@posthog/wizard 2.79.1 → 2.80.1

package/dist/run-tool-DML8JJvt.js

@@ -0,0 +1,2420 @@
+import { n as ErrorCodes, t as emitWizardError } from "./emit-RfAewcWv.js";
+import { f as VERSION, i as getLogFilePath, o as logToFile } from "./debug-BfQPD2Hg.js";
+import { M as POSTHOG_DOCS_URL, O as OAUTH_PORTS, ct as getLocalDev, k as OAUTH_TIMEOUT_MS, n as analytics, rt as getSkillsBaseUrl, st as checkLocalServices, y as GITHUB_SKILLS_BASE_URL } from "./analytics-D21z3E5l.js";
+import { c as buildSession, it as getBlockingServiceKeys, k as getProgramConfig, m as logIn, nt as SIGNUP_WIZARD_READINESS_CONFIG } from "./programs-SeT1qNik.js";
+import { a as WizardError, t as classifyRunFailure } from "./errors-CHrJzAZb.js";
+import { n as printAbortOutro } from "./console-log-O828zyiq.js";
+import { m as runCleanups } from "./agent-interface-CemBvTAA.js";
+import { E as scanInstalledSkill, M as formatTokenCount, j as formatCostUsd } from "./posthog-integration-bwHwE87a.js";
+import { _ as downloadSkill, y as fetchSkillMenu } from "./yara-hooks-D8YDyX7o.js";
+import { i as redactSecrets, r as namesWithStatus, s as toClientResult } from "./results-DtKICAdz.js";
+import { c as flushAnalytics } from "./tools-CCMV3DmB.js";
+import { t as ALL_FEATURE_VALUES } from "./defaults-DDVl3tKN.js";
+import { n as startHostExit, r as wizardAbort } from "./wizard-abort-D3-75KyV.js";
+import { a as installPlugins, i as getSupportedPluginClients, n as getInstalledClients, o as removeMCPServer, r as getSupportedClients, s as isPluginCapable } from "./install-paPCzPHI.js";
+import { a as useStdoutDimensions, h as Icons, m as Colors, n as useKeyBindings, t as PickerMenu } from "./PickerMenu-BGGeYqd-.js";
+import { B as totalTokenCount, G as ModalOverlay, H as LogViewer, I as HNViewer, J as ProgressList, K as ConfirmationInput, L as TabContainer, M as IntroScreenLayout, N as PRIVACY_PANEL_LABEL, P as PrivacyPanel, Q as getContentBlocks, R as ScreenContainer, T as McpScreen, U as LinkText, V as EventPlanViewer, W as extractUrls, X as SplitView, Y as LoadingBox, _ as getTuiTool, a as SlackConnectScreen, b as extractOAuthCode, c as LearnCard, d as MINT_FAILURE_BODY, f as MINT_FAILURE_CONTACT, g as listFlowOwners, h as flowOwner, i as OutroScreen, k as useDismissOnAnyKey, l as AiOptInRequiredScreen, m as isRunFailure, n as releaseTerminal, o as TipsCard, p as MINT_FAILURE_MESSAGE, r as WizardStore, s as VisualizerTab, t as enterDarkTerminal, u as ServiceHealthList, x as abortOnScreens, y as getOrAskForProjectData } from "./terminal-J3OD3dN0.js";
+import path from "path";
+import { tmpdir } from "node:os";
+import path$1, { join as join$1 } from "node:path";
+import { spawn } from "node:child_process";
+import { constants } from "node:fs";
+import fs from "fs/promises";
+import { access, mkdtemp, readdir, rm, writeFile } from "node:fs/promises";
+import { Box, Text, render, useInput } from "ink";
+import { createElement, useEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
+import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
+import { PasswordInput, TextInput } from "@inkjs/ui";
+//#region src/tui/screens/health/HealthCheckScreen.tsx
+/**
+* HealthCheckScreen — Program screen between Intro and Auth.
+*
+* Three states:
+*   1. Checking: spinner while health check runs
+*   2. Healthy: isComplete returns true, router auto-advances to Auth
+*   3. Blocking outage: shows affected services with Continue/Exit
+*/
+const EXAMPLE_PROMPT = "Integrate PostHog into this project using the skill files in .posthog/skills/. Read SKILL.md first, then follow the numbered program files in order.";
+const SkillsDownloadedScreen = ({ store }) => {
+	useDismissOnAnyKey(() => store.requestExit(0));
+	return /* @__PURE__ */ jsxs(Box, {
+		flexDirection: "column",
+		flexGrow: 1,
+		children: [
+			/* @__PURE__ */ jsxs(Text, {
+				color: "green",
+				bold: true,
+				children: [Icons.check, " Skills downloaded to .posthog/skills/"]
+			}),
+			/* @__PURE__ */ jsxs(Box, {
+				marginTop: 1,
+				flexDirection: "column",
+				children: [/* @__PURE__ */ jsx(Text, { children: "You can continue setup with another agent using this prompt:" }), /* @__PURE__ */ jsx(Box, {
+					marginTop: 1,
+					paddingLeft: 2,
+					children: /* @__PURE__ */ jsx(Text, {
+						color: "cyan",
+						children: EXAMPLE_PROMPT
+					})
+				})]
+			}),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(Text, {
+					color: Colors.muted,
+					children: "Press any key to exit"
+				})
+			})
+		]
+	});
+};
+const HealthCheckScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	const [downloaded, setDownloaded] = useState(false);
+	const [downloading, setDownloading] = useState(false);
+	const result = store.session.readinessResult;
+	if (downloaded) return /* @__PURE__ */ jsx(SkillsDownloadedScreen, { store });
+	if (!result) return /* @__PURE__ */ jsx(Box, {
+		flexDirection: "column",
+		flexGrow: 1,
+		alignItems: "center",
+		justifyContent: "center",
+		children: /* @__PURE__ */ jsx(LoadingBox, { message: "Checking service status..." })
+	});
+	const isSignup = store.session.signup;
+	const blockingKeys = getBlockingServiceKeys(result.health, isSignup ? SIGNUP_WIZARD_READINESS_CONFIG : void 0);
+	const warningKeys = isSignup ? getBlockingServiceKeys(result.health).filter((k) => !blockingKeys.includes(k)) : [];
+	const hasHardBlock = blockingKeys.length > 0;
+	const displayKeys = hasHardBlock ? blockingKeys : warningKeys;
+	if (displayKeys.length === 0) return null;
+	const isSkillsOriginDown = hasHardBlock && blockingKeys.includes("skillsOrigin");
+	const canDownloadSkills = result.health.skillsOrigin.status === "healthy";
+	const integration = store.session.integration;
+	const allBlockingHaveNoConnection = hasHardBlock && displayKeys.every((k) => result.health[k].status === "no-connection");
+	const title = isSkillsOriginDown ? "Ongoing service disruptions" : allBlockingHaveNoConnection ? "Couldn't reach PostHog" : hasHardBlock ? "Ongoing service disruptions" : "Service disruption detected";
+	const docsUrl = store.session.frameworkConfig?.metadata.docsUrl;
+	const description = isSkillsOriginDown ? "The Wizard can't download the skills it needs — neither GitHub Releases nor PostHog's mirror is reachable right now." : allBlockingHaveNoConnection ? "We couldn't reach these services from this machine. PostHog's status page shows no incidents, so this is most likely a network issue — VPN, firewall, captive portal, or flaky Wi-Fi." : hasHardBlock ? "The Wizard cannot start while these services are down." : "Some services are degraded. You can continue, but parts of the wizard may not work reliably.";
+	const handleDownloadAndExit = async () => {
+		if (downloading) return;
+		setDownloading(true);
+		const menu = await fetchSkillMenu(GITHUB_SKILLS_BASE_URL);
+		if (menu) {
+			const prefix = `integration-${integration}`;
+			const skills = (menu.categories["integration"] ?? []).filter((s) => s.id.startsWith(prefix));
+			for (const skill of skills) await downloadSkill(skill, store.session.installDir, {
+				skillsRoot: ".posthog/skills",
+				scan: (dir) => scanInstalledSkill(dir, void 0)
+			});
+		}
+		setDownloaded(true);
+	};
+	return /* @__PURE__ */ jsxs(ModalOverlay, {
+		borderColor: hasHardBlock && !allBlockingHaveNoConnection ? "red" : "yellow",
+		title,
+		width: 72,
+		footer: isSkillsOriginDown ? /* @__PURE__ */ jsx(ConfirmationInput, {
+			message: "",
+			confirmLabel: "",
+			cancelLabel: "Exit [Esc]",
+			onConfirm: () => void abortOnScreens(store, {
+				code: ErrorCodes.EnvServiceOutage,
+				message: "Exited due to service outage."
+			}),
+			onCancel: () => void abortOnScreens(store, {
+				code: ErrorCodes.EnvServiceOutage,
+				message: "Exited due to service outage."
+			})
+		}) : /* @__PURE__ */ jsx(ConfirmationInput, {
+			message: "Continue anyway?",
+			confirmLabel: "Continue [Enter]",
+			cancelLabel: canDownloadSkills && !isSkillsOriginDown ? downloading ? "Downloading..." : "Download skills & Exit [Esc]" : "Exit [Esc]",
+			onConfirm: () => store.dismissOutage(),
+			onCancel: canDownloadSkills && !isSkillsOriginDown ? () => void handleDownloadAndExit() : () => void abortOnScreens(store, {
+				code: ErrorCodes.EnvServiceOutage,
+				message: "Exited due to service outage."
+			})
+		}),
+		children: [
+			/* @__PURE__ */ jsxs(Box, {
+				flexDirection: "column",
+				marginBottom: 1,
+				children: [/* @__PURE__ */ jsx(Box, {
+					marginBottom: 1,
+					children: /* @__PURE__ */ jsxs(Text, { children: [
+						/* @__PURE__ */ jsx(Text, {
+							color: "red",
+							children: Icons.squareFilled
+						}),
+						/* @__PURE__ */ jsx(Text, {
+							dimColor: true,
+							children: " Down "
+						}),
+						/* @__PURE__ */ jsx(Text, {
+							color: "#DC9300",
+							children: Icons.squareFilled
+						}),
+						/* @__PURE__ */ jsx(Text, {
+							dimColor: true,
+							children: " Degraded "
+						}),
+						/* @__PURE__ */ jsx(Text, {
+							color: "gray",
+							children: Icons.squareFilled
+						}),
+						/* @__PURE__ */ jsx(Text, {
+							dimColor: true,
+							children: " No connection"
+						})
+					] })
+				}), /* @__PURE__ */ jsx(ServiceHealthList, {
+					health: result.health,
+					filterKeys: displayKeys,
+					showHealthy: false
+				})]
+			}),
+			/* @__PURE__ */ jsx(Text, {
+				dimColor: true,
+				children: description
+			}),
+			isSkillsOriginDown && docsUrl && /* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsxs(Text, { children: ["Set up manually: ", /* @__PURE__ */ jsx(Text, {
+					color: "cyan",
+					children: docsUrl
+				})] })
+			}),
+			canDownloadSkills && !isSkillsOriginDown && /* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(Text, { children: "You can still download the PostHog integration skills and continue with another agent." })
+			})
+		]
+	});
+};
+//#endregion
+//#region src/tui/screens/SettingsOverrideScreen.tsx
+const SettingsOverrideScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	const [feedback, setFeedback] = useState(null);
+	const conflicts = store.settingsConflicts?.filter((c) => c.writable);
+	const hasConflicts = Boolean(conflicts && conflicts.length > 0);
+	useEffect(() => {
+		if (hasConflicts) analytics.wizardCapture("settings conflict shown", { kind: "override" });
+	}, [hasConflicts]);
+	if (!conflicts || conflicts.length === 0) return null;
+	return /* @__PURE__ */ jsxs(ModalOverlay, {
+		borderColor: "red",
+		title: `${Icons.warning} Settings conflict`,
+		width: 64,
+		feedback: feedback ? `${Icons.warning} ${feedback}` : null,
+		footer: /* @__PURE__ */ jsx(ConfirmationInput, {
+			message: "Back up to .wizard-backup and continue?",
+			confirmLabel: "Backup & continue [Enter]",
+			cancelLabel: "Exit [Esc]",
+			onConfirm: () => {
+				analytics.wizardCapture("settings conflict accepted", { kind: "override" });
+				if (!store.backupAndFixSettingsOverride()) setFeedback("Could not back up the settings file.");
+			},
+			onCancel: () => store.requestExit(1)
+		}),
+		children: [conflicts.map((conflict) => /* @__PURE__ */ jsxs(Box, {
+			flexDirection: "column",
+			marginBottom: 1,
+			children: [/* @__PURE__ */ jsxs(Text, { children: [
+				"Your settings file at ",
+				/* @__PURE__ */ jsx(Text, {
+					bold: true,
+					children: conflict.path
+				}),
+				" sets:"
+			] }), /* @__PURE__ */ jsx(Box, {
+				flexDirection: "column",
+				paddingLeft: 2,
+				children: conflict.keys.map((key) => /* @__PURE__ */ jsxs(Text, { children: [
+					Icons.bullet,
+					" ",
+					/* @__PURE__ */ jsx(Text, {
+						color: "yellow",
+						bold: true,
+						children: key
+					})
+				] }, key))
+			})]
+		}, conflict.path)), /* @__PURE__ */ jsx(Text, {
+			dimColor: true,
+			children: "These settings override credentials and prevent the Wizard from reaching the PostHog LLM Gateway. We can back up the file and continue."
+		})]
+	});
+};
+//#endregion
+//#region src/tui/screens/ManagedSettingsScreen.tsx
+/**
+* ManagedSettingsScreen — Modal for read-only settings conflicts that block
+* the Wizard from reaching the PostHog LLM Gateway: org-managed settings, the
+* user's global `~/.claude` config, and gitignored project-local overrides.
+*
+* Unlike SettingsOverrideScreen, the wizard cannot safely back up or remove
+* these files for the user, so it names the exact file and key and asks the
+* user to fix it and re-run. Managed (root-owned) files need an IT admin; the
+* rest the user can edit themselves.
+*/
+function sourceLabel(source) {
+	switch (source) {
+		case "managed": return "Organization-managed settings";
+		case "user": return "Your global Claude Code settings";
+		case "project-local": return "Project-local settings";
+		default: return source;
+	}
+}
+const ManagedSettingsScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	const readOnlyConflicts = store.settingsConflicts?.filter((c) => !c.writable);
+	const hasManaged = Boolean(readOnlyConflicts?.some((c) => c.source === "managed"));
+	const hasReadOnly = Boolean(readOnlyConflicts && readOnlyConflicts.length > 0);
+	useEffect(() => {
+		if (hasReadOnly) analytics.wizardCapture("settings conflict shown", {
+			kind: "managed",
+			has_managed: hasManaged
+		});
+	}, [hasReadOnly, hasManaged]);
+	if (!readOnlyConflicts || readOnlyConflicts.length === 0) return null;
+	return /* @__PURE__ */ jsxs(ModalOverlay, {
+		borderColor: "red",
+		title: `${Icons.warning} Settings conflict`,
+		width: 72,
+		footer: /* @__PURE__ */ jsx(ConfirmationInput, {
+			message: "Fix the file(s) above, then re-run the Wizard.",
+			confirmLabel: "",
+			cancelLabel: "Exit [Esc]",
+			onConfirm: () => store.requestExit(1),
+			onCancel: () => store.requestExit(1)
+		}),
+		children: [
+			/* @__PURE__ */ jsx(Text, {
+				dimColor: true,
+				children: "These Claude Code settings override credentials and prevent the Wizard from reaching the PostHog LLM Gateway."
+			}),
+			readOnlyConflicts.map((conflict) => /* @__PURE__ */ jsxs(Box, {
+				flexDirection: "column",
+				marginTop: 1,
+				children: [
+					/* @__PURE__ */ jsx(Text, {
+						bold: true,
+						children: sourceLabel(conflict.source)
+					}),
+					/* @__PURE__ */ jsx(Text, {
+						dimColor: true,
+						children: conflict.path
+					}),
+					/* @__PURE__ */ jsx(Box, {
+						flexDirection: "column",
+						paddingLeft: 2,
+						children: conflict.keys.map((key) => /* @__PURE__ */ jsxs(Text, { children: [
+							Icons.bullet,
+							" ",
+							/* @__PURE__ */ jsx(Text, {
+								color: "yellow",
+								bold: true,
+								children: key
+							})
+						] }, key))
+					})
+				]
+			}, conflict.path)),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(Text, {
+					dimColor: true,
+					children: hasManaged ? "Remove these keys (or run \"claude auth logout\"). Managed files are root-owned — ask your IT administrator." : "Remove these keys, or run \"claude auth logout\", then re-run the Wizard."
+				})
+			})
+		]
+	});
+};
+//#endregion
+//#region src/tui/screens/PortConflictScreen.tsx
+/**
+* PortConflictScreen — Modal when all OAuth port candidates are occupied.
+*
+* Shows every port the wizard tried and asks the user to free them manually.
+*/
+const PortConflictScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	if (!store.portConflictProcess) return null;
+	return /* @__PURE__ */ jsxs(ModalOverlay, {
+		borderColor: "#DC9300",
+		title: "OAuth ports in use",
+		width: 72,
+		footer: /* @__PURE__ */ jsx(ConfirmationInput, {
+			message: "Retry after freeing ports?",
+			confirmLabel: "Retry [Enter]",
+			cancelLabel: "Exit [Esc]",
+			onConfirm: () => store.resolvePortConflict(),
+			onCancel: () => store.requestExit(1)
+		}),
+		children: [
+			/* @__PURE__ */ jsx(Text, { children: "The wizard needs a local port for OAuth. We tried these ports which are all in use:" }),
+			/* @__PURE__ */ jsx(Box, {
+				flexDirection: "column",
+				marginY: 1,
+				paddingLeft: 2,
+				gap: 0,
+				children: OAUTH_PORTS.map((port) => /* @__PURE__ */ jsxs(Text, { children: [/* @__PURE__ */ jsx(Text, {
+					dimColor: true,
+					children: "Port "
+				}), /* @__PURE__ */ jsx(Text, {
+					bold: true,
+					children: port
+				})] }, port))
+			}),
+			/* @__PURE__ */ jsx(Text, {
+				dimColor: true,
+				children: "Please free one of these ports and retry."
+			})
+		]
+	});
+};
+//#endregion
+//#region src/tui/screens/TaskNoticeScreen.tsx
+/**
+* TaskNoticeScreen — Modal shown before an optional step runs.
+*
+* Some steps stop to ask the user for something. This tells them so before the
+* step starts, and lets them decline it. The copy comes from the program that
+* owns the step; this screen only renders what it is given.
+*/
+const TaskNoticeScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	const notice = store.session.taskNotice;
+	if (!notice) return null;
+	return /* @__PURE__ */ jsxs(ModalOverlay, {
+		borderColor: Colors.primary,
+		title: notice.title,
+		width: 76,
+		footer: /* @__PURE__ */ jsx(ConfirmationInput, {
+			message: notice.prompt,
+			confirmLabel: notice.confirmLabel,
+			cancelLabel: notice.cancelLabel,
+			onConfirm: () => store.resolveTaskNotice(true),
+			onCancel: () => store.resolveTaskNotice(false)
+		}),
+		children: [
+			/* @__PURE__ */ jsx(Box, {
+				flexDirection: "column",
+				gap: 1,
+				children: notice.body.map((paragraph) => /* @__PURE__ */ jsx(Text, { children: paragraph }, paragraph))
+			}),
+			notice.items && notice.items.length > 0 && /* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				paddingLeft: 2,
+				children: /* @__PURE__ */ jsx(Text, {
+					bold: true,
+					children: notice.items.join(", ")
+				})
+			}),
+			notice.docsUrl && /* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsxs(Text, {
+					dimColor: true,
+					children: [
+						notice.docsLabel ?? "Learn more",
+						": ",
+						notice.docsUrl
+					]
+				})
+			})
+		]
+	});
+};
+//#endregion
+//#region src/tui/screens/ManualAuthCodeScreen.tsx
+/**
+* ManualAuthCodeScreen — Paste an OAuth authorization code by hand.
+*
+* Fallback for headless/remote shells where the browser can't reach the
+* wizard's local callback server. Shows the direct authorize URL (the localhost
+* one is unreachable from another machine), then the user pastes either the
+* full callback URL the browser was redirected to
+* (`http://localhost:8239/callback?code=...`) or just the code. On submit we
+* extract the code and resolve the in-flight OAuth flow; bad input shows inline
+* feedback without leaving the screen.
+*
+* Opened from AuthScreen via a keypress; Esc dismisses it.
+*/
+const ManualAuthCodeScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	const { authorizeUrl } = store;
+	const [error, setError] = useState(null);
+	useInput((_input, key) => {
+		if (key.escape) store.dismissManualAuthCode();
+	});
+	const handleSubmit = (value) => {
+		const code = extractOAuthCode(value);
+		if (!code) {
+			setError("Couldn't find a code in that input. Paste the full callback URL or just the code.");
+			return;
+		}
+		store.submitManualAuthCode(code);
+	};
+	return /* @__PURE__ */ jsxs(Box, {
+		flexDirection: "column",
+		flexGrow: 1,
+		children: [
+			/* @__PURE__ */ jsx(Box, {
+				marginBottom: 1,
+				children: /* @__PURE__ */ jsxs(Text, {
+					bold: true,
+					color: Colors.accent,
+					children: [Icons.diamond, " Paste authorization code"]
+				})
+			}),
+			authorizeUrl && /* @__PURE__ */ jsxs(Box, {
+				flexDirection: "column",
+				marginBottom: 1,
+				children: [/* @__PURE__ */ jsx(Text, {
+					dimColor: true,
+					children: "On a remote/headless machine the local login link won't open. Open this URL in a browser on any machine to authorize:"
+				}), /* @__PURE__ */ jsx(Box, {
+					flexShrink: 0,
+					marginTop: 1,
+					children: /* @__PURE__ */ jsx(Text, {
+						color: "cyan",
+						children: authorizeUrl
+					})
+				})]
+			}),
+			/* @__PURE__ */ jsx(Text, { children: "After authorizing, paste the callback URL it lands on — or just the code from it — here:" }),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				width: "100%",
+				children: /* @__PURE__ */ jsx(TextInput, {
+					placeholder: "http://localhost:8239/callback?code=… or the code",
+					onSubmit: handleSubmit
+				})
+			}),
+			error && /* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(Text, {
+					color: "yellow",
+					children: error
+				})
+			}),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsxs(Text, { children: [
+					/* @__PURE__ */ jsx(Text, {
+						color: Colors.accent,
+						children: "ENTER"
+					}),
+					/* @__PURE__ */ jsx(Text, {
+						dimColor: true,
+						children: " submit"
+					}),
+					/* @__PURE__ */ jsx(Text, {
+						dimColor: true,
+						children: " · "
+					}),
+					/* @__PURE__ */ jsx(Text, {
+						color: Colors.accent,
+						children: "ESC"
+					}),
+					/* @__PURE__ */ jsx(Text, {
+						dimColor: true,
+						children: " cancel"
+					})
+				] })
+			})
+		]
+	});
+};
+//#endregion
+//#region src/tui/screens/SetupScreen.tsx
+/**
+* SetupScreen — Generic framework disambiguation.
+*
+* Iterates unresolved setup questions from the FrameworkConfig
+* and renders a PickerMenu for each. If all questions are auto-resolved,
+* this screen is skipped entirely (the router skips it via its show() predicate).
+*/
+const SetupScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	const config = store.session.frameworkConfig;
+	const questions = config?.metadata.setup?.questions ?? [];
+	const [currentIndex, setCurrentIndex] = useState(0);
+	const [resolving, setResolving] = useState(true);
+	useEffect(() => {
+		(async () => {
+			for (const q of questions) {
+				if (q.key in store.session.frameworkContext) continue;
+				try {
+					const detected = await q.detect({ installDir: store.session.installDir });
+					if (detected !== null) store.setFrameworkContext(q.key, detected);
+				} catch {}
+			}
+			setResolving(false);
+		})();
+	}, []);
+	if (resolving) return /* @__PURE__ */ jsx(Box, {
+		flexDirection: "column",
+		flexGrow: 1,
+		children: /* @__PURE__ */ jsx(Text, {
+			dimColor: true,
+			children: "Detecting project configuration..."
+		})
+	});
+	const unresolved = questions.filter((q) => !(q.key in store.session.frameworkContext));
+	if (unresolved.length === 0) return null;
+	const question = unresolved[currentIndex] ?? unresolved[0];
+	if (!question) return null;
+	return /* @__PURE__ */ jsxs(Box, {
+		flexDirection: "column",
+		flexGrow: 1,
+		children: [/* @__PURE__ */ jsxs(Box, {
+			flexDirection: "column",
+			marginBottom: 1,
+			children: [/* @__PURE__ */ jsx(Text, {
+				bold: true,
+				color: Colors.accent,
+				children: "Project Setup"
+			}), config && /* @__PURE__ */ jsxs(Text, {
+				dimColor: true,
+				children: [
+					"Configuring ",
+					config.metadata.name,
+					" integration"
+				]
+			})]
+		}), /* @__PURE__ */ jsx(PickerMenu, {
+			message: question.message,
+			options: question.options.map((o) => ({
+				label: o.label,
+				value: o.value,
+				hint: o.hint
+			})),
+			onSelect: (value) => {
+				const selected = Array.isArray(value) ? value[0] : value;
+				store.setFrameworkContext(question.key, selected);
+				if (unresolved.filter((q) => q.key !== question.key && !(q.key in store.session.frameworkContext)).length > 0) setCurrentIndex((i) => i + 1);
+			}
+		})]
+	});
+};
+//#endregion
+//#region src/shared/utils/clipboard.ts
+/**
+* Best-effort platform shell-outs for making a URL usable in any terminal —
+* no third-party dependency.
+*
+* Two helpers back the `wizard_ask` link overlay, for terminals that can't
+* linkify a wrapped URL (e.g. macOS Terminal.app, which lacks OSC 8 hyperlink
+* support):
+*
+* - `copyToClipboard` — pipe the URL to the platform clipboard binary so the
+*   user can paste it into a browser.
+* - `openInBrowser` — hand the URL to the platform opener so it launches
+*   directly, no copy/paste needed.
+*
+* Both shell out with `spawn` and never a shell, and pass the URL as an argv
+* (clipboard via stdin) — so there's no shell-injection surface. Neither throws:
+* they return false when no command is reachable (CI, headless, or the binary
+* isn't installed).
+*/
+/** Platform clipboard commands, in preference order. */
+function clipboardCommands() {
+	if (process.platform === "darwin") return [{
+		cmd: "pbcopy",
+		args: []
+	}];
+	if (process.platform === "win32") return [{
+		cmd: "clip",
+		args: []
+	}];
+	return [
+		{
+			cmd: "wl-copy",
+			args: []
+		},
+		{
+			cmd: "xclip",
+			args: ["-selection", "clipboard"]
+		},
+		{
+			cmd: "xsel",
+			args: ["--clipboard", "--input"]
+		}
+	];
+}
+function writeWith({ cmd, args }, text) {
+	return new Promise((resolve) => {
+		try {
+			const child = spawn(cmd, args);
+			child.on("error", () => resolve(false));
+			child.stdin.on("error", () => resolve(false));
+			child.on("close", (code) => resolve(code === 0));
+			child.stdin.end(text);
+		} catch {
+			resolve(false);
+		}
+	});
+}
+async function copyToClipboard(text) {
+	for (const command of clipboardCommands()) if (await writeWith(command, text)) return true;
+	logToFile("[clipboard] no working clipboard command found");
+	return false;
+}
+/**
+* Platform browser-open commands, in preference order. The URL is one argv
+* element — never concatenated into a shell string — so a `?kind=…` query or
+* any other character can't escape into the command line.
+*
+* `win32` has no shell-free single binary for this: `start` is a `cmd` builtin,
+* so we invoke `cmd /c start "" <url>` (the empty `""` is `start`'s window-title
+* argument, which would otherwise swallow the URL). The URL is still a discrete
+* argv element, not interpolated into the command string.
+*
+* Takes `platform` as an argument (defaulting to the host) so the mapping is a
+* pure function the tests can exercise across platforms.
+*/
+function browserOpenCommands(url, platform = process.platform) {
+	if (platform === "darwin") return [{
+		cmd: "open",
+		args: [url]
+	}];
+	if (platform === "win32") return [{
+		cmd: "cmd",
+		args: [
+			"/c",
+			"start",
+			"",
+			url
+		]
+	}];
+	return [{
+		cmd: "xdg-open",
+		args: [url]
+	}, {
+		cmd: "x-www-browser",
+		args: [url]
+	}];
+}
+function spawnOpener({ cmd, args }) {
+	return new Promise((resolve) => {
+		try {
+			const child = spawn(cmd, args, { stdio: "ignore" });
+			child.on("error", () => resolve(false));
+			child.on("close", (code) => resolve(code === 0));
+		} catch {
+			resolve(false);
+		}
+	});
+}
+async function openInBrowser(url) {
+	for (const command of browserOpenCommands(url)) if (await spawnOpener(command)) return true;
+	logToFile("[clipboard] no working browser-open command found");
+	return false;
+}
+//#endregion
+//#region src/tui/screens/AuthScreen.tsx
+/**
+* AuthScreen — Shown while waiting for OAuth authentication.
+*
+* Displays framework detection, a compressed privacy summary, a waiting
+* spinner, and the login URL when available. [I] opens the full
+* PrivacyPanel as an overlay. [P] (when loginUrl is set) lets the user
+* paste the callback URL by hand. [C] copies the login URL to the
+* clipboard — the exact string, so it can't be chopped by a soft-wrap.
+*
+* The router resolves past this screen once session.credentials is set.
+*/
+const AuthScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	const [showPrivacy, setShowPrivacy] = useState(false);
+	const [copyStatus, setCopyStatus] = useState("idle");
+	const [columns] = useStdoutDimensions();
+	const { session } = store;
+	const loginUrl = store.loginUrl;
+	const canPasteCode = Boolean(loginUrl);
+	const availableWidth = Math.min(columns, 120) - 2;
+	const urlFits = loginUrl ? loginUrl.length <= availableWidth : true;
+	const bindings = [];
+	if (!showPrivacy) {
+		if (canPasteCode && loginUrl) {
+			bindings.push({
+				match: ["p", "P"],
+				label: "P",
+				action: "paste auth code",
+				handler: () => store.showManualAuthCode()
+			});
+			bindings.push({
+				match: ["c", "C"],
+				label: "C",
+				action: "copy link",
+				handler: () => {
+					copyToClipboard(loginUrl).then((ok) => setCopyStatus(ok ? "copied" : "failed"));
+				}
+			});
+		}
+		bindings.push({
+			match: ["i", "I"],
+			label: "I",
+			action: PRIVACY_PANEL_LABEL.toLowerCase(),
+			handler: () => setShowPrivacy(true)
+		});
+	}
+	useKeyBindings("auth", bindings);
+	if (showPrivacy) return /* @__PURE__ */ jsx(IntroScreenLayout, {
+		installDir: session.installDir,
+		title: PRIVACY_PANEL_LABEL,
+		showSubtitle: false,
+		showDetection: false,
+		body: /* @__PURE__ */ jsx(PrivacyPanel, {}),
+		showPrivacy: false,
+		menuOptions: [{
+			label: "Back",
+			value: "back"
+		}],
+		menuAlign: "left",
+		onSelect: () => setShowPrivacy(false)
+	});
+	const config = session.frameworkConfig;
+	const frameworkLabel = session.detectedFrameworkLabel ?? config?.metadata.name;
+	return /* @__PURE__ */ jsxs(Box, {
+		flexDirection: "column",
+		flexGrow: 1,
+		children: [
+			/* @__PURE__ */ jsxs(Box, {
+				flexDirection: "column",
+				marginBottom: 1,
+				children: [
+					/* @__PURE__ */ jsx(Text, {
+						bold: true,
+						color: Colors.accent,
+						children: "PostHog Setup Wizard"
+					}),
+					frameworkLabel && /* @__PURE__ */ jsxs(Text, { children: [/* @__PURE__ */ jsxs(Text, {
+						color: "green",
+						children: ["✔", " "]
+					}), /* @__PURE__ */ jsxs(Text, { children: ["Framework: ", frameworkLabel] })] }),
+					config?.metadata.beta && /* @__PURE__ */ jsxs(Text, {
+						color: "yellow",
+						children: [
+							"[BETA] The ",
+							config.metadata.name,
+							" wizard is in beta. Questions or feedback? Email wizard@posthog.com"
+						]
+					}),
+					config?.metadata.preRunNotice && /* @__PURE__ */ jsx(Text, {
+						color: "yellow",
+						children: config.metadata.preRunNotice
+					})
+				]
+			}),
+			/* @__PURE__ */ jsxs(Box, {
+				flexDirection: "column",
+				marginBottom: 1,
+				children: [
+					/* @__PURE__ */ jsx(Text, {
+						bold: true,
+						dimColor: true,
+						children: PRIVACY_PANEL_LABEL
+					}),
+					/* @__PURE__ */ jsxs(Text, {
+						dimColor: true,
+						children: ["•", " Source files are read by Claude for AI context"]
+					}),
+					/* @__PURE__ */ jsxs(Text, {
+						dimColor: true,
+						children: ["•", " .env* and secrets stay on your machine"]
+					}),
+					/* @__PURE__ */ jsxs(Text, {
+						dimColor: true,
+						children: [
+							"•",
+							" Press ",
+							/* @__PURE__ */ jsx(Text, {
+								color: Colors.accent,
+								children: "[I]"
+							}),
+							" for full privacy & usage info"
+						]
+					})
+				]
+			}),
+			/* @__PURE__ */ jsx(LoadingBox, { message: "Waiting for authentication..." }),
+			loginUrl && /* @__PURE__ */ jsxs(Box, {
+				marginTop: 1,
+				marginBottom: 1,
+				flexDirection: "column",
+				children: [
+					urlFits ? /* @__PURE__ */ jsxs(Text, { children: [
+						/* @__PURE__ */ jsx(Text, {
+							dimColor: true,
+							children: "If the browser didn't open, copy and paste this URL:"
+						}),
+						"\n\n",
+						/* @__PURE__ */ jsx(Text, {
+							color: "cyan",
+							children: loginUrl
+						})
+					] }) : /* @__PURE__ */ jsx(Text, {
+						color: "yellow",
+						children: "[This terminal is too small to show the full link for copying, resize your terminal]"
+					}),
+					/* @__PURE__ */ jsx(Box, {
+						marginTop: 1,
+						children: /* @__PURE__ */ jsxs(Text, {
+							dimColor: true,
+							children: [
+								"Press ",
+								/* @__PURE__ */ jsx(Text, {
+									color: Colors.accent,
+									children: "[C]"
+								}),
+								" to copy the link · on a remote machine or devbox? Press",
+								" ",
+								/* @__PURE__ */ jsx(Text, {
+									color: Colors.accent,
+									children: "[P]"
+								}),
+								" to paste the callback URL."
+							]
+						})
+					}),
+					copyStatus === "copied" && /* @__PURE__ */ jsx(Box, {
+						marginTop: 1,
+						children: /* @__PURE__ */ jsxs(Text, {
+							color: Colors.success,
+							children: [Icons.check, " Link copied to clipboard."]
+						})
+					}),
+					copyStatus === "failed" && /* @__PURE__ */ jsx(Box, {
+						marginTop: 1,
+						children: /* @__PURE__ */ jsxs(Text, {
+							color: "yellow",
+							children: [
+								"Couldn't reach a clipboard on this machine — press",
+								" ",
+								/* @__PURE__ */ jsx(Text, {
+									color: Colors.accent,
+									children: "[P]"
+								}),
+								" to paste the callback URL instead."
+							]
+						})
+					})
+				]
+			})
+		]
+	});
+};
+//#endregion
+//#region src/tui/screens/RunScreen.tsx
+/**
+* RunScreen — Default observational view of the agent run.
+*
+* Tabs: Status (LearnCard + ProgressList), Event plan (when present),
+* Tail logs, HN. Programs that need a different tab list ship their own
+* screen component (see audit/AuditRunScreen.tsx).
+*/
+const RunScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	const [columns] = useStdoutDimensions();
+	const progressItems = store.tasks.map((t) => ({
+		label: t.label,
+		activeForm: t.activeForm,
+		status: t.status
+	}));
+	const statuses = store.statusMessages.length > 0 ? store.statusMessages : void 0;
+	const activeProgram = store.router.activeProgram;
+	const learnBlocks = useMemo(() => {
+		return (flowOwner(activeProgram).deck ?? getContentBlocks)(store);
+	}, [store, activeProgram]);
+	const programTips = flowOwner(activeProgram).tips?.(store);
+	const leftPane = store.learnCardComplete ? /* @__PURE__ */ jsx(TipsCard, {
+		store,
+		tips: programTips
+	}) : /* @__PURE__ */ jsx(LearnCard, {
+		store,
+		blocks: learnBlocks,
+		onComplete: () => store.setLearnCardComplete()
+	});
+	const progressList = /* @__PURE__ */ jsx(ProgressList, {
+		items: progressItems,
+		title: "Tasks"
+	});
+	return /* @__PURE__ */ jsx(TabContainer, {
+		tabs: [
+			{
+				id: "status",
+				label: "Status",
+				component: columns < 80 ? /* @__PURE__ */ jsx(Box, {
+					flexDirection: "column",
+					flexGrow: 1,
+					children: progressList
+				}) : /* @__PURE__ */ jsx(SplitView, {
+					left: leftPane,
+					right: progressList
+				})
+			},
+			...store.eventPlan.length > 0 ? [{
+				id: "events",
+				label: "Event plan",
+				component: /* @__PURE__ */ jsx(EventPlanViewer, { events: store.eventPlan })
+			}] : [],
+			{
+				id: "logs",
+				label: "Tail logs",
+				component: /* @__PURE__ */ jsx(LogViewer, { filePath: getLogFilePath() })
+			},
+			{
+				id: "visualizer",
+				label: "Visualizer",
+				component: /* @__PURE__ */ jsx(VisualizerTab, { store })
+			},
+			{
+				id: "hn",
+				label: "HN",
+				component: /* @__PURE__ */ jsx(HNViewer, {})
+			}
+		],
+		statusMessage: statuses,
+		expandableStatus: true,
+		store
+	});
+};
+//#endregion
+//#region src/tui/screens/KeepSkillsScreen.tsx
+/**
+* KeepSkillsScreen — Ask whether to keep installed skills in .claude/skills/.
+*
+* Shown after the outro summary so users see the agent's output first,
+* then decide whether to keep the skills that powered it.
+*
+* When done, calls store.setSkillsComplete() and exits the process.
+*/
+const WIZARD_MARKER = ".posthog-wizard";
+const KeepSkillsScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	const [phase, setPhase] = useState("loading");
+	const [skills, setSkills] = useState([]);
+	const skillsDir = join$1(store.session.installDir, ".claude", "skills");
+	useEffect(() => {
+		(async () => {
+			try {
+				const dirs = (await readdir(skillsDir, { withFileTypes: true })).filter((e) => e.isDirectory());
+				const result = [];
+				for (const dir of dirs) {
+					try {
+						await access(join$1(skillsDir, dir.name, WIZARD_MARKER));
+					} catch {
+						continue;
+					}
+					const children = (await readdir(join$1(skillsDir, dir.name))).filter((c) => c !== WIZARD_MARKER);
+					result.push({
+						name: dir.name,
+						children
+					});
+				}
+				if (result.length === 0) {
+					store.setSkillsComplete(true);
+					exit();
+					return;
+				}
+				setSkills(result);
+				setPhase("ask");
+			} catch {
+				store.setSkillsComplete(true);
+				exit();
+			}
+		})();
+	}, []);
+	const exit = () => {
+		if (!store.mintHandoff) store.requestExit(0);
+	};
+	const handleKeep = () => {
+		store.setSkillsComplete(true);
+		exit();
+	};
+	const handleRemove = async () => {
+		setPhase("removing");
+		for (const skill of skills) try {
+			await rm(join$1(skillsDir, skill.name), {
+				recursive: true,
+				force: true
+			});
+		} catch {}
+		try {
+			if ((await readdir(skillsDir)).length === 0) await rm(skillsDir, {
+				recursive: true,
+				force: true
+			});
+		} catch {}
+		setPhase("done");
+		setTimeout(() => {
+			store.setSkillsComplete(false);
+			exit();
+		}, 600);
+	};
+	return /* @__PURE__ */ jsxs(Box, {
+		flexDirection: "column",
+		flexGrow: 1,
+		children: [/* @__PURE__ */ jsx(Text, {
+			bold: true,
+			color: Colors.accent,
+			children: "Keep the skills?"
+		}), /* @__PURE__ */ jsxs(Box, {
+			marginTop: 1,
+			flexDirection: "column",
+			children: [
+				phase === "loading" && /* @__PURE__ */ jsx(Text, {
+					dimColor: true,
+					children: "Checking installed skills..."
+				}),
+				phase === "ask" && /* @__PURE__ */ jsxs(Fragment$1, { children: [
+					/* @__PURE__ */ jsx(Text, {
+						dimColor: true,
+						children: "The wizard installed open-source skills that help AI coding agents integrate PostHog into your project:"
+					}),
+					/* @__PURE__ */ jsxs(Box, {
+						marginTop: 1,
+						flexDirection: "column",
+						marginLeft: 2,
+						children: [
+							/* @__PURE__ */ jsx(Text, {
+								dimColor: true,
+								children: ".claude/"
+							}),
+							/* @__PURE__ */ jsx(Text, {
+								dimColor: true,
+								children: " skills/"
+							}),
+							skills.map((skill) => /* @__PURE__ */ jsxs(Box, {
+								flexDirection: "column",
+								children: [/* @__PURE__ */ jsxs(Text, {
+									dimColor: true,
+									children: [
+										" ",
+										skill.name,
+										"/"
+									]
+								}), skill.children.map((child) => /* @__PURE__ */ jsxs(Text, {
+									dimColor: true,
+									children: ["      ", child]
+								}, child))]
+							}, skill.name))
+						]
+					}),
+					/* @__PURE__ */ jsx(Box, {
+						marginTop: 1,
+						children: /* @__PURE__ */ jsxs(Text, {
+							dimColor: true,
+							children: ["Source: ", /* @__PURE__ */ jsx(Text, {
+								color: "cyan",
+								children: "https://github.com/PostHog/context-mill"
+							})]
+						})
+					}),
+					/* @__PURE__ */ jsx(Box, {
+						marginTop: 1,
+						children: /* @__PURE__ */ jsx(ConfirmationInput, {
+							message: "Keep the installed skills?",
+							confirmLabel: "Keep [Enter]",
+							cancelLabel: "Remove [Esc]",
+							onConfirm: handleKeep,
+							onCancel: () => void handleRemove()
+						})
+					})
+				] }),
+				phase === "removing" && /* @__PURE__ */ jsx(Text, {
+					dimColor: true,
+					children: "Removing skills..."
+				}),
+				phase === "done" && /* @__PURE__ */ jsx(Text, {
+					dimColor: true,
+					children: "Skills removed."
+				})
+			]
+		})]
+	});
+};
+//#endregion
+//#region src/tui/screens/MintFailureScreen.tsx
+/** Two blocks of the PostHog flag, left of the headline. */
+const Mark = () => /* @__PURE__ */ jsxs(Text, { children: [/* @__PURE__ */ jsx(Text, {
+	color: "#1D4AFF",
+	children: "█"
+}), /* @__PURE__ */ jsx(Text, {
+	color: Colors.accent,
+	children: "█"
+})] });
+function MintFailureScreen({ store, services }) {
+	const [columns] = useStdoutDimensions();
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	const busy = useRef(false);
+	const [working, setWorking] = useState(null);
+	const [error, setError] = useState(null);
+	const [report, setReport] = useState(false);
+	const [retry, setRetry] = useState("save");
+	const { spellbook } = store;
+	const select = async (action) => {
+		if (busy.current) return;
+		if (action === "exit" || action === "continue") return store.setMintHandoff(action);
+		if (action === "report") return setReport(true);
+		const task = action === "retry" ? retry : action;
+		setRetry(task);
+		busy.current = true;
+		setError(null);
+		setWorking("Saving skill...");
+		try {
+			const saved = store.spellbook ?? await services.leaveSpellbook();
+			store.setSpellbook(saved);
+			if (task !== "save") {
+				setWorking(`Opening ${task === "claude" ? "Claude Code" : "Codex"}...`);
+				await services.openAgent(task, saved.path);
+				store.setMintHandoff("continue");
+			}
+		} catch (err) {
+			setError(store.spellbook ? err instanceof Error ? err.message : "Could not open your agent." : "Could not save the skill. Check this folder is writable and try again.");
+		} finally {
+			busy.current = false;
+			setWorking(null);
+		}
+	};
+	const options = error ? [
+		{
+			label: "Try again",
+			value: "retry"
+		},
+		...spellbook ? [{
+			label: "Continue setup",
+			value: "continue"
+		}] : [],
+		{
+			label: "Exit",
+			value: "exit"
+		}
+	] : spellbook ? [{
+		label: "Continue",
+		value: "continue"
+	}, {
+		label: "Exit",
+		value: "exit"
+	}] : report ? [{
+		label: "Save skill",
+		value: "save"
+	}, {
+		label: "Exit",
+		value: "exit"
+	}] : [
+		{
+			label: "Save skill",
+			value: "save"
+		},
+		{
+			label: "Open in Claude Code",
+			value: "claude"
+		},
+		{
+			label: "Open in Codex",
+			value: "codex"
+		},
+		{
+			label: "Report this issue",
+			value: "report"
+		},
+		{
+			label: "Exit",
+			value: "exit"
+		}
+	];
+	return /* @__PURE__ */ jsx(Box, {
+		flexDirection: "column",
+		flexGrow: 1,
+		alignItems: "center",
+		justifyContent: "center",
+		children: /* @__PURE__ */ jsxs(Box, {
+			width: Math.max(1, Math.min(78, columns - 4)),
+			flexDirection: "column",
+			alignItems: "center",
+			children: [
+				/* @__PURE__ */ jsxs(Text, {
+					bold: true,
+					children: [
+						/* @__PURE__ */ jsx(Mark, {}),
+						" ",
+						spellbook ? "Skill saved" : MINT_FAILURE_MESSAGE,
+						" 🦔"
+					]
+				}),
+				/* @__PURE__ */ jsx(Box, {
+					marginTop: 1,
+					children: /* @__PURE__ */ jsx(Text, { children: spellbook ? spellbook.skillsIncluded ? "Ask your agent to read this file and complete the task." : "The skill could not be downloaded. This file has instructions and links for your agent." : report ? MINT_FAILURE_CONTACT : MINT_FAILURE_BODY })
+				}),
+				report && !spellbook && /* @__PURE__ */ jsx(Box, {
+					marginTop: 1,
+					children: /* @__PURE__ */ jsx(Text, {
+						color: "cyan",
+						wrap: "wrap",
+						children: services.logPath
+					})
+				}),
+				spellbook && /* @__PURE__ */ jsx(Box, {
+					marginTop: 1,
+					children: /* @__PURE__ */ jsx(Text, {
+						color: "cyan",
+						wrap: "wrap",
+						children: spellbook.path
+					})
+				}),
+				error && /* @__PURE__ */ jsx(Box, {
+					marginTop: 1,
+					children: /* @__PURE__ */ jsx(Text, {
+						color: Colors.error,
+						children: error
+					})
+				}),
+				/* @__PURE__ */ jsx(Box, {
+					marginTop: 1,
+					flexDirection: "column",
+					children: working ? /* @__PURE__ */ jsx(Text, { children: working }) : /* @__PURE__ */ jsx(PickerMenu, {
+						options,
+						onSelect: (action) => void select(action)
+					}, [
+						report,
+						Boolean(spellbook),
+						Boolean(error)
+					].join("-"))
+				})
+			]
+		})
+	});
+}
+//#endregion
+//#region src/tui/services/coding-agent-launcher.ts
+const quote = (value) => `'${value.replace(/'/g, `'"'"'`)}'`;
+const batchQuote = (value) => `"${value.replace(/%/g, "%%")}"`;
+async function executable(name) {
+	const extensions = process.platform === "win32" ? [
+		".exe",
+		".cmd",
+		".bat"
+	] : [""];
+	for (const directory of (process.env.PATH ?? "").split(path$1.delimiter)) {
+		if (!path$1.isAbsolute(directory)) continue;
+		for (const extension of extensions) {
+			const candidate = path$1.join(directory, name + extension);
+			try {
+				await access(candidate, constants.X_OK);
+				return candidate;
+			} catch {
+				continue;
+			}
+		}
+	}
+	throw new Error(`${name === "claude" ? "Claude Code" : name === "codex" ? "Codex" : name} is not installed or could not be found.`);
+}
+function launch(command, args, cwd, verbatim = false) {
+	return new Promise((resolve, reject) => {
+		const child = spawn(command, args, {
+			cwd,
+			stdio: "ignore",
+			detached: true,
+			shell: false,
+			windowsVerbatimArguments: verbatim
+		});
+		const timer = setTimeout(() => {
+			child.unref();
+			resolve();
+		}, 500);
+		child.once("error", (error) => {
+			clearTimeout(timer);
+			reject(error);
+		});
+		child.once("exit", (code) => {
+			clearTimeout(timer);
+			if (code === 0) resolve();
+			else reject(/* @__PURE__ */ new Error("Could not open a terminal for your agent."));
+		});
+	});
+}
+async function openCodingAgent(agent, directory, spellbookPath) {
+	const cwd = path$1.resolve(directory);
+	const command = await executable(agent);
+	const prompt = `Read <${path$1.resolve(spellbookPath)}> and complete the task described in the Wizard's spell books. Inspect what has already been done before making changes.`;
+	if (process.platform === "linux") {
+		await launch(await executable("x-terminal-emulator"), [
+			"-e",
+			command,
+			prompt
+		], cwd);
+		return;
+	}
+	const mac = process.platform === "darwin";
+	if (!mac && process.platform !== "win32") throw new Error("Opening an agent is not supported on this system. Use the saved skill path to continue.");
+	const folder = await mkdtemp(path$1.join(tmpdir(), "wizard-handoff-"));
+	const script = path$1.join(folder, mac ? "open-agent.command" : "open-agent.cmd");
+	try {
+		await writeFile(script, (mac ? [
+			"#!/bin/sh",
+			`rm -f ${quote(script)}`,
+			`rmdir ${quote(folder)}`,
+			`export PATH=${quote(process.env.PATH ?? "")}`,
+			`cd ${quote(cwd)} || exit 1`,
+			`exec ${quote(command)} ${quote(prompt)}`
+		] : [
+			"@echo off",
+			"chcp 65001 >nul",
+			"setlocal DisableDelayedExpansion",
+			`cd /d ${batchQuote(cwd)} || exit /b 1`,
+			`del "%~f0" & rmdir ${batchQuote(folder)} & ${batchQuote(command)} ${batchQuote(prompt)}`
+		]).join(mac ? "\n" : "\r\n") + "\n", { mode: 448 });
+		if (mac) {
+			await launch("/usr/bin/open", [script], cwd);
+			return;
+		}
+		const shell = process.env.ComSpec ?? "cmd.exe";
+		await launch(shell, [
+			"/d",
+			"/s",
+			"/c",
+			`"start "" ${shell} /d /c "${script}""`
+		], folder, true);
+	} catch (error) {
+		await rm(folder, {
+			recursive: true,
+			force: true
+		});
+		throw error;
+	}
+}
+//#endregion
+//#region src/tui/services/wizard-spellbook.ts
+function selectSkills(menu, session, program) {
+	const entries = Object.values(menu.categories).flat().filter((entry) => /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(entry.id));
+	const skillId = program.skillId ?? session.skillId;
+	const exact = entries.find((entry) => entry.id === skillId);
+	if (exact) return [exact];
+	const framework = session.integration;
+	const referenceGroup = skillId === framework ? "integration" : skillId;
+	const references = entries.filter((entry) => entry.group === referenceGroup && entry.framework === framework);
+	const reference = references.find((entry) => entry.default) ?? references[0];
+	if (reference) return [reference];
+	const flow = program.agentFlow ?? program.id;
+	const groups = /* @__PURE__ */ new Map();
+	for (const entry of entries) {
+		const group = entry.group;
+		if (!group || group !== flow && !group.startsWith(`${flow}-`) || entry.framework && entry.framework !== framework) continue;
+		if (!groups.has(group) || entry.default) groups.set(group, entry);
+	}
+	return [...groups.values()];
+}
+function spellbookText(session, program, skills) {
+	const framework = session.frameworkConfig?.metadata;
+	const runDocs = typeof program.run === "object" ? program.run.docsUrl : void 0;
+	const docs = [...new Set([
+		framework?.docsUrl,
+		runDocs,
+		POSTHOG_DOCS_URL
+	])].filter((url) => Boolean(url));
+	return [
+		"# Wizard spell book",
+		"",
+		"Complete this task in the project containing this spell book:",
+		"",
+		program.description,
+		"",
+		`Wizard program: ${program.id}`,
+		...framework ? [`Detected framework: ${framework.name}`] : [],
+		"",
+		"Inspect the existing project and its instructions before making changes. Check what has already been done, complete the requested task within its stated scope, then run the relevant checks and explain any remaining manual steps.",
+		"",
+		"Use your own coding agent and its authentication. The Wizard could not continue its inference session. No Wizard credentials are included; ask the user for any credentials the task requires and keep them out of source code.",
+		"",
+		"## Setup instructions",
+		"",
+		...skills.length ? [
+			"Read the downloaded skills and their referenced files:",
+			"",
+			...skills.map((skill) => `- [${skill.id}](skills/${skill.id}/SKILL.md)`),
+			"",
+			"Downloaded skills may cover only part of the task. Use the official documentation below to fill any gaps."
+		] : ["No matching skills could be downloaded. Use the official documentation below to complete the task."],
+		"",
+		"## Official documentation",
+		"",
+		...docs.map((url) => `- ${url}`),
+		""
+	].join("\n");
+}
+async function writeWizardSpellbook(session, program) {
+	const parent = path.join(session.installDir, ".posthog");
+	await fs.mkdir(parent, { recursive: true });
+	const directory = await fs.mkdtemp(path.join(parent, "wizard-spellbook-"));
+	const readme = path.join(directory, "README.md");
+	await fs.writeFile(readme, spellbookText(session, program, []));
+	const menu = await fetchSkillMenu(getSkillsBaseUrl(), {
+		timeoutMs: 1e4,
+		maxAttempts: 1
+	});
+	const installed = [];
+	for (const skill of menu ? selectSkills(menu, session, program) : []) if ((await downloadSkill(skill, directory, {
+		skillsRoot: "skills",
+		scan: (dir) => scanInstalledSkill(dir, void 0)
+	})).success) installed.push(skill);
+	else await fs.rm(path.join(directory, "skills", skill.id), {
+		recursive: true,
+		force: true
+	});
+	await fs.writeFile(readme, spellbookText(session, program, installed));
+	return {
+		path: readme,
+		skillsIncluded: installed.length > 0
+	};
+}
+//#endregion
+//#region src/tui/screens/ExitScreen.tsx
+/**
+* ExitScreen — Final step in every program.
+*
+* Renders nothing. Immediately asks the host to end the run with 0.
+* The cleanup handler in start-tui.ts handles the exit summary line.
+*/
+const ExitScreen = ({ store }) => {
+	useEffect(() => {
+		if (!store.mintHandoff) store.requestExit(0);
+	}, []);
+	return null;
+};
+//#endregion
+//#region src/tui/screens/AuthErrorScreen.tsx
+/**
+* AuthErrorScreen — Shown when the PostHog LLM Gateway returns a 401.
+*
+* Distinct causes, most specific first:
+*  0. The OAuth grant is gone — a pre-run refresh already got `invalid_grant`
+*     from the token endpoint. The only branch backed by a server verdict
+*     rather than inference, so it wins; re-running is the whole fix.
+*  1. Claude Code settings.json / managed-settings overrides ANTHROPIC_*
+*     env vars — auth conflict. Tell the user to log out of Claude Code.
+*  2. The PostHog API key itself was rejected — bad prefix, missing scope,
+*     expired, or wrong region. Don't blame Claude Code in this case.
+*/
+const AuthErrorScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	useDismissOnAnyKey(() => store.requestExit(1));
+	const detail = store.authErrorDetail;
+	const hasSettingsConflict = detail?.hasSettingsConflict ?? true;
+	const conflicts = detail?.conflicts ?? [];
+	const usingManagedLogin = detail?.usingManagedLogin ?? false;
+	const credentialPlaces = detail?.credentialPlaces ?? [];
+	const sessionExpired = detail?.sessionExpired ?? false;
+	const logFilePath = detail?.logFilePath;
+	return /* @__PURE__ */ jsxs(Box, {
+		flexDirection: "column",
+		flexGrow: 1,
+		children: [
+			/* @__PURE__ */ jsxs(Text, {
+				color: "red",
+				bold: true,
+				children: ["✘", " Authentication error"]
+			}),
+			sessionExpired ? /* @__PURE__ */ jsxs(Fragment$1, { children: [
+				/* @__PURE__ */ jsx(Box, {
+					flexDirection: "column",
+					marginTop: 1,
+					children: /* @__PURE__ */ jsx(Text, { children: "Your PostHog login expired while the wizard was running, so the LLM Gateway rejected it (401). Nothing on this machine is misconfigured — the session simply ran out." })
+				}),
+				/* @__PURE__ */ jsx(Box, {
+					marginTop: 1,
+					children: /* @__PURE__ */ jsx(Text, {
+						dimColor: true,
+						children: "Re-run the wizard and log in again:"
+					})
+				}),
+				/* @__PURE__ */ jsx(Box, {
+					flexDirection: "column",
+					marginTop: 1,
+					paddingLeft: 2,
+					children: /* @__PURE__ */ jsx(Text, {
+						color: "cyan",
+						children: "npx @posthog/wizard"
+					})
+				}),
+				/* @__PURE__ */ jsx(Box, {
+					marginTop: 1,
+					children: /* @__PURE__ */ jsx(Text, {
+						dimColor: true,
+						children: "Any files the agent already wrote are still in your project."
+					})
+				})
+			] }) : usingManagedLogin ? /* @__PURE__ */ jsxs(Fragment$1, { children: [
+				/* @__PURE__ */ jsx(Box, {
+					flexDirection: "column",
+					marginTop: 1,
+					children: /* @__PURE__ */ jsx(Text, { children: "Conflicting Anthropic credentials. The agent signed in with an existing Claude login instead of the PostHog token the Wizard provided, so the LLM Gateway rejected it (401)." })
+				}),
+				credentialPlaces.length > 0 && /* @__PURE__ */ jsxs(Box, {
+					flexDirection: "column",
+					marginTop: 1,
+					paddingLeft: 2,
+					children: [/* @__PURE__ */ jsx(Text, {
+						dimColor: true,
+						children: "Conflicting credentials may come from:"
+					}), credentialPlaces.map((place) => /* @__PURE__ */ jsxs(Text, { children: [
+						"•",
+						" ",
+						place
+					] }, place))]
+				}),
+				/* @__PURE__ */ jsx(Box, {
+					marginTop: 1,
+					children: /* @__PURE__ */ jsx(Text, {
+						dimColor: true,
+						children: "Log out of Claude Code (clears the stored login), then re-run the Wizard:"
+					})
+				}),
+				/* @__PURE__ */ jsx(Box, {
+					flexDirection: "column",
+					marginTop: 1,
+					paddingLeft: 2,
+					children: /* @__PURE__ */ jsx(Text, {
+						color: "cyan",
+						children: "claude auth logout"
+					})
+				})
+			] }) : hasSettingsConflict ? /* @__PURE__ */ jsxs(Fragment$1, { children: [
+				/* @__PURE__ */ jsx(Box, {
+					flexDirection: "column",
+					marginTop: 1,
+					children: /* @__PURE__ */ jsx(Text, { children: "The Wizard couldn't connect to the PostHog LLM Gateway. Claude Code settings on this machine override the Wizard's credentials." })
+				}),
+				conflicts.length > 0 && /* @__PURE__ */ jsx(Box, {
+					flexDirection: "column",
+					marginTop: 1,
+					paddingLeft: 2,
+					children: conflicts.map((conflict) => /* @__PURE__ */ jsxs(Text, { children: [
+						"•",
+						" ",
+						/* @__PURE__ */ jsx(Text, {
+							bold: true,
+							children: conflict.path
+						}),
+						" sets",
+						" ",
+						/* @__PURE__ */ jsx(Text, {
+							color: "yellow",
+							children: conflict.keys.join(", ")
+						})
+					] }, conflict.path))
+				}),
+				/* @__PURE__ */ jsx(Box, {
+					marginTop: 1,
+					children: /* @__PURE__ */ jsx(Text, {
+						dimColor: true,
+						children: "Remove those keys from the file(s) above, or log out of Claude Code, then re-run the Wizard:"
+					})
+				}),
+				/* @__PURE__ */ jsx(Box, {
+					flexDirection: "column",
+					marginTop: 1,
+					paddingLeft: 2,
+					children: /* @__PURE__ */ jsx(Text, {
+						color: "cyan",
+						children: "claude auth logout"
+					})
+				})
+			] }) : /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(Box, {
+				flexDirection: "column",
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(Text, { children: "The PostHog LLM Gateway rejected the API key. Common causes:" })
+			}), /* @__PURE__ */ jsxs(Box, {
+				flexDirection: "column",
+				marginTop: 1,
+				paddingLeft: 2,
+				children: [
+					/* @__PURE__ */ jsxs(Text, { children: [
+						"•",
+						" Wrong key type — pass a personal API key (",
+						/* @__PURE__ */ jsx(Text, {
+							color: "cyan",
+							children: "phx_xxx"
+						}),
+						")."
+					] }),
+					/* @__PURE__ */ jsxs(Text, {
+						dimColor: true,
+						children: ["  ", "pha_ is an OAuth access token, phc_ is a project key."]
+					}),
+					/* @__PURE__ */ jsxs(Text, { children: [
+						"•",
+						" Missing scope — the key needs",
+						" ",
+						/* @__PURE__ */ jsx(Text, {
+							color: "cyan",
+							children: "llm_gateway:read"
+						}),
+						"."
+					] }),
+					/* @__PURE__ */ jsxs(Text, { children: ["•", " Expired or revoked key."] }),
+					/* @__PURE__ */ jsxs(Text, { children: [
+						"•",
+						" Region mismatch — ",
+						/* @__PURE__ */ jsx(Text, {
+							color: "cyan",
+							children: "--region"
+						}),
+						" must match where the key was issued (us vs eu)."
+					] })
+				]
+			})] }),
+			logFilePath && /* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsxs(Text, {
+					dimColor: true,
+					children: ["Verbose log: ", logFilePath]
+				})
+			}),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(Text, {
+					color: Colors.muted,
+					children: "Press any key to exit"
+				})
+			})
+		]
+	});
+};
+//#endregion
+//#region src/tui/screens/SessionTimeoutScreen.tsx
+/**
+* SessionTimeoutScreen — shown when the OAuth login window expires before the
+* user completes authorization.
+*
+* Pushed as an overlay so it takes priority over the gated AuthScreen (which
+* never completes without credentials). Terminal state: any key exits, since
+* the only way forward is to re-run the wizard for a fresh login window.
+*/
+const TIMEOUT_MINUTES = Math.round(OAUTH_TIMEOUT_MS / 6e4);
+const SessionTimeoutScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	useDismissOnAnyKey(() => store.requestExit(1));
+	return /* @__PURE__ */ jsxs(Box, {
+		flexDirection: "column",
+		flexGrow: 1,
+		children: [
+			/* @__PURE__ */ jsxs(Text, {
+				color: "red",
+				bold: true,
+				children: ["✘", " Login timed out"]
+			}),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsxs(Text, { children: [
+					"The OAuth link timed out after ",
+					TIMEOUT_MINUTES,
+					" minutes."
+				] })
+			}),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(Text, { children: "Re-run the wizard to get a fresh link and try again." })
+			}),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(Text, {
+					color: Colors.muted,
+					children: "Press any key to exit"
+				})
+			})
+		]
+	});
+};
+//#endregion
+//#region src/tui/screens/WizardAskScreen.tsx
+/**
+* WizardAskScreen — Overlay for the `wizard_ask` MCP tool.
+*
+* Walks the agent's question list one at a time and accumulates answers.
+* When the user submits the last question, the store resolves the
+* pending request and the overlay pops, returning the agent to its run.
+*/
+/**
+* Key policy for the ask overlay: Esc declines the whole request, everything
+* else is left to the focused input. Extracted so the wiring is unit-testable
+* without a live Ink render (the test suite stubs `useInput` to a no-op).
+*/
+function handleAskKey(key, store) {
+	if (key.escape) store.cancelPendingQuestion();
+}
+/**
+* What pressing Esc actually does, phrased for the footer hint.
+*
+* Esc declines the *whole* request — {@link WizardStore.cancelPendingQuestion}
+* builds a cancelled answer for every question, so the ones already typed are
+* discarded too. The footer used to label that "skip", which on a multi-question
+* request reads as "skip this field": the warehouse task walks a source's
+* credentials one field at a time, several of them optional, and a user who
+* pressed Esc to pass on an optional field instead threw away the whole source
+* and dropped the agent onto its browser-handoff fallback. Naming the scope
+* costs a few characters and makes the destructive key read as destructive.
+*/
+function askEscapeHint(total, answered) {
+	if (total <= 1) return "skip";
+	if (answered <= 0) return `skip all ${total} questions`;
+	return `skip all ${total} questions, discarding the ${answered} you answered`;
+}
+/**
+* Whether the overlay must mask what the user types for this question.
+*
+* A `sensitive` answer is one the wizard has already promised to treat as a
+* secret: `wizard_ask` vaults it and hands the agent an opaque `secretRef`, so
+* the raw string never enters the model's conversation. Every other boundary
+* guards it the same way — the skip events carry no free text, handoff prose is
+* kept out of telemetry — but the overlay that collects it echoed it back in
+* plain text as it was typed, which is the one place a database password or an
+* API key is read by a person other than its owner: a shared screen, a pairing
+* session, a recorded terminal.
+*
+* `kind` is checked as well as the flag. The tool already rejects `sensitive`
+* on a picker, and a picker has nothing to mask, so this keeps the predicate
+* total over a question rather than relying on that rejection.
+*/
+function shouldMaskAnswer(question) {
+	return question.kind === "text" && question.sensitive === true;
+}
+/**
+* Whether an answer would leave a required question effectively unanswered.
+*
+* The `wizard_ask` schema marks fields `required` (defaulting to true), but the
+* overlay used to submit whatever the input held — so pressing Enter on an empty
+* required credential field sent an empty string on to the agent. A blank host
+* or password is indistinguishable there from a real answer, so the warehouse
+* task ran on it, failed source creation, and dead-ended with no signal that the
+* user had in effect declined. Blocking the empty submit keeps the contract the
+* schema already advertises; Esc stays the way to skip. Optional fields
+* (`required === false`) are never blocked, and pickers always yield a value.
+*/
+function isRequiredButEmpty(question, value) {
+	if (question.required === false) return false;
+	return Array.isArray(value) ? value.length === 0 : value.trim().length === 0;
+}
+const WizardAskScreen = ({ store }) => {
+	useSyncExternalStore((cb) => store.subscribe(cb), () => store.getSnapshot());
+	const pending = store.session.pendingQuestion;
+	const [index, setIndex] = useState(0);
+	const [answers, setAnswers] = useState({});
+	const [lastPendingId, setLastPendingId] = useState(null);
+	const [requiredHint, setRequiredHint] = useState(false);
+	const [linkStatus, setLinkStatus] = useState("idle");
+	const richLinks = pending?.richLinks ?? false;
+	const currentPrompt = pending?.questions[index]?.prompt ?? "";
+	const promptUrls = richLinks ? extractUrls(currentPrompt) : [];
+	const soleUrl = promptUrls.length === 1 ? promptUrls[0] : null;
+	const isTextQuestion = pending?.questions[index]?.kind === "text";
+	const canActOnLink = !!soleUrl && !isTextQuestion;
+	const linkSplitIndex = canActOnLink && soleUrl ? currentPrompt.indexOf(soleUrl) : -1;
+	const splitLink = soleUrl !== null && linkSplitIndex !== -1;
+	const linkEnd = splitLink && soleUrl ? linkSplitIndex + soleUrl.length : 0;
+	const promptHead = splitLink ? currentPrompt.slice(0, linkEnd) : currentPrompt;
+	const linkTrailingText = splitLink ? currentPrompt.slice(linkEnd).replace(/^\s+/, "") : "";
+	useEffect(() => {
+		setLinkStatus("idle");
+		if (!soleUrl) return;
+		copyToClipboard(soleUrl);
+	}, [soleUrl]);
+	useKeyBindings("wizard-ask-link", canActOnLink && soleUrl ? [{
+		match: "o",
+		label: "o",
+		action: "open in browser",
+		handler: () => {
+			openInBrowser(soleUrl).then((ok) => {
+				if (ok) setLinkStatus("opened");
+			});
+		}
+	}, {
+		match: "c",
+		label: "c",
+		action: "copy link",
+		handler: () => {
+			copyToClipboard(soleUrl).then((ok) => {
+				if (ok) setLinkStatus("copied");
+			});
+		}
+	}] : []);
+	useInput((_input, key) => handleAskKey(key, store));
+	if (!pending) return null;
+	if (pending.id !== lastPendingId) {
+		setLastPendingId(pending.id);
+		setIndex(0);
+		setAnswers({});
+		setRequiredHint(false);
+		return null;
+	}
+	const question = pending.questions[index];
+	if (!question) return null;
+	const total = pending.questions.length;
+	const progress = total > 1 ? `Question ${index + 1} of ${total}` : null;
+	const escapeHint = askEscapeHint(total, index);
+	const canSkipOne = question.kind === "text" && question.required === false;
+	const submit = (value) => {
+		if (isRequiredButEmpty(question, value)) {
+			setRequiredHint(true);
+			return;
+		}
+		setRequiredHint(false);
+		const next = {
+			...answers,
+			[question.id]: value
+		};
+		if (index + 1 < total) {
+			setAnswers(next);
+			setIndex(index + 1);
+			store.noteAskProgress();
+			return;
+		}
+		store.resolvePendingQuestion(next);
+	};
+	return /* @__PURE__ */ jsxs(ModalOverlay, {
+		borderColor: Colors.accent,
+		title: `${Icons.diamond} ${pending.source}`,
+		titleColor: Colors.accent,
+		width: 72,
+		children: [
+			progress && /* @__PURE__ */ jsx(Box, {
+				marginBottom: 1,
+				children: /* @__PURE__ */ jsx(Text, {
+					dimColor: true,
+					children: progress
+				})
+			}),
+			/* @__PURE__ */ jsx(Box, {
+				flexDirection: "column",
+				children: pending.richLinks ? /* @__PURE__ */ jsx(LinkText, { text: promptHead }) : /* @__PURE__ */ jsx(Text, { children: question.prompt })
+			}),
+			canActOnLink && /* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: linkStatus === "idle" ? /* @__PURE__ */ jsxs(Text, {
+					dimColor: true,
+					children: [
+						"Press ",
+						/* @__PURE__ */ jsx(Text, {
+							color: Colors.accent,
+							children: "o"
+						}),
+						" to open it in your browser, or ",
+						/* @__PURE__ */ jsx(Text, {
+							color: Colors.accent,
+							children: "c"
+						}),
+						" to copy the link."
+					]
+				}) : linkStatus === "opened" ? /* @__PURE__ */ jsxs(Text, {
+					color: Colors.success,
+					children: [Icons.check, " Opening the link in your browser…"]
+				}) : /* @__PURE__ */ jsxs(Text, {
+					color: Colors.success,
+					children: [Icons.check, " Link copied to clipboard. Paste it in your browser."]
+				})
+			}),
+			linkTrailingText && /* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(Text, { children: linkTrailingText })
+			}),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsx(QuestionInput, {
+					question,
+					onSubmit: submit
+				}, `${pending.id}:${question.id}`)
+			}),
+			requiredHint && /* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsxs(Text, {
+					color: Colors.accent,
+					children: [
+						Icons.warning,
+						" This field is required — type an answer, or press ESC to ",
+						escapeHint,
+						"."
+					]
+				})
+			}),
+			canSkipOne && /* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsxs(Text, {
+					dimColor: true,
+					children: [
+						"Optional — press ",
+						/* @__PURE__ */ jsx(Text, {
+							color: Colors.accent,
+							children: "ENTER"
+						}),
+						" on an empty answer to skip just this one."
+					]
+				})
+			}),
+			/* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				children: /* @__PURE__ */ jsxs(Text, {
+					dimColor: true,
+					children: [
+						/* @__PURE__ */ jsx(Text, {
+							color: Colors.accent,
+							children: "ESC"
+						}),
+						" ",
+						escapeHint
+					]
+				})
+			})
+		]
+	});
+};
+const QuestionInput = ({ question, onSubmit }) => {
+	switch (question.kind) {
+		case "single": return /* @__PURE__ */ jsx(PickerMenu, {
+			options: (question.options ?? []).map((o) => ({
+				label: o.label,
+				value: o.value
+			})),
+			onSelect: (value) => {
+				onSubmit(Array.isArray(value) ? value[0] : value);
+			}
+		});
+		case "multi": {
+			const multiOptions = (question.options ?? []).map((o) => ({
+				label: o.label,
+				value: o.value,
+				description: o.description
+			}));
+			return /* @__PURE__ */ jsx(PickerMenu, {
+				mode: "multi",
+				optionMarginBottom: multiOptions.some((o) => o.description) ? 1 : 0,
+				options: multiOptions,
+				onSelect: (value) => {
+					onSubmit(Array.isArray(value) ? value : [value]);
+				}
+			});
+		}
+		case "text": return /* @__PURE__ */ jsxs(Box, {
+			flexDirection: "column",
+			width: "100%",
+			children: [/* @__PURE__ */ jsx(shouldMaskAnswer(question) ? PasswordInput : TextInput, {
+				placeholder: "Type your answer",
+				onSubmit: (value) => onSubmit(value)
+			}), /* @__PURE__ */ jsx(Box, {
+				marginTop: 1,
+				width: "100%",
+				justifyContent: "flex-end",
+				children: /* @__PURE__ */ jsxs(Text, { children: [/* @__PURE__ */ jsx(Text, {
+					color: Colors.accent,
+					children: "ENTER"
+				}), /* @__PURE__ */ jsx(Text, {
+					dimColor: true,
+					children: " submit"
+				})] })
+			})]
+		});
+	}
+};
+//#endregion
+//#region src/shared/mcp-clients/login-client.ts
+function isLoginCapable(client) {
+	return typeof client === "object" && client !== null && "loginCommand" in client;
+}
+//#endregion
+//#region src/shared/mcp-clients/browser-client.ts
+function isBrowserFinishable(c) {
+	return typeof c === "object" && c !== null && "connectorUrl" in c && "finishInstruction" in c;
+}
+//#endregion
+//#region src/tui/services/mcp-installer.ts
+/**
+* McpInstaller — service layer between McpScreen and MCP business logic.
+*
+* Decouples the screen from step internals. Testable, swappable,
+* no dynamic imports in React components.
+*/
+/**
+* Production McpInstaller backed by real MCP client detection and installation.
+*/
+function createMcpInstaller() {
+	let cachedClients = [];
+	return {
+		async detectClients() {
+			const supported = await getSupportedClients();
+			cachedClients = supported.map((c) => ({
+				name: c.name,
+				raw: c
+			}));
+			return supported.map((c) => ({
+				name: c.name,
+				supportsPlugin: isPluginCapable(c) && c.supportsPlugin(),
+				pluginBundlesMcp: isPluginCapable(c) && c.pluginBundlesMcpServer(),
+				finish: isBrowserFinishable(c) ? {
+					url: c.connectorUrl,
+					instruction: c.finishInstruction
+				} : void 0,
+				loginCommand: isLoginCapable(c) && c.loginCommand(false) || void 0,
+				pluginLoginCommand: isLoginCapable(c) && c.pluginLoginCommand?.() || void 0
+			}));
+		},
+		async install(clientNames, features, apiKey) {
+			const resolvedFeatures = features ?? [...ALL_FEATURE_VALUES];
+			const toInstall = cachedClients.filter((c) => clientNames.includes(c.name)).map((c) => c.raw);
+			if (toInstall.length === 0) {
+				logToFile(`[McpInstaller] No clients matched. clientNames=${JSON.stringify(clientNames)}, cached=${JSON.stringify(cachedClients.map((c) => c.name))}`);
+				return [];
+			}
+			const results = [];
+			for (const client of toInstall) {
+				const name = client.name;
+				try {
+					const result = await client.addServer(apiKey, resolvedFeatures, false);
+					results.push(toClientResult(name, result));
+					if (!result?.success) logToFile(`[McpInstaller] addServer returned success=false for ${name}: ${redactSecrets(result?.reason ?? "no reason given")}`);
+				} catch (err) {
+					const reason = err instanceof Error ? err.message : String(err);
+					logToFile(`[McpInstaller] addServer threw for ${name}: ${redactSecrets(reason)}`);
+					results.push(toClientResult(name, {
+						success: false,
+						reason
+					}));
+				}
+			}
+			return results;
+		},
+		async remove(local) {
+			const installed = await getInstalledClients(local);
+			if (installed.length === 0) return [];
+			return removeMCPServer(installed, local);
+		},
+		async installPlugins(clientNames) {
+			const pluginClients = getSupportedPluginClients(cachedClients.filter((c) => clientNames.includes(c.name)).map((c) => c.raw));
+			const results = await installPlugins(pluginClients);
+			const already = namesWithStatus(results, "unchanged");
+			analytics.wizardCapture("mcp plugins installed", {
+				clients: [...namesWithStatus(results, "changed"), ...already],
+				already_installed: already,
+				attempted: pluginClients.map((c) => c.name)
+			});
+			return results;
+		}
+	};
+}
+//#endregion
+//#region src/tui/screen-registry.tsx
+function createServices(store) {
+	return {
+		get logPath() {
+			return path$1.resolve(getLogFilePath());
+		},
+		openAgent: (agent, spellbookPath) => openCodingAgent(agent, store.session.installDir, spellbookPath),
+		leaveSpellbook: () => writeWizardSpellbook(store.session, getProgramConfig(store.router.activeProgram)),
+		mcpInstaller: createMcpInstaller()
+	};
+}
+function createScreens(store, services) {
+	const programScreens = {};
+	for (const program of listFlowOwners()) for (const [id, render] of Object.entries(program.screens ?? {})) programScreens[id] ??= render(store, services);
+	const core = {
+		["settings-override"]: /* @__PURE__ */ jsx(SettingsOverrideScreen, { store }),
+		["managed-settings"]: /* @__PURE__ */ jsx(ManagedSettingsScreen, { store }),
+		["port-conflict"]: /* @__PURE__ */ jsx(PortConflictScreen, { store }),
+		["task-notice"]: /* @__PURE__ */ jsx(TaskNoticeScreen, { store }),
+		["manual-auth-code"]: /* @__PURE__ */ jsx(ManualAuthCodeScreen, { store }),
+		["auth-error"]: /* @__PURE__ */ jsx(AuthErrorScreen, { store }),
+		["session-timeout"]: /* @__PURE__ */ jsx(SessionTimeoutScreen, { store }),
+		["wizard-ask"]: /* @__PURE__ */ jsx(WizardAskScreen, { store }),
+		["health-check"]: /* @__PURE__ */ jsx(HealthCheckScreen, { store }),
+		["setup"]: /* @__PURE__ */ jsx(SetupScreen, { store }),
+		["auth"]: /* @__PURE__ */ jsx(AuthScreen, { store }),
+		["ai-opt-in"]: /* @__PURE__ */ jsx(AiOptInRequiredScreen, { store }),
+		["run"]: /* @__PURE__ */ jsx(RunScreen, { store }),
+		["mcp"]: /* @__PURE__ */ jsx(McpScreen, {
+			store,
+			installer: services.mcpInstaller
+		}),
+		["slack-connect"]: /* @__PURE__ */ jsx(SlackConnectScreen, { store }),
+		["keep-skills"]: /* @__PURE__ */ jsx(KeepSkillsScreen, { store }),
+		["outro"]: /* @__PURE__ */ jsx(OutroScreen, { store }),
+		["mint-failure"]: /* @__PURE__ */ jsx(MintFailureScreen, {
+			store,
+			services
+		}),
+		["exit"]: /* @__PURE__ */ jsx(ExitScreen, { store })
+	};
+	return {
+		...programScreens,
+		...core
+	};
+}
+//#endregion
+//#region src/tui/auth/login.ts
+/** Log in once through OAuth for the session's launch values. */
+async function oauthLogin(session, programId, store) {
+	logToFile("[agent-runner] starting OAuth");
+	const data = await getOrAskForProjectData({
+		store,
+		signup: session.signup,
+		projectId: session.projectId,
+		email: session.email,
+		region: session.region,
+		baseUrl: session.baseUrl,
+		localMcp: session.localMcp,
+		programId
+	});
+	analytics.wizardCapture("auth complete", { project_id: data.projectId });
+	return {
+		posthog: {
+			accessToken: data.accessToken,
+			refreshToken: data.refreshToken,
+			expiresAt: data.expiresAt,
+			oauthClientId: data.oauthClientId,
+			projectApiKey: data.projectApiKey,
+			host: data.host,
+			projectId: data.projectId,
+			missingScopes: data.missingScopes
+		},
+		project: data.project,
+		apiUser: data.user,
+		roleAtOrganization: data.roleAtOrganization
+	};
+}
+/** The OAuth login as `runProgram`'s provider, reading the store's session when it is asked. */
+function oauthCredentials(store) {
+	return { resolve: (programId) => oauthLogin(store.session, programId, store) };
+}
+//#endregion
+//#region src/tui/App.tsx
+const App = ({ store }) => {
+	const services = useMemo(() => createServices(store), [store]);
+	return /* @__PURE__ */ jsx(ScreenContainer, {
+		store,
+		screens: useMemo(() => createScreens(store, services), [store, services])
+	});
+};
+//#endregion
+//#region src/tui/exit-line.ts
+const RESET_ATTRS = "\x1B[0m";
+const GREEN = "\x1B[32m";
+const BOLD = "\x1B[1m";
+const DIM = "\x1B[2m";
+/**
+* Mirrors the hidden Ctrl+T HUD's tally into post-exit scrollback — but only
+* when the HUD is actually visible at exit (`store.tokenHudVisible`, which
+* defaults on in dev/test and off in production; `useDismissOnAnyKey`
+* already keeps Ctrl+T from also dismissing the outro screen underneath
+* it). A production run where the user never toggled it on shouldn't have a
+* cost number appear from nowhere once the TUI tears down. `null` when the
+* HUD is hidden, or the run never produced any usage (e.g. non-agent
+* programs).
+*/
+function tokenCostLine(store) {
+	if (!store.tokenHudVisible) return null;
+	const usage = store.tokenUsage;
+	if (totalTokenCount(usage) === 0) return null;
+	return `${DIM}${usage.costIsFinal ? "Final cost" : "Cost (estimate)"}: ${formatCostUsd(usage.costUsd)} (in ${formatTokenCount(usage.inputTokens)} · out ${formatTokenCount(usage.outputTokens)} · cache read ${formatTokenCount(usage.cacheReadTokens)} · cache write ${formatTokenCount(usage.cacheCreationTokens)})${RESET_ATTRS}`;
+}
+/**
+* The one manual step the wizard can't do itself: the editor's own MCP login.
+* Echoed into scrollback like the handoff prompt — command on its own plain
+* line so a terminal can triple-click-select it.
+*/
+function mcpLoginBlock(store) {
+	const commands = store.mcpLoginCommands;
+	if (!commands || commands.length === 0) return null;
+	return `${GREEN}${BOLD}\u2714 Authenticate to finish (opens your browser):${RESET_ATTRS}\n` + commands.join("\n");
+}
+function getExitLine(store) {
+	const outro = store.session.outroData;
+	const label = store.programLabel ?? "Wizard";
+	const costLine = tokenCostLine(store);
+	const loginBlock = mcpLoginBlock(store);
+	if (isRunFailure(store.session)) {
+		const spellbook = store.spellbook;
+		return [
+			"The wizard is unavailable. Setup has not been completed.",
+			spellbook && `${DIM}Point your agent at this skill (triple-click to select):${RESET_ATTRS}\n${spellbook.path}`,
+			`${DIM}${MINT_FAILURE_CONTACT}${RESET_ATTRS}\n${getLogFilePath()}`,
+			loginBlock,
+			costLine
+		].filter(Boolean).join("\n\n");
+	}
+	if (outro?.kind === "success") {
+		const message = outro.message ?? `${label} completed successfully.`;
+		const parts = [`${GREEN}${BOLD}✔${RESET_ATTRS} ${message}${outro.reportFile && !message.includes(outro.reportFile) ? ` Check ./${outro.reportFile} for details.` : ""}`];
+		if (outro.primaryLink) parts.push(`${DIM}${outro.primaryLink.label}:${RESET_ATTRS}\n${outro.primaryLink.url}`);
+		if (outro.nextSteps) {
+			const bullets = outro.nextSteps.items.map((item) => `${DIM}  • ${item}${RESET_ATTRS}`).join("\n");
+			parts.push(`${DIM}${outro.nextSteps.heading}${RESET_ATTRS}\n${bullets}`);
+		}
+		if (outro.handoffPrompt) parts.push(`${DIM}Hand this to your coding agent to finish up (triple-click to select):${RESET_ATTRS}\n` + outro.handoffPrompt);
+		if (loginBlock) parts.push(loginBlock);
+		if (costLine) parts.push(costLine);
+		return parts.join("\n\n");
+	}
+	const parts = loginBlock ? [loginBlock] : [`${DIM}${label} exited.${RESET_ATTRS}`];
+	if (costLine) parts.push(costLine);
+	return parts.join("\n\n");
+}
+//#endregion
+//#region src/tui/start-tui.ts
+/**
+* start-tui.ts — Sets up the Ink TUI renderer over a new store.
+*
+* Renders in the terminal's alternate screen buffer so the wizard
+* doesn't pollute scrollback history. On exit, the previous terminal
+* content is restored and a single exit summary line is printed.
+*/
+/** Render the app for `program`. `onInterrupt` runs when Ink tears itself down on Ctrl+C; the caller ends the run. */
+function startTUI(version, program, onInterrupt) {
+	if (!process.stdin.isTTY) throw new WizardError("This command needs an interactive terminal (stdin is not a TTY). Run the wizard directly in a terminal, not through a pipe or script.", void 0, ErrorCodes.CliInteractiveRequired);
+	enterDarkTerminal();
+	const store = new WizardStore(program);
+	store.version = version;
+	const { unmount: inkUnmount, waitUntilExit } = render(createElement(App, { store }));
+	analytics.setTag("program_id", program);
+	analytics.wizardCapture("started", { program_id: program });
+	store.runInitHooks();
+	process.stdin.on("error", (err) => {
+		if (err.code !== "EIO") throw err;
+	});
+	let cleaned = false;
+	const cleanup = () => {
+		if (cleaned) return;
+		cleaned = true;
+		logToFile(`[start-tui] unmounting TUI, leaving alt screen (exitCode=${process.exitCode ?? "unset"})`);
+		inkUnmount();
+		releaseTerminal();
+		process.stdout.write(getExitLine(store) + "\n");
+	};
+	process.on("exit", cleanup);
+	waitUntilExit().then(() => {
+		if (!cleaned) onInterrupt();
+	});
+	return {
+		unmount: cleanup,
+		store,
+		waitForSetup: () => store.getGate("intro")
+	};
+}
+//#endregion
+//#region src/tui/run-tool.ts
+/**
+* The TUI host for a tool: its screens on their own store, with no program
+* run, no task stream and no WizardRun. The CLI builds the launch values, owns
+* the signals and applies the exit code.
+*/
+/**
+* Run `toolId`'s screens. Resolves with the code a screen ends them with
+* (after the analytics flush), an abort's, 1 on a crash, or 130 or 143 on a
+* signal. Rejects when the TUI cannot start, as with no terminal.
+*/
+async function runTuiTool(toolId, launch) {
+	const exit = startHostExit();
+	let unmountTui = () => void 0;
+	let stopping = false;
+	const stop = (code) => {
+		if (stopping || exit.ended) return;
+		stopping = true;
+		unmountTui();
+		(async () => {
+			try {
+				await analytics.shutdown("cancelled");
+			} catch {}
+			exit.end(code);
+		})();
+	};
+	const onAbort = () => stop(launch.signal.reason === "SIGTERM" ? 143 : 130);
+	if (launch.signal.aborted) onAbort();
+	else launch.signal.addEventListener("abort", onAbort, { once: true });
+	const isDoctor = toolId === "posthog-doctor";
+	const localError = isDoctor ? await localServicesError(launch.session.baseUrl) : void 0;
+	if (stopping) return exit.exited;
+	if (localError) {
+		wizardAbort({
+			present: printAbortOutro,
+			exit
+		}, { message: localError }).catch((error) => exit.fail(error));
+		return exit.exited;
+	}
+	const tool = getTuiTool(toolId);
+	if (!tool) throw new Error(`The ${toolId} tool has no screens.`);
+	const tui = startTUI(VERSION, toolId, () => stop(130));
+	unmountTui = () => tui.unmount();
+	tui.store.launch(buildSession(launch.session), launch.session, isDoctor ? toolId : null);
+	driveTuiTool(tui.store, tool, {
+		toolId,
+		signal: launch.signal
+	}).then(async (code) => {
+		if (stopping || exit.ended) return;
+		stopping = true;
+		tui.unmount();
+		await flushAnalytics();
+		exit.end(code);
+	}, (error) => {
+		if (stopping || exit.ended) return;
+		stopping = true;
+		logToFile("[run-wizard] FATAL:", error);
+		runCleanups();
+		try {
+			tui.unmount();
+		} catch {}
+		reportFatal(error);
+		exit.end(1);
+	});
+	return exit.exited;
+}
+/**
+* Drive a tool's screens on a mounted store: run its `start`, and resolve with
+* the code the first screen exit request carries. Rejects when `start` does.
+* The intro hands off to a tool through here too.
+*/
+function driveTuiTool(store, tool, { toolId, signal }) {
+	return new Promise((resolve, reject) => {
+		const settle = () => {
+			const code = store.exitRequest;
+			if (code === null) return;
+			unsubscribe();
+			resolve(code);
+		};
+		const unsubscribe = store.subscribe(settle);
+		settle();
+		tool.start?.({
+			store,
+			signal,
+			logIn: async () => {
+				await logIn(toolId, store.sessions, {
+					provider: oauthCredentials(store),
+					signal
+				});
+			}
+		}).catch((error) => {
+			unsubscribe();
+			reject(error);
+		});
+	});
+}
+/** Before the TUI mounts: the local dev services this run points at, if one is down. */
+function localServicesError(baseUrl) {
+	const local = getLocalDev();
+	return checkLocalServices({
+		...local,
+		localPosthog: local.localPosthog && !baseUrl
+	});
+}
+/** Print a crash with the log path and the PHW line. */
+function reportFatal(error) {
+	const failure = classifyRunFailure(error);
+	if (failure.coded) console.error(failure.message);
+	else console.error("Wizard run failed:", error);
+	console.error(`Full logs: ${getLogFilePath()}`);
+	emitWizardError({
+		code: failure.code,
+		message: failure.message
+	});
+}
+//#endregion
+export { startTUI as a, runTuiTool as i, localServicesError as n, oauthCredentials as o, reportFatal as r, driveTuiTool as t };
+
+//# sourceMappingURL=run-tool-DML8JJvt.js.map