@posthog/wizard 2.79.0 → 2.80.0

package/dist/{steps-gx0Pq4I4.js → steps-Hc28zVc_.js}

@@ -1,14 +1,14 @@
-import { n as analytics } from "./analytics-VRYdebXW.js";
-import { t as withProgress } from "./telemetry-Bpv-Mh5B.js";
-import "./bounded-fs-Cpn129A4.js";
-import "./setup-utils-dCViCC6s.js";
-import { t as getUI } from "./ui-CGXtC7Vn.js";
-import "./add-mcp-server-to-clients-amlJWW7W.js";
+import { n as analytics } from "./analytics-B6q5PN7a.js";
+import { t as withProgress } from "./telemetry-BNKsDxNS.js";
+import "./bounded-fs-CC_NDtoP.js";
+import "./setup-utils-ChXXTi1m.js";
+import { t as getUI } from "./ui-tPNpM6vj.js";
+import "./install-Bk5TNk27.js";
 import * as fs$1 from "fs";
 import * as path$1 from "path";
 import "path";
 import { execSync as execSync$1, spawn as spawn$1, spawnSync as spawnSync$1 } from "child_process";
-//#region src/steps/upload-environment-variables/EnvironmentProvider.ts
+//#region src/programs/posthog-integration/upload-environment-variables/EnvironmentProvider.ts
 var EnvironmentProvider = class {
 	options;
 	name;
@@ -17,7 +17,7 @@ var EnvironmentProvider = class {
 	}
 };
 //#endregion
-//#region src/steps/upload-environment-variables/providers/vercel.ts
+//#region src/programs/posthog-integration/upload-environment-variables/providers/vercel.ts
 var VercelEnvironmentProvider = class extends EnvironmentProvider {
 	name = "Vercel";
 	environments = [
@@ -116,7 +116,7 @@ var VercelEnvironmentProvider = class extends EnvironmentProvider {
 	}
 };
 //#endregion
-//#region src/steps/upload-environment-variables/index.ts
+//#region src/programs/posthog-integration/upload-environment-variables/upload-step.ts
 const uploadEnvironmentVariablesStep = async (envVars, { integration, session }) => {
 	const providers = [new VercelEnvironmentProvider({ installDir: session.installDir })];
 	let provider = null;
@@ -144,4 +144,4 @@ const uploadEnvironmentVariablesStep = async (envVars, { integration, session })
 //#endregion
 export { uploadEnvironmentVariablesStep };
 
-//# sourceMappingURL=steps-gx0Pq4I4.js.map
+//# sourceMappingURL=steps-Hc28zVc_.js.map

package/dist/steps-Hc28zVc_.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps-Hc28zVc_.js","names":["path","fs","spawnSync","spawn"],"sources":["../src/programs/posthog-integration/upload-environment-variables/EnvironmentProvider.ts","../src/programs/posthog-integration/upload-environment-variables/providers/vercel.ts","../src/programs/posthog-integration/upload-environment-variables/upload-step.ts"],"sourcesContent":["export abstract class EnvironmentProvider {\n  protected options: { installDir: string };\n\n  name: string;\n\n  constructor(options: { installDir: string }) {\n    this.options = options;\n  }\n\n  abstract detect(): Promise<boolean>;\n\n  abstract uploadEnvVars(\n    vars: Record<string, string>,\n  ): Promise<Record<string, boolean>>;\n}\n","import { execSync, spawn, spawnSync } from 'child_process';\nimport { EnvironmentProvider } from '@programs/posthog-integration/upload-environment-variables/EnvironmentProvider';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { getUI } from '@ui';\nimport { analytics } from '@utils/analytics';\n\nexport class VercelEnvironmentProvider extends EnvironmentProvider {\n  name = 'Vercel';\n  environments = ['production', 'preview', 'development'];\n\n  constructor(options: { installDir: string }) {\n    super(options);\n  }\n\n  // eslint-disable-next-line @typescript-eslint/require-await\n  async detect(): Promise<boolean> {\n    const vercelDetected =\n      this.hasVercelCli() && this.isProjectLinked() && this.isAuthenticated();\n\n    analytics.setTag('vercel-detected', vercelDetected);\n\n    return vercelDetected;\n  }\n\n  hasDotVercelDir(): boolean {\n    const dotVercelDir = path.join(this.options.installDir, '.vercel');\n    return fs.existsSync(dotVercelDir);\n  }\n\n  hasVercelCli(): boolean {\n    try {\n      execSync('vercel --version', { stdio: 'ignore' });\n      analytics.setTag('vercel-cli-installed', true);\n      return true;\n    } catch {\n      analytics.setTag('vercel-cli-installed', false);\n      return false;\n    }\n  }\n\n  isProjectLinked(): boolean {\n    const isProjectLinked = fs.existsSync(\n      path.join(this.options.installDir, '.vercel', 'project.json'),\n    );\n\n    analytics.setTag('vercel-project-linked', isProjectLinked);\n\n    return isProjectLinked;\n  }\n\n  isAuthenticated(): boolean {\n    const result = spawnSync('vercel', ['whoami'], {\n      encoding: 'utf-8',\n      stdio: ['pipe', 'pipe', 'pipe'], // suppress prompts\n      env: {\n        ...process.env,\n        FORCE_COLOR: '0', // avoid ANSI formatting\n        CI: '1', // hint to CLI that it's a non-interactive env\n      },\n    });\n\n    const output = (\n      String(result.stdout) + String(result.stderr)\n    ).toLowerCase();\n\n    if (\n      output.includes('log in to vercel') ||\n      output.includes('vercel login') ||\n      result.status !== 0\n    ) {\n      analytics.setTag('vercel-authenticated', false);\n      return false;\n    }\n\n    analytics.setTag('vercel-authenticated', true);\n\n    return true;\n  }\n\n  async uploadEnvironmentVariable(\n    key: string,\n    value: string,\n    environment: string,\n  ): Promise<void> {\n    await new Promise<void>((resolve, reject) => {\n      const proc = spawn('vercel', ['env', 'add', key, environment], {\n        stdio: ['pipe', 'pipe', 'pipe'],\n      });\n\n      let stderr = '';\n      proc.stderr.on('data', (data) => {\n        stderr += data.toString();\n      });\n\n      proc.stdin.write(value);\n      proc.stdin.end();\n\n      proc.on('close', (code) => {\n        if (\n          stderr.includes('already exists') ||\n          stderr.includes('already been added') ||\n          stderr.includes('vercel env rm')\n        ) {\n          reject(\n            new Error(\n              `❌ Environment variable ${key} already exists in ${this.name}. Please upload it manually.`,\n            ),\n          );\n        } else if (code === 0) {\n          resolve();\n        } else {\n          reject(\n            new Error(\n              `❌ Failed to upload environment variable ${key} to ${this.name}. Please upload it manually.`,\n            ),\n          );\n        }\n      });\n    });\n  }\n\n  async uploadEnvVars(\n    vars: Record<string, string>,\n  ): Promise<Record<string, boolean>> {\n    const results: Record<string, boolean> = {};\n\n    for (const [key, value] of Object.entries(vars)) {\n      const spinner = getUI().spinner();\n\n      spinner.start(`Uploading ${key} to ${this.name}...`);\n      await Promise.all(\n        this.environments.map((environment) =>\n          this.uploadEnvironmentVariable(key, value, environment),\n        ),\n      )\n        .then(() => {\n          spinner.stop(`✅ Uploaded ${key} to ${this.name}`);\n          results[key] = true;\n        })\n        .catch((err) => {\n          spinner.stop(\n            err instanceof Error\n              ? err.message\n              : `❌ Failed to upload environment variables to ${this.name}. Please upload it manually.`,\n          );\n          results[key] = false;\n        });\n    }\n\n    return results;\n  }\n}\n","import type { Integration } from '@shared/constants';\nimport { withProgress } from '@utils/telemetry';\nimport { analytics } from '@utils/analytics';\nimport { getUI } from '@ui';\nimport type { WizardSession } from '@programs/session/wizard-session';\nimport { EnvironmentProvider } from './EnvironmentProvider';\nimport { VercelEnvironmentProvider } from './providers/vercel';\n\nexport const uploadEnvironmentVariablesStep = async (\n  envVars: Record<string, string>,\n  {\n    integration,\n    session,\n  }: {\n    integration: Integration;\n    session: WizardSession;\n  },\n): Promise<string[]> => {\n  const providers: EnvironmentProvider[] = [\n    new VercelEnvironmentProvider({ installDir: session.installDir }),\n  ];\n\n  let provider: EnvironmentProvider | null = null;\n\n  for (const p of providers) {\n    if (await p.detect()) {\n      provider = p;\n      break;\n    }\n  }\n\n  if (!provider) {\n    analytics.wizardCapture('env upload skipped', {\n      reason: 'no environment provider found',\n      integration,\n    });\n    return [];\n  }\n\n  // Auto-accept — the agent already wrote env vars via MCP tools\n  getUI().log.info(`Uploading environment variables to ${provider.name}...`);\n\n  const results = await withProgress(\n    'uploading environment variables',\n    async () => {\n      return await provider.uploadEnvVars(envVars);\n    },\n  );\n\n  analytics.wizardCapture('env uploaded', {\n    provider: provider.name,\n    integration,\n  });\n\n  return Object.keys(results).filter((key) => results[key]);\n};\n"],"mappings":";;;;;;;;;;;AAAA,IAAsB,sBAAtB,MAA0C;CACxC;CAEA;CAEA,YAAY,SAAiC;AAC3C,OAAK,UAAU;;;;;ACCnB,IAAa,4BAAb,cAA+C,oBAAoB;CACjE,OAAO;CACP,eAAe;EAAC;EAAc;EAAW;EAAc;CAEvD,YAAY,SAAiC;AAC3C,QAAM,QAAQ;;CAIhB,MAAM,SAA2B;EAC/B,MAAM,iBACJ,KAAK,cAAc,IAAI,KAAK,iBAAiB,IAAI,KAAK,iBAAiB;AAEzE,YAAU,OAAO,mBAAmB,eAAe;AAEnD,SAAO;;CAGT,kBAA2B;EACzB,MAAM,eAAeA,OAAK,KAAK,KAAK,QAAQ,YAAY,UAAU;AAClE,SAAOC,KAAG,WAAW,aAAa;;CAGpC,eAAwB;AACtB,MAAI;AACF,cAAS,oBAAoB,EAAE,OAAO,UAAU,CAAC;AACjD,aAAU,OAAO,wBAAwB,KAAK;AAC9C,UAAO;UACD;AACN,aAAU,OAAO,wBAAwB,MAAM;AAC/C,UAAO;;;CAIX,kBAA2B;EACzB,MAAM,kBAAkBA,KAAG,WACzBD,OAAK,KAAK,KAAK,QAAQ,YAAY,WAAW,eAAe,CAC9D;AAED,YAAU,OAAO,yBAAyB,gBAAgB;AAE1D,SAAO;;CAGT,kBAA2B;EACzB,MAAM,SAASE,YAAU,UAAU,CAAC,SAAS,EAAE;GAC7C,UAAU;GACV,OAAO;IAAC;IAAQ;IAAQ;IAAO;GAC/B,KAAK;IACH,GAAG,QAAQ;IACX,aAAa;IACb,IAAI;IACL;GACF,CAAC;EAEF,MAAM,UACJ,OAAO,OAAO,OAAO,GAAG,OAAO,OAAO,OAAO,EAC7C,aAAa;AAEf,MACE,OAAO,SAAS,mBAAmB,IACnC,OAAO,SAAS,eAAe,IAC/B,OAAO,WAAW,GAClB;AACA,aAAU,OAAO,wBAAwB,MAAM;AAC/C,UAAO;;AAGT,YAAU,OAAO,wBAAwB,KAAK;AAE9C,SAAO;;CAGT,MAAM,0BACJ,KACA,OACA,aACe;AACf,QAAM,IAAI,SAAe,SAAS,WAAW;GAC3C,MAAM,OAAOC,QAAM,UAAU;IAAC;IAAO;IAAO;IAAK;IAAY,EAAE,EAC7D,OAAO;IAAC;IAAQ;IAAQ;IAAO,EAChC,CAAC;GAEF,IAAI,SAAS;AACb,QAAK,OAAO,GAAG,SAAS,SAAS;AAC/B,cAAU,KAAK,UAAU;KACzB;AAEF,QAAK,MAAM,MAAM,MAAM;AACvB,QAAK,MAAM,KAAK;AAEhB,QAAK,GAAG,UAAU,SAAS;AACzB,QACE,OAAO,SAAS,iBAAiB,IACjC,OAAO,SAAS,qBAAqB,IACrC,OAAO,SAAS,gBAAgB,CAEhC,wBACE,IAAI,MACF,0BAA0B,IAAI,qBAAqB,KAAK,KAAK,8BAC9D,CACF;aACQ,SAAS,EAClB,UAAS;QAET,wBACE,IAAI,MACF,2CAA2C,IAAI,MAAM,KAAK,KAAK,8BAChE,CACF;KAEH;IACF;;CAGJ,MAAM,cACJ,MACkC;EAClC,MAAM,UAAmC,EAAE;AAE3C,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,EAAE;GAC/C,MAAM,UAAU,OAAO,CAAC,SAAS;AAEjC,WAAQ,MAAM,aAAa,IAAI,MAAM,KAAK,KAAK,KAAK;AACpD,SAAM,QAAQ,IACZ,KAAK,aAAa,KAAK,gBACrB,KAAK,0BAA0B,KAAK,OAAO,YAAY,CACxD,CACF,CACE,WAAW;AACV,YAAQ,KAAK,cAAc,IAAI,MAAM,KAAK,OAAO;AACjD,YAAQ,OAAO;KACf,CACD,OAAO,QAAQ;AACd,YAAQ,KACN,eAAe,QACX,IAAI,UACJ,+CAA+C,KAAK,KAAK,8BAC9D;AACD,YAAQ,OAAO;KACf;;AAGN,SAAO;;;;;AC9IX,MAAa,iCAAiC,OAC5C,SACA,EACE,aACA,cAKoB;CACtB,MAAM,YAAmC,CACvC,IAAI,0BAA0B,EAAE,YAAY,QAAQ,YAAY,CAAC,CAClE;CAED,IAAI,WAAuC;AAE3C,MAAK,MAAM,KAAK,UACd,KAAI,MAAM,EAAE,QAAQ,EAAE;AACpB,aAAW;AACX;;AAIJ,KAAI,CAAC,UAAU;AACb,YAAU,cAAc,sBAAsB;GAC5C,QAAQ;GACR;GACD,CAAC;AACF,SAAO,EAAE;;AAIX,QAAO,CAAC,IAAI,KAAK,sCAAsC,SAAS,KAAK,KAAK;CAE1E,MAAM,UAAU,MAAM,aACpB,mCACA,YAAY;AACV,SAAO,MAAM,SAAS,cAAc,QAAQ;GAE/C;AAED,WAAU,cAAc,gBAAgB;EACtC,UAAU,SAAS;EACnB;EACD,CAAC;AAEF,QAAO,OAAO,KAAK,QAAQ,CAAC,QAAQ,QAAQ,QAAQ,KAAK"}

package/dist/store-COCO6U0P.js

@@ -0,0 +1,5 @@
+import "./wizard-session-BYw6LzpS.js";
+import "./task-status-CmrrR7zo.js";
+import "./mint-failure-C0HyvEwO.js";
+import { t as WizardStore } from "./store-D3509G87.js";
+export { WizardStore };

package/dist/{store-xYy_6Ruv.js → store-D3509G87.js}

@@ -1,16 +1,56 @@
-import { t as __exportAll } from "./rolldown-runtime-B_-DWIq7.js";
-import { s as logToFile } from "./debug-Cj-8vfXY.js";
-import "./constants-CuJfQEcC.js";
-import { n as buildSession } from "./wizard-session-2w4Ru-Wz.js";
-import { i as sessionProperties, n as analytics } from "./analytics-VRYdebXW.js";
-import { n as isTaskStatus } from "./wizard-ui-DoyOZxK8.js";
-import { a as getBlockingServiceKeys } from "./logging-ui-CUxNYF2t.js";
-import { a as computeTokenCostUsd } from "./agent-CNrEC-9v.js";
-import { p as appendStatus } from "./pi-BtqcLX3y.js";
-import { p as createProgramSequence } from "./run-agent-legacy-6WcYMaR9.js";
-import { a as PROGRAM_REGISTRY, i as isRunFailure, o as Program, ot as reportWarehouseSourcesDetected, u as getProgramConfig } from "./mint-failure-CZFZpHpW.js";
+import { s as logToFile } from "./debug-DyARf5TF.js";
+import "./constants-DO4X70po.js";
+import { t as buildSession } from "./wizard-session-BYw6LzpS.js";
+import { i as sessionProperties, n as analytics } from "./analytics-B6q5PN7a.js";
+import { n as isTaskStatus } from "./task-status-CmrrR7zo.js";
+import { a as getBlockingServiceKeys } from "./logging-ui-p6XKVmTx.js";
+import { o as computeTokenCostUsd } from "./agent-BkBbVuNq.js";
+import { p as appendStatus } from "./pi-B5YTBRDv.js";
+import { a as PROGRAM_REGISTRY, i as isRunFailure, o as Program, ot as reportWarehouseSourcesDetected, u as getProgramConfig } from "./mint-failure-C0HyvEwO.js";
 import { atom, map } from "nanostores";
-//#region src/programs/ai-opt-in-gate.ts
+//#region src/tui/token-usage.ts
+const EMPTY_TOKEN_USAGE = {
+	inputTokens: 0,
+	outputTokens: 0,
+	cacheReadTokens: 0,
+	cacheCreationTokens: 0,
+	costUsd: 0,
+	costIsFinal: false
+};
+/** Total tokens across all counters in a `TokenUsageSnapshot` — used by
+*  both `TokenCostHud` and `exit-line.ts` to detect "no agent turns yet". */
+function totalTokenCount(usage) {
+	return usage.inputTokens + usage.outputTokens + usage.cacheReadTokens + usage.cacheCreationTokens;
+}
+//#endregion
+//#region src/tui/flow.ts
+/**
+* Project program steps into the narrower Screen shape the router consumes.
+*
+* Two things happen here:
+*   1. Headless steps (no `screenId`) are filtered out. The router walks
+*      visible screens; gate-only steps like `detect` are store concerns.
+*   2. The step is narrowed to just { id, show, isComplete } — the
+*      router has no business touching gate, onInit, or label.
+*
+* This intentional separation keeps the router focused on one question:
+* "Which screen should be rendered right now?"
+*/
+function createProgramSequence(steps) {
+	const entries = steps.filter((step) => step.screenId != null).map((step) => ({
+		id: step.screenId,
+		show: step.show,
+		isComplete: step.isComplete ?? step.gate
+	}));
+	entries.push({
+		id: "exit",
+		show: void 0,
+		isComplete: void 0
+	});
+	return entries;
+}
+//#endregion
+//#region src/tui/ai-opt-in-gate.ts
 /** Step id — also the ScreenId.AiOptIn enum value in screen-sequences. */
 const AI_OPT_IN_STEP_ID = "ai-opt-in";
 function aiApproved(session) {
@@ -61,7 +101,7 @@ const MINT_HANDOFF_SEQUENCE = [
 /** All program screen sequences keyed by program id. */
 const PROGRAM_SEQUENCES = Object.fromEntries(PROGRAM_REGISTRY.map((c) => [c.id, createProgramSequence(withAiOptInGate(c))]));
 //#endregion
-//#region src/ui/tui/router.ts
+//#region src/tui/router.ts
 var WizardRouter = class {
 	sequence;
 	programId;
@@ -133,7 +173,7 @@ var WizardRouter = class {
 	}
 };
 //#endregion
-//#region src/ui/tui/store.ts
+//#region src/tui/store.ts
 /**
 * WizardStore — Nanostore-backed reactive store for the TUI.
 * React components subscribe via useSyncExternalStore.
@@ -148,24 +188,6 @@ var WizardRouter = class {
 * All session mutations that affect screen resolution go through
 * explicit setters so emitChange() is always called.
 */
-var store_exports = /* @__PURE__ */ __exportAll({
-	Program: () => Program,
-	WizardStore: () => WizardStore,
-	totalTokenCount: () => totalTokenCount
-});
-const EMPTY_TOKEN_USAGE = {
-	inputTokens: 0,
-	outputTokens: 0,
-	cacheReadTokens: 0,
-	cacheCreationTokens: 0,
-	costUsd: 0,
-	costIsFinal: false
-};
-/** Total tokens across all counters in a `TokenUsageSnapshot` — used by
-*  both `TokenCostHud` and `exit-line.ts` to detect "no agent turns yet". */
-function totalTokenCount(usage) {
-	return usage.inputTokens + usage.outputTokens + usage.cacheReadTokens + usage.cacheCreationTokens;
-}
 function captureHealthCheckBlocked(result) {
 	try {
 		const health = result.health;
@@ -214,6 +236,7 @@ var WizardStore = class {
 	/** Resolves the OAuth flow with a manually-entered authorization code. */
 	_resolveManualAuthCode = null;
 	/** Resolves the in-flight wizard_ask request. */
+	_noteAskProgress = null;
 	_resolvePendingQuestion = null;
 	constructor(program = Program.PostHogIntegration) {
 		this.router = new WizardRouter(program);
@@ -581,8 +604,9 @@ var WizardStore = class {
 	* Only one request is in flight at a time — calling this while a request
 	* is already pending throws.
 	*/
-	requestQuestion(question) {
+	requestQuestion(question, onAnswer) {
 		if (this._resolvePendingQuestion) throw new Error("requestQuestion called while another wizard_ask request is pending");
+		this._noteAskProgress = onAnswer ?? null;
 		this.$session.setKey("pendingQuestion", question);
 		this.pushOverlay("wizard-ask");
 		analytics.wizardCapture("wizard_ask shown", {
@@ -595,12 +619,20 @@ var WizardStore = class {
 		});
 	}
 	/**
+	* Report that the user answered one question of the in-flight request and
+	* another is coming — the ask bridge's timeout heartbeat.
+	*/
+	noteAskProgress() {
+		this._noteAskProgress?.();
+	}
+	/**
 	* Resolve the in-flight wizard_ask request with the user's answers and
 	* dismiss the overlay. Answers flow back to the agent as the tool result.
 	*/
 	resolvePendingQuestion(answers) {
 		const resolve = this._resolvePendingQuestion;
 		this._resolvePendingQuestion = null;
+		this._noteAskProgress = null;
 		this.$session.setKey("pendingQuestion", null);
 		this.popOverlay();
 		resolve?.(answers);
@@ -993,6 +1025,6 @@ var WizardStore = class {
 	}
 };
 //#endregion
-export { store_exports as n, totalTokenCount as r, WizardStore as t };
+export { totalTokenCount as n, WizardStore as t };
 
-//# sourceMappingURL=store-xYy_6Ruv.js.map
+//# sourceMappingURL=store-D3509G87.js.map

package/dist/store-D3509G87.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-D3509G87.js","names":[],"sources":["../src/tui/token-usage.ts","../src/tui/flow.ts","../src/tui/ai-opt-in-gate.ts","../src/ui/tui/screen-sequences.ts","../src/tui/router.ts","../src/tui/store.ts"],"sourcesContent":["/**\n * Running token/cost estimate for the hidden Ctrl+T HUD. Accumulated live\n * from each assistant turn's usage (see `agent-interface.ts`), then\n * reconciled to the SDK's authoritative `total_cost_usd` once the run\n * completes — `costIsFinal` flips so the HUD can show the number as exact\n * rather than a running estimate.\n */\nexport interface TokenUsageSnapshot {\n  inputTokens: number;\n  outputTokens: number;\n  cacheReadTokens: number;\n  cacheCreationTokens: number;\n  costUsd: number;\n  costIsFinal: boolean;\n}\n\nexport const EMPTY_TOKEN_USAGE: TokenUsageSnapshot = {\n  inputTokens: 0,\n  outputTokens: 0,\n  cacheReadTokens: 0,\n  cacheCreationTokens: 0,\n  costUsd: 0,\n  costIsFinal: false,\n};\n\n/** Total tokens across all counters in a `TokenUsageSnapshot` — used by\n *  both `TokenCostHud` and `exit-line.ts` to detect \"no agent turns yet\". */\nexport function totalTokenCount(usage: TokenUsageSnapshot): number {\n  return (\n    usage.inputTokens +\n    usage.outputTokens +\n    usage.cacheReadTokens +\n    usage.cacheCreationTokens\n  );\n}\n","import type { WizardSession } from '@programs/session/wizard-session';\nimport type { WizardReadinessResult } from '@shared/health-checks/readiness';\nimport type { ProgramStep } from '@programs/program-step';\n\n/**\n * Context passed to onInit callbacks — fires when the TUI starts\n * rendering, before bin.ts has assigned the real session.\n */\nexport interface StoreInitContext {\n  readonly session: WizardSession;\n  readonly setReadinessResult: (result: WizardReadinessResult | null) => void;\n  readonly setFrameworkContext: (key: string, value: unknown) => void;\n  readonly emitChange: () => void;\n}\n\n/**\n * Project program steps into the narrower Screen shape the router consumes.\n *\n * Two things happen here:\n *   1. Headless steps (no `screenId`) are filtered out. The router walks\n *      visible screens; gate-only steps like `detect` are store concerns.\n *   2. The step is narrowed to just { id, show, isComplete } — the\n *      router has no business touching gate, onInit, or label.\n *\n * This intentional separation keeps the router focused on one question:\n * \"Which screen should be rendered right now?\"\n */\n\nexport function createProgramSequence(steps: ProgramStep[]): Array<{\n  id: string;\n  show?: (session: WizardSession) => boolean;\n  isComplete?: (session: WizardSession) => boolean;\n}> {\n  const entries = steps\n    .filter((step) => step.screenId != null)\n    .map((step) => ({\n      id: step.screenId!,\n      show: step.show,\n      // `isComplete` defaults to `gate` — for most steps they're the same\n      // predicate (e.g. intro: setupConfirmed unblocks bin.ts AND finishes\n      // the screen). Only override when the two conditions diverge.\n      isComplete: step.isComplete ?? step.gate,\n    }));\n\n  // Every program ends with the exit screen.\n  entries.push({ id: 'exit', show: undefined, isComplete: undefined });\n\n  return entries;\n}\n","/**\n * AI opt-in gate — step injection for programs whose agent run sends\n * source to Anthropic Claude.\n *\n * Injected after the `auth` step for every program that doesn't declare\n * `requiresAi: false`. The injected step carries three predicates:\n *\n *   show       — renders AiOptInRequiredScreen when the org hasn't\n *                approved third-party AI\n *   isComplete — router advances once approval lands\n *   gate       — `await store.getGate('ai-opt-in')` parks the agent\n *                runner until approval lands. THIS is the enforcement:\n *                the screen alone is cosmetic; the gate is what stops\n *                source from leaving the machine.\n *\n * Used by BOTH screen-sequences.ts (screen injection) and the store's\n * _initFromProgram (gate registration) so the two layers can't drift.\n *\n * The predicates mirror Max's strict reading of\n * `organization.is_ai_data_processing_approved`: only literal `true`\n * proceeds; `null` / `undefined` / `false` all block. CI and signup\n * sessions skip the gate:\n *   - `--ci` auto-consents to AI usage per the README, and the\n *     interactive kill screen would be unworkable headless.\n *   - signup (account provisioning) auto-consents too: the provisioning\n *     access token deliberately omits the `organization:read` scope\n *     (`WIZARD_PROVISIONING_SCOPES` in constants.ts), so the org's\n *     approval can never be read back — `apiUser` stays null and the gate\n *     could never clear. Creating an account through the wizard to run the\n *     AI agent is itself the consent, mirroring how `shouldDisableAsk`\n *     already treats `ci || signup` as one non-interactive mode.\n */\n\nimport type { WizardSession } from '@programs/session/wizard-session';\nimport type { ProgramConfig, ProgramStep } from '../programs/program-step.js';\n\n/** Step id — also the ScreenId.AiOptIn enum value in screen-sequences. */\nexport const AI_OPT_IN_STEP_ID = 'ai-opt-in';\n\nfunction aiApproved(session: WizardSession): boolean {\n  return !!session.apiUser?.organization?.is_ai_data_processing_approved;\n}\n\n/**\n * Returns the program's steps with the AI opt-in gate injected after\n * `auth`. Programs with `requiresAi: false` or no auth step pass\n * through unchanged — without auth, `apiUser` would never be populated\n * for evaluation anyway.\n */\nexport function withAiOptInGate(config: ProgramConfig): ProgramStep[] {\n  if (config.requiresAi === false) return config.steps;\n\n  const authIdx = config.steps.findIndex((s) => s.id === 'auth');\n  if (authIdx === -1) return config.steps;\n\n  const gateStep: ProgramStep = {\n    id: AI_OPT_IN_STEP_ID,\n    label: 'AI opt-in check',\n    screenId: AI_OPT_IN_STEP_ID,\n    // Only fire once apiUser has actually been populated — between\n    // setCredentials and setApiUser there's a brief emitChange window\n    // where apiUser is null, and we don't want to flash the gate then.\n    show: (session) =>\n      !session.ci &&\n      !session.signup &&\n      session.apiUser != null &&\n      !aiApproved(session),\n    isComplete: (session) =>\n      session.ci || session.signup || aiApproved(session),\n    gate: (session) => session.ci || session.signup || aiApproved(session),\n  };\n\n  return [\n    ...config.steps.slice(0, authIdx + 1),\n    gateStep,\n    ...config.steps.slice(authIdx + 1),\n  ];\n}\n","/**\n * Screen taxonomy + per-program screen sequences.\n *\n * Owns the ScreenId enum and projects each registered program's steps\n * into the router-shaped screen sequence (filtering headless steps and\n * appending the exit screen). Pure leaf module — no store, no React.\n */\n\nimport type { WizardSession } from '@programs/session/wizard-session';\nimport { PROGRAM_REGISTRY, type ProgramId } from '@programs';\nimport { createProgramSequence } from '@tui/flow';\nimport { withAiOptInGate } from '@tui/ai-opt-in-gate';\nimport { ScreenId } from '@tui/screen-ids';\n\nexport { ScreenId };\n\nexport interface Screen {\n  /** ScreenId to show */\n  id: ScreenId;\n  /** If provided, screen is skipped when this returns false. Omit = always show. */\n  show?: (session: WizardSession) => boolean;\n  /** If provided, screen is considered complete when this returns true. */\n  isComplete?: (session: WizardSession) => boolean;\n}\n\n/** An ordered list of screens — a program's screen journey. */\nexport type Sequence = Screen[];\n\n/** Post-run steps a mint-failure handoff continues through; ends on exit. */\nexport const MINT_HANDOFF_SEQUENCE: Sequence = [\n  { id: ScreenId.Mcp, isComplete: (s) => s.mcpComplete },\n  { id: ScreenId.SlackConnect, isComplete: (s) => s.slackStepDismissed },\n  { id: ScreenId.KeepSkills, isComplete: (s) => s.skillsComplete },\n  { id: ScreenId.Exit },\n];\n\n/** All program screen sequences keyed by program id. */\nexport const PROGRAM_SEQUENCES: Record<ProgramId, Sequence> =\n  Object.fromEntries(\n    PROGRAM_REGISTRY.map((c) => [\n      c.id,\n      createProgramSequence(withAiOptInGate(c)) as Sequence,\n    ]),\n  ) as Record<ProgramId, Sequence>;\n","/**\n * WizardRouter — declarative program pipelines + overlay stack.\n *\n * Two layers:\n *   Program cursor — linear sequence of screens, advanced with next()\n *   Overlay stack  — interrupts (outage, auth-expired, etc.) that push/pop\n *\n * The visible screen is: top of overlay stack if non-empty, otherwise the program cursor.\n *\n * Adding a program screen = append to a sequence array.\n * Adding an overlay = call pushOverlay() from anywhere.\n * No switch statements, no hardcoded transitions in business logic.\n */\n\nimport { RunPhase, type WizardSession } from '@programs/session/wizard-session';\nimport { isRunFailure } from '@tui/mint-failure';\nimport { Program, type ProgramId } from '@programs';\nimport {\n  PROGRAM_SEQUENCES,\n  MINT_HANDOFF_SEQUENCE,\n  ScreenId,\n  type Screen,\n  type Sequence,\n} from '../ui/tui/screen-sequences.js';\nimport { Overlay } from './screen-ids.js';\n\n// Re-export so existing imports from './router.js' keep working\nexport { ScreenId, Overlay, Program };\nexport type { Screen, Sequence, ProgramId };\n\n// ── ScreenId name taxonomy ──────────────────────────────────────────────\n\n/** Union of all screen names */\nexport type ScreenName = ScreenId | Overlay;\n\n// ── Router ────────────────────────────────────────────────────────────\n\nexport class WizardRouter {\n  private sequence: Sequence;\n  private programId: ProgramId;\n  private overlays: Overlay[] = [];\n\n  constructor(programId: ProgramId = Program.PostHogIntegration) {\n    this.setProgram(programId);\n  }\n\n  /** Point the router at a different program. */\n  setProgram(programId: ProgramId): void {\n    this.programId = programId;\n    this.sequence = PROGRAM_SEQUENCES[programId];\n    this.overlays = [];\n  }\n\n  /**\n   * Resolve which screen should be active based on session state.\n   * Walks the program sequence, skipping hidden entries and completed entries,\n   * returns the first incomplete screen.\n   */\n  resolve(session: WizardSession): ScreenName {\n    // A failed agent run interrupts every program until the user leaves the\n    // handoff screen: exit, or continue through the post-run steps.\n    const runFailed = isRunFailure(session);\n    if (runFailed && session.mintHandoff === 'exit') return ScreenId.Exit;\n    if (runFailed && !session.mintHandoff) return ScreenId.MintFailure;\n\n    if (this.overlays.length > 0) {\n      return this.overlays[this.overlays.length - 1];\n    }\n\n    const sequence = runFailed ? MINT_HANDOFF_SEQUENCE : this.sequence;\n    for (const entry of sequence) {\n      if (entry.show && !entry.show(session)) continue;\n      if (entry.isComplete && entry.isComplete(session)) continue;\n      // A failed login aborts the run: wizardAbort renders the error outro\n      // and then waits for its dismissal. But the auth step only completes\n      // on credentials — which an aborted login never set — so the walk\n      // would park here forever: auth spinner up, outro unreachable, and\n      // that wait deadlocked. Route to the outro so the error can be read\n      // and dismissed. Auth only: the run steps already complete on\n      // RunPhase.Error, so later aborts reach their program's own outro.\n      if (\n        entry.id === ScreenId.Auth &&\n        session.runPhase === RunPhase.Error &&\n        session.outroData\n      ) {\n        return ScreenId.Outro;\n      }\n      return entry.id;\n    }\n\n    // All entries complete — show the last screen (outro)\n    return sequence[sequence.length - 1].id;\n  }\n\n  /** The screen that should be rendered right now. */\n  get activeScreen(): ScreenName {\n    // Overlays take priority — resolve() handles this too,\n    // but activeScreen is called before session is available in some paths\n    if (this.overlays.length > 0) {\n      return this.overlays[this.overlays.length - 1];\n    }\n    return this.sequence[0].id;\n  }\n\n  /** The id of the active program. */\n  get activeProgram(): ProgramId {\n    return this.programId;\n  }\n\n  /** Whether an overlay is currently active. */\n  get hasOverlay(): boolean {\n    return this.overlays.length > 0;\n  }\n\n  /**\n   * Push an overlay that interrupts the current program.\n   * The program resumes when the overlay is dismissed via popOverlay().\n   */\n  pushOverlay(overlay: Overlay): void {\n    this.overlays.push(overlay);\n  }\n\n  /**\n   * Dismiss the topmost overlay. The program screen underneath resumes.\n   */\n  popOverlay(): void {\n    this.overlays.pop();\n  }\n\n  /**\n   * Direction hint for screen transitions.\n   */\n  private _lastDirection: 'push' | 'pop' | null = null;\n\n  get lastNavDirection(): 'push' | 'pop' | null {\n    return this._lastDirection;\n  }\n\n  /** @internal — called by store wrapper to track direction */\n  _setDirection(dir: 'push' | 'pop' | null): void {\n    this._lastDirection = dir;\n  }\n}\n","/**\n * WizardStore — Nanostore-backed reactive store for the TUI.\n * React components subscribe via useSyncExternalStore.\n *\n * The active screen is derived from session state — WizardRouter walks\n * the flow and shows the first step whose `isComplete` is still false.\n *\n * Define a step `gate` if your screen needs to await user interactions.\n * bin.ts calls `await store.getGate(stepId)` to pause until the gate\n * predicate becomes true.\n *\n * All session mutations that affect screen resolution go through\n * explicit setters so emitChange() is always called.\n */\n\nimport { atom, map } from 'nanostores';\nimport {\n  EMPTY_TOKEN_USAGE,\n  totalTokenCount,\n  type TokenUsageSnapshot,\n} from './token-usage.js';\nimport { logToFile } from '@utils/debug';\nimport {\n  TaskStatus,\n  isTaskStatus,\n  type AuthErrorDetail,\n  type TokenUsageDelta,\n} from '@ui/wizard-ui';\nimport {\n  type WizardSession,\n  type OutroData,\n  type DiscoveredFeature,\n  type PendingQuestion,\n  type AskAnswers,\n  type CloudRegion,\n  McpOutcome,\n  RunPhase,\n  ScanConsent,\n  buildSession,\n  type TaskNotice,\n} from '@programs/session/wizard-session';\nimport type { SettingsConflict } from '@shared/claude-settings';\nimport {\n  WizardReadiness,\n  getBlockingServiceKeys,\n  type WizardReadinessResult,\n} from '@shared/health-checks/readiness';\nimport {\n  WizardRouter,\n  type ScreenName,\n  ScreenId,\n  Overlay,\n  Program,\n  type ProgramId,\n} from './router.js';\nimport { analytics, sessionProperties } from '@utils/analytics';\nimport type { StoreInitContext, ProgramReadyContext } from '@programs/types';\nimport { getProgramConfig } from '@programs';\nimport { withAiOptInGate } from '@tui/ai-opt-in-gate';\nimport { reportWarehouseSourcesDetected } from '@programs/detection/integration';\nimport { appendStatus } from '@shared/status-history';\nimport { IS_DEV } from '@shared/constants';\nimport { computeTokenCostUsd } from '@shared/token-pricing';\n\nexport { TaskStatus, ScreenId, Overlay, Program, RunPhase, McpOutcome };\nexport type { ScreenName, OutroData, WizardSession, ProgramId };\nexport { totalTokenCount };\nexport type { TokenUsageSnapshot };\n\nexport interface TaskItem {\n  id?: string;\n  source?: string;\n  sourceStatus?: string;\n  label: string;\n  activeForm?: string;\n  status: TaskStatus;\n  /** Legacy compat */\n  done: boolean;\n}\n\nexport interface PlannedEvent {\n  name: string;\n  description: string;\n}\n\ninterface GateEntry {\n  predicate: (session: WizardSession) => boolean;\n  promise: Promise<void>;\n  resolve: () => void;\n  resolved: boolean;\n}\n\n// Capture blocked skill downloads once per readiness result.\nfunction captureHealthCheckBlocked(result: WizardReadinessResult): void {\n  try {\n    const health = result.health;\n    const blockingKeys = getBlockingServiceKeys(health);\n    const attempts = health.skillsOrigin.rawIndicator?.match(/attempts=(\\d+)/);\n    const retriesUsed = Math.max(0, attempts ? Number(attempts[1]) - 1 : 0);\n\n    analytics.wizardCapture('health check blocked', {\n      decision: 'skills-origin-down',\n      blocking_keys: blockingKeys,\n      retries_used: retriesUsed,\n    });\n  } catch (err) {\n    logToFile(\n      `[health-checks] failed to capture analytics: ${\n        err instanceof Error ? err.message : String(err)\n      }`,\n    );\n  }\n}\n\nexport class WizardStore {\n  // ── Internal nanostore atoms ─────────────────────────────────────\n  private $session = map<WizardSession>(buildSession({}));\n  private $statusMessages = atom<string[]>([]);\n  private $statusExpanded = atom(false);\n  private $tasks = atom<TaskItem[]>([]);\n  private $eventPlan = atom<PlannedEvent[]>([]);\n  private $handoffText = atom<string | null>(null);\n  private $learnCardBlockIdx = atom(0);\n  private $learnCardComplete = atom(false);\n  private $version = atom(0);\n  private $currentStage = atom<{ stage: string; startedAt: number } | null>(\n    null,\n  );\n  private $tokenUsage = atom<TokenUsageSnapshot>(EMPTY_TOKEN_USAGE);\n  // Defaults on for local/dev/test runs (tsx, `pnpm try`, vitest) so\n  // contributors see it without needing to know the shortcut; defaults off\n  // for the published build, where it stays genuinely hidden. Still\n  // Ctrl+T-toggleable either way.\n  private $tokenHudVisible = atom(IS_DEV);\n\n  private _onTasksChanged: (() => void) | null = null;\n  /** Last screen seen — used to detect screen transitions for analytics. */\n  private _lastScreen: ScreenName | null = null;\n\n  /** Hooks run when transitioning onto a screen. */\n  private _enterScreenHooks = new Map<ScreenName, (() => void)[]>();\n\n  /** Gate promises derived from program step definitions. */\n  private _gates = new Map<string, GateEntry>();\n\n  version = '';\n\n  /** Navigation router — resolves active screen from session state. */\n  readonly router: WizardRouter;\n\n  /** Blocks agent execution until the settings-override overlay is dismissed. */\n  private _resolveSettingsOverride: (() => void) | null = null;\n  private _backupAndFixSettings: (() => boolean) | null = null;\n\n  /** Blocks the run until an optional step's notice is answered. */\n  private _resolveTaskNotice: ((keep: boolean) => void) | null = null;\n  /** Blocks OAuth flow until the port-conflict overlay is dismissed. */\n  private _resolvePortConflict: (() => void) | null = null;\n\n  /** Resolves the OAuth flow with a manually-entered authorization code. */\n  private _resolveManualAuthCode: ((code: string) => void) | null = null;\n\n  /** Resolves the in-flight wizard_ask request. */\n  private _noteAskProgress: (() => void) | null = null;\n  private _resolvePendingQuestion: ((answers: AskAnswers) => void) | null =\n    null;\n\n  constructor(program: ProgramId = Program.PostHogIntegration) {\n    this.router = new WizardRouter(program);\n    this._initFromProgram(program);\n  }\n\n  /**\n   * Scan program steps for gate predicates and create gate promises.\n   *\n   * Steps are wrapped with withAiOptInGate so the injected ai-opt-in\n   * step's gate registers here — the agent runner awaits it (via\n   * WizardUI.waitForAiOptIn) before any source leaves the machine.\n   * Same wrapper screen-sequences.ts uses, so the gate and its screen\n   * can't drift apart.\n   */\n  private _initFromProgram(program: ProgramId): void {\n    const steps = withAiOptInGate(getProgramConfig(program));\n\n    // Create gate promises from steps that define them\n    for (const step of steps) {\n      if (step.gate) {\n        let resolve!: () => void;\n        const promise = new Promise<void>((r) => {\n          resolve = r;\n        });\n        this._gates.set(step.id, {\n          predicate: step.gate,\n          promise,\n          resolve,\n          resolved: false,\n        });\n      }\n    }\n  }\n\n  /**\n   * Run the program steps' onInit callbacks. startTUI calls this once\n   * the screens are actually rendering — constructing a store alone\n   * (tests, playground) must not fire init work like the health-check\n   * pre-flight, whose probes belong only to flows that show its screen.\n   */\n  runInitHooks(): void {\n    const steps = getProgramConfig(this.router.activeProgram).steps;\n    const getSession = (): WizardSession => this.session;\n    const ctx: StoreInitContext = {\n      get session() {\n        return getSession();\n      },\n      setReadinessResult: (r) => this.setReadinessResult(r),\n      setFrameworkContext: (k, v) => this.setFrameworkContext(k, v),\n      emitChange: () => this.emitChange(),\n    };\n    for (const step of steps) {\n      step.onInit?.(ctx);\n    }\n  }\n\n  /**\n   * Run all `onReady` hooks declared by the current flow's steps, in\n   * order. Must be called after `store.session = session` so hooks see\n   * the real installDir. bin.ts calls this generically — it doesn't\n   * need to know which program has which pre-flow work.\n   */\n  async runReadyHooks(): Promise<void> {\n    const steps = getProgramConfig(this.router.activeProgram).steps;\n    const ctx: ProgramReadyContext = {\n      session: this.session,\n      setFrameworkContext: (k, v) => this.setFrameworkContext(k, v),\n      setFrameworkConfig: (i, c) => this.setFrameworkConfig(i, c),\n      setDetectedFramework: (l) => this.setDetectedFramework(l),\n      setPosthogSdkDetected: (d) => this.setPosthogSdkDetected(d),\n      setSkillId: (id) => this.setSkillId(id),\n      setUnsupportedVersion: (info) => this.setUnsupportedVersion(info),\n      addDiscoveredFeature: (f) => this.addDiscoveredFeature(f),\n      setDetectionComplete: () => this.setDetectionComplete(),\n    };\n    for (const step of steps) {\n      if (step.onReady) {\n        await step.onReady(ctx);\n      }\n    }\n  }\n\n  // ── Gate API ────────────────────────────────────────────────────\n\n  /**\n   * Get a gate promise by step ID — the primary blocking checkpoint API\n   * for bin.ts. `await store.getGate('...')` parks the caller until the\n   * corresponding program step's gate predicate flips to true (if the\n   * predicate stays false, the caller stays parked indefinitely — the\n   * TUI keeps rendering so the user can resolve whatever is blocking).\n   *\n   * If the program doesn't define a step with this ID, or the step\n   * has no `gate` predicate, this returns an already-resolved promise\n   * so bin.ts flows straight through. This lets programs opt in to\n   * gates on a per-step basis without bin.ts needing to know which\n   * gates exist in which flow.\n   */\n  getGate(stepId: string): Promise<void> {\n    return this._gates.get(stepId)?.promise ?? Promise.resolve();\n  }\n\n  /**\n   * Resolve once `predicate(session)` is true. Unlike a gate, this is created\n   * at the await point and evaluated live against the current session, so it\n   * never latches on a startup value — the orchestrator uses it to wait for a\n   * decision (a project picked, a handoff acknowledged) without the \"true while\n   * undecided\" trap that latched gate predicates have.\n   */\n  waitUntil(predicate: (session: WizardSession) => boolean): Promise<void> {\n    if (predicate(this.session)) return Promise.resolve();\n    return new Promise((resolve) => {\n      const unsub = this.subscribe(() => {\n        if (predicate(this.session)) {\n          unsub();\n          resolve();\n        }\n      });\n    });\n  }\n\n  /**\n   * Re-evaluate every gate predicate against the current session and\n   * resolve any whose predicate now returns true. Called after every\n   * emitChange(), so gates unblock as soon as the session mutation\n   * that satisfies them lands. Gates only resolve once — a predicate\n   * that goes true → false → true will NOT re-block a caller that\n   * already awaited through.\n   */\n  private _checkGates(): void {\n    for (const [, gate] of this._gates) {\n      if (!gate.resolved && gate.predicate(this.session)) {\n        gate.resolved = true;\n        gate.resolve();\n      }\n    }\n  }\n\n  // ── State accessors (read from atoms) ────────────────────────────\n\n  get session(): WizardSession {\n    return this.$session.get();\n  }\n\n  set session(value: WizardSession) {\n    this.$session.set(value);\n    this.emitChange();\n  }\n\n  get statusMessages(): string[] {\n    return this.$statusMessages.get();\n  }\n\n  get tasks(): TaskItem[] {\n    return this.$tasks.get();\n  }\n\n  get eventPlan(): PlannedEvent[] {\n    return this.$eventPlan.get();\n  }\n\n  get handoffText(): string | null {\n    return this.$handoffText.get();\n  }\n\n  get currentStage(): { stage: string; startedAt: number } | null {\n    return this.$currentStage.get();\n  }\n\n  /** No-op when the stage hasn't changed, so `startedAt` survives across\n   *  re-renders and tab switches and measures real stage time. */\n  setCurrentStage(stage: string): void {\n    const cur = this.$currentStage.get();\n    if (cur?.stage === stage) return;\n    this.$currentStage.set({ stage, startedAt: Date.now() });\n    this.emitChange();\n  }\n\n  get statusExpanded(): boolean {\n    return this.$statusExpanded.get();\n  }\n\n  toggleStatusExpanded(): void {\n    this.$statusExpanded.set(!this.$statusExpanded.get());\n    this.emitChange();\n  }\n\n  setStatusExpanded(expanded: boolean): void {\n    if (this.$statusExpanded.get() !== expanded) {\n      this.$statusExpanded.set(expanded);\n      this.emitChange();\n    }\n  }\n\n  // ── Session setters ─────────────────────────────────────────────\n  // Every setter that affects screen resolution calls emitChange().\n  // Business logic calls these instead of mutating session directly.\n\n  /** Sets setupConfirmed, and is the point consent becomes final. */\n  completeSetup(): void {\n    this.$session.setKey('setupConfirmed', true);\n    // Reports first: analytics merges tags into an event as it is sent, so\n    // `setup confirmed` only carries the warehouse tags if they are already\n    // set. On main they were, because reporting happened back in detect.\n    this._markWarehouseSourcesReportedIfNeeded();\n    analytics.wizardCapture('setup confirmed', sessionProperties(this.session));\n    this.emitChange();\n  }\n\n  /**\n   * Sharing is on: either the user turned it back on in the panel, or they\n   * pressed Continue without ever touching it. Both are reversible until\n   * completeSetup() resolves the intro gate and reports.\n   */\n  grantSharing(): void {\n    this.$session.setKey('scanConsent', ScanConsent.Granted);\n    this.emitChange();\n  }\n\n  /**\n   * Sharing is off. Suppresses reporting only — local detection still ran and\n   * the results stay in the session, so the outro suggestion and the warehouse\n   * task are unaffected; see `scanConsent` on `WizardSession`.\n   *\n   * Deliberately does not report. The panel's toggle can come back here, so\n   * marking the run reported would strand a user who turns sharing off and\n   * then on again. completeSetup() owns the single report.\n   */\n  declineSharing(): void {\n    this.$session.setKey('scanConsent', ScanConsent.Declined);\n    this.emitChange();\n  }\n\n  /**\n   * reportWarehouseSourcesDetected() is the single place scan results turn\n   * into telemetry; this just supplies its idempotency flag via the normal\n   * setter path (never mutate session directly). A no-op once\n   * `warehouseSourcesReported` is set, or for any program that never\n   * populated a warehouse-scan result in the first place.\n   */\n  private _markWarehouseSourcesReportedIfNeeded(): void {\n    if (reportWarehouseSourcesDetected(this.session)) {\n      this.$session.setKey('warehouseSourcesReported', true);\n    }\n  }\n\n  setRunPhase(phase: RunPhase): void {\n    this.$session.setKey('runPhase', phase);\n    analytics.setTag('run_phase', phase);\n    this.emitChange();\n  }\n\n  setCredentials(credentials: WizardSession['credentials']): void {\n    this.$session.setKey('credentials', credentials);\n    if (credentials?.projectId) {\n      analytics.setTag('project_id', credentials.projectId);\n    }\n    analytics.wizardCapture('auth complete', {\n      project_id: credentials?.projectId,\n    });\n    this.emitChange();\n  }\n\n  /** Post-refresh credential swap. No `auth complete` — see WizardUI. */\n  setAccessToken(credentials: WizardSession['credentials']): void {\n    this.$session.setKey('credentials', credentials);\n    this.emitChange();\n  }\n\n  setRoleAtOrganization(role: string | null): void {\n    this.$session.setKey('roleAtOrganization', role);\n    this.emitChange();\n  }\n\n  setApiUser(user: WizardSession['apiUser']): void {\n    this.$session.setKey('apiUser', user);\n    this.emitChange();\n  }\n\n  setFrameworkConfig(\n    integration: WizardSession['integration'],\n    config: WizardSession['frameworkConfig'],\n  ): void {\n    this.$session.setKey('integration', integration);\n    this.$session.setKey('frameworkConfig', config);\n    this.$session.setKey('unsupportedVersion', null);\n    if (integration) analytics.setTag('integration', integration);\n    this.emitChange();\n  }\n\n  setDetectionComplete(): void {\n    this.$session.setKey('detectionComplete', true);\n    this.emitChange();\n  }\n\n  setDetectedFramework(label: string): void {\n    this.$session.setKey('detectedFrameworkLabel', label);\n    analytics.setTag('detected_framework', label);\n    this.emitChange();\n  }\n\n  setPosthogSdkDetected(detected: boolean): void {\n    this.$session.setKey('posthogSdkDetected', detected);\n    this.emitChange();\n  }\n\n  setSpellbook(spellbook: NonNullable<WizardSession['spellbook']>): void {\n    this.$session.setKey('spellbook', spellbook);\n    this.emitChange();\n  }\n\n  setMintHandoff(action: NonNullable<WizardSession['mintHandoff']>): void {\n    // The parked agent may still hold a question or notice open.\n    this.cancelPendingQuestion();\n    if (this.session.taskNotice) this.resolveTaskNotice(false);\n    this.$session.setKey('mintHandoff', action);\n    this.emitChange();\n  }\n\n  setSkillId(skillId: string | null): void {\n    this.$session.setKey('skillId', skillId);\n    this.emitChange();\n  }\n\n  setUnsupportedVersion(info: {\n    current: string;\n    minimum: string;\n    docsUrl: string;\n  }): void {\n    this.$session.setKey('unsupportedVersion', info);\n    this.emitChange();\n  }\n\n  setLoginUrl(url: string | null): void {\n    this.$session.setKey('loginUrl', url);\n    this.emitChange();\n  }\n\n  setAuthorizeUrl(url: string | null): void {\n    this.$session.setKey('authorizeUrl', url);\n    this.emitChange();\n  }\n\n  setReadinessResult(result: WizardReadinessResult | null): void {\n    this.$session.setKey('readinessResult', result);\n    if (result && result.decision === WizardReadiness.No) {\n      captureHealthCheckBlocked(result);\n    }\n    this.emitChange();\n  }\n\n  /** User dismissed the blocking outage screen. Gate resolves via _checkGates(). */\n  dismissOutage(): void {\n    logToFile('[health-checks] user dismissed outage screen, continuing');\n    this.$session.setKey('outageDismissed', true);\n    this.emitChange();\n  }\n\n  /**\n   * Push the settings-override overlay and return a promise that blocks\n   * until the user dismisses it via backupAndFixSettingsOverride().\n   */\n  showSettingsOverride(\n    conflicts: SettingsConflict[],\n    backupAndFix: () => boolean,\n  ): Promise<void> {\n    const allKeys = conflicts.flatMap((c) => c.keys);\n    this.$session.setKey('settingsOverrideKeys', allKeys);\n    this.$session.setKey('settingsConflicts', conflicts);\n    this._backupAndFixSettings = backupAndFix;\n\n    const hasReadOnly = conflicts.some((c) => !c.writable);\n    if (hasReadOnly) {\n      this.pushOverlay(Overlay.ManagedSettings);\n    } else {\n      this.pushOverlay(Overlay.SettingsOverride);\n    }\n\n    return new Promise((resolve) => {\n      this._resolveSettingsOverride = resolve;\n    });\n  }\n\n  /**\n   * Push the port-conflict overlay and return a promise that blocks\n   * until the user frees the ports and retries, or exits.\n   */\n  showPortConflict(processInfo: {\n    command: string;\n    pid: string;\n    port: number;\n    user: string;\n  }): Promise<void> {\n    this.$session.setKey('portConflictProcess', processInfo);\n    this.pushOverlay(Overlay.PortConflict);\n    return new Promise((resolve) => {\n      this._resolvePortConflict = resolve;\n    });\n  }\n\n  /** Dismiss the port-conflict overlay and retry the OAuth port loop. */\n  resolvePortConflict(): void {\n    this.$session.setKey('portConflictProcess', null);\n    this.popOverlay();\n    this._resolvePortConflict?.();\n    this._resolvePortConflict = null;\n  }\n\n  /**\n   * Show an optional step's notice and return whether to keep that step.\n   * Asked before the step runs, so nobody is surprised by a prompt mid-run.\n   */\n  showTaskNotice(notice: TaskNotice): Promise<boolean> {\n    this.$session.setKey('taskNotice', notice);\n    this.pushOverlay(Overlay.TaskNotice);\n    return new Promise((resolve) => {\n      this._resolveTaskNotice = resolve;\n    });\n  }\n\n  /** Dismiss the notice, keeping (`true`) or skipping (`false`) the step. */\n  resolveTaskNotice(keep: boolean): void {\n    this.$session.setKey('taskNotice', null);\n    this.popOverlay();\n    this._resolveTaskNotice?.(keep);\n    this._resolveTaskNotice = null;\n  }\n\n  /**\n   * Return a promise that resolves when the user submits a manually-entered\n   * OAuth code via the paste modal. The OAuth flow races this against the\n   * local callback server — see `performOAuthFlow`.\n   */\n  waitForManualAuthCode(): Promise<string> {\n    return new Promise<string>((resolve) => {\n      this._resolveManualAuthCode = resolve;\n    });\n  }\n\n  /** Open the manual OAuth code-entry overlay over the auth screen. */\n  showManualAuthCode(): void {\n    this.pushOverlay(Overlay.ManualAuthCode);\n  }\n\n  /** Dismiss the manual OAuth code overlay without submitting. */\n  dismissManualAuthCode(): void {\n    this.popOverlay();\n  }\n\n  /**\n   * Submit a manually-entered authorization code: dismiss the overlay and\n   * resolve the in-flight OAuth flow so it can exchange the code for a token.\n   */\n  submitManualAuthCode(code: string): void {\n    this.popOverlay();\n    this._resolveManualAuthCode?.(code);\n    this._resolveManualAuthCode = null;\n  }\n\n  /**\n   * Open the WizardAsk overlay with a set of questions and return a promise\n   * that resolves once the user submits answers (or the request is cancelled).\n   *\n   * Only one request is in flight at a time — calling this while a request\n   * is already pending throws.\n   */\n  requestQuestion(\n    question: PendingQuestion,\n    onAnswer?: () => void,\n  ): Promise<AskAnswers> {\n    if (this._resolvePendingQuestion) {\n      throw new Error(\n        'requestQuestion called while another wizard_ask request is pending',\n      );\n    }\n    this._noteAskProgress = onAnswer ?? null;\n    this.$session.setKey('pendingQuestion', question);\n    this.pushOverlay(Overlay.WizardAsk);\n    analytics.wizardCapture('wizard_ask shown', {\n      source: question.source,\n      question_count: question.questions.length,\n      kinds: question.questions.map((q) => q.kind),\n    });\n    return new Promise<AskAnswers>((resolve) => {\n      this._resolvePendingQuestion = resolve;\n    });\n  }\n\n  /**\n   * Report that the user answered one question of the in-flight request and\n   * another is coming — the ask bridge's timeout heartbeat.\n   */\n  noteAskProgress(): void {\n    this._noteAskProgress?.();\n  }\n\n  /**\n   * Resolve the in-flight wizard_ask request with the user's answers and\n   * dismiss the overlay. Answers flow back to the agent as the tool result.\n   */\n  resolvePendingQuestion(answers: AskAnswers): void {\n    const resolve = this._resolvePendingQuestion;\n    this._resolvePendingQuestion = null;\n    this._noteAskProgress = null;\n    this.$session.setKey('pendingQuestion', null);\n    this.popOverlay();\n    resolve?.(answers);\n  }\n\n  /**\n   * Cancel the in-flight wizard_ask request — the bridge sends a sentinel\n   * answer (\"__cancelled__\") so the skill can decide how to handle it.\n   */\n  cancelPendingQuestion(): void {\n    const pending = this.session.pendingQuestion;\n    if (!pending) return;\n    const cancelled: AskAnswers = {};\n    for (const q of pending.questions) {\n      cancelled[q.id] = '__cancelled__';\n    }\n    this.resolvePendingQuestion(cancelled);\n  }\n\n  /**\n   * Back up .claude/settings.json. Dismisses the overlay on success.\n   */\n  backupAndFixSettingsOverride(): boolean {\n    const ok = this._backupAndFixSettings?.() ?? false;\n    if (ok) {\n      this.$session.setKey('settingsOverrideKeys', null);\n      this.$session.setKey('settingsConflicts', null);\n      this.popOverlay();\n      this._resolveSettingsOverride?.();\n      this._resolveSettingsOverride = null;\n      this._backupAndFixSettings = null;\n    }\n    return ok;\n  }\n\n  /** Push the auth-error overlay (no dismiss — user must exit). */\n  showAuthError(detail?: AuthErrorDetail): void {\n    this.$session.setKey('authErrorDetail', detail ?? null);\n    this.pushOverlay(Overlay.AuthError);\n  }\n\n  /** Push the session-timeout overlay (no dismiss — user must exit). */\n  showSessionTimeout(): void {\n    this.pushOverlay(Overlay.SessionTimeout);\n  }\n\n  addDiscoveredFeature(feature: DiscoveredFeature): void {\n    if (!this.session.discoveredFeatures.includes(feature)) {\n      this.session.discoveredFeatures.push(feature);\n      this.emitChange();\n    }\n  }\n\n  setMcpComplete(\n    outcome: McpOutcome = McpOutcome.Skipped,\n    installedClients: string[] = [],\n    featuresSelected?: 'all' | string[],\n    loginCommands: string[] = [],\n  ): void {\n    this.$session.setKey('mcpComplete', true);\n    this.$session.setKey('mcpOutcome', outcome);\n    this.$session.setKey('mcpInstalledClients', installedClients);\n    this.$session.setKey('mcpLoginCommands', loginCommands);\n    const featuresPayload =\n      outcome === McpOutcome.Installed && featuresSelected !== undefined\n        ? { mcp_features_selected: featuresSelected }\n        : {};\n    analytics.wizardCapture('mcp complete', {\n      mcp_outcome: outcome,\n      mcp_installed_clients: installedClients,\n      ...featuresPayload,\n      ...sessionProperties(this.session),\n    });\n    this.emitChange();\n  }\n\n  setSkillsComplete(kept: boolean): void {\n    this.$session.setKey('skillsComplete', true);\n    analytics.wizardCapture('skills complete', {\n      skills_kept: kept,\n      ...sessionProperties(this.session),\n    });\n    this.emitChange();\n  }\n\n  setMcpSuggestedPromptsDismissed(): void {\n    this.$session.setKey('mcpSuggestedPromptsDismissed', true);\n    this.emitChange();\n  }\n\n  setSlackStepDismissed(): void {\n    this.$session.setKey('slackStepDismissed', true);\n    this.emitChange();\n  }\n\n  setSlackConnected(connected: boolean): void {\n    this.$session.setKey('slackConnected', connected);\n    this.emitChange();\n  }\n\n  setGithubConnected(connected: boolean): void {\n    this.$session.setKey('githubConnected', connected);\n    this.emitChange();\n  }\n\n  /**\n   * Self-driving GitHub gate declined. Carries the outro the user lands on,\n   * since declining ends the flow before the agent runs and there is no abort\n   * case to render one.\n   */\n  declineGithub(outroData: OutroData): void {\n    this.$session.setKey('githubDeclined', true);\n    this.$session.setKey('outroData', outroData);\n    this.emitChange();\n  }\n\n  /**\n   * Self-driving integration-check answer. `true` → integrate the SDK as part\n   * of this run; `false` → PostHog is already set up, go straight to\n   * Self-driving. Resolves `session.integrate` from null.\n   */\n  setIntegrate(\n    integrate: boolean,\n    extra?: { via?: string; path?: string },\n  ): void {\n    this.$session.setKey('integrate', integrate);\n    analytics.wizardCapture('self-driving integration check', {\n      self_driving_integrate: integrate,\n      ...(extra?.via ? { self_driving_integrate_via: extra.via } : {}),\n      ...(extra?.path ? { self_driving_integrate_path: extra.path } : {}),\n      ...sessionProperties(this.session),\n    });\n    this.emitChange();\n  }\n\n  /**\n   * Self-driving \"no PostHog account\" branch of the integration check. The\n   * project has no SDK, so we always integrate (`integrate = true`); and since\n   * the user has no account, we flip `signup` and record the `email` / `region`\n   * collected on the screen so `authenticate` → `getOrAskForProjectData` takes\n   * the provisioning path (create account + email a login link) instead of\n   * OAuth. The \"yes, I have an account\" branch uses `setIntegrate(true)` and\n   * leaves `signup` false so auth runs the normal OAuth login.\n   */\n  chooseProvisionAccount(email: string, region: CloudRegion): void {\n    this.$session.setKey('signup', true);\n    this.$session.setKey('email', email);\n    this.$session.setKey('region', region);\n    this.$session.setKey('integrate', true);\n    analytics.wizardCapture('self-driving integration check', {\n      self_driving_integrate: true,\n      self_driving_has_account: false,\n      provision_region: region,\n      ...sessionProperties(this.session),\n    });\n    this.emitChange();\n  }\n\n  /**\n   * Self-driving handoff confirmed — the user acknowledged the post-integration\n   * screen, so the Self-driving run can begin. Gate resolves via _checkGates().\n   */\n  confirmSelfDrivingHandoff(): void {\n    this.$session.setKey('selfDrivingHandoffConfirmed', true);\n    this.emitChange();\n  }\n\n  /**\n   * Mark a composed run step complete (e.g. self-driving's `integrate-run`).\n   * Records the step id so its `isComplete` predicate holds, clears the task\n   * list, and resets run phase to Idle so the next run step starts fresh.\n   */\n  completeRunStep(stepId: string): void {\n    const done = this.session.completedRuns;\n    if (!done.includes(stepId)) {\n      this.$session.setKey('completedRuns', [...done, stepId]);\n    }\n    this.$tasks.set([]);\n    this.setRunPhase(RunPhase.Idle);\n  }\n\n  setOutroDismissed(dismissed = true): void {\n    this.$session.setKey('outroDismissed', dismissed);\n    this.emitChange();\n  }\n\n  setOutroData(data: OutroData): void {\n    this.$session.setKey('outroData', data);\n    this.emitChange();\n  }\n\n  setDashboardUrl(url: string): void {\n    logToFile(`store.setDashboardUrl: ${url}`);\n    this.$session.setKey('dashboardUrl', url);\n    this.emitChange();\n  }\n\n  setNotebookUrl(url: string): void {\n    logToFile(`store.setNotebookUrl: ${url}`);\n    this.$session.setKey('notebookUrl', url);\n    this.emitChange();\n  }\n\n  setFrameworkContext(key: string, value: unknown): void {\n    const ctx = { ...this.$session.get().frameworkContext, [key]: value };\n    this.$session.setKey('frameworkContext', ctx);\n    this.emitChange();\n  }\n\n  switchProgram(program: ProgramId): void {\n    if (program === this.router.activeProgram) return;\n\n    // Flush unresolved promises so the wizard can advance\n    for (const gate of this._gates.values()) gate.resolve();\n    this._gates.clear();\n\n    this.router.setProgram(program);\n    this._initFromProgram(program);\n    // start-tui stamps this once at launch; without it here every event\n    // after the switch still reports under the program the run started as.\n    analytics.setTag('program_id', program);\n\n    const config = getProgramConfig(program);\n    this.$session.setKey('setupConfirmed', false);\n    this.$session.setKey('programLabel', config.id);\n    this.$session.setKey('skillId', config.skillId ?? null);\n    this.emitChange();\n  }\n\n  // ── Derived state ───────────────────────────────────────────────\n\n  /**\n   * The screen that should be rendered right now.\n   * Derived from session state via the router.\n   */\n  get currentScreen(): ScreenName {\n    return this.router.resolve(this.session);\n  }\n\n  /** Direction hint for screen transitions. */\n  get lastNavDirection(): 'push' | 'pop' | null {\n    return this.router.lastNavDirection;\n  }\n\n  // ── Change notification ─────────────────────────────────────────\n\n  getVersion(): number {\n    return this.$version.get();\n  }\n\n  /**\n   * Notify React that state has changed.\n   * The router re-resolves the active screen on next render.\n   * Gate predicates are checked and resolved if ready.\n   */\n  emitChange(): void {\n    this.router._setDirection('push');\n    this.$version.set(this.$version.get() + 1);\n    this._checkGates();\n    this._detectTransition();\n  }\n\n  // ── Overlay navigation ──────────────────────────────────────────\n\n  pushOverlay(overlay: Overlay): void {\n    this.router._setDirection('push');\n    this.router.pushOverlay(overlay);\n    this.$version.set(this.$version.get() + 1);\n    this._detectTransition();\n  }\n\n  popOverlay(): void {\n    this.router._setDirection('pop');\n    this.router.popOverlay();\n    this.$version.set(this.$version.get() + 1);\n    this._detectTransition();\n  }\n\n  // ── ScreenId transition analytics ─────────────────────────────────\n\n  /**\n   * Register a callback to run when transitioning onto the given screen.\n   * Fires after every transition that lands on this screen.\n   */\n  onEnterScreen(screen: ScreenName, fn: () => void): void {\n    const list = this._enterScreenHooks.get(screen) ?? [];\n    list.push(fn);\n    this._enterScreenHooks.set(screen, list);\n  }\n\n  /**\n   * The program `screen` reports under — its step's `reportsAsProgramId` if it\n   * claims one, else the running program (also the fallback for overlays and\n   * screens with no owning step).\n   */\n  private _programIdForScreen(screen: ScreenName): ProgramId {\n    const program = this.router.activeProgram;\n    const step = getProgramConfig(program).steps.find(\n      (s) => s.screenId === screen,\n    );\n    return step?.reportsAsProgramId ?? program;\n  }\n\n  /** The program the visible screen reports under; screens stamp this on their\n   *  own events rather than relying on the run-level `program_id` tag. */\n  get analyticsProgramId(): ProgramId {\n    return this._programIdForScreen(this.router.resolve(this.session));\n  }\n\n  /**\n   * Detect screen transitions, run enter-screen hooks, and fire analytics.\n   * Called at the end of emitChange/pushOverlay/popOverlay.\n   */\n  private _detectTransition(): void {\n    const next = this.router.resolve(this.session);\n    const prev = this._lastScreen;\n    if (next !== prev) {\n      // Every event carries the active TUI screen, filling the\n      // \"URL / Screen\" column in PostHog.\n      analytics.setTag('$screen_name', next);\n    }\n    if (prev !== null && next !== prev) {\n      const hooks = this._enterScreenHooks.get(next);\n      if (hooks) {\n        for (const fn of hooks) fn();\n      }\n      analytics.wizardCapture(`screen ${next}`, {\n        from_screen: prev,\n        program_id: this._programIdForScreen(next),\n        ...sessionProperties(this.session),\n      });\n    }\n    this._lastScreen = next;\n  }\n\n  // ── Agent observation state ─────────────────────────────────────\n\n  pushStatus(message: string): void {\n    const msgs = this.$statusMessages.get();\n    const next = appendStatus(msgs, message);\n    if (next === msgs) return;\n    this.$statusMessages.set(next);\n    this.emitChange();\n  }\n\n  get tokenUsage(): TokenUsageSnapshot {\n    return this.$tokenUsage.get();\n  }\n\n  get tokenHudVisible(): boolean {\n    return this.$tokenHudVisible.get();\n  }\n\n  /** Hidden Ctrl+T shortcut — see ScreenContainer. Not registered as a\n   *  keyboard hint, so it never shows in the hints bar. */\n  toggleTokenHud(): void {\n    this.$tokenHudVisible.set(!this.$tokenHudVisible.get());\n    this.emitChange();\n  }\n\n  /**\n   * Accumulate one assistant turn's token usage into the running estimate.\n   * Approximate by design (no dedup for SDK-retried/replayed turns, unlike\n   * the benchmark middleware's TurnCounterPlugin) — it's a live indicator\n   * for a hidden debug HUD, not a billing record, and `setFinalTokenCostUsd`\n   * corrects the total once the run's authoritative cost is known.\n   */\n  addTokenUsage(delta: TokenUsageDelta): void {\n    const cur = this.$tokenUsage.get();\n    if (cur.costIsFinal) return;\n    const deltaCostUsd = computeTokenCostUsd(delta);\n    this.$tokenUsage.set({\n      inputTokens: cur.inputTokens + delta.inputTokens,\n      outputTokens: cur.outputTokens + delta.outputTokens,\n      cacheReadTokens: cur.cacheReadTokens + delta.cacheReadTokens,\n      cacheCreationTokens: cur.cacheCreationTokens + delta.cacheCreationTokens,\n      costUsd: cur.costUsd + deltaCostUsd,\n      costIsFinal: false,\n    });\n    this.emitChange();\n  }\n\n  /** Reconcile the running cost estimate to the SDK's authoritative total\n   *  once the agent run completes — same trick the benchmark's\n   *  CostTrackerPlugin.onFinalize uses to correct any per-turn drift. */\n  setFinalTokenCostUsd(costUsd: number): void {\n    const cur = this.$tokenUsage.get();\n    this.$tokenUsage.set({ ...cur, costUsd, costIsFinal: true });\n    this.emitChange();\n  }\n\n  setTasks(tasks: TaskItem[]): void {\n    this.$tasks.set(tasks);\n    this.emitChange();\n  }\n\n  updateTask(index: number, done: boolean): void {\n    const tasks = this.$tasks.get();\n    if (tasks[index]) {\n      const updated = [...tasks];\n      updated[index] = {\n        ...updated[index],\n        done,\n        status: done ? TaskStatus.Completed : TaskStatus.Pending,\n      };\n      this.$tasks.set(updated);\n      this.emitChange();\n    }\n  }\n\n  setEventPlan(events: PlannedEvent[]): void {\n    this.$eventPlan.set(events);\n    this.emitChange();\n  }\n\n  /** No-op on identical text: an emit here means a network push downstream. */\n  setHandoffText(text: string): void {\n    if (this.$handoffText.get() === text) return;\n    logToFile(`store.setHandoffText: ${text.length} chars`);\n    this.$handoffText.set(text);\n    this.emitChange();\n  }\n\n  get learnCardBlockIdx(): number {\n    return this.$learnCardBlockIdx.get();\n  }\n\n  setLearnCardBlockIdx(idx: number): void {\n    this.$learnCardBlockIdx.set(idx);\n  }\n\n  get learnCardComplete(): boolean {\n    return this.$learnCardComplete.get();\n  }\n\n  setLearnCardComplete(): void {\n    this.$learnCardComplete.set(true);\n    this.emitChange();\n  }\n\n  syncTodos(\n    todos: Array<{\n      id?: string;\n      source?: string;\n      content: string;\n      status: string;\n      activeForm?: string;\n    }>,\n  ): void {\n    const incoming = todos.map((t) => {\n      const status = isTaskStatus(t.status) ? t.status : TaskStatus.Pending;\n      return {\n        id: t.id,\n        source: t.source,\n        sourceStatus: isTaskStatus(t.status) ? undefined : t.status,\n        label: t.content,\n        activeForm: t.activeForm,\n        status,\n        done: status === TaskStatus.Completed,\n      };\n    });\n\n    const incomingLabels = new Set(incoming.map((t) => t.label));\n    const sources = new Set(todos.map((t) => t.source));\n\n    const retained = this.$tasks\n      .get()\n      .filter(\n        (t) =>\n          (t.status === TaskStatus.Completed ||\n            t.status === TaskStatus.Failed ||\n            t.status === TaskStatus.Skipped) &&\n          (t.source ? !sources.has(t.source) : !incomingLabels.has(t.label)),\n      );\n\n    this.$tasks.set([...retained, ...incoming]);\n    this.emitChange();\n    this._onTasksChanged?.();\n  }\n\n  /** Register a listener for task state changes (e.g. task stream push). */\n  set onTasksChanged(fn: () => void) {\n    this._onTasksChanged = fn;\n  }\n\n  // ── React integration ───────────────────────────────────────────\n\n  subscribe(callback: () => void): () => void {\n    return this.$version.listen(() => callback());\n  }\n\n  getSnapshot(): number {\n    return this.$version.get();\n  }\n}\n"],"mappings":";;;;;;;;;;;AAgBA,MAAa,oBAAwC;CACnD,aAAa;CACb,cAAc;CACd,iBAAiB;CACjB,qBAAqB;CACrB,SAAS;CACT,aAAa;CACd;;;AAID,SAAgB,gBAAgB,OAAmC;AACjE,QACE,MAAM,cACN,MAAM,eACN,MAAM,kBACN,MAAM;;;;;;;;;;;;;;;;ACJV,SAAgB,sBAAsB,OAInC;CACD,MAAM,UAAU,MACb,QAAQ,SAAS,KAAK,YAAY,KAAK,CACvC,KAAK,UAAU;EACd,IAAI,KAAK;EACT,MAAM,KAAK;EAIX,YAAY,KAAK,cAAc,KAAK;EACrC,EAAE;AAGL,SAAQ,KAAK;EAAE,IAAI;EAAQ,MAAM,KAAA;EAAW,YAAY,KAAA;EAAW,CAAC;AAEpE,QAAO;;;;;ACVT,MAAa,oBAAoB;AAEjC,SAAS,WAAW,SAAiC;AACnD,QAAO,CAAC,CAAC,QAAQ,SAAS,cAAc;;;;;;;;AAS1C,SAAgB,gBAAgB,QAAsC;AACpE,KAAI,OAAO,eAAe,MAAO,QAAO,OAAO;CAE/C,MAAM,UAAU,OAAO,MAAM,WAAW,MAAM,EAAE,OAAO,OAAO;AAC9D,KAAI,YAAY,GAAI,QAAO,OAAO;CAElC,MAAM,WAAwB;EAC5B,IAAI;EACJ,OAAO;EACP,UAAU;EAIV,OAAO,YACL,CAAC,QAAQ,MACT,CAAC,QAAQ,UACT,QAAQ,WAAW,QACnB,CAAC,WAAW,QAAQ;EACtB,aAAa,YACX,QAAQ,MAAM,QAAQ,UAAU,WAAW,QAAQ;EACrD,OAAO,YAAY,QAAQ,MAAM,QAAQ,UAAU,WAAW,QAAQ;EACvE;AAED,QAAO;EACL,GAAG,OAAO,MAAM,MAAM,GAAG,UAAU,EAAE;EACrC;EACA,GAAG,OAAO,MAAM,MAAM,UAAU,EAAE;EACnC;;;;;AC/CH,MAAa,wBAAkC;CAC7C;EAAE,IAAA;EAAkB,aAAa,MAAM,EAAE;EAAa;CACtD;EAAE,IAAA;EAA2B,aAAa,MAAM,EAAE;EAAoB;CACtE;EAAE,IAAA;EAAyB,aAAa,MAAM,EAAE;EAAgB;CAChE,EAAE,IAAA,QAAmB;CACtB;;AAGD,MAAa,oBACX,OAAO,YACL,iBAAiB,KAAK,MAAM,CAC1B,EAAE,IACF,sBAAsB,gBAAgB,EAAE,CAAC,CAC1C,CAAC,CACH;;;ACNH,IAAa,eAAb,MAA0B;CACxB;CACA;CACA,WAA8B,EAAE;CAEhC,YAAY,YAAuB,QAAQ,oBAAoB;AAC7D,OAAK,WAAW,UAAU;;;CAI5B,WAAW,WAA4B;AACrC,OAAK,YAAY;AACjB,OAAK,WAAW,kBAAkB;AAClC,OAAK,WAAW,EAAE;;;;;;;CAQpB,QAAQ,SAAoC;EAG1C,MAAM,YAAY,aAAa,QAAQ;AACvC,MAAI,aAAa,QAAQ,gBAAgB,OAAQ,QAAA;AACjD,MAAI,aAAa,CAAC,QAAQ,YAAa,QAAA;AAEvC,MAAI,KAAK,SAAS,SAAS,EACzB,QAAO,KAAK,SAAS,KAAK,SAAS,SAAS;EAG9C,MAAM,WAAW,YAAY,wBAAwB,KAAK;AAC1D,OAAK,MAAM,SAAS,UAAU;AAC5B,OAAI,MAAM,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAE;AACxC,OAAI,MAAM,cAAc,MAAM,WAAW,QAAQ,CAAE;AAQnD,OACE,MAAM,OAAA,UACN,QAAQ,aAAA,WACR,QAAQ,UAER,QAAA;AAEF,UAAO,MAAM;;AAIf,SAAO,SAAS,SAAS,SAAS,GAAG;;;CAIvC,IAAI,eAA2B;AAG7B,MAAI,KAAK,SAAS,SAAS,EACzB,QAAO,KAAK,SAAS,KAAK,SAAS,SAAS;AAE9C,SAAO,KAAK,SAAS,GAAG;;;CAI1B,IAAI,gBAA2B;AAC7B,SAAO,KAAK;;;CAId,IAAI,aAAsB;AACxB,SAAO,KAAK,SAAS,SAAS;;;;;;CAOhC,YAAY,SAAwB;AAClC,OAAK,SAAS,KAAK,QAAQ;;;;;CAM7B,aAAmB;AACjB,OAAK,SAAS,KAAK;;;;;CAMrB,iBAAgD;CAEhD,IAAI,mBAA0C;AAC5C,SAAO,KAAK;;;CAId,cAAc,KAAkC;AAC9C,OAAK,iBAAiB;;;;;;;;;;;;;;;;;;;AC/C1B,SAAS,0BAA0B,QAAqC;AACtE,KAAI;EACF,MAAM,SAAS,OAAO;EACtB,MAAM,eAAe,uBAAuB,OAAO;EACnD,MAAM,WAAW,OAAO,aAAa,cAAc,MAAM,iBAAiB;EAC1E,MAAM,cAAc,KAAK,IAAI,GAAG,WAAW,OAAO,SAAS,GAAG,GAAG,IAAI,EAAE;AAEvE,YAAU,cAAc,wBAAwB;GAC9C,UAAU;GACV,eAAe;GACf,cAAc;GACf,CAAC;UACK,KAAK;AACZ,YACE,gDACE,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAEnD;;;AAIL,IAAa,cAAb,MAAyB;CAEvB,WAAmB,IAAmB,aAAa,EAAE,CAAC,CAAC;CACvD,kBAA0B,KAAe,EAAE,CAAC;CAC5C,kBAA0B,KAAK,MAAM;CACrC,SAAiB,KAAiB,EAAE,CAAC;CACrC,aAAqB,KAAqB,EAAE,CAAC;CAC7C,eAAuB,KAAoB,KAAK;CAChD,qBAA6B,KAAK,EAAE;CACpC,qBAA6B,KAAK,MAAM;CACxC,WAAmB,KAAK,EAAE;CAC1B,gBAAwB,KACtB,KACD;CACD,cAAsB,KAAyB,kBAAkB;CAKjE,mBAA2B,KAAA,MAAY;CAEvC,kBAA+C;;CAE/C,cAAyC;;CAGzC,oCAA4B,IAAI,KAAiC;;CAGjE,yBAAiB,IAAI,KAAwB;CAE7C,UAAU;;CAGV;;CAGA,2BAAwD;CACxD,wBAAwD;;CAGxD,qBAA+D;;CAE/D,uBAAoD;;CAGpD,yBAAkE;;CAGlE,mBAAgD;CAChD,0BACE;CAEF,YAAY,UAAqB,QAAQ,oBAAoB;AAC3D,OAAK,SAAS,IAAI,aAAa,QAAQ;AACvC,OAAK,iBAAiB,QAAQ;;;;;;;;;;;CAYhC,iBAAyB,SAA0B;EACjD,MAAM,QAAQ,gBAAgB,iBAAiB,QAAQ,CAAC;AAGxD,OAAK,MAAM,QAAQ,MACjB,KAAI,KAAK,MAAM;GACb,IAAI;GACJ,MAAM,UAAU,IAAI,SAAe,MAAM;AACvC,cAAU;KACV;AACF,QAAK,OAAO,IAAI,KAAK,IAAI;IACvB,WAAW,KAAK;IAChB;IACA;IACA,UAAU;IACX,CAAC;;;;;;;;;CAWR,eAAqB;EACnB,MAAM,QAAQ,iBAAiB,KAAK,OAAO,cAAc,CAAC;EAC1D,MAAM,mBAAkC,KAAK;EAC7C,MAAM,MAAwB;GAC5B,IAAI,UAAU;AACZ,WAAO,YAAY;;GAErB,qBAAqB,MAAM,KAAK,mBAAmB,EAAE;GACrD,sBAAsB,GAAG,MAAM,KAAK,oBAAoB,GAAG,EAAE;GAC7D,kBAAkB,KAAK,YAAY;GACpC;AACD,OAAK,MAAM,QAAQ,MACjB,MAAK,SAAS,IAAI;;;;;;;;CAUtB,MAAM,gBAA+B;EACnC,MAAM,QAAQ,iBAAiB,KAAK,OAAO,cAAc,CAAC;EAC1D,MAAM,MAA2B;GAC/B,SAAS,KAAK;GACd,sBAAsB,GAAG,MAAM,KAAK,oBAAoB,GAAG,EAAE;GAC7D,qBAAqB,GAAG,MAAM,KAAK,mBAAmB,GAAG,EAAE;GAC3D,uBAAuB,MAAM,KAAK,qBAAqB,EAAE;GACzD,wBAAwB,MAAM,KAAK,sBAAsB,EAAE;GAC3D,aAAa,OAAO,KAAK,WAAW,GAAG;GACvC,wBAAwB,SAAS,KAAK,sBAAsB,KAAK;GACjE,uBAAuB,MAAM,KAAK,qBAAqB,EAAE;GACzD,4BAA4B,KAAK,sBAAsB;GACxD;AACD,OAAK,MAAM,QAAQ,MACjB,KAAI,KAAK,QACP,OAAM,KAAK,QAAQ,IAAI;;;;;;;;;;;;;;;CAoB7B,QAAQ,QAA+B;AACrC,SAAO,KAAK,OAAO,IAAI,OAAO,EAAE,WAAW,QAAQ,SAAS;;;;;;;;;CAU9D,UAAU,WAA+D;AACvE,MAAI,UAAU,KAAK,QAAQ,CAAE,QAAO,QAAQ,SAAS;AACrD,SAAO,IAAI,SAAS,YAAY;GAC9B,MAAM,QAAQ,KAAK,gBAAgB;AACjC,QAAI,UAAU,KAAK,QAAQ,EAAE;AAC3B,YAAO;AACP,cAAS;;KAEX;IACF;;;;;;;;;;CAWJ,cAA4B;AAC1B,OAAK,MAAM,GAAG,SAAS,KAAK,OAC1B,KAAI,CAAC,KAAK,YAAY,KAAK,UAAU,KAAK,QAAQ,EAAE;AAClD,QAAK,WAAW;AAChB,QAAK,SAAS;;;CAOpB,IAAI,UAAyB;AAC3B,SAAO,KAAK,SAAS,KAAK;;CAG5B,IAAI,QAAQ,OAAsB;AAChC,OAAK,SAAS,IAAI,MAAM;AACxB,OAAK,YAAY;;CAGnB,IAAI,iBAA2B;AAC7B,SAAO,KAAK,gBAAgB,KAAK;;CAGnC,IAAI,QAAoB;AACtB,SAAO,KAAK,OAAO,KAAK;;CAG1B,IAAI,YAA4B;AAC9B,SAAO,KAAK,WAAW,KAAK;;CAG9B,IAAI,cAA6B;AAC/B,SAAO,KAAK,aAAa,KAAK;;CAGhC,IAAI,eAA4D;AAC9D,SAAO,KAAK,cAAc,KAAK;;;;CAKjC,gBAAgB,OAAqB;AAEnC,MADY,KAAK,cAAc,KAAK,EAC3B,UAAU,MAAO;AAC1B,OAAK,cAAc,IAAI;GAAE;GAAO,WAAW,KAAK,KAAK;GAAE,CAAC;AACxD,OAAK,YAAY;;CAGnB,IAAI,iBAA0B;AAC5B,SAAO,KAAK,gBAAgB,KAAK;;CAGnC,uBAA6B;AAC3B,OAAK,gBAAgB,IAAI,CAAC,KAAK,gBAAgB,KAAK,CAAC;AACrD,OAAK,YAAY;;CAGnB,kBAAkB,UAAyB;AACzC,MAAI,KAAK,gBAAgB,KAAK,KAAK,UAAU;AAC3C,QAAK,gBAAgB,IAAI,SAAS;AAClC,QAAK,YAAY;;;;CASrB,gBAAsB;AACpB,OAAK,SAAS,OAAO,kBAAkB,KAAK;AAI5C,OAAK,uCAAuC;AAC5C,YAAU,cAAc,mBAAmB,kBAAkB,KAAK,QAAQ,CAAC;AAC3E,OAAK,YAAY;;;;;;;CAQnB,eAAqB;AACnB,OAAK,SAAS,OAAO,eAAA,UAAmC;AACxD,OAAK,YAAY;;;;;;;;;;;CAYnB,iBAAuB;AACrB,OAAK,SAAS,OAAO,eAAA,WAAoC;AACzD,OAAK,YAAY;;;;;;;;;CAUnB,wCAAsD;AACpD,MAAI,+BAA+B,KAAK,QAAQ,CAC9C,MAAK,SAAS,OAAO,4BAA4B,KAAK;;CAI1D,YAAY,OAAuB;AACjC,OAAK,SAAS,OAAO,YAAY,MAAM;AACvC,YAAU,OAAO,aAAa,MAAM;AACpC,OAAK,YAAY;;CAGnB,eAAe,aAAiD;AAC9D,OAAK,SAAS,OAAO,eAAe,YAAY;AAChD,MAAI,aAAa,UACf,WAAU,OAAO,cAAc,YAAY,UAAU;AAEvD,YAAU,cAAc,iBAAiB,EACvC,YAAY,aAAa,WAC1B,CAAC;AACF,OAAK,YAAY;;;CAInB,eAAe,aAAiD;AAC9D,OAAK,SAAS,OAAO,eAAe,YAAY;AAChD,OAAK,YAAY;;CAGnB,sBAAsB,MAA2B;AAC/C,OAAK,SAAS,OAAO,sBAAsB,KAAK;AAChD,OAAK,YAAY;;CAGnB,WAAW,MAAsC;AAC/C,OAAK,SAAS,OAAO,WAAW,KAAK;AACrC,OAAK,YAAY;;CAGnB,mBACE,aACA,QACM;AACN,OAAK,SAAS,OAAO,eAAe,YAAY;AAChD,OAAK,SAAS,OAAO,mBAAmB,OAAO;AAC/C,OAAK,SAAS,OAAO,sBAAsB,KAAK;AAChD,MAAI,YAAa,WAAU,OAAO,eAAe,YAAY;AAC7D,OAAK,YAAY;;CAGnB,uBAA6B;AAC3B,OAAK,SAAS,OAAO,qBAAqB,KAAK;AAC/C,OAAK,YAAY;;CAGnB,qBAAqB,OAAqB;AACxC,OAAK,SAAS,OAAO,0BAA0B,MAAM;AACrD,YAAU,OAAO,sBAAsB,MAAM;AAC7C,OAAK,YAAY;;CAGnB,sBAAsB,UAAyB;AAC7C,OAAK,SAAS,OAAO,sBAAsB,SAAS;AACpD,OAAK,YAAY;;CAGnB,aAAa,WAA0D;AACrE,OAAK,SAAS,OAAO,aAAa,UAAU;AAC5C,OAAK,YAAY;;CAGnB,eAAe,QAAyD;AAEtE,OAAK,uBAAuB;AAC5B,MAAI,KAAK,QAAQ,WAAY,MAAK,kBAAkB,MAAM;AAC1D,OAAK,SAAS,OAAO,eAAe,OAAO;AAC3C,OAAK,YAAY;;CAGnB,WAAW,SAA8B;AACvC,OAAK,SAAS,OAAO,WAAW,QAAQ;AACxC,OAAK,YAAY;;CAGnB,sBAAsB,MAIb;AACP,OAAK,SAAS,OAAO,sBAAsB,KAAK;AAChD,OAAK,YAAY;;CAGnB,YAAY,KAA0B;AACpC,OAAK,SAAS,OAAO,YAAY,IAAI;AACrC,OAAK,YAAY;;CAGnB,gBAAgB,KAA0B;AACxC,OAAK,SAAS,OAAO,gBAAgB,IAAI;AACzC,OAAK,YAAY;;CAGnB,mBAAmB,QAA4C;AAC7D,OAAK,SAAS,OAAO,mBAAmB,OAAO;AAC/C,MAAI,UAAU,OAAO,aAAA,KACnB,2BAA0B,OAAO;AAEnC,OAAK,YAAY;;;CAInB,gBAAsB;AACpB,YAAU,2DAA2D;AACrE,OAAK,SAAS,OAAO,mBAAmB,KAAK;AAC7C,OAAK,YAAY;;;;;;CAOnB,qBACE,WACA,cACe;EACf,MAAM,UAAU,UAAU,SAAS,MAAM,EAAE,KAAK;AAChD,OAAK,SAAS,OAAO,wBAAwB,QAAQ;AACrD,OAAK,SAAS,OAAO,qBAAqB,UAAU;AACpD,OAAK,wBAAwB;AAG7B,MADoB,UAAU,MAAM,MAAM,CAAC,EAAE,SAAS,CAEpD,MAAK,YAAA,mBAAoC;MAEzC,MAAK,YAAA,oBAAqC;AAG5C,SAAO,IAAI,SAAS,YAAY;AAC9B,QAAK,2BAA2B;IAChC;;;;;;CAOJ,iBAAiB,aAKC;AAChB,OAAK,SAAS,OAAO,uBAAuB,YAAY;AACxD,OAAK,YAAA,gBAAiC;AACtC,SAAO,IAAI,SAAS,YAAY;AAC9B,QAAK,uBAAuB;IAC5B;;;CAIJ,sBAA4B;AAC1B,OAAK,SAAS,OAAO,uBAAuB,KAAK;AACjD,OAAK,YAAY;AACjB,OAAK,wBAAwB;AAC7B,OAAK,uBAAuB;;;;;;CAO9B,eAAe,QAAsC;AACnD,OAAK,SAAS,OAAO,cAAc,OAAO;AAC1C,OAAK,YAAA,cAA+B;AACpC,SAAO,IAAI,SAAS,YAAY;AAC9B,QAAK,qBAAqB;IAC1B;;;CAIJ,kBAAkB,MAAqB;AACrC,OAAK,SAAS,OAAO,cAAc,KAAK;AACxC,OAAK,YAAY;AACjB,OAAK,qBAAqB,KAAK;AAC/B,OAAK,qBAAqB;;;;;;;CAQ5B,wBAAyC;AACvC,SAAO,IAAI,SAAiB,YAAY;AACtC,QAAK,yBAAyB;IAC9B;;;CAIJ,qBAA2B;AACzB,OAAK,YAAA,mBAAmC;;;CAI1C,wBAA8B;AAC5B,OAAK,YAAY;;;;;;CAOnB,qBAAqB,MAAoB;AACvC,OAAK,YAAY;AACjB,OAAK,yBAAyB,KAAK;AACnC,OAAK,yBAAyB;;;;;;;;;CAUhC,gBACE,UACA,UACqB;AACrB,MAAI,KAAK,wBACP,OAAM,IAAI,MACR,qEACD;AAEH,OAAK,mBAAmB,YAAY;AACpC,OAAK,SAAS,OAAO,mBAAmB,SAAS;AACjD,OAAK,YAAA,aAA8B;AACnC,YAAU,cAAc,oBAAoB;GAC1C,QAAQ,SAAS;GACjB,gBAAgB,SAAS,UAAU;GACnC,OAAO,SAAS,UAAU,KAAK,MAAM,EAAE,KAAK;GAC7C,CAAC;AACF,SAAO,IAAI,SAAqB,YAAY;AAC1C,QAAK,0BAA0B;IAC/B;;;;;;CAOJ,kBAAwB;AACtB,OAAK,oBAAoB;;;;;;CAO3B,uBAAuB,SAA2B;EAChD,MAAM,UAAU,KAAK;AACrB,OAAK,0BAA0B;AAC/B,OAAK,mBAAmB;AACxB,OAAK,SAAS,OAAO,mBAAmB,KAAK;AAC7C,OAAK,YAAY;AACjB,YAAU,QAAQ;;;;;;CAOpB,wBAA8B;EAC5B,MAAM,UAAU,KAAK,QAAQ;AAC7B,MAAI,CAAC,QAAS;EACd,MAAM,YAAwB,EAAE;AAChC,OAAK,MAAM,KAAK,QAAQ,UACtB,WAAU,EAAE,MAAM;AAEpB,OAAK,uBAAuB,UAAU;;;;;CAMxC,+BAAwC;EACtC,MAAM,KAAK,KAAK,yBAAyB,IAAI;AAC7C,MAAI,IAAI;AACN,QAAK,SAAS,OAAO,wBAAwB,KAAK;AAClD,QAAK,SAAS,OAAO,qBAAqB,KAAK;AAC/C,QAAK,YAAY;AACjB,QAAK,4BAA4B;AACjC,QAAK,2BAA2B;AAChC,QAAK,wBAAwB;;AAE/B,SAAO;;;CAIT,cAAc,QAAgC;AAC5C,OAAK,SAAS,OAAO,mBAAmB,UAAU,KAAK;AACvD,OAAK,YAAA,aAA8B;;;CAIrC,qBAA2B;AACzB,OAAK,YAAA,kBAAmC;;CAG1C,qBAAqB,SAAkC;AACrD,MAAI,CAAC,KAAK,QAAQ,mBAAmB,SAAS,QAAQ,EAAE;AACtD,QAAK,QAAQ,mBAAmB,KAAK,QAAQ;AAC7C,QAAK,YAAY;;;CAIrB,eACE,UAAA,WACA,mBAA6B,EAAE,EAC/B,kBACA,gBAA0B,EAAE,EACtB;AACN,OAAK,SAAS,OAAO,eAAe,KAAK;AACzC,OAAK,SAAS,OAAO,cAAc,QAAQ;AAC3C,OAAK,SAAS,OAAO,uBAAuB,iBAAiB;AAC7D,OAAK,SAAS,OAAO,oBAAoB,cAAc;EACvD,MAAM,kBACJ,YAAA,eAAoC,qBAAqB,KAAA,IACrD,EAAE,uBAAuB,kBAAkB,GAC3C,EAAE;AACR,YAAU,cAAc,gBAAgB;GACtC,aAAa;GACb,uBAAuB;GACvB,GAAG;GACH,GAAG,kBAAkB,KAAK,QAAQ;GACnC,CAAC;AACF,OAAK,YAAY;;CAGnB,kBAAkB,MAAqB;AACrC,OAAK,SAAS,OAAO,kBAAkB,KAAK;AAC5C,YAAU,cAAc,mBAAmB;GACzC,aAAa;GACb,GAAG,kBAAkB,KAAK,QAAQ;GACnC,CAAC;AACF,OAAK,YAAY;;CAGnB,kCAAwC;AACtC,OAAK,SAAS,OAAO,gCAAgC,KAAK;AAC1D,OAAK,YAAY;;CAGnB,wBAA8B;AAC5B,OAAK,SAAS,OAAO,sBAAsB,KAAK;AAChD,OAAK,YAAY;;CAGnB,kBAAkB,WAA0B;AAC1C,OAAK,SAAS,OAAO,kBAAkB,UAAU;AACjD,OAAK,YAAY;;CAGnB,mBAAmB,WAA0B;AAC3C,OAAK,SAAS,OAAO,mBAAmB,UAAU;AAClD,OAAK,YAAY;;;;;;;CAQnB,cAAc,WAA4B;AACxC,OAAK,SAAS,OAAO,kBAAkB,KAAK;AAC5C,OAAK,SAAS,OAAO,aAAa,UAAU;AAC5C,OAAK,YAAY;;;;;;;CAQnB,aACE,WACA,OACM;AACN,OAAK,SAAS,OAAO,aAAa,UAAU;AAC5C,YAAU,cAAc,kCAAkC;GACxD,wBAAwB;GACxB,GAAI,OAAO,MAAM,EAAE,4BAA4B,MAAM,KAAK,GAAG,EAAE;GAC/D,GAAI,OAAO,OAAO,EAAE,6BAA6B,MAAM,MAAM,GAAG,EAAE;GAClE,GAAG,kBAAkB,KAAK,QAAQ;GACnC,CAAC;AACF,OAAK,YAAY;;;;;;;;;;;CAYnB,uBAAuB,OAAe,QAA2B;AAC/D,OAAK,SAAS,OAAO,UAAU,KAAK;AACpC,OAAK,SAAS,OAAO,SAAS,MAAM;AACpC,OAAK,SAAS,OAAO,UAAU,OAAO;AACtC,OAAK,SAAS,OAAO,aAAa,KAAK;AACvC,YAAU,cAAc,kCAAkC;GACxD,wBAAwB;GACxB,0BAA0B;GAC1B,kBAAkB;GAClB,GAAG,kBAAkB,KAAK,QAAQ;GACnC,CAAC;AACF,OAAK,YAAY;;;;;;CAOnB,4BAAkC;AAChC,OAAK,SAAS,OAAO,+BAA+B,KAAK;AACzD,OAAK,YAAY;;;;;;;CAQnB,gBAAgB,QAAsB;EACpC,MAAM,OAAO,KAAK,QAAQ;AAC1B,MAAI,CAAC,KAAK,SAAS,OAAO,CACxB,MAAK,SAAS,OAAO,iBAAiB,CAAC,GAAG,MAAM,OAAO,CAAC;AAE1D,OAAK,OAAO,IAAI,EAAE,CAAC;AACnB,OAAK,YAAA,OAA0B;;CAGjC,kBAAkB,YAAY,MAAY;AACxC,OAAK,SAAS,OAAO,kBAAkB,UAAU;AACjD,OAAK,YAAY;;CAGnB,aAAa,MAAuB;AAClC,OAAK,SAAS,OAAO,aAAa,KAAK;AACvC,OAAK,YAAY;;CAGnB,gBAAgB,KAAmB;AACjC,YAAU,0BAA0B,MAAM;AAC1C,OAAK,SAAS,OAAO,gBAAgB,IAAI;AACzC,OAAK,YAAY;;CAGnB,eAAe,KAAmB;AAChC,YAAU,yBAAyB,MAAM;AACzC,OAAK,SAAS,OAAO,eAAe,IAAI;AACxC,OAAK,YAAY;;CAGnB,oBAAoB,KAAa,OAAsB;EACrD,MAAM,MAAM;GAAE,GAAG,KAAK,SAAS,KAAK,CAAC;IAAmB,MAAM;GAAO;AACrE,OAAK,SAAS,OAAO,oBAAoB,IAAI;AAC7C,OAAK,YAAY;;CAGnB,cAAc,SAA0B;AACtC,MAAI,YAAY,KAAK,OAAO,cAAe;AAG3C,OAAK,MAAM,QAAQ,KAAK,OAAO,QAAQ,CAAE,MAAK,SAAS;AACvD,OAAK,OAAO,OAAO;AAEnB,OAAK,OAAO,WAAW,QAAQ;AAC/B,OAAK,iBAAiB,QAAQ;AAG9B,YAAU,OAAO,cAAc,QAAQ;EAEvC,MAAM,SAAS,iBAAiB,QAAQ;AACxC,OAAK,SAAS,OAAO,kBAAkB,MAAM;AAC7C,OAAK,SAAS,OAAO,gBAAgB,OAAO,GAAG;AAC/C,OAAK,SAAS,OAAO,WAAW,OAAO,WAAW,KAAK;AACvD,OAAK,YAAY;;;;;;CASnB,IAAI,gBAA4B;AAC9B,SAAO,KAAK,OAAO,QAAQ,KAAK,QAAQ;;;CAI1C,IAAI,mBAA0C;AAC5C,SAAO,KAAK,OAAO;;CAKrB,aAAqB;AACnB,SAAO,KAAK,SAAS,KAAK;;;;;;;CAQ5B,aAAmB;AACjB,OAAK,OAAO,cAAc,OAAO;AACjC,OAAK,SAAS,IAAI,KAAK,SAAS,KAAK,GAAG,EAAE;AAC1C,OAAK,aAAa;AAClB,OAAK,mBAAmB;;CAK1B,YAAY,SAAwB;AAClC,OAAK,OAAO,cAAc,OAAO;AACjC,OAAK,OAAO,YAAY,QAAQ;AAChC,OAAK,SAAS,IAAI,KAAK,SAAS,KAAK,GAAG,EAAE;AAC1C,OAAK,mBAAmB;;CAG1B,aAAmB;AACjB,OAAK,OAAO,cAAc,MAAM;AAChC,OAAK,OAAO,YAAY;AACxB,OAAK,SAAS,IAAI,KAAK,SAAS,KAAK,GAAG,EAAE;AAC1C,OAAK,mBAAmB;;;;;;CAS1B,cAAc,QAAoB,IAAsB;EACtD,MAAM,OAAO,KAAK,kBAAkB,IAAI,OAAO,IAAI,EAAE;AACrD,OAAK,KAAK,GAAG;AACb,OAAK,kBAAkB,IAAI,QAAQ,KAAK;;;;;;;CAQ1C,oBAA4B,QAA+B;EACzD,MAAM,UAAU,KAAK,OAAO;AAI5B,SAHa,iBAAiB,QAAQ,CAAC,MAAM,MAC1C,MAAM,EAAE,aAAa,OACvB,EACY,sBAAsB;;;;CAKrC,IAAI,qBAAgC;AAClC,SAAO,KAAK,oBAAoB,KAAK,OAAO,QAAQ,KAAK,QAAQ,CAAC;;;;;;CAOpE,oBAAkC;EAChC,MAAM,OAAO,KAAK,OAAO,QAAQ,KAAK,QAAQ;EAC9C,MAAM,OAAO,KAAK;AAClB,MAAI,SAAS,KAGX,WAAU,OAAO,gBAAgB,KAAK;AAExC,MAAI,SAAS,QAAQ,SAAS,MAAM;GAClC,MAAM,QAAQ,KAAK,kBAAkB,IAAI,KAAK;AAC9C,OAAI,MACF,MAAK,MAAM,MAAM,MAAO,KAAI;AAE9B,aAAU,cAAc,UAAU,QAAQ;IACxC,aAAa;IACb,YAAY,KAAK,oBAAoB,KAAK;IAC1C,GAAG,kBAAkB,KAAK,QAAQ;IACnC,CAAC;;AAEJ,OAAK,cAAc;;CAKrB,WAAW,SAAuB;EAChC,MAAM,OAAO,KAAK,gBAAgB,KAAK;EACvC,MAAM,OAAO,aAAa,MAAM,QAAQ;AACxC,MAAI,SAAS,KAAM;AACnB,OAAK,gBAAgB,IAAI,KAAK;AAC9B,OAAK,YAAY;;CAGnB,IAAI,aAAiC;AACnC,SAAO,KAAK,YAAY,KAAK;;CAG/B,IAAI,kBAA2B;AAC7B,SAAO,KAAK,iBAAiB,KAAK;;;;CAKpC,iBAAuB;AACrB,OAAK,iBAAiB,IAAI,CAAC,KAAK,iBAAiB,KAAK,CAAC;AACvD,OAAK,YAAY;;;;;;;;;CAUnB,cAAc,OAA8B;EAC1C,MAAM,MAAM,KAAK,YAAY,KAAK;AAClC,MAAI,IAAI,YAAa;EACrB,MAAM,eAAe,oBAAoB,MAAM;AAC/C,OAAK,YAAY,IAAI;GACnB,aAAa,IAAI,cAAc,MAAM;GACrC,cAAc,IAAI,eAAe,MAAM;GACvC,iBAAiB,IAAI,kBAAkB,MAAM;GAC7C,qBAAqB,IAAI,sBAAsB,MAAM;GACrD,SAAS,IAAI,UAAU;GACvB,aAAa;GACd,CAAC;AACF,OAAK,YAAY;;;;;CAMnB,qBAAqB,SAAuB;EAC1C,MAAM,MAAM,KAAK,YAAY,KAAK;AAClC,OAAK,YAAY,IAAI;GAAE,GAAG;GAAK;GAAS,aAAa;GAAM,CAAC;AAC5D,OAAK,YAAY;;CAGnB,SAAS,OAAyB;AAChC,OAAK,OAAO,IAAI,MAAM;AACtB,OAAK,YAAY;;CAGnB,WAAW,OAAe,MAAqB;EAC7C,MAAM,QAAQ,KAAK,OAAO,KAAK;AAC/B,MAAI,MAAM,QAAQ;GAChB,MAAM,UAAU,CAAC,GAAG,MAAM;AAC1B,WAAQ,SAAS;IACf,GAAG,QAAQ;IACX;IACA,QAAQ,OAAA,cAAA;IACT;AACD,QAAK,OAAO,IAAI,QAAQ;AACxB,QAAK,YAAY;;;CAIrB,aAAa,QAA8B;AACzC,OAAK,WAAW,IAAI,OAAO;AAC3B,OAAK,YAAY;;;CAInB,eAAe,MAAoB;AACjC,MAAI,KAAK,aAAa,KAAK,KAAK,KAAM;AACtC,YAAU,yBAAyB,KAAK,OAAO,QAAQ;AACvD,OAAK,aAAa,IAAI,KAAK;AAC3B,OAAK,YAAY;;CAGnB,IAAI,oBAA4B;AAC9B,SAAO,KAAK,mBAAmB,KAAK;;CAGtC,qBAAqB,KAAmB;AACtC,OAAK,mBAAmB,IAAI,IAAI;;CAGlC,IAAI,oBAA6B;AAC/B,SAAO,KAAK,mBAAmB,KAAK;;CAGtC,uBAA6B;AAC3B,OAAK,mBAAmB,IAAI,KAAK;AACjC,OAAK,YAAY;;CAGnB,UACE,OAOM;EACN,MAAM,WAAW,MAAM,KAAK,MAAM;GAChC,MAAM,SAAS,aAAa,EAAE,OAAO,GAAG,EAAE,SAAA;AAC1C,UAAO;IACL,IAAI,EAAE;IACN,QAAQ,EAAE;IACV,cAAc,aAAa,EAAE,OAAO,GAAG,KAAA,IAAY,EAAE;IACrD,OAAO,EAAE;IACT,YAAY,EAAE;IACd;IACA,MAAM,WAAA;IACP;IACD;EAEF,MAAM,iBAAiB,IAAI,IAAI,SAAS,KAAK,MAAM,EAAE,MAAM,CAAC;EAC5D,MAAM,UAAU,IAAI,IAAI,MAAM,KAAK,MAAM,EAAE,OAAO,CAAC;EAEnD,MAAM,WAAW,KAAK,OACnB,KAAK,CACL,QACE,OACE,EAAE,WAAA,eACD,EAAE,WAAA,YACF,EAAE,WAAA,eACH,EAAE,SAAS,CAAC,QAAQ,IAAI,EAAE,OAAO,GAAG,CAAC,eAAe,IAAI,EAAE,MAAM,EACpE;AAEH,OAAK,OAAO,IAAI,CAAC,GAAG,UAAU,GAAG,SAAS,CAAC;AAC3C,OAAK,YAAY;AACjB,OAAK,mBAAmB;;;CAI1B,IAAI,eAAe,IAAgB;AACjC,OAAK,kBAAkB;;CAKzB,UAAU,UAAkC;AAC1C,SAAO,KAAK,SAAS,aAAa,UAAU,CAAC;;CAG/C,cAAsB;AACpB,SAAO,KAAK,SAAS,KAAK"}

package/dist/{subagent-Bfy0sfhU.js → subagent-D_Sqak94.js}

@@ -1,5 +1,5 @@
-import { s as logToFile } from "./debug-Cj-8vfXY.js";
-import { a as gatewayTerminalFailure } from "./gateway-CVU1G0H3.js";
+import { s as logToFile } from "./debug-DyARf5TF.js";
+import { a as gatewayTerminalFailure } from "./gateway-BmjYUSua.js";
 import { Type } from "typebox";
 import { defineTool } from "@earendil-works/pi-coding-agent";
 //#region src/agent/runner/harness/pi/subagent.ts
@@ -110,4 +110,4 @@ function createDispatchAgentTool(ctx) {
 //#endregion
 export { createDispatchAgentTool };
 
-//# sourceMappingURL=subagent-Bfy0sfhU.js.map
+//# sourceMappingURL=subagent-D_Sqak94.js.map

package/dist/{subagent-Bfy0sfhU.js.map → subagent-D_Sqak94.js.map}

@@ -1 +1 @@
-{"version":3,"file":"subagent-Bfy0sfhU.js","names":[],"sources":["../src/agent/runner/harness/pi/subagent.ts"],"sourcesContent":["/**\n * Controlled subagent dispatch for pi (#526). pi has no native subagent\n * mechanism, so a subagent is a nested `createAgentSession` we construct — which\n * means WE decide its powers, closing the leak the claude-agent-sdk path warns\n * about (it can't propagate the parent's disallowedTools into subagents).\n *\n * Controls on every child:\n *  - the SAME security extension (canUseTool + YARA, fail-closed) — shared state,\n *    so the child shares the parent's tool-call cap and violation latch;\n *  - a read-only built-in toolset (read/grep/find/ls + allowlisted bash) — no\n *    write/edit, so a subagent can research but never mutate the project;\n *  - no custom tools — no .env writes, and crucially no `dispatch_agent`, so a\n *    child cannot recurse (depth is hard-capped at 1).\n */\n\nimport { Type } from 'typebox';\nimport { defineTool } from '@earendil-works/pi-coding-agent';\nimport type { ToolDefinition } from '@earendil-works/pi-coding-agent';\nimport { logToFile } from '@utils/debug';\nimport { gatewayTerminalFailure } from './gateway';\n\n/**\n * Read-only built-ins a subagent may use. bash is supplied separately as the\n * parent's env-scrubbed tool (below), not the built-in, so a subagent's\n * subprocesses are locked down too.\n */\nconst SUBAGENT_TOOLS = ['read', 'grep', 'find', 'ls'];\n\nconst SUBAGENT_SYSTEM_PROMPT = [\n  'You are a read-only research subagent for the PostHog wizard.',\n  'You can read and search files and run safe build/inspect shell commands.',\n  'You cannot edit files, modify .env, or dispatch further subagents.',\n  'Investigate the task you are given and report concise findings as your final message.',\n].join('\\n');\n\nfunction text(s: string): {\n  content: [{ type: 'text'; text: string }];\n  details: unknown;\n} {\n  return { content: [{ type: 'text', text: s }], details: {} };\n}\n\nfunction extractText(message: unknown): string {\n  const content = (message as { content?: unknown })?.content;\n  if (typeof content === 'string') return content;\n  if (Array.isArray(content)) {\n    return content\n      .filter((c): c is { type: string; text: string } => {\n        const b = c as { type?: string; text?: unknown };\n        return b?.type === 'text' && typeof b.text === 'string';\n      })\n      .map((c) => c.text)\n      .join('');\n  }\n  return '';\n}\n\nexport interface SubagentContext {\n  /** Resolved gateway model (same as the parent). */\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  model: import('@earendil-works/pi-ai').Model<any>;\n  /** Registry holding the gateway provider. */\n  modelRegistry: import('@earendil-works/pi-coding-agent').ModelRegistry;\n  cwd: string;\n  agentDir: string;\n  /** The parent's security extension factory — reused so the fence is inherited. */\n  securityFactory: (pi: unknown) => void;\n  /** The parent's env-scrubbed bash, so a subagent's subprocesses are locked down too. */\n  bashTool: ToolDefinition;\n  /** pi SDK entrypoints, already imported by the backend. */\n  sdk: {\n    createAgentSession: typeof import('@earendil-works/pi-coding-agent')['createAgentSession'];\n    DefaultResourceLoader: typeof import('@earendil-works/pi-coding-agent')['DefaultResourceLoader'];\n    SessionManager: typeof import('@earendil-works/pi-coding-agent')['SessionManager'];\n  };\n}\n\nexport function createDispatchAgentTool(ctx: SubagentContext): ToolDefinition {\n  return defineTool({\n    name: 'dispatch_agent',\n    label: 'Dispatch subagent',\n    description:\n      'Delegate a focused, read-only research subtask to a subagent (e.g. \"find where events are captured\"). The subagent can read/search files and run safe shell, but CANNOT edit files, change .env, or dispatch further subagents. Returns its findings.',\n    promptSnippet:\n      'dispatch_agent(description, prompt) — delegate a read-only research subtask',\n    parameters: Type.Object({\n      description: Type.String({ description: 'Short label for the subtask' }),\n      prompt: Type.String({ description: 'Full instruction for the subagent' }),\n    }),\n    // eslint-disable-next-line @typescript-eslint/require-await -- pi tool contract returns a Promise\n    async execute(_id, args) {\n      const { createAgentSession, DefaultResourceLoader, SessionManager } =\n        ctx.sdk;\n\n      const loader = new DefaultResourceLoader({\n        cwd: ctx.cwd,\n        agentDir: ctx.agentDir,\n        systemPrompt: SUBAGENT_SYSTEM_PROMPT,\n        noExtensions: true,\n        noSkills: true,\n        noContextFiles: true,\n        noPromptTemplates: true,\n        noThemes: true,\n        extensionFactories: [ctx.securityFactory],\n      });\n      await loader.reload();\n\n      const { session: child } = await createAgentSession({\n        model: ctx.model,\n        modelRegistry: ctx.modelRegistry,\n        cwd: ctx.cwd,\n        sessionManager: SessionManager.inMemory(ctx.cwd),\n        resourceLoader: loader,\n        tools: SUBAGENT_TOOLS, // read-only built-ins; no write/edit, no dispatch_agent\n        customTools: [ctx.bashTool], // env-scrubbed bash only (still allowlist-fenced)\n      });\n\n      let result = '';\n      let finalTurn:\n        | {\n            stopReason?: string;\n            errorMessage?: string;\n            diagnostics?: {\n              error?: { name?: string; code?: string | number };\n            }[];\n          }\n        | undefined;\n      const unsub = child.subscribe((e) => {\n        if (e.type === 'message_end') {\n          if ((e.message as { role?: string })?.role === 'assistant')\n            finalTurn = e.message as typeof finalTurn;\n          const t = extractText(e.message).trim();\n          if (t) result = t;\n        }\n      });\n      logToFile(`[pi] subagent dispatch: ${args.description}`);\n      try {\n        await child.prompt(args.prompt);\n        const failure = gatewayTerminalFailure(finalTurn);\n        if (failure) throw new Error(`Subagent failed: ${failure.message}`);\n      } finally {\n        unsub();\n      }\n      logToFile(`[pi] subagent \"${args.description}\" → ${result.length} chars`);\n      return text(result || 'Subagent completed with no textual result.');\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA0BA,MAAM,iBAAiB;CAAC;CAAQ;CAAQ;CAAQ;CAAK;AAErD,MAAM,yBAAyB;CAC7B;CACA;CACA;CACA;CACD,CAAC,KAAK,KAAK;AAEZ,SAAS,KAAK,GAGZ;AACA,QAAO;EAAE,SAAS,CAAC;GAAE,MAAM;GAAQ,MAAM;GAAG,CAAC;EAAE,SAAS,EAAE;EAAE;;AAG9D,SAAS,YAAY,SAA0B;CAC7C,MAAM,UAAW,SAAmC;AACpD,KAAI,OAAO,YAAY,SAAU,QAAO;AACxC,KAAI,MAAM,QAAQ,QAAQ,CACxB,QAAO,QACJ,QAAQ,MAA2C;EAClD,MAAM,IAAI;AACV,SAAO,GAAG,SAAS,UAAU,OAAO,EAAE,SAAS;GAC/C,CACD,KAAK,MAAM,EAAE,KAAK,CAClB,KAAK,GAAG;AAEb,QAAO;;AAuBT,SAAgB,wBAAwB,KAAsC;AAC5E,QAAO,WAAW;EAChB,MAAM;EACN,OAAO;EACP,aACE;EACF,eACE;EACF,YAAY,KAAK,OAAO;GACtB,aAAa,KAAK,OAAO,EAAE,aAAa,+BAA+B,CAAC;GACxE,QAAQ,KAAK,OAAO,EAAE,aAAa,qCAAqC,CAAC;GAC1E,CAAC;EAEF,MAAM,QAAQ,KAAK,MAAM;GACvB,MAAM,EAAE,oBAAoB,uBAAuB,mBACjD,IAAI;GAEN,MAAM,SAAS,IAAI,sBAAsB;IACvC,KAAK,IAAI;IACT,UAAU,IAAI;IACd,cAAc;IACd,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,UAAU;IACV,oBAAoB,CAAC,IAAI,gBAAgB;IAC1C,CAAC;AACF,SAAM,OAAO,QAAQ;GAErB,MAAM,EAAE,SAAS,UAAU,MAAM,mBAAmB;IAClD,OAAO,IAAI;IACX,eAAe,IAAI;IACnB,KAAK,IAAI;IACT,gBAAgB,eAAe,SAAS,IAAI,IAAI;IAChD,gBAAgB;IAChB,OAAO;IACP,aAAa,CAAC,IAAI,SAAS;IAC5B,CAAC;GAEF,IAAI,SAAS;GACb,IAAI;GASJ,MAAM,QAAQ,MAAM,WAAW,MAAM;AACnC,QAAI,EAAE,SAAS,eAAe;AAC5B,SAAK,EAAE,SAA+B,SAAS,YAC7C,aAAY,EAAE;KAChB,MAAM,IAAI,YAAY,EAAE,QAAQ,CAAC,MAAM;AACvC,SAAI,EAAG,UAAS;;KAElB;AACF,aAAU,2BAA2B,KAAK,cAAc;AACxD,OAAI;AACF,UAAM,MAAM,OAAO,KAAK,OAAO;IAC/B,MAAM,UAAU,uBAAuB,UAAU;AACjD,QAAI,QAAS,OAAM,IAAI,MAAM,oBAAoB,QAAQ,UAAU;aAC3D;AACR,WAAO;;AAET,aAAU,kBAAkB,KAAK,YAAY,MAAM,OAAO,OAAO,QAAQ;AACzE,UAAO,KAAK,UAAU,6CAA6C;;EAEtE,CAAC"}
+{"version":3,"file":"subagent-D_Sqak94.js","names":[],"sources":["../src/agent/runner/harness/pi/subagent.ts"],"sourcesContent":["/**\n * Controlled subagent dispatch for pi (#526). pi has no native subagent\n * mechanism, so a subagent is a nested `createAgentSession` we construct — which\n * means WE decide its powers, closing the leak the claude-agent-sdk path warns\n * about (it can't propagate the parent's disallowedTools into subagents).\n *\n * Controls on every child:\n *  - the SAME security extension (canUseTool + YARA, fail-closed) — shared state,\n *    so the child shares the parent's tool-call cap and violation latch;\n *  - a read-only built-in toolset (read/grep/find/ls + allowlisted bash) — no\n *    write/edit, so a subagent can research but never mutate the project;\n *  - no custom tools — no .env writes, and crucially no `dispatch_agent`, so a\n *    child cannot recurse (depth is hard-capped at 1).\n */\n\nimport { Type } from 'typebox';\nimport { defineTool } from '@earendil-works/pi-coding-agent';\nimport type { ToolDefinition } from '@earendil-works/pi-coding-agent';\nimport { logToFile } from '@utils/debug';\nimport { gatewayTerminalFailure } from './gateway';\n\n/**\n * Read-only built-ins a subagent may use. bash is supplied separately as the\n * parent's env-scrubbed tool (below), not the built-in, so a subagent's\n * subprocesses are locked down too.\n */\nconst SUBAGENT_TOOLS = ['read', 'grep', 'find', 'ls'];\n\nconst SUBAGENT_SYSTEM_PROMPT = [\n  'You are a read-only research subagent for the PostHog wizard.',\n  'You can read and search files and run safe build/inspect shell commands.',\n  'You cannot edit files, modify .env, or dispatch further subagents.',\n  'Investigate the task you are given and report concise findings as your final message.',\n].join('\\n');\n\nfunction text(s: string): {\n  content: [{ type: 'text'; text: string }];\n  details: unknown;\n} {\n  return { content: [{ type: 'text', text: s }], details: {} };\n}\n\nfunction extractText(message: unknown): string {\n  const content = (message as { content?: unknown })?.content;\n  if (typeof content === 'string') return content;\n  if (Array.isArray(content)) {\n    return content\n      .filter((c): c is { type: string; text: string } => {\n        const b = c as { type?: string; text?: unknown };\n        return b?.type === 'text' && typeof b.text === 'string';\n      })\n      .map((c) => c.text)\n      .join('');\n  }\n  return '';\n}\n\nexport interface SubagentContext {\n  /** Resolved gateway model (same as the parent). */\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  model: import('@earendil-works/pi-ai').Model<any>;\n  /** Registry holding the gateway provider. */\n  modelRegistry: import('@earendil-works/pi-coding-agent').ModelRegistry;\n  cwd: string;\n  agentDir: string;\n  /** The parent's security extension factory — reused so the fence is inherited. */\n  securityFactory: (pi: unknown) => void;\n  /** The parent's env-scrubbed bash, so a subagent's subprocesses are locked down too. */\n  bashTool: ToolDefinition;\n  /** pi SDK entrypoints, already imported by the backend. */\n  sdk: {\n    createAgentSession: typeof import('@earendil-works/pi-coding-agent')['createAgentSession'];\n    DefaultResourceLoader: typeof import('@earendil-works/pi-coding-agent')['DefaultResourceLoader'];\n    SessionManager: typeof import('@earendil-works/pi-coding-agent')['SessionManager'];\n  };\n}\n\nexport function createDispatchAgentTool(ctx: SubagentContext): ToolDefinition {\n  return defineTool({\n    name: 'dispatch_agent',\n    label: 'Dispatch subagent',\n    description:\n      'Delegate a focused, read-only research subtask to a subagent (e.g. \"find where events are captured\"). The subagent can read/search files and run safe shell, but CANNOT edit files, change .env, or dispatch further subagents. Returns its findings.',\n    promptSnippet:\n      'dispatch_agent(description, prompt) — delegate a read-only research subtask',\n    parameters: Type.Object({\n      description: Type.String({ description: 'Short label for the subtask' }),\n      prompt: Type.String({ description: 'Full instruction for the subagent' }),\n    }),\n    // eslint-disable-next-line @typescript-eslint/require-await -- pi tool contract returns a Promise\n    async execute(_id, args) {\n      const { createAgentSession, DefaultResourceLoader, SessionManager } =\n        ctx.sdk;\n\n      const loader = new DefaultResourceLoader({\n        cwd: ctx.cwd,\n        agentDir: ctx.agentDir,\n        systemPrompt: SUBAGENT_SYSTEM_PROMPT,\n        noExtensions: true,\n        noSkills: true,\n        noContextFiles: true,\n        noPromptTemplates: true,\n        noThemes: true,\n        extensionFactories: [ctx.securityFactory],\n      });\n      await loader.reload();\n\n      const { session: child } = await createAgentSession({\n        model: ctx.model,\n        modelRegistry: ctx.modelRegistry,\n        cwd: ctx.cwd,\n        sessionManager: SessionManager.inMemory(ctx.cwd),\n        resourceLoader: loader,\n        tools: SUBAGENT_TOOLS, // read-only built-ins; no write/edit, no dispatch_agent\n        customTools: [ctx.bashTool], // env-scrubbed bash only (still allowlist-fenced)\n      });\n\n      let result = '';\n      let finalTurn:\n        | {\n            stopReason?: string;\n            errorMessage?: string;\n            diagnostics?: {\n              error?: { name?: string; code?: string | number };\n            }[];\n          }\n        | undefined;\n      const unsub = child.subscribe((e) => {\n        if (e.type === 'message_end') {\n          if ((e.message as { role?: string })?.role === 'assistant')\n            finalTurn = e.message as typeof finalTurn;\n          const t = extractText(e.message).trim();\n          if (t) result = t;\n        }\n      });\n      logToFile(`[pi] subagent dispatch: ${args.description}`);\n      try {\n        await child.prompt(args.prompt);\n        const failure = gatewayTerminalFailure(finalTurn);\n        if (failure) throw new Error(`Subagent failed: ${failure.message}`);\n      } finally {\n        unsub();\n      }\n      logToFile(`[pi] subagent \"${args.description}\" → ${result.length} chars`);\n      return text(result || 'Subagent completed with no textual result.');\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA0BA,MAAM,iBAAiB;CAAC;CAAQ;CAAQ;CAAQ;CAAK;AAErD,MAAM,yBAAyB;CAC7B;CACA;CACA;CACA;CACD,CAAC,KAAK,KAAK;AAEZ,SAAS,KAAK,GAGZ;AACA,QAAO;EAAE,SAAS,CAAC;GAAE,MAAM;GAAQ,MAAM;GAAG,CAAC;EAAE,SAAS,EAAE;EAAE;;AAG9D,SAAS,YAAY,SAA0B;CAC7C,MAAM,UAAW,SAAmC;AACpD,KAAI,OAAO,YAAY,SAAU,QAAO;AACxC,KAAI,MAAM,QAAQ,QAAQ,CACxB,QAAO,QACJ,QAAQ,MAA2C;EAClD,MAAM,IAAI;AACV,SAAO,GAAG,SAAS,UAAU,OAAO,EAAE,SAAS;GAC/C,CACD,KAAK,MAAM,EAAE,KAAK,CAClB,KAAK,GAAG;AAEb,QAAO;;AAuBT,SAAgB,wBAAwB,KAAsC;AAC5E,QAAO,WAAW;EAChB,MAAM;EACN,OAAO;EACP,aACE;EACF,eACE;EACF,YAAY,KAAK,OAAO;GACtB,aAAa,KAAK,OAAO,EAAE,aAAa,+BAA+B,CAAC;GACxE,QAAQ,KAAK,OAAO,EAAE,aAAa,qCAAqC,CAAC;GAC1E,CAAC;EAEF,MAAM,QAAQ,KAAK,MAAM;GACvB,MAAM,EAAE,oBAAoB,uBAAuB,mBACjD,IAAI;GAEN,MAAM,SAAS,IAAI,sBAAsB;IACvC,KAAK,IAAI;IACT,UAAU,IAAI;IACd,cAAc;IACd,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,UAAU;IACV,oBAAoB,CAAC,IAAI,gBAAgB;IAC1C,CAAC;AACF,SAAM,OAAO,QAAQ;GAErB,MAAM,EAAE,SAAS,UAAU,MAAM,mBAAmB;IAClD,OAAO,IAAI;IACX,eAAe,IAAI;IACnB,KAAK,IAAI;IACT,gBAAgB,eAAe,SAAS,IAAI,IAAI;IAChD,gBAAgB;IAChB,OAAO;IACP,aAAa,CAAC,IAAI,SAAS;IAC5B,CAAC;GAEF,IAAI,SAAS;GACb,IAAI;GASJ,MAAM,QAAQ,MAAM,WAAW,MAAM;AACnC,QAAI,EAAE,SAAS,eAAe;AAC5B,SAAK,EAAE,SAA+B,SAAS,YAC7C,aAAY,EAAE;KAChB,MAAM,IAAI,YAAY,EAAE,QAAQ,CAAC,MAAM;AACvC,SAAI,EAAG,UAAS;;KAElB;AACF,aAAU,2BAA2B,KAAK,cAAc;AACxD,OAAI;AACF,UAAM,MAAM,OAAO,KAAK,OAAO;IAC/B,MAAM,UAAU,uBAAuB,UAAU;AACjD,QAAI,QAAS,OAAM,IAAI,MAAM,oBAAoB,QAAQ,UAAU;aAC3D;AACR,WAAO;;AAET,aAAU,kBAAkB,KAAK,YAAY,MAAM,OAAO,OAAO,QAAQ;AACzE,UAAO,KAAK,UAAU,6CAA6C;;EAEtE,CAAC"}

package/dist/{task-BOfw7GPc.js → task-DiTI6Sak.js}

@@ -1,13 +1,14 @@
-import { s as ErrorCodes, t as classifyRunFailure } from "./errors-ddDE6MbA.js";
-import { s as logToFile } from "./debug-Cj-8vfXY.js";
-import { Q as WIZARD_USER_AGENT, Y as WIZARD_REMARK_EVENT_NAME } from "./constants-CuJfQEcC.js";
-import { n as analytics } from "./analytics-VRYdebXW.js";
-import { n as currentAccessToken } from "./oauth-session-CQTFOk-I.js";
-import { c as REMARK_INSTRUCTION, f as gatewayAuth, o as withGatewayRemint, r as buildGatewayProvider, t as GATEWAY_PROVIDER } from "./gateway-CVU1G0H3.js";
-import { g as assembleCommandments, p as AgentOutputSignals } from "./agent-interface-BXvmAm4c.js";
-import { c as runErrorType, i as lastStatusLine, l as createAioCapture, n as buildScrubbedEnv, o as withMode, r as extractText, s as bindPiCancellation, t as applyOutroMarkers } from "./pi-BtqcLX3y.js";
-import { _ as TaskStatus } from "./queue-tools-B7_aCyd-.js";
-import { c as queueTools, l as renderToolInventory, r as allowsPostHogMcp } from "./agent-prompt-loader-DiKUbhi_.js";
+import { g as assembleCommandments, p as AgentOutputSignals } from "./agent-interface-CzyCmp7q.js";
+import { n as ErrorCodes } from "./emit-BSetXzDV.js";
+import { s as logToFile } from "./debug-DyARf5TF.js";
+import { Y as WIZARD_REMARK_EVENT_NAME, et as wizardUserAgentForProgram } from "./constants-DO4X70po.js";
+import { n as analytics } from "./analytics-B6q5PN7a.js";
+import { t as classifyRunFailure } from "./errors-C2domSkK.js";
+import { n as currentAccessToken } from "./oauth-session-D-RfcVmr.js";
+import { c as REMARK_INSTRUCTION, f as gatewayAuth, o as withGatewayRemint, r as buildGatewayProvider, t as GATEWAY_PROVIDER } from "./gateway-BmjYUSua.js";
+import { c as runErrorType, i as lastStatusLine, l as createAioCapture, n as buildScrubbedEnv, o as withMode, r as extractText, s as bindPiCancellation, t as applyOutroMarkers } from "./pi-B5YTBRDv.js";
+import { _ as TaskStatus } from "./queue-tools-knnPQP0e.js";
+import { c as queueTools, l as renderToolInventory, r as allowsPostHogMcp } from "./agent-prompt-loader-4wMxlYSX.js";
 //#region src/agent/runner/harness/pi/task.ts
 /**
 * Orchestrator-mode execution on pi: one fresh pi session per unit of work —
@@ -157,22 +158,22 @@ async function runPiTask(inputs) {
 			message: "pi: gateway model could not be resolved"
 		};
 		const askState = { pending: false };
-		const { createSecurityExtension } = await import("./security-lkBwWbrK.js");
+		const { createSecurityExtension } = await import("./security-BvdSFDuM.js");
 		const security = createSecurityExtension({
 			disallowedTools: fenceDisallowList(disallowedTools),
 			triageProvider: boot.triageProvider,
 			getWizardAskPending: () => askState.pending
 		});
-		const { prewarmYaraScanner } = await import("./yara-hooks-B49RIk5d.js");
+		const { prewarmYaraScanner } = await import("./yara-hooks-CF_IsoaA.js");
 		prewarmYaraScanner();
 		const extensionFactories = [security.factory];
 		let posthogMcp = false;
 		if (allowsPostHogMcp(allowedTools)) try {
-			const { setupPostHogMcp } = await import("./mcp-JcsBBnWv.js");
+			const { setupPostHogMcp } = await import("./mcp-Co8VRF62.js");
 			const mcp = await setupPostHogMcp({
 				mcpUrl: boot.credentials.host.mcpUrl,
 				accessToken: await currentAccessToken(boot.credentials),
-				userAgent: WIZARD_USER_AGENT
+				userAgent: wizardUserAgentForProgram(config.programId)
 			});
 			extensionFactories.push(mcp.extensionFactory);
 			mcpCleanup = mcp.cleanup;
@@ -224,19 +225,20 @@ async function runPiTask(inputs) {
 			find: () => withMode(createFindToolDefinition(dir), "parallel"),
 			grep: () => withMode(createGrepToolDefinition(dir), "parallel")
 		}).filter(([name]) => codingTools.has(name)).map(([, make]) => make());
-		const { createWizardPiTools } = await import("./tools-Cc41af5W.js");
+		const { createWizardPiTools } = await import("./tools-C8LQ8QFz.js");
 		const wizardToolNames = allowedPiWizardTools(allowedTools);
 		const wizardTools = createWizardPiTools({
 			workingDirectory: dir,
 			skillsBaseUrl: boot.skillsBaseUrl,
 			triageProvider: boot.triageProvider,
 			emit,
+			taskAgent: orchestrator.currentTaskId !== void 0,
 			askBridge,
 			onAskPendingChange: (pending) => {
 				askState.pending = pending;
 			}
 		}).filter((t) => wizardToolNames.has(t.name));
-		const { createPiOrchestratorTools } = await import("./orchestrator-tools-CBdt-SXO.js");
+		const { createPiOrchestratorTools } = await import("./orchestrator-tools-CVJ1F9Ub.js");
 		const queueTools = createPiOrchestratorTools(orchestrator).filter((t) => orchestratorTools.has(t.name));
 		const customTools = [
 			...codingToolDefs,
@@ -432,4 +434,4 @@ async function runPiTask(inputs) {
 //#endregion
 export { runPiTask };
 
-//# sourceMappingURL=task-BOfw7GPc.js.map
+//# sourceMappingURL=task-DiTI6Sak.js.map