
-* windowing guards against). Mirrors GroupedPickerMenu's budgeting.
-*/
-const CHROME_OVERHEAD = 13;
-/**
-* Max visual rows a picker renders regardless of terminal height. Without a
-* ceiling a tall terminal lets a long list fill the whole viewport, which
-* reads as a wall of options; ~12 rows keeps the menu scannable and leaves
-* known breathing room above and below.
-*/
-const MAX_LIST_ROWS = 12;
-/** Extra rows a multi-select adds below its options: marginTop + Confirm button. */
-const CONFIRM_CHROME = 3;
-/** Lists shorter than this never page — tall rows would split 2-3 options into pages of one. */
-const MIN_COUNT_TO_PAGE = 5;
-/** Width the multi-select wraps option descriptions to (matches the render). */
-const DESCRIPTION_WIDTH = 56;
-/**
-* Pages a single-column option list to the terminal height. The visible page
-* is derived from the focused index — no scroll state — so ↑/↓ flip pages as
-* focus crosses a page edge and n/p jump a whole page. Pages hold a fixed
-* option count sized to the tallest row (`rowCost`), trading a sparser page
-* on mixed-height lists for arithmetic-only paging. Engages only for
-* single-column pickers — multi-column grids already compress vertically.
-*/
-function usePickerViewport(count, rowCost, chromeBelow, enabled, focused) {
-	const [, termRows] = useStdoutDimensions();
-	const budget = Math.max(5, Math.min(termRows - CHROME_OVERHEAD - chromeBelow, MAX_LIST_ROWS));
-	const needsScroll = enabled && count >= MIN_COUNT_TO_PAGE && count * rowCost > budget;
-	const perPage = needsScroll ? Math.max(1, Math.floor((budget - 2) / rowCost)) : count;
-	const pageCount = Math.max(1, Math.ceil(count / perPage));
-	const start = Math.floor(focused / perPage) * perPage;
-	const end = Math.min(start + perPage, count);
-	return {
-		needsScroll,
-		start,
-		end,
-		hiddenAbove: start,
-		hiddenBelow: count - end,
-		pageStep: (f, dir) => (Math.floor(f / perPage) + dir + pageCount) % pageCount * perPage
-	};
-}
-/** Lists at least this long get filtering. Shorter ones fit on a page or two,
-*  where a filter row costs more rows than it saves. */
-const FILTER_MIN_OPTIONS = 10;
-const PickerMenu = ({ message, options, mode = "single", centered = false, columns = 1, optionMarginBottom = 0, filterable, onSelect }) => {
-	const canFilter = filterable ?? options.length >= FILTER_MIN_OPTIONS;
-	const [filter, setFilter] = useState("");
-	const fuse = useMemo(() => canFilter ? buildPickerIndex(options) : null, [options, canFilter]);
-	const visible = useMemo(() => fuse ? rankOptions(fuse, options, filter) ?? options : options, [
-		fuse,
-		options,
-		filter
-	]);
-	const [selected, setSelected] = useState(/* @__PURE__ */ new Set());
-	const shared = {
-		message,
-		options: visible,
-		centered,
-		optionMarginBottom,
-		onSelect,
-		filter: canFilter ? filter : null,
-		setFilter,
-		totalCount: options.length
-	};
-	const key = String(filter);
-	if (mode === "multi") return /* @__PURE__ */ jsx(MultiPickerMenu, {
-		...shared,
-		columns,
-		allOptions: options,
-		selected,
-		setSelected
-	}, key);
-	return /* @__PURE__ */ jsx(SinglePickerMenu, {
-		...shared,
-		columns
-	}, key);
-};
-/**
-* Backspace and free typing. Append these last: `Printable` matches almost any
-* key, and bindings resolve in order, so anything specific has to be registered
-* first to keep working. Both share a label/action so the hints bar shows one.
-*/
-function filterBindings(filter, setFilter) {
-	return [{
-		match: "backspace",
-		label: "type",
-		action: "filter",
-		handler: () => setFilter(filter.slice(0, -1))
-	}, {
-		match: "printable",
-		label: "type",
-		action: "filter",
-		handler: (input) => setFilter(filter + input)
-	}];
-}
-/** The filter row above a filterable list: what's typed, and how much it left. */
-const FilterRow = ({ filter, shown, total }) => /* @__PURE__ */ jsx(Box, {
-	paddingLeft: 1,
-	children: /* @__PURE__ */ jsx(Text, {
-		dimColor: true,
-		children: filter ? `Filter: ${filter} (${shown} of ${total})` : `Type to filter ${total} options`
-	})
-});
-/** Custom single-select with triangle indicator and accent highlight. */
-const SinglePickerMenu = ({ message, options, centered = false, columns = 1, optionMarginBottom = 0, filter, setFilter, totalCount, onSelect }) => {
-	const [focused, setFocused] = useState(() => firstEnabled(options));
-	const rows = Math.ceil(options.length / columns);
-	const viewport = usePickerViewport(options.length, 1 + optionMarginBottom, filter !== null ? 1 : 0, columns === 1, focused);
-	useEffect(() => {
-		if (focused >= options.length || options[focused]?.disabled) setFocused(firstEnabled(options));
-	}, [options, focused]);
-	const bindings = [
-		{
-			match: ["upArrow", "downArrow"],
-			label: "↑↓",
-			action: "navigate",
-			handler: (_input, key) => {
-				setFocused(stepEnabled(options, rows, focused, key.upArrow ? -1 : 1));
-			}
-		},
-		...viewport.needsScroll && filter === null ? [{
-			match: ["n", "p"],
-			label: "n/p",
-			action: "page",
-			handler: (input) => {
-				const target = viewport.pageStep(focused, input === "n" ? 1 : -1);
-				setFocused(options[target]?.disabled ? stepEnabled(options, rows, target, 1) : target);
-			}
-		}] : [],
-		{
-			match: "return",
-			label: "enter",
-			action: "select",
-			handler: () => {
-				const selected = options[focused];
-				if (selected && !selected.disabled) onSelect(selected.value);
-			}
-		}
-	];
-	if (columns > 1) bindings.splice(1, 0, {
-		match: ["leftArrow", "rightArrow"],
-		label: "←→",
-		action: "navigate",
-		handler: (_input, key) => {
-			const col = Math.floor(focused / rows);
-			const row = focused % rows;
-			let next = focused;
-			if (key.leftArrow) {
-				const prevCol = col > 0 ? col - 1 : columns - 1;
-				next = Math.min(prevCol * rows + row, options.length - 1);
-			}
-			if (key.rightArrow) {
-				const nextCol = col < columns - 1 ? col + 1 : 0;
-				next = Math.min(nextCol * rows + row, options.length - 1);
-			}
-			if (options[next]?.disabled) next = stepEnabled(options, rows, next, 1);
-			setFocused(next);
-		}
-	});
-	if (filter !== null) bindings.push(...filterBindings(filter, setFilter));
-	useKeyBindings("single-picker", bindings);
-	const columnArrays = [];
-	for (let c = 0; c < columns; c++) columnArrays.push(options.slice(c * rows, c * rows + rows));
-	const align = centered ? "center" : void 0;
-	const renderOption = (opt, flatIdx) => {
-		const isFocused = flatIdx === focused;
-		const base = opt.hint ? `${opt.label} (${opt.hint})` : opt.label;
-		const label = opt.indent ? `  ${base}` : base;
-		return /* @__PURE__ */ jsxs(Box, {
-			gap: 1,
-			marginBottom: optionMarginBottom,
-			children: [
-				/* @__PURE__ */ jsx(Text, {
-					color: isFocused ? Colors.accent : void 0,
-					dimColor: !isFocused,
-					children: isFocused && !opt.header ? Icons.triangleSmallRight : " "
-				}),
-				opt.icon && /* @__PURE__ */ jsx(Text, {
-					color: opt.icon.color,
-					children: opt.icon.glyph
-				}),
-				/* @__PURE__ */ jsx(Text, {
-					color: opt.header ? void 0 : opt.disabled ? Colors.muted : isFocused ? Colors.accent : void 0,
-					bold: opt.header || isFocused && !opt.disabled,
-					dimColor: !opt.header && (!isFocused || opt.disabled),
-					children: label
-				})
-			]
-		}, flatIdx);
-	};
-	return /* @__PURE__ */ jsxs(Box, {
-		flexDirection: "column",
-		alignItems: align,
-		children: [
-			/* @__PURE__ */ jsx(PromptLabel, { message }),
-			filter !== null && /* @__PURE__ */ jsx(FilterRow, {
-				filter,
-				shown: options.length,
-				total: totalCount
-			}),
-			filter && options.length === 0 ? /* @__PURE__ */ jsx(Text, {
-				dimColor: true,
-				children: "No options match. Backspace to widen the filter."
-			}) : viewport.needsScroll ? /* @__PURE__ */ jsxs(Box, {
-				flexDirection: "column",
-				children: [
-					/* @__PURE__ */ jsx(Text, {
-						dimColor: true,
-						children: viewport.hiddenAbove > 0 ? `↑ ${viewport.hiddenAbove} more${filter === null ? " [P] for previous page" : ""}` : " "
-					}),
-					options.slice(viewport.start, viewport.end).map((opt, relIdx) => renderOption(opt, viewport.start + relIdx)),
-					/* @__PURE__ */ jsx(Text, {
-						dimColor: true,
-						children: viewport.hiddenBelow > 0 ? `↓ ${viewport.hiddenBelow} more${filter === null ? " [N] for next page" : ""}` : " "
-					})
-				]
-			}) : /* @__PURE__ */ jsx(Box, {
-				flexDirection: "row",
-				gap: 4,
-				children: columnArrays.map((colOpts, colIdx) => /* @__PURE__ */ jsx(Box, {
-					flexDirection: "column",
-					children: colOpts.map((opt, rowIdx) => renderOption(opt, colIdx * rows + rowIdx))
-				}, colIdx))
-			})
-		]
-	});
-};
-/**
-* Custom multi-select with checkbox glyphs and accent highlight.
-*
-* Interaction model (shared with GroupedPickerMenu):
-*   - \u2191\u2193 move the cursor through the options AND onto the Confirm button,
-*     which lives just past the last option.
-*   - enter toggles the focused option (no more "space toggles but enter
-*     advances" split that tripped people up). Space is kept as an
-*     undocumented alias, but the hints bar advertises only enter.
-*   - moving onto the Confirm button and pressing enter submits the
-*     current selection.
-*/
-const MultiPickerMenu = ({ message, options, centered = false, columns = 1, optionMarginBottom = 0, filter, setFilter, totalCount, allOptions, selected, setSelected, onSelect }) => {
-	const [focused, setFocused] = useState(() => firstEnabled(options));
-	const [onButton, setOnButton] = useState(false);
-	const rows = Math.ceil(options.length / columns);
-	const rowCost = options.reduce((max, opt) => Math.max(max, 1 + optionMarginBottom + (opt.description ? wordWrap(opt.description, DESCRIPTION_WIDTH).length : 0)), 1);
-	const viewport = usePickerViewport(options.length, rowCost, CONFIRM_CHROME + (filter !== null ? 1 : 0), columns === 1, focused);
-	useEffect(() => {
-		if (focused >= options.length || options[focused]?.disabled) setFocused(firstEnabled(options));
-	}, [options, focused]);
-	const confirm = () => {
-		onSelect(allOptions.filter((option) => selected.has(option.label)).map((option) => option.value));
-	};
-	const bindings = [
-		{
-			match: ["upArrow", "downArrow"],
-			label: "↑↓",
-			action: "navigate",
-			handler: (_input, key) => {
-				const dir = key.upArrow ? -1 : 1;
-				if (onButton) {
-					setOnButton(false);
-					setFocused(dir === -1 ? lastEnabled(options, viewport.start, viewport.end) : firstEnabled(options, viewport.start, viewport.end));
-					return;
-				}
-				const col = Math.floor(focused / rows);
-				const row = focused % rows;
-				const colLen = Math.min(rows, options.length - col * rows);
-				let r = row + dir;
-				while (r >= 0 && r < colLen && options[col * rows + r]?.disabled) r += dir;
-				if (r >= 0 && r < colLen) setFocused(col * rows + r);
-				else setOnButton(true);
-			}
-		},
-		...viewport.needsScroll && filter === null ? [{
-			match: ["n", "p"],
-			label: "n/p",
-			action: "page",
-			handler: (input) => {
-				const target = viewport.pageStep(focused, input === "n" ? 1 : -1);
-				setOnButton(false);
-				setFocused(options[target]?.disabled ? stepEnabled(options, rows, target, 1) : target);
-			}
-		}] : [],
-		{
-			match: filter !== null ? "return" : ["space", "return"],
-			label: "enter",
-			action: "select",
-			handler: () => {
-				if (onButton) {
-					confirm();
-					return;
-				}
-				const option = options[focused];
-				if (!option || option.disabled) return;
-				const label = option.label;
-				setSelected((prev) => {
-					const next = new Set(prev);
-					if (next.has(label)) {
-						next.delete(label);
-						return next;
-					}
-					if (option.exclusive) return new Set([label]);
-					for (const picked of next) if (allOptions.find((o) => o.label === picked)?.exclusive) next.delete(picked);
-					next.add(label);
-					return next;
-				});
-			}
-		}
-	];
-	if (columns > 1) bindings.splice(1, 0, {
-		match: ["leftArrow", "rightArrow"],
-		label: "←→",
-		action: "navigate",
-		handler: (_input, key) => {
-			if (onButton) return;
-			const col = Math.floor(focused / rows);
-			const row = focused % rows;
-			let next = focused;
-			if (key.leftArrow) {
-				const prevCol = col > 0 ? col - 1 : columns - 1;
-				next = Math.min(prevCol * rows + row, options.length - 1);
-			}
-			if (key.rightArrow) {
-				const nextCol = col < columns - 1 ? col + 1 : 0;
-				next = Math.min(nextCol * rows + row, options.length - 1);
-			}
-			if (options[next]?.disabled) next = stepEnabled(options, rows, next, 1);
-			setFocused(next);
-		}
-	});
-	if (filter !== null) bindings.push(...filterBindings(filter, setFilter));
-	useKeyBindings("multi-picker", bindings);
-	const columnArrays = [];
-	for (let c = 0; c < columns; c++) columnArrays.push(options.slice(c * rows, c * rows + rows));
-	const renderOption = (opt, flatIdx) => {
-		const isFocused = !onButton && flatIdx === focused;
-		const isSelected = selected.has(opt.label);
-		const label = opt.hint ? `${opt.label} (${opt.hint})` : opt.label;
-		const checkbox = isSelected ? Icons.squareFilled : Icons.squareOpen;
-		return /* @__PURE__ */ jsxs(Box, {
-			flexDirection: "column",
-			marginBottom: optionMarginBottom,
-			children: [/* @__PURE__ */ jsxs(Box, {
-				gap: 1,
-				children: [
-					/* @__PURE__ */ jsx(Text, {
-						color: isSelected ? "white" : Colors.muted,
-						dimColor: !isFocused && !isSelected,
-						children: checkbox
-					}),
-					opt.icon && /* @__PURE__ */ jsx(Text, {
-						color: opt.icon.color,
-						children: opt.icon.glyph
-					}),
-					/* @__PURE__ */ jsx(Text, {
-						color: opt.disabled ? Colors.muted : isFocused ? Colors.accent : void 0,
-						bold: isFocused && !opt.disabled,
-						dimColor: !isFocused || opt.disabled,
-						children: label
-					})
-				]
-			}), opt.description && /* @__PURE__ */ jsx(Box, {
-				marginLeft: 4,
-				width: DESCRIPTION_WIDTH,
-				children: /* @__PURE__ */ jsx(Text, {
-					dimColor: true,
-					wrap: "wrap",
-					children: opt.description
-				})
-			})]
-		}, flatIdx);
-	};
-	return /* @__PURE__ */ jsxs(Box, {
-		flexDirection: "column",
-		alignItems: centered ? "center" : void 0,
-		children: [
-			/* @__PURE__ */ jsx(PromptLabel, { message }),
-			filter !== null && /* @__PURE__ */ jsx(FilterRow, {
-				filter,
-				shown: options.length,
-				total: totalCount
-			}),
-			filter && options.length === 0 && /* @__PURE__ */ jsx(Text, {
-				dimColor: true,
-				children: "No options match. Backspace to widen the filter."
-			}),
-			viewport.needsScroll ? /* @__PURE__ */ jsxs(Box, {
-				flexDirection: "column",
-				marginLeft: centered ? 0 : 2,
-				marginTop: message ? 1 : 0,
-				children: [
-					/* @__PURE__ */ jsx(Text, {
-						dimColor: true,
-						children: viewport.hiddenAbove > 0 ? `↑ ${viewport.hiddenAbove} more${filter === null ? " [P] for previous page" : ""}` : " "
-					}),
-					options.slice(viewport.start, viewport.end).map((opt, relIdx) => renderOption(opt, viewport.start + relIdx)),
-					/* @__PURE__ */ jsx(Text, {
-						dimColor: true,
-						children: viewport.hiddenBelow > 0 ? `↓ ${viewport.hiddenBelow} more${filter === null ? " [N] for next page" : ""}` : " "
-					})
-				]
-			}) : /* @__PURE__ */ jsx(Box, {
-				flexDirection: "row",
-				gap: 4,
-				marginLeft: centered ? 0 : 2,
-				marginTop: message ? 1 : 0,
-				children: columnArrays.map((colOpts, colIdx) => /* @__PURE__ */ jsx(Box, {
-					flexDirection: "column",
-					children: colOpts.map((opt, rowIdx) => renderOption(opt, colIdx * rows + rowIdx))
-				}, colIdx))
-			}),
-			/* @__PURE__ */ jsx(Box, {
-				marginTop: 1,
-				marginLeft: centered ? 0 : 2,
-				children: /* @__PURE__ */ jsx(ConfirmButton, {
-					focused: onButton,
-					count: selected.size
-				})
-			})
-		]
-	});
-};
-//#endregion
-//#region src/commands/factories/family-picker.tsx
-function FamilyPickerApp(props) {
-	return createElement(Box, {
-		flexDirection: "column",
-		paddingX: 1,
-		paddingY: 1
-	}, createElement(Text, {
-		bold: true,
-		color: Colors.accent
-	}, props.parentLabel), createElement(Box, { height: 1 }), createElement(PickerMenu, {
-		message: "Pick a subcommand",
-		options: props.options,
-		optionMarginBottom: 1,
-		onSelect: (value) => {
-			const cmd = Array.isArray(value) ? value[0] : value;
-			if (cmd) props.onSelect(cmd);
-		}
-	}));
-}
-function describe(child) {
-	return commandKeys(child.name)[0] ?? "";
-}
-/**
-* Reorder children so the `default`-marked entry is first, while
-* preserving the relative order of the rest. The picker's initial
-* focus is index 0, so this is what makes "press Enter on
-* `wizard audit`" run the default leaf (today `audit events`).
-*
-* Exported for testability — the ordering logic stays pure and
-* inspectable without mounting Ink.
-*/
-function orderFamilyChildren(children) {
-	const selectable = children.filter((c) => c.handler || c.children?.length);
-	const defaults = selectable.filter((c) => c.default);
-	const rest = selectable.filter((c) => !c.default);
-	return [...defaults, ...rest];
-}
-/**
-* Render the picker. Resolves once the user has selected a child;
-* dispatching the child's handler is the caller's responsibility (so this
-* function stays pure-UI and easy to test by stubbing `render`).
-*/
-function chooseFamilyChild(parentLabel, children) {
-	const ordered = orderFamilyChildren(children);
-	if (ordered.length === 0) return Promise.resolve(null);
-	const options = ordered.map((child) => ({
-		label: describe(child),
-		value: child,
-		hint: child.description
-	}));
-	return new Promise((resolve) => {
-		let app = null;
-		const handleSelect = (cmd) => {
-			app?.unmount();
-			resolve(cmd);
-		};
-		app = render(createElement(FamilyPickerApp, {
-			parentLabel,
-			options,
-			onSelect: handleSelect
-		}));
-	});
-}
-/**
-* Returns an `interactiveDefault` handler for a family parent's no-leaf
-* invocation. Always opens the picker; the `default`-marked child is
-* shown first (pre-highlighted), so a single Enter keystroke runs it.
-*
-* Discovery + consent in one extra keystroke vs. auto-running silently.
-*
-* Wire onto a family parent:
-*   export const auditCommand: Command = {
-*     name: 'audit',
-*     description: '...',
-*     children: [...],
-*     interactiveDefault: createFamilyPickerDefault('audit', auditChildren),
-*   };
-*/
-function createFamilyPickerDefault(parentLabel, children, chooser = chooseFamilyChild) {
-	return async (argv) => {
-		const chosen = await chooser(parentLabel, children);
-		if (!chosen) return;
-		await Promise.resolve(chosen.handler?.(argv));
-	};
-}
-//#endregion
-//#region src/commands/factories/family-command-factory.ts
-/**
-* Build a yargs `Command` for a family parent (`wizard audit`, etc.).
-*
-*   - `wizard <family> <sub>` — `dispatchFamily` resolves `<sub>` against
-*     native handlers first, then the live `cliEntries` from
-*     `skill-menu.json`. Unknown subs error with the available list.
-*   - `wizard <family>` (no positional) — in an interactive terminal, runs the
-*     family's single shown entry directly (today `audit events`, so the user
-*     lands on its intro screen); opens the picker once a family shows more than
-*     one. In non-TTY/CI, falls through to `dispatchFamily`, which prints
-*     "requires a subcommand" rather than running something unprompted.
-*
-* No static yargs children. New skill-backed subcommands appear after a
-* context-mill release without a wizard release. New *native* subcommands
-* (rare) are added by updating `NATIVE_HANDLERS` in `dispatch-family.ts`.
-*/
-function familyCommandFactory({ family, description, optionsFrom }) {
-	const openFamilyEntry = async (argv) => {
-		const toShow = pickerChildrenToShow(buildFamilyPickerChildren(family, (await fetchSkillMenu(getSkillsBaseUrl()))?.cliEntries ?? []));
-		if (toShow.length === 1 && toShow[0]?.handler) {
-			await Promise.resolve(toShow[0].handler(argv));
-			return;
-		}
-		await createFamilyPickerDefault(`wizard ${family}`, toShow)(argv);
-	};
-	return {
-		name: `${family} [skill]`,
-		description,
-		options: mergeCommandOptions(optionsFrom),
-		positionals: { skill: {
-			type: "string",
-			describe: "Subcommand to run (omit to run the default)"
-		} },
-		handler: (argv) => {
-			const sub = argv.skill?.trim();
-			runCommandHandler(() => sub || !process.stdout.isTTY ? dispatchFamily(family, argv) : openFamilyEntry(argv));
-		},
-		interactiveDefault: openFamilyEntry
-	};
-}
-//#endregion
-//#region src/commands/audit.ts
-/**
-* The `wizard audit` family.
-*
-* Subcommands are resolved at runtime: the wizard fetches `cliEntries` from
-* `skill-menu.json` and dispatches based on `parentCommand: 'audit'`. The
-* wizard-native handler for `web-analytics` lives in `NATIVE_HANDLERS` over
-* in `dispatch-family.ts`. `wizard audit` with no positional opens the
-* family picker, which combines native + live entries.
-*
-* Adding a new skill-backed audit subcommand is a context-mill release —
-* no wizard release needed.
-*/
-const auditCommand = familyCommandFactory({
-	family: "audit",
-	description: auditConfig.description,
-	optionsFrom: auditConfig
-});
-//#endregion
-//#region src/commands/doctor.ts
-const doctorCommand = {
-	name: "doctor",
-	description: posthogDoctorConfig.description,
-	options: {
-		...skillProgramOptions,
-		...posthogDoctorConfig.cliOptions ?? {}
-	},
-	handler: (argv) => {
-		const extras = posthogDoctorConfig.mapCliOptions?.(argv) ?? {};
-		const options = {
-			...argv,
-			...extras
-		};
-		if (options.ci) runDoctorCI(options);
-		else runWizard(posthogDoctorConfig, options);
-	}
-};
-const SEVERITY_ORDER = {
-	critical: 0,
-	warning: 1,
-	info: 2
-};
-async function runDoctorCI(options) {
-	setUI(new LoggingUI());
-	const apiKey = options.apiKey ?? readApiKeyFromEnv() ?? void 0;
-	if (!apiKey) {
-		getUI().intro("PostHog Wizard");
-		getUI().log.error("CI mode requires --api-key (personal API key phx_xxx)");
-		emitWizardError({
-			code: ErrorCodes.ArgsMissingApiKey,
-			message: "CI mode requires --api-key (personal API key phx_xxx)"
-		});
-		process.exit(1);
-	}
-	getUI().intro("Welcome to the PostHog setup wizard");
-	getUI().log.info("Running posthog-doctor in CI mode");
-	try {
-		const { getOrAskForProjectData } = await import("./setup-utils-dCViCC6s.js").then((n) => n.r);
-		const { host, accessToken, projectId } = await getOrAskForProjectData({
-			signup: false,
-			ci: true,
-			apiKey,
-			projectId: options.projectId ? Number(options.projectId) : void 0,
-			baseUrl: options.baseUrl
-		});
-		const issues = await fetchHealthIssues(accessToken, host.apiHost, projectId);
-		if (issues.length === 0) {
-			getUI().log.success("No active issues — your project looks healthy.");
-			process.exit(0);
-		}
-		const sorted = [...issues].sort((a, b) => SEVERITY_ORDER[a.severity] - SEVERITY_ORDER[b.severity]);
-		getUI().log.warn(`${issues.length} active issue${issues.length === 1 ? "" : "s"} found:`);
-		for (const issue of sorted) getUI().log.info(`  • [${issue.severity}] ${getKindMeta(issue.kind).title}`);
-		process.exit(1);
-	} catch (error) {
-		const { ApiError } = await import("./api-DGuJTzjr.js").then((n) => n.n);
-		const message = error instanceof ApiError && error.statusCode === 401 ? "Your PostHog API key is invalid or expired." : error instanceof Error ? error.message : String(error);
-		getUI().log.error(`Doctor failed: ${message}`);
-		emitWizardError({
-			code: error instanceof ApiError && error.statusCode === 401 ? ErrorCodes.AuthInvalidOrExpired : ErrorCodes.InternalUnhandled,
-			message
-		});
-		process.exit(1);
-	}
-}
-//#endregion
-//#region src/commands/migrate.ts
-/**
-* `wizard migrate` — flat skill command, Statsig today.
-*
-* Stays flat while there's only one vendor. When a second vendor lands,
-* restructure into a family with `familyCommandFactory` and publish each
-* vendor as a `cliEntries` entry with `parentCommand: 'migrate'` from
-* context-mill. That move is a deliberate breaking change for users
-* (`wizard migrate` stops running Statsig directly), so do it explicitly
-* when the second vendor arrives, not pre-emptively.
-*/
-const migrateCommand = nativeCommandFactory(migrationConfig);
-//#endregion
-//#region src/commands/revenue.ts
-/**
-* `wizard revenue-analytics` — flat skill command, Stripe today.
-*
-* Stays flat while there's only one provider. Restructure into a family
-* if/when a second provider lands.
-*/
-const revenueCommand = nativeCommandFactory(revenueAnalyticsConfig);
-//#endregion
-//#region src/commands/warehouse.ts
-/**
-* `wizard warehouse` — detect and connect a data warehouse source.
-*
-* Mirrors `revenue-analytics`: flat skill command driven by the
-* warehouse-source program.
-*/
-const warehouseCommand = nativeCommandFactory(warehouseSourceConfig);
-//#endregion
-//#region src/commands/self-driving.ts
-const selfDrivingCommand = {
-	name: "self-driving",
-	description: selfDrivingConfig.description,
-	options: {
-		...skillProgramOptions,
-		integrate: {
-			describe: "Integrate the PostHog SDK first, then set up Self-driving — skips the integration prompt and logs you in via OAuth (no \"create an account?\" question). Use when the project isn't set up yet but you already have a PostHog account.",
-			type: "boolean",
-			default: false
-		},
-		...selfDrivingConfig.cliOptions ?? {}
-	},
-	check: (argv) => {
-		if (argv.signup) throw new Error("`self-driving` cannot run with --signup. Just run `wizard self-driving`: when your project has no PostHog, it asks whether you already have an account and offers to create one for you (no flag needed).");
-		if (argv.ci) throw new Error("`self-driving` cannot run in CI mode — it requires interactive steps (GitHub connect, issue-tracker selection, custom-scout approval).");
-		return true;
-	},
-	handler: (argv) => {
-		const extras = selfDrivingConfig.mapCliOptions?.(argv) ?? {};
-		const options = {
-			...argv,
-			...extras
-		};
-		if (options.ci) runWizardCI(selfDrivingConfig, options);
-		else runWizard(selfDrivingConfig, options);
-	}
-};
-//#endregion
-//#region src/commands/slack.ts
-const slackCommand = {
-	name: "slack",
-	description: "Connect PostHog to your Slack",
-	handler: runSlackConnect,
-	children: [{
-		name: "add",
-		description: "Connect PostHog to your Slack",
-		handler: runSlackConnect
-	}]
-};
-function runSlackConnect(argv) {
-	(async () => {
-		const debug = argv.debug;
-		try {
-			const { startTUI } = await import("./start-tui-oCWMgsDP.js");
-			const { buildSession } = await import("./wizard-session-DGaUHOF3.js");
-			const tui = startTUI(VERSION, Program.SlackConnect);
-			tui.store.session = buildSession({
-				debug,
-				baseUrl: argv.baseUrl
-			});
-		} catch (err) {
-			setUI(new LoggingUI());
-			getUI().log.error(`Connecting Slack requires an interactive terminal. ${err instanceof Error ? err.message : String(err)}`);
-			emitWizardError({
-				code: ErrorCodes.CliInteractiveRequired,
-				message: "Connecting Slack requires an interactive terminal."
-			});
-			process.exit(1);
-		}
-	})();
-}
-//#endregion
-//#region src/commands/upload-sourcemaps.ts
-const uploadSourcemapsCommand = {
-	name: [errorTrackingUploadSourceMapsConfig.command, "upload-sourcemaps"],
-	description: errorTrackingUploadSourceMapsConfig.description,
-	options: {
-		...skillProgramOptions,
-		...errorTrackingUploadSourceMapsConfig.cliOptions ?? {}
-	},
-	handler: (argv) => {
-		const extras = errorTrackingUploadSourceMapsConfig.mapCliOptions?.(argv) ?? {};
-		const options = {
-			...argv,
-			...extras
-		};
-		if (options.ci) runWizardCI(errorTrackingUploadSourceMapsConfig, options);
-		else runWizard(errorTrackingUploadSourceMapsConfig, options);
-	}
-};
-//#endregion
-//#region src/commands/error-tracking.ts
-/**
-* `wizard error-tracking` — flat skill command, set up error tracking today.
-*
-* Wires up exception capture and — where the platform needs it — source-map /
-* debug-symbol upload. Runs the `error-tracking` orchestrator flow, which
-* reuses the integration-v2 install/init mini-agents when the repo has no
-* PostHog integration yet, so it works on uninstrumented projects too.
-*/
-const errorTrackingCommand = nativeCommandFactory(errorTrackingConfig);
-//#endregion
-//#region src/commands/basic-integration/skill.ts
-/** Run an arbitrary context-mill skill by id (`wizard skill <id>`, headless with `--ci`). */
-function runSkillMode(argv) {
-	const skillId = argv.skill;
-	const config = createSkillProgram({
-		skillId,
-		command: "skill",
-		id: "agent-skill",
-		description: `Run skill: ${skillId}`,
-		integrationLabel: skillId,
-		successMessage: `${skillId} completed!`,
-		reportFile: `posthog-${skillId}-report.md`,
-		docsUrl: POSTHOG_DOCS_URL,
-		spinnerMessage: `Running ${skillId}...`,
-		estimatedDurationMinutes: 5
-	});
-	const options = {
-		...argv,
-		skillId
-	};
-	if (argv.ci) runWizardCI(config, options);
-	else runWizard(config, options);
-}
-//#endregion
-//#region src/commands/skill.ts
-/** Read the `<skill-name>` positional (yargs camelCases the hyphenated key). */
-function readSkillName(argv) {
-	return String(argv.skillName ?? argv["skill-name"] ?? "").trim();
-}
-const BROWSABLE_ROLES = new Set(["command", "skill"]);
-/**
-* Reject an unknown skill id before the wizard authenticates.
-*
-* Without this, `readSkillName` accepts any non-empty string and the name is
-* only validated far downstream, when the agent tries to download it — after
-* the user has already logged in. A typo then costs a full auth round-trip
-* (the concern raised in review). We resolve against the same set
-* `downloadSkill` uses (`categories` flattened by `id`), so this never
-* false-rejects a skill the download would have accepted.
-*
-* If the registry is unreachable we stay silent and defer to the download
-* step's own `menu-fetch-failed` handling, rather than adding a second network
-* dependency that could block an otherwise-valid run.
-*/
-async function assertSkillExists(skillName) {
-	const skillsBaseUrl = getSkillsBaseUrl();
-	const menu = await fetchSkillMenu(skillsBaseUrl);
-	if (!menu) return;
-	if (Object.values(menu.categories).flat().some((s) => s.id === skillName)) return;
-	analytics.wizardCapture("cli dispatch error", {
-		reason: "unknown skill",
-		family: "skill",
-		sub: skillName,
-		skillsBaseUrl
-	});
-	try {
-		await analytics.flush();
-	} catch {}
-	throw new Error(`Unknown skill "${skillName}". Run \`wizard skill list\` to see available skills.`);
-}
-function formatEntry(entry) {
-	const path = entry.parentCommand ? `wizard ${entry.parentCommand} ${entry.command}` : entry.command ? `wizard ${entry.command}` : `wizard skill ${entry.skillId}`;
-	return `  ${entry.skillId.padEnd(38)}  ${path.padEnd(36)}  ${entry.description}`;
-}
-/**
-* `wizard skill <skill-name>` — run a single context-mill skill by id.
-* `wizard skill list`         — list every browsable skill in the catalog.
-*
-* Replaces the old `--skill=<id>` flag on the default command. The skill id
-* is fetched from context-mill's release at runtime (same mechanism the flag
-* used), so any published skill id works. Pass `--ci` to run headlessly.
-*/
-const skillCommand = {
-	name: "skill <skill-name>",
-	description: "Run a specific context-mill skill by name (or `list` them)",
-	children: [{
-		name: "list",
-		description: "List every browsable skill in the catalog",
-		handler: () => {
-			runCommandHandler(async () => {
-				const skillsBaseUrl = getSkillsBaseUrl();
-				const menu = await fetchSkillMenu(skillsBaseUrl);
-				if (!menu) {
-					analytics.wizardCapture("cli dispatch error", {
-						reason: "registry unreachable",
-						family: "skill",
-						sub: "list",
-						skillsBaseUrl
-					});
-					try {
-						await analytics.flush();
-					} catch {}
-					process.stderr.write("\n\x1B[1;91m✖ Couldn't reach the skill registry.\x1B[0m\n  Check your network connection and try again.\n\n");
-					emitWizardError({
-						code: ErrorCodes.SkillMenuFetchFailed,
-						message: "Couldn't reach the skill registry."
-					});
-					process.exit(1);
-				}
-				const entries = (menu.cliEntries ?? []).filter((e) => BROWSABLE_ROLES.has(e.role));
-				if (entries.length === 0) {
-					process.stdout.write("No skills found.\n");
-					return;
-				}
-				process.stdout.write(`${entries.length} skill${entries.length === 1 ? "" : "s"}:\n`);
-				process.stdout.write(`  ${"SKILL ID".padEnd(38)}  ${"COMMAND".padEnd(36)}  DESCRIPTION\n`);
-				for (const entry of entries) process.stdout.write(`${formatEntry(entry)}\n`);
-			});
-		}
-	}],
-	options: { ...skillProgramOptions },
-	positionals: { "skill-name": {
-		type: "string",
-		describe: "Skill id to run (e.g. audit-events), or `list`"
-	} },
-	check: (argv) => {
-		if (argv.skillName == null && argv["skill-name"] == null) return true;
-		if (!readSkillName(argv)) throw new Error("skill needs a skill name, e.g. `wizard skill audit-events`");
-		return true;
-	},
-	handler: (argv) => {
-		runCommandHandler(async () => {
-			const skillName = readSkillName(argv);
-			await assertSkillExists(skillName);
-			runSkillMode({
-				...argv,
-				skill: skillName
-			});
-		});
-	}
-};
-//#endregion
-//#region src/commands/cli/add.ts
-const cliAddCommand = {
-	name: "add",
-	description: "Install or update PostHog CLI and add steering instructions to your coding agent's global instructions file",
-	options: {
-		agent: {
-			describe: "Agent to install the instructions for",
-			choices: CLI_STEERING_TARGETS.map((target) => target.id),
-			type: "string"
-		},
-		path: {
-			describe: "Write to an explicit instructions file instead of a detected agent",
-			type: "string"
-		},
-		all: {
-			default: false,
-			describe: "Install for every detected agent without prompting",
-			type: "boolean"
-		}
-	},
-	examples: [
-		["wizard cli add", "Detect your coding agents and pick one"],
-		["wizard cli add --agent claude-code", "Install for Claude Code (~/.claude/CLAUDE.md)"],
-		["wizard cli add --all", "Install for every detected agent"],
-		["wizard cli add --path ./AGENTS.md", "Install into a specific instructions file"]
-	],
-	check: (argv) => {
-		if (argv.all && (argv.agent || argv.path)) throw new Error("--all cannot be combined with --agent or --path");
-		return true;
-	},
-	handler: (argv) => {
-		runCliAdd(argv);
-	}
-};
-async function runCliAdd(argv) {
-	setUI(new LoggingUI());
-	const ui = getUI();
-	ui.intro("PostHog CLI setup");
-	const files = await resolveTargetFiles(argv);
-	if (files.length === 0) {
-		process.exit(1);
-		return;
-	}
-	ui.log.info("Installing or updating PostHog CLI...");
-	const cliInstallResult = installOrUpdatePostHogCli();
-	if (!cliInstallResult.success) {
-		ui.log.error(`Failed to install or update PostHog CLI: ${cliInstallResult.error ?? ""}`);
-		analytics.wizardCapture("cli steering installed", {
-			files: files.length,
-			failures: files.length,
-			cli_install_failed: true,
-			agent: typeof argv.agent === "string" ? argv.agent : void 0
-		});
-		process.exit(1);
-		return;
-	}
-	ui.log.success("Installed or updated PostHog CLI.");
-	let failures = 0;
-	for (const file of files) {
-		const result = installSteeringSnippet(file);
-		if (result.success) ui.log.success(`Installed PostHog steering instructions in ${file}`);
-		else {
-			failures += 1;
-			ui.log.error(`Failed to update ${file}: ${result.error ?? ""}`);
-		}
-	}
-	analytics.wizardCapture("cli steering installed", {
-		files: files.length,
-		failures,
-		agent: typeof argv.agent === "string" ? argv.agent : void 0
-	});
-	if (failures > 0) {
-		process.exit(1);
-		return;
-	}
-	ui.outro("Done. PostHog CLI is installed and your agent will now use `posthog-cli api` for PostHog tasks.");
-	process.exit(0);
-}
-/** Resolve which instruction files to write, from flags, detection, or a prompt. */
-async function resolveTargetFiles(argv) {
-	const ui = getUI();
-	if (typeof argv.path === "string" && argv.path.trim()) return [path$1.resolve(argv.path.trim())];
-	if (typeof argv.agent === "string") {
-		const target = findTarget(argv.agent);
-		if (!target) {
-			ui.log.error(`Unsupported agent: ${argv.agent}`);
-			return [];
-		}
-		return [target.instructionsPath()];
-	}
-	const detected = detectTargets();
-	if (detected.length === 0) {
-		ui.log.error("No supported coding agents detected. Pass --agent <id> or --path <file> to choose a target.");
-		ui.log.info(`Supported agents: ${CLI_STEERING_TARGETS.map((t) => t.id).join(", ")}`);
-		return [];
-	}
-	if (argv.all === true) {
-		ui.log.info(`Installing for all detected agents: ${detected.map((t) => t.name).join(", ")}`);
-		return detected.map((target) => target.instructionsPath());
-	}
-	if (detected.length === 1) {
-		ui.log.info(`Detected ${detected[0].name} (${detected[0].instructionsPath()})`);
-		return [detected[0].instructionsPath()];
-	}
-	if (!process.stdin.isTTY || !process.stdout.isTTY) {
-		ui.log.info(`Installing for all detected agents: ${detected.map((t) => t.name).join(", ")}`);
-		return detected.map((target) => target.instructionsPath());
-	}
-	return (await promptForTargets(detected)).map((target) => target.instructionsPath());
-}
-/** Minimal numbered selection — this command is intentionally not a TUI flow. */
-async function promptForTargets(detected) {
-	const ui = getUI();
-	ui.log.info("Which coding agent are you using?");
-	detected.forEach((target, index) => {
-		ui.log.info(`  ${index + 1}) ${target.name} (${target.instructionsPath()})`);
-	});
-	ui.log.info(`  ${detected.length + 1}) All of the above`);
-	const rl = readline.createInterface({
-		input: process.stdin,
-		output: process.stdout
-	});
-	try {
-		for (;;) {
-			const answer = (await rl.question(`Select 1-${detected.length + 1}: `)).trim();
-			const choice = Number(answer);
-			if (Number.isInteger(choice) && choice >= 1 && choice <= detected.length) return [detected[choice - 1]];
-			if (choice === detected.length + 1) return detected;
-			ui.log.warn(`Enter a number between 1 and ${detected.length + 1}.`);
-		}
-	} finally {
-		rl.close();
-	}
-}
-//#endregion
-//#region src/commands/cli/index.ts
-const cliCommand = {
-	name: "cli",
-	description: "PostHog CLI agent integration commands",
-	children: [cliAddCommand]
-};
-//#endregion
+import { n as ErrorCodes, t as emitWizardError } from "./emit-BSetXzDV.js";
+import { satisfies } from "semver";
 //#region bin.ts
 const NODE_VERSION_RANGE = ">=22.22.0";
-setGlobalDispatcher(new Agent({ allowH2: false }));
 if (!satisfies(process.version, NODE_VERSION_RANGE)) {
 	console.log([
 		`The PostHog wizard needs a newer version of Node.js to run.`,
@@ -2959,7 +13,7 @@ if (!satisfies(process.version, NODE_VERSION_RANGE)) {
 		`To update Node.js:`,
 		``,
 		`  Download the latest version from https://nodejs.org/en/download`,
-		`  Or, if you use nvm, run: nvm install 22 && nvm use 22`,
+		`  Or, if you use nvm, run: nvm install 24 && nvm use 24`,
 		``,
 		`Then run the wizard again. Stuck? Email wizard@posthog.com and we'll help.`
 	].join("\n"));
@@ -2969,17 +23,8 @@ if (!satisfies(process.version, NODE_VERSION_RANGE)) {
 	});
 	process.exit(1);
 }
-recoverOrphanedSettingsBackups(resolveInstallDir());
-function resolveInstallDir() {
-	const args = process.argv.slice(2);
-	const flagIndex = args.indexOf("--install-dir");
-	if (flagIndex !== -1 && args[flagIndex + 1]) return args[flagIndex + 1];
-	const inline = args.find((a) => a.startsWith("--install-dir="));
-	if (inline) return inline.slice(14);
-	return process.env.POSTHOG_WIZARD_INSTALL_DIR ?? process.cwd();
-}
-Wizard.use(basicIntegrationCommand).use(mcpCommand).use(mcpAnalyticsCommand).use(replayVisionCommand).use(aiObservabilityCommand).use(metricsCommand).use(cliCommand).use(auditCommand).use(doctorCommand).use(migrateCommand).use(revenueCommand).use(warehouseCommand).use(selfDrivingCommand).use(slackCommand).use(uploadSourcemapsCommand).use(errorTrackingCommand).use(skillCommand).init();
+await import("./main-CgKxbwMP.js");
 //#endregion
-export { useStdoutDimensions as a, runWizardHeadless as c, runWizard as d, useKeyboardHintsContext as i, runWizardCI as l, useKeyBindings as n, ConfirmButton as o, KeyboardHintsProvider as r, PromptLabel as s, PickerMenu as t, API_KEY_HINT as u };
+export {};
 
 //# sourceMappingURL=bin.js.map