@posthog/wizard 2.80.0 → 2.80.1

package/dist/analytics-D21z3E5l.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics-D21z3E5l.js","names":["uuidv4"],"sources":["../src/shared/local-dev.ts","../src/shared/constants.ts","../src/shared/run-state.ts","../src/shared/utils/ci-flag-overrides.ts","../src/shared/utils/analytics.ts"],"sourcesContent":["/**\n * Local development targets: context-mill (skills), MCP, and PostHog. Each is\n * independently switchable — CI runs local skills against the *production* MCP\n * — with `--local-dev` as a shorthand for all three.\n *\n * `wizard mcp add --local` is unrelated: it writes a `posthog-local` entry into\n * the user's editor config rather than retargeting this run. Hence no\n * `--local` here.\n */\n\nexport const CONTEXT_MILL_LOCAL_URL = 'http://localhost:8765';\nexport const MCP_LOCAL_URL = 'http://localhost:8787/mcp';\n/** Pins the API, app, OAuth, and the LLM gateway derived from them. */\nexport const POSTHOG_LOCAL_URL = 'http://localhost:8010';\n\n/**\n * Raw yargs values. The three specific flags are declared without a `default`\n * so they stay `undefined` when absent — see `resolveLocalDev`.\n */\nexport type LocalDevFlags = {\n  localDev?: boolean;\n  localMcp?: boolean;\n  localContextMill?: boolean;\n  localPosthog?: boolean;\n};\n\nexport type ResolvedLocalDev = {\n  localMcp: boolean;\n  localContextMill: boolean;\n  localPosthog: boolean;\n};\n\n/**\n * A specific flag beats `--local-dev` in both directions. `??` is load-bearing:\n * it falls through only on `undefined`, so giving the specific flags a yargs\n * `default: false` would silently break both the umbrella and `--no-local-mcp`.\n */\nexport function resolveLocalDev(flags: LocalDevFlags): ResolvedLocalDev {\n  const umbrella = flags.localDev ?? false;\n  return {\n    localMcp: flags.localMcp ?? umbrella,\n    localContextMill: flags.localContextMill ?? umbrella,\n    localPosthog: flags.localPosthog ?? umbrella,\n  };\n}\n\n/** yargs populates both spellings, so read either. */\nexport function localDevFromArgv(\n  argv: Record<string, unknown>,\n): ResolvedLocalDev {\n  const read = (kebab: string, camel: string): boolean | undefined => {\n    const value = argv[camel] ?? argv[kebab];\n    return typeof value === 'boolean' ? value : undefined;\n  };\n  return resolveLocalDev({\n    localDev: read('local-dev', 'localDev'),\n    localMcp: read('local-mcp', 'localMcp'),\n    localContextMill: read('local-context-mill', 'localContextMill'),\n    localPosthog: read('local-posthog', 'localPosthog'),\n  });\n}\n\nconst PRODUCTION_TARGETS: ResolvedLocalDev = {\n  localMcp: false,\n  localContextMill: false,\n  localPosthog: false,\n};\n\nlet resolved: ResolvedLocalDev | null = null;\n\n/**\n * Resolve this process's targets. Called once from the yargs middleware, which\n * covers every command and the env-var spellings alike.\n */\nexport function initLocalDev(argv: Record<string, unknown>): ResolvedLocalDev {\n  resolved = localDevFromArgv(argv);\n  return resolved;\n}\n\n/**\n * Where this run points. Resolved once because the flags are parsed at startup\n * and never change; threading them through state let call sites read whichever\n * field they happened to have, which is how the intro screens ended up asking\n * the MCP flag where to fetch skills.\n *\n * Uninitialized means no CLI parse ran (a direct-call test) — production.\n */\nexport function getLocalDev(): ResolvedLocalDev {\n  return resolved ?? PRODUCTION_TARGETS;\n}\n\n/** Tests only. */\nexport function resetLocalDev(): void {\n  resolved = null;\n}\n\ntype LocalService = {\n  key: keyof ResolvedLocalDev;\n  label: string;\n  flag: string;\n  /** Probed for reachability — any HTTP reply proves the port is bound. */\n  url: string;\n  startHint: string;\n};\n\nconst LOCAL_SERVICES: readonly LocalService[] = [\n  {\n    key: 'localContextMill',\n    label: 'context-mill',\n    flag: '--local-context-mill',\n    url: `${CONTEXT_MILL_LOCAL_URL}/skill-menu.json`,\n    startHint: 'npm run dev  (in the context-mill repo)',\n  },\n  {\n    key: 'localMcp',\n    label: 'MCP server',\n    flag: '--local-mcp',\n    url: MCP_LOCAL_URL,\n    startHint:\n      'hogli start  (or pnpm dev:local-resources in posthog/services/mcp)',\n  },\n  {\n    key: 'localPosthog',\n    label: 'PostHog',\n    flag: '--local-posthog',\n    url: POSTHOG_LOCAL_URL,\n    startHint: './bin/start  (in the posthog repo)',\n  },\n] as const;\n\n// Retries because this gate gates `fetchWithRetry` (see fetch-retry.ts) — a\n// blip it would ride out must not abort the run instead. A missing server\n// refuses instantly, so the retries only cost time when one is slow to answer,\n// which is exactly when they're worth paying for.\nconst PROBE_TIMEOUT_MS = 2_000;\nconst PROBE_ATTEMPTS = 3;\nconst PROBE_BACKOFF_MS = 250;\n\nasync function isReachable(url: string): Promise<boolean> {\n  for (let attempt = 1; attempt <= PROBE_ATTEMPTS; attempt++) {\n    try {\n      // Any reply — including 404 or 405 — proves something is listening, which\n      // is the only question here. Deliberately not `fetchWithRetry`: that\n      // treats a non-ok status as failure, and here it is a pass.\n      await fetch(url, { signal: AbortSignal.timeout(PROBE_TIMEOUT_MS) });\n      return true;\n    } catch {\n      if (attempt < PROBE_ATTEMPTS) {\n        await new Promise((r) =>\n          setTimeout(r, PROBE_BACKOFF_MS * 2 ** (attempt - 1)),\n        );\n      }\n    }\n  }\n  return false;\n}\n\n/**\n * Probe every service the flags asked to be local. Returns one message naming\n * each unreachable one, or undefined if all are up (or none were requested).\n *\n * Without this a dead local server surfaces late and badly: a missing\n * context-mill looks like a registry outage, a missing MCP fails mid-run after\n * the agent has already edited files.\n */\nexport async function checkLocalServices(\n  resolved: ResolvedLocalDev,\n): Promise<string | undefined> {\n  const requested = LOCAL_SERVICES.filter((s) => resolved[s.key]);\n  if (requested.length === 0) return undefined;\n\n  const reachable = await Promise.all(requested.map((s) => isReachable(s.url)));\n  const dead = requested.filter((_, i) => !reachable[i]);\n  if (dead.length === 0) return undefined;\n\n  return [\n    `Local ${dead.length === 1 ? 'service is' : 'services are'} not running:`,\n    '',\n    ...dead.map(\n      (s) =>\n        `  ${s.label} — nothing listening at ${new URL(s.url).origin}\\n` +\n        `    requested by ${s.flag}\\n` +\n        `    start it with: ${s.startHint}`,\n    ),\n    '',\n    'Start the missing services, or drop the flag to use production.',\n  ].join('\\n');\n}\n\n/**\n * `--local-mcp` used to select local skills too; anyone still relying on that\n * would silently get production skills. Temporary — drop after a release or two.\n */\nexport function localMcpSkillsNotice(flags: LocalDevFlags): string | undefined {\n  if (flags.localMcp !== true) return undefined;\n  if (flags.localContextMill !== undefined || flags.localDev === true) {\n    return undefined;\n  }\n  return (\n    '--local-mcp now points only at the local MCP server. ' +\n    'For local skills, add --local-context-mill (or use --local-dev for both).'\n  );\n}\n","/**\n * Shared constants for the PostHog wizard.\n */\n\nimport { VERSION } from './version';\n\n// ── Models ──────────────────────────────────────────────────────────\n// Coordinate IDs/efforts with the mint allowlists and gateway transport/required prompt policy; see agent/runner/README.md.\n\n/** Next sonnet generation (a `MODEL_FLAG_VARIANTS` key in the switchboard). */\nexport const SONNET_5_MODEL = 'claude-sonnet-5';\n\n/**\n * Default model for agent runs. Bare model IDs (no `anthropic/` prefix) so the\n * LLM gateway's Bedrock fallback can match map_to_bedrock_model().\n */\nexport const DEFAULT_AGENT_MODEL = SONNET_5_MODEL;\n\n/** Undated haiku, for scan triage. The alias tracks the current 4.5 release rather than pinning one. */\nexport const HAIKU_TRIAGE_MODEL = 'claude-haiku-4-5';\n\n/**\n * Cheaper, faster model for mechanical agent work (e.g. repo classification\n * during source-map detection). Passed via AgentConfig.modelOverride.\n */\nexport const HAIKU_MODEL = HAIKU_TRIAGE_MODEL;\n\n// Locally supported OpenAI models; constants alone do not authorize gateway use.\nexport const GPT5_6_LUNA_MODEL = 'openai/gpt-5.6-luna';\nexport const GPT5_6_TERRA_MODEL = 'openai/gpt-5.6-terra';\nexport const GPT5_6_SOL_MODEL = 'openai/gpt-5.6-sol';\n\n// ── Agent runner routing axes ────────────────────────────────────────\n\n/**\n * The two agent runner routing axes: **harness** (which agent SDK drives the LLM)\n * and **sequence** (which pipeline shape orchestrates the work). Single source\n * of truth for yargs `choices`, session fields, the runner registry, and tests\n * — `Object.values(Harness)` gives an iterable of the values when an array is\n * needed. Adding a member is enough to pick it up everywhere.\n *\n * Naming matches the directory layout — see `src/agent/runner/harness/`\n * and `src/agent/runner/sequence/`.\n */\nexport enum Harness {\n  anthropic = 'anthropic',\n  pi = 'pi',\n}\n\nexport enum Sequence {\n  linear = 'linear',\n  orchestrator = 'orchestrator',\n}\n\n/**\n * What kind of call produced a gateway generation — the `call_type` trace tag.\n * Splits a program's LLM spend by workload. Every member is sent explicitly so\n * an absent value means \"old build\", not \"agent\".\n */\nexport enum CallType {\n  /** The agent doing the work the user asked for. */\n  agent = 'agent',\n  /** Warlock's classifier deciding whether a YARA match is a true positive. */\n  yaraTriage = 'yara-triage',\n  /** The cheap repo scan that classifies which projects a program acts on. */\n  detection = 'detection',\n}\n\n// ── Integration / CLI ───────────────────────────────────────────────\n\n/**\n * Detection order matters: put framework-specific integrations BEFORE basic language fallbacks.\n */\nexport enum Integration {\n  // Frameworks\n  nextjs = 'nextjs',\n  nuxt = 'nuxt',\n  vue = 'vue',\n  reactRouter = 'react-router',\n  tanstackStart = 'tanstack-start',\n  tanstackRouter = 'tanstack-router',\n  reactNative = 'react-native',\n  angular = 'angular',\n  astro = 'astro',\n  django = 'django',\n  flask = 'flask',\n  fastapi = 'fastapi',\n  laravel = 'laravel',\n  sveltekit = 'sveltekit',\n  flutter = 'flutter',\n  kmp = 'kmp',\n  swift = 'swift',\n  android = 'android',\n  rails = 'rails',\n  elixir = 'elixir',\n  go = 'go',\n  rust = 'rust',\n  // Must stay after kmp/swift/android: those claim gradle projects first.\n  java = 'java',\n\n  // Language fallbacks. Keep javascriptNode last: it matches any package.json.\n  python = 'python',\n  ruby = 'ruby',\n  javascript_web = 'javascript_web',\n  javascriptNode = 'javascript_node',\n}\n\n/**\n * The platforms session replay can actually record on. Replay vision watches\n * recordings, so a platform with no recordings has nothing to set up — the\n * run must stop before any work, not after a pointless agent run.\n *\n * Web frameworks record through posthog-js (server-rendered frameworks\n * included — they serve pages), and the mobile SDKs with replay support are\n * React Native, Android, iOS, and Flutter. Excluded: pure backend targets\n * (`javascript_node`, `python`, `ruby`) and KMP, which has no replay support\n * yet.\n */\nexport const REPLAY_VISION_SUPPORTED: ReadonlySet<Integration> = new Set([\n  Integration.nextjs,\n  Integration.nuxt,\n  Integration.vue,\n  Integration.reactRouter,\n  Integration.tanstackStart,\n  Integration.tanstackRouter,\n  Integration.angular,\n  Integration.astro,\n  Integration.sveltekit,\n  Integration.javascript_web,\n  Integration.django,\n  Integration.flask,\n  Integration.fastapi,\n  Integration.laravel,\n  Integration.rails,\n  Integration.reactNative,\n  Integration.android,\n  Integration.swift,\n  Integration.flutter,\n]);\n\n// ── Documents the wizard's programs write into the user's project ────\n// Named here so the scanner's documentation allowlist can list them without\n// importing a program; each program re-exports its own.\n/** The events-audit report. */\nexport const EVENTS_AUDIT_REPORT_FILE = 'posthog-events-audit-report.md';\nexport const EVENT_INVENTORY_FILE = '.posthog-events-inventory.json';\n/** Per-part filename pattern emitted by events-audit subagents (e.g. `.posthog-events-inventory.part-3.json`). */\nexport const EVENT_INVENTORY_PART_PATTERN =\n  /^\\.posthog-events-inventory\\.part-\\d+\\.json$/;\n/** The integration program's event plan. */\nexport const EVENT_PLAN_FILE = '.posthog-events.json';\n/** The integration program's setup report; Self-driving reads it as a hint. */\nexport const SETUP_REPORT_FILE = 'posthog-setup-report.md';\n\nexport interface Args {\n  debug: boolean;\n  integration: Integration;\n}\n\n// ── Environment ──────────────────────────────────────────────────────\n\nimport { IS_DEV } from '@env';\nimport {\n  CONTEXT_MILL_LOCAL_URL,\n  getLocalDev,\n  POSTHOG_LOCAL_URL,\n} from './local-dev';\nexport { IS_DEV };\nexport const DEBUG = false;\n\n// ── URLs ─────────────────────────────────────────────────────────────\n\nexport const DEFAULT_URL = IS_DEV\n  ? POSTHOG_LOCAL_URL\n  : 'https://us.posthog.com';\n/**\n * Region-agnostic PostHog app URL. Resolves to us.posthog.com or\n * eu.posthog.com server-side based on the signed-in user's profile.\n * Use this for share-with-user links (e.g. settings pages) so they\n * land on the right region without us needing to know it client-side.\n */\nexport const POSTHOG_APP_URL = IS_DEV\n  ? POSTHOG_LOCAL_URL\n  : 'https://app.posthog.com';\nexport const DEFAULT_HOST_URL = IS_DEV\n  ? POSTHOG_LOCAL_URL\n  : 'https://us.i.posthog.com';\nexport const ISSUES_URL = 'https://github.com/posthog/wizard/issues';\n/** Public status page, linked from transient-failure guidance (e.g. OAuth server_error). */\nexport const POSTHOG_STATUS_PAGE_URL = 'https://www.posthogstatus.com';\nexport const CONTEXT_MILL_URL = 'https://github.com/PostHog/context-mill';\n/**\n * Latest context-mill release page — the BYOAI download link shown in\n * the privacy panel. Deliberately the release PAGE, not a direct asset\n * URL: asset URLs are ~89 chars and hard-wrap inside the 64-col panel,\n * which corrupts terminal copy/paste with a mid-URL line break. This\n * stays under one line; the panel names the exact asset to grab.\n */\nexport const CONTEXT_MILL_RELEASES_URL =\n  'https://github.com/PostHog/context-mill/releases/latest';\nexport const POSTHOG_DOCS_URL = 'https://posthog.com/docs';\nexport const POSTHOG_WIZARD_REPO_URL = 'https://github.com/PostHog/wizard';\nexport const POSTHOG_TERMS_URL = 'https://posthog.com/terms';\nexport const POSTHOG_PRIVACY_URL = 'https://posthog.com/privacy';\nexport const POSTHOG_ORG_AI_SETTINGS_URL =\n  'https://app.posthog.com/settings/organization-details#setting=organization-ai-consent';\nexport const WIZARD_CONTACT_EMAIL = 'wizard@posthog.com';\n\n/**\n * Two origins for the same release, same filenames. Interchangeable bases, so\n * making AWS primary is a `getSkillsBaseUrl` change, not a code change.\n */\nexport const GITHUB_SKILLS_BASE_URL =\n  'https://github.com/PostHog/context-mill/releases/latest/download';\nexport const AWS_SKILLS_BASE_URL = 'https://context-mill.posthog.com/latest';\n/** Alias of `@shared/local-dev`'s constant, kept for existing importers. */\nexport const LOCAL_SKILLS_BASE_URL = CONTEXT_MILL_LOCAL_URL;\n\n/**\n * Driven by `--local-context-mill`, NOT `--local-mcp` (which used to select\n * both). Takes no argument on purpose: callers can't pass the wrong flag.\n */\nexport function getSkillsBaseUrl(): string {\n  return getLocalDev().localContextMill\n    ? LOCAL_SKILLS_BASE_URL\n    : GITHUB_SKILLS_BASE_URL;\n}\n\n// ── Analytics (internal) ──────────────────────────────────────────────\n\nexport const ANALYTICS_POSTHOG_PUBLIC_PROJECT_WRITE_KEY = 'sTMFPsFhdP1Ssg';\nexport const ANALYTICS_HOST_URL = 'https://internal-j.posthog.com';\nexport const ANALYTICS_TEAM_TAG = 'docs-and-wizard';\n\n// ── OAuth / Auth ────────────────────────────────────────────────────\n\nexport const OAUTH_PORTS = [8239, 8238, 8240, 8237, 8236, 8235] as const;\nexport const POSTHOG_US_CLIENT_ID = 'c4Rdw8DIxgtQfA80IiSnGKlNX8QN00cFWF00QQhM';\nexport const POSTHOG_EU_CLIENT_ID = 'bx2C5sZRN03TkdjraCcetvQFPGH6N2Y9vRLkcKEy';\nexport const POSTHOG_DEV_CLIENT_ID = 'DC5uRLVbGI02YQ82grxgnK6Qn12SXWpCqdPb60oZ';\nexport const POSTHOG_PROXY_CLIENT_ID = POSTHOG_US_CLIENT_ID;\nexport const DUMMY_PROJECT_API_KEY = '_YOUR_POSTHOG_PROJECT_TOKEN_';\n\n/**\n * Scopes the wizard requests during the agentic provisioning signup flow.\n *\n * Each entry is justified by what the wizard's agent step does after signup:\n * - user:read         identify the user for analytics + agent context\n * - project:read      look up the freshly-provisioned project\n * - llm_gateway:read  authenticate to gateway.{us,eu}.posthog.com/wizard\n *                     (the agent's LLM calls — without this scope, every\n *                     agent message returns 401)\n * - query:read        run HogQL queries when the agent needs data\n * - dashboard:write   create the onboarding dashboard during setup\n * - insight:write     create the onboarding insights during setup\n * - notebook:write    upload the events-audit report as a PostHog notebook\n *                     in step 6 of the events-audit skill (notebooks-create\n *                     MCP tool requires this scope)\n * - event_definition:write\n *                     create event definitions from the completed wizard\n *                     session's event plan\n *\n * Must be a subset of `ALLOWED_PROVISIONING_SCOPES` in\n * `ee/api/agentic_provisioning/views.py` on the backend.\n */\nexport const WIZARD_PROVISIONING_SCOPES = [\n  'user:read',\n  'project:read',\n  'llm_gateway:read',\n  'dashboard:write',\n  'insight:write',\n  'query:read',\n  'notebook:write',\n  'event_definition:write',\n] as const;\n\n/**\n * Scopes the wizard requests during the OAuth login flow. Superset of\n * `WIZARD_PROVISIONING_SCOPES` with scopes that only apply to the login\n * path and are not in the provisioning allowlist:\n * - health_issue:read     used by `wizard doctor`\n * - wizard_session:read   list / retrieve / stream sessions\n * - wizard_session:write  stream run state to /api/projects/{id}/wizard/sessions/\n * - event_definition:write\n *                          create event definitions when a session completes\n * - organization:read     read `organization.is_ai_data_processing_approved`\n *                         from /api/users/@me/ for the AI opt-in gate\n *\n * NOTE: every scope here must be within the wizard OAuth application's\n * server-side scope ceiling (`OAuthApplication.scopes` in posthog, set\n * via Django admin on BOTH prod regions). A scope outside the ceiling\n * does NOT fail the authorize request — the server silently clamps the\n * request to the ceiling (`clamp_scopes_to_ceiling` in posthog) and the\n * token comes back without it. Separately, the consent screen lets the\n * user deselect any scope the app doesn't mark required. Both paths\n * yield a granted `scope` narrower than requested, with no error, so\n * never assume the token carries this list — the token response's\n * `scope` field is the truth, and `missingOAuthScopes` (utils/oauth.ts)\n * diffs it at login. Ceiling procedure: the \"scope-ceiling-invalid-scope\"\n * runbook in PostHog/runbooks. Keep its worked example in sync when this\n * list changes.\n */\nexport const WIZARD_OAUTH_SCOPES = [\n  ...WIZARD_PROVISIONING_SCOPES,\n  'health_issue:read',\n  'wizard_session:read',\n  'wizard_session:write',\n  'wizard_run:write',\n  'organization:read',\n] as const;\n\n// ── Wizard run / variants ───────────────────────────────────────────\n\nexport const WIZARD_INTERACTION_EVENT_NAME = 'wizard interaction';\nexport const WIZARD_REMARK_EVENT_NAME = 'wizard remark';\n/** Multivariate flag: `wizard-run` publishes to WizardRun, anything else to WizardSession. */\nexport const WIZARD_RUN_SYNC_FLAG_KEY = 'wizard-run-sync';\n/** Boolean feature flag that routes a run to the experimental orchestrator runner. */\nexport const WIZARD_ORCHESTRATOR_FLAG_KEY = 'wizard-orchestrator';\n/** Multivariate flag: per-stage orchestrator overrides ride each variant's JSON payload (`{stage: {model?, effort?}}`). */\nexport const WIZARD_ORCHESTRATOR_OVERRIDE_FLAG_KEY =\n  'wizard-orchestrator-override';\n/** Boolean flag: on → pi for self-driving. Payload carries `{model, effort?, harness?, sequence?}` (model = a `MODEL_FLAG_VARIANTS` key); missing/invalid payload keeps the non-flagged default. */\nexport const WIZARD_SELF_DRIVING_USE_PI_HARNESS_FLAG_KEY =\n  'wizard-self-driving-use-pi-harness';\n/** Boolean flag: agentic project scoping for non-interactive basic-integration runs. */\nexport const WIZARD_BASIC_INTEGRATION_AGENTIC_DETECTION_FLAG_KEY =\n  'wizard-basic-integration-agentic-detection';\n/** Boolean flag: the orchestrator queues the program's runner-seeded tasks (the warehouse step). Off, no task is queued and the run is byte-identical to a no-sources project. */\nexport const WIZARD_ORCHESTRATOR_SEEDED_TASKS_FLAG_KEY =\n  'wizard-orchestrator-seeded-tasks';\n/** Kill switch over a shipped default: ONLY an explicit 'false' excludes the AI Observability and Logs tasks from default integration runs — absent or fetch-failed means include, so the default never vanishes on a network hiccup. */\nexport const WIZARD_DEFAULT_AIO_LOGS_FLAG_KEY = 'wizard-default-aio-logs';\n// Reading a flag enters this run into that flag's experiment, so a closed set — not a\n// `wizard-` prefix anyone can name into — decides what a run evaluates. Test-pinned exhaustive.\nexport const WIZARD_FLAG_KEYS = [\n  WIZARD_RUN_SYNC_FLAG_KEY,\n  WIZARD_ORCHESTRATOR_FLAG_KEY,\n  WIZARD_ORCHESTRATOR_OVERRIDE_FLAG_KEY,\n  WIZARD_ORCHESTRATOR_SEEDED_TASKS_FLAG_KEY,\n  WIZARD_SELF_DRIVING_USE_PI_HARNESS_FLAG_KEY,\n  WIZARD_BASIC_INTEGRATION_AGENTIC_DETECTION_FLAG_KEY,\n  WIZARD_DEFAULT_AIO_LOGS_FLAG_KEY,\n] as const;\n/** User-Agent for wizard HTTP requests and MCP server identification. */\nexport const WIZARD_USER_AGENT = `posthog/wizard; version: ${VERSION}`;\n\n/**\n * User-Agent for a specific program's MCP calls, tagged with `program: <id>` so the\n * backend can attribute work per program (e.g. the `self-driving` program's warehouse\n * sources are recorded as `created_via=self_driving` rather than plain `wizard`). The\n * base `posthog/wizard` token is preserved, so anything keying only on that still matches.\n */\nexport function wizardUserAgentForProgram(programId?: string): string {\n  return programId\n    ? `${WIZARD_USER_AGENT}; program: ${programId}`\n    : WIZARD_USER_AGENT;\n}\n\n// ── Timeouts ─────────────────────────────────────────────────────────\n\n/** Timeout for framework / project detection probes (ms). */\nexport const DETECTION_TIMEOUT_MS = 10_000;\n\n/** Timeout for the agentic project scan (ms); past it the run falls back to root detection. */\nexport const AGENTIC_DETECTION_FIRST_ATTEMPT_TIMEOUT_MS = 60_000;\nexport const AGENTIC_DETECTION_RETRY_TIMEOUT_MS = 90_000;\n\n/**\n * Timeout for the OAuth authorization flow (ms).\n *\n * How long the user has to complete the browser login. The authorization\n * code is minted at approval and exchanged immediately on callback, so the\n * server-side code expiry (`AUTHORIZATION_CODE_EXPIRE_SECONDS`, 5 minutes)\n * bounds only the approval→exchange gap — manual-paste users have 5 minutes\n * from approval to submit the code — not how long this window may stay open.\n */\nexport const OAUTH_TIMEOUT_MS = 1_800_000;\n","/** Run lifecycle and consent states the TUI, the CLI and programs share. */\n\nimport type { DiscoveredFeature } from './discovered-feature';\n\n/** How an agent run ended: the agent decides it, and the programs and hosts read it. */\nexport enum RunOutcome {\n  Success = 'success',\n  Aborted = 'aborted',\n  Failed = 'failed',\n  Crashed = 'crashed',\n}\n\n/** Lifecycle phase of the main work (agent run, MCP install, etc.) */\nexport enum RunPhase {\n  /** Still gathering input (intro, setup screens) */\n  Idle = 'idle',\n  /** Main work is in progress */\n  Running = 'running',\n  /** Main work finished successfully */\n  Completed = 'completed',\n  /** Main work finished with an error */\n  Error = 'error',\n}\n\n/** Consent to report what local detection found (see `scanConsent` below). */\nexport enum ScanConsent {\n  Undecided = 'undecided',\n  Granted = 'granted',\n  Declined = 'declined',\n}\n\n/** Outcome of the MCP server installation step */\nexport enum McpOutcome {\n  NoClients = 'no_clients',\n  Skipped = 'skipped',\n  Installed = 'installed',\n  Failed = 'failed',\n}\n\n/** One place to ask, so a new consent state does not need three edits. */\nexport function mayReportScanResults(session: {\n  scanConsent: ScanConsent;\n}): boolean {\n  return session.scanConsent === ScanConsent.Granted;\n}\n\n/** Lives here so analytics infrastructure never learns what consent means. */\nexport function reportableDiscoveredFeatures(session: {\n  scanConsent: ScanConsent;\n  discoveredFeatures: DiscoveredFeature[];\n}): DiscoveredFeature[] | undefined {\n  return mayReportScanResults(session) ? session.discoveredFeatures : undefined;\n}\n\n/** Also a scan result, so it travels under the same consent as the rest. */\nexport function reportablePosthogSdkDetected(session: {\n  scanConsent: ScanConsent;\n  posthogSdkDetected: boolean;\n}): boolean | undefined {\n  return mayReportScanResults(session) ? session.posthogSdkDetected : undefined;\n}\n","/**\n * CI-only feature-flag overrides.\n *\n * CI must route deterministically: a run that tests the orchestrator arm says\n * so explicitly instead of depending on a live feature flag someone can edit\n * mid-week. The override env var (see the allowlist in `env.ts`) is a JSON\n * object of flag key → value, merged over whatever PostHog returned.\n *\n * The override path exists only in CI builds (`pnpm build:ci`). Published\n * builds inline NODE_ENV as the literal \"production\", the guards collapse,\n * and tsdown strips the rest from the bundle — and the smoke test asserts the\n * env var names are physically absent from production output (which is also\n * why no comment in this file may spell them out), so this can never quietly\n * become a production surface.\n */\nimport { runtimeEnv } from '@env';\nimport { logToFile } from './debug';\n\nexport function applyCiFlagOverrides(\n  flags: Record<string, string>,\n  payloads: Record<string, unknown> = {},\n): { flags: Record<string, string>; payloads: Record<string, unknown> } {\n  // Compared inline (not via env.ts's IS_PRODUCTION_BUILD) so tsdown replaces\n  // it with a literal right here and the bundler can prove the rest of this\n  // function unreachable in production builds. The smoke test enforces that.\n  if (process.env.NODE_ENV === 'production') return { flags, payloads };\n\n  const raw = runtimeEnv('WIZARD_CI_FLAG_OVERRIDES');\n  if (!raw) return { flags, payloads };\n\n  let overrides: Record<string, unknown>;\n  try {\n    overrides = JSON.parse(raw) as Record<string, unknown>;\n  } catch {\n    // A malformed override is a CI misconfiguration. Fail the run loudly\n    // rather than silently testing whatever the live flags happen to say.\n    throw new Error(\n      'The CI flag-override env var is not valid JSON (expected {\"flag-key\": value, ...}).',\n    );\n  }\n\n  const mergedFlags = { ...flags };\n  const mergedPayloads = { ...payloads };\n  for (const [key, value] of Object.entries(overrides)) {\n    // An object/array override is a flag payload: the flag reads 'true' and\n    // the value rides the payload channel, matching a payload-carrying flag.\n    if (typeof value === 'object' && value !== null) {\n      mergedFlags[key] = 'true';\n      mergedPayloads[key] = value;\n    } else {\n      mergedFlags[key] = String(value);\n    }\n  }\n  logToFile('[flags] CI overrides applied', overrides);\n  return { flags: mergedFlags, payloads: mergedPayloads };\n}\n\n/**\n * Task types excluded from this run. The exclusion env var (see the allowlist\n * in `env.ts`) is a comma-separated list (e.g. `dashboard`), set by the CI\n * harness that owns the policy — the wizard and the served content stay\n * run-mode agnostic. CI-build only, same as the flag overrides: published\n * builds strip this path.\n */\nexport function ciExcludedTaskTypes(): readonly string[] {\n  if (process.env.NODE_ENV === 'production') return [];\n\n  const raw = runtimeEnv('WIZARD_CI_EXCLUDE_TASKS');\n  if (!raw) return [];\n  const types = raw\n    .split(',')\n    .map((t) => t.trim())\n    .filter(Boolean);\n  if (types.length > 0) logToFile('[flags] CI task exclusions', types);\n  return types;\n}\n","import { PostHog } from 'posthog-node';\nimport {\n  ANALYTICS_HOST_URL,\n  ANALYTICS_POSTHOG_PUBLIC_PROJECT_WRITE_KEY,\n  ANALYTICS_TEAM_TAG,\n  WIZARD_FLAG_KEYS,\n} from '@shared/constants';\nimport {\n  reportableDiscoveredFeatures,\n  reportablePosthogSdkDetected,\n  type RunPhase,\n  type ScanConsent,\n} from '@shared/run-state';\nimport type { DiscoveredFeature } from '@shared/discovered-feature';\nimport type { Integration } from '@shared/constants';\nimport type { ApiUser } from '@shared/api';\nimport { v4 as uuidv4 } from 'uuid';\nimport { IS_PRODUCTION_BUILD, RUN_SURFACE, TASK_ID, TASK_RUN_ID } from '@env';\nimport { VERSION } from '@shared/version';\nimport { logToFile } from './debug';\nimport { applyCiFlagOverrides } from './ci-flag-overrides';\n\n/**\n * The invocation, reduced to flag-safe strings: the command word (first\n * positional, 'default' for the bare flow) and the sorted option NAMES.\n * Option values never leave the machine — they carry paths, emails, keys.\n */\nfunction invocationProperties(): { command: string; cli_flags: string } {\n  const args = process.argv.slice(2);\n  const command = args.find((a) => !a.startsWith('-')) ?? 'default';\n  const flags = [\n    ...new Set(\n      args\n        .filter((a) => a.startsWith('--'))\n        .map((a) => a.slice(2).split('=')[0]),\n    ),\n  ].sort();\n  return { command, cli_flags: flags.join(',') };\n}\n\n/** The session facts analytics reports on every capture. */\nexport type SessionFacts = {\n  integration: Integration | null;\n  skillId: string | null;\n  detectedFrameworkLabel: string | null;\n  typescript: boolean;\n  credentials: { projectId: number } | null;\n  discoveredFeatures: DiscoveredFeature[];\n  scanConsent: ScanConsent;\n  runPhase: RunPhase;\n  posthogSdkDetected: boolean;\n};\n\n/**\n * Extract a standard property bag from the current session.\n * Used by store-level analytics and available for ad-hoc captures.\n */\nexport function sessionProperties(\n  session: SessionFacts,\n): Record<string, unknown> {\n  // reportableDiscoveredFeatures() owns the consent decision; this file\n  // never needs to know what `scanConsent` means, only that the result\n  // might be absent. An absent key is unambiguous, while an empty array\n  // would read as \"we looked and found nothing\" instead of \"not reported\".\n  const discoveredFeatures = reportableDiscoveredFeatures(session);\n  const posthogSdkDetected = reportablePosthogSdkDetected(session);\n\n  return {\n    integration: session.integration,\n    // Discriminates a family leaf: `command` is the first positional, so every\n    // `wizard audit <leaf>` reports the same `audit`.\n    skill_id: session.skillId,\n    detected_framework: session.detectedFrameworkLabel,\n    typescript: session.typescript,\n    project_id: session.credentials?.projectId,\n    ...(discoveredFeatures !== undefined\n      ? { discovered_features: discoveredFeatures }\n      : {}),\n    scan_consent: session.scanConsent,\n    run_phase: session.runPhase,\n    ...(posthogSdkDetected !== undefined\n      ? { posthog_sdk_detected: posthogSdkDetected }\n      : {}),\n  };\n}\n\nexport function groupsFromUser(\n  user: ApiUser | null,\n  host: string,\n): Record<string, string> {\n  const groups: Record<string, string> = { instance: host };\n  if (!user) return groups;\n\n  const organizationId = user.organization?.id;\n  if (organizationId) groups.organization = organizationId;\n\n  const customerId = user.organization?.customer_id;\n  if (customerId) groups.customer = customerId;\n\n  const projectUuid = user.team?.uuid;\n  if (projectUuid) groups.project = projectUuid;\n\n  return groups;\n}\n\nconst WIZARD_FLAGS: ReadonlySet<string> = new Set(WIZARD_FLAG_KEYS);\n\n// Widen back to the SDK's shape — a filter on `true` never matches `'true'`.\nfunction flagResponseValue(value: string): string | boolean {\n  if (value === 'true') return true;\n  if (value === 'false') return false;\n  return value;\n}\n\nexport class Analytics {\n  private client: PostHog;\n  private tags: Record<string, string | boolean | number | null | undefined> =\n    {};\n  private distinctId?: string;\n  private anonymousId: string;\n  private _runId: string;\n  private sessionId: string | null = null;\n  private appName = 'wizard';\n  private activeFlags: Record<string, string> | null = null;\n  private activeFlagPayloads: Record<string, unknown> = {};\n  private groups: Record<string, string> = {};\n  private personProperties: Record<string, string> = {};\n  private terminalEventSent = false;\n\n  constructor() {\n    this.client = new PostHog(ANALYTICS_POSTHOG_PUBLIC_PROJECT_WRITE_KEY, {\n      host: ANALYTICS_HOST_URL,\n      flushAt: 1,\n      flushInterval: 0,\n      enableExceptionAutocapture: true,\n      before_send: (event) => {\n        if (!event) return event;\n        if (Object.keys(this.groups).length > 0) {\n          event.groups = { ...this.groups, ...event.groups };\n        }\n        // Autocaptured exceptions arrive with a random uuid and\n        // `$process_person_profile: false` — reattach the run's identity\n        // and tags so they land on the same person as everything else.\n        if (event.event === '$exception') {\n          event.distinctId = this.distinctId ?? this.anonymousId;\n          const { $process_person_profile, ...properties } =\n            event.properties ?? {};\n          void $process_person_profile;\n          event.properties = { ...this.tags, ...properties };\n        }\n        // The SDK captures this one itself, bypassing capture(), so tags merge here.\n        if (event.event === '$feature_flag_called') {\n          event.properties = { ...this.tags, ...(event.properties ?? {}) };\n        }\n        return event;\n      },\n    });\n\n    this.tags = { $app_name: this.appName };\n    // Tag every run with its build type so prod / dev / ci / headless segment\n    // cleanly in analytics. tsdown inlines IS_PRODUCTION_BUILD to `true` in\n    // published builds and `false` for dev/tsx/test runs. Non-interactive runs\n    // upgrade this in runWizardCI: dev `--ci` runs to 'ci', published headless\n    // runs to 'headless'.\n    this.tags.build = IS_PRODUCTION_BUILD ? 'prod' : 'dev';\n\n    this.tags.run_surface = RUN_SURFACE;\n\n    // The build this run came from. Already sent as a flag-evaluation person\n    // property; tagging it makes every event attributable to a release, so a\n    // regression can be bounded to the versions that carry it.\n    this.tags.version = VERSION;\n\n    // Cloud runs only: the task run that owns the sandbox. Without these the\n    // wizard's events and the run that launched it are two unrelated streams,\n    // since run_id above is minted per process and never leaves the wizard.\n    // Left unset for local runs so the properties stay absent rather than null.\n    if (TASK_RUN_ID) this.tags.task_run_id = TASK_RUN_ID;\n    if (TASK_ID) this.tags.task_id = TASK_ID;\n\n    this.anonymousId = uuidv4();\n\n    // One id per process = one id per wizard run, registered in the tag bag\n    // so it rides on every capture, exception, and autocaptured exception\n    // (all of which merge `this.tags`). Lets you separate two runs by the\n    // same logged-in user, who otherwise share one distinct id. Distinct\n    // from `anonymousId`, the pre-login *person* id that gets aliased onto\n    // the real user at login. `$session_id` is intentionally not set here —\n    // it stays null until OAuth completes (see identifyUser).\n    this._runId = uuidv4();\n    this.tags.run_id = this._runId;\n\n    this.distinctId = undefined;\n  }\n\n  /** Per-process run id, tagged on every event and gateway trace. */\n  get runId(): string {\n    return this._runId;\n  }\n\n  /** Build type for this run ('prod' | 'dev' | 'ci' | 'headless') — the same value tagged on every analytics event. */\n  get build(): string {\n    return String(this.tags.build ?? 'dev');\n  }\n\n  /**\n   * Associate the run with the logged-in user, once per id. Identifies them\n   * (email, name) and records those person properties so events carry them and\n   * feature flags can target the individual user — without the email here the\n   * wizard only sends `$app_name`, so email-targeted flags never match. Opens\n   * the analytics session on first login, then aliases the run's anonymous id\n   * onto the identified person so pre-login events merge in.\n   */\n  identifyUser(user: ApiUser) {\n    const distinctId = user.distinct_id;\n    if (this.distinctId === distinctId || distinctId === this.anonymousId) {\n      return;\n    }\n    this.distinctId = distinctId;\n    // Open the analytics session on first login. Null until here, so\n    // pre-OAuth events carry only `run_id`; from now on every event also\n    // carries `$session_id` and PostHog groups the authenticated run into a\n    // native Session. Stored in the tag bag so it rides on every subsequent\n    // capture and exception.\n    if (!this.sessionId) {\n      this.sessionId = uuidv4();\n      this.tags.$session_id = this.sessionId;\n    }\n    const props: Record<string, string> = {};\n    if (user.email) props.email = user.email;\n    const name = [user.first_name, user.last_name]\n      .filter(Boolean)\n      .join(' ')\n      .trim();\n    if (name) props.name = name;\n    this.personProperties = props;\n    this.client.identify({ distinctId, properties: { $set: props } });\n    this.client.alias({\n      distinctId,\n      alias: this.anonymousId,\n    });\n    // The flag snapshot is per identity. Anything evaluated before login (the\n    // intro screen reads the tools-menu flag) was anonymous — drop it so the\n    // next read re-evaluates as this user.\n    this.activeFlags = null;\n    this.activeFlagPayloads = {};\n  }\n\n  /** Person properties sent with flag evaluation: app name plus the user's. */\n  private flagPersonProperties(): Record<string, string> {\n    // Environment facts flag conditions can scope on — evaluation-time only,\n    // never persisted onto the person. `version` gates an experiment to\n    // releases that implement it (a condition on a property older builds\n    // don't send silently never matches them); `run_surface`/`build` scope\n    // by invocation surface; `command`/`cli_flags` by subcommand; `os`/\n    // `node_major` by platform.\n    return {\n      $app_name: this.appName,\n      version: VERSION,\n      run_surface: RUN_SURFACE,\n      build: String(this.tags.build ?? 'dev'),\n      os: process.platform,\n      node_major: process.versions.node.split('.')[0],\n      ...invocationProperties(),\n      ...this.personProperties,\n    };\n  }\n\n  setTag(key: string, value: string | boolean | number | null | undefined) {\n    this.tags[key] = value;\n  }\n\n  setGroups(groups: Record<string, string>) {\n    this.groups = groups;\n  }\n\n  captureException(error: Error, properties: Record<string, unknown> = {}) {\n    this.client.captureException(error, this.distinctId ?? this.anonymousId, {\n      team: ANALYTICS_TEAM_TAG,\n      ...this.tags,\n      ...properties,\n    });\n  }\n\n  capture(eventName: string, properties?: Record<string, unknown>) {\n    this.client.capture({\n      distinctId: this.distinctId ?? this.anonymousId,\n      event: eventName,\n      properties: {\n        ...this.tags,\n        ...this.wizardFlagFeatureProperties(),\n        ...properties,\n      },\n    });\n  }\n\n  groupIdentify(\n    groupType: string,\n    groupKey: string,\n    properties: Record<string, unknown>,\n  ) {\n    this.client.groupIdentify({ groupType, groupKey, properties });\n  }\n\n  // Built from the resolved map, not the SDK snapshot: a CI-forced variant must own its events.\n  private wizardFlagFeatureProperties(): Record<string, unknown> {\n    if (this.activeFlags === null) return {};\n    const props: Record<string, unknown> = {};\n    const active: string[] = [];\n    for (const [key, value] of Object.entries(this.activeFlags)) {\n      if (!WIZARD_FLAGS.has(key)) continue;\n      const resolved = flagResponseValue(value);\n      props[`$feature/${key}`] = resolved;\n      if (resolved !== false) active.push(key);\n    }\n    if (active.length > 0) props.$active_feature_flags = active.sort();\n    return props;\n  }\n\n  /**\n   * Capture a wizard-specific event. Automatically prepends \"wizard: \" to the event name.\n   * All new wizard analytics should use this method instead of capture() directly.\n   */\n  wizardCapture(eventName: string, properties?: Record<string, unknown>): void {\n    this.capture(`wizard: ${eventName}`, properties);\n  }\n\n  /**\n   * Flush pending events without firing the \"setup wizard finished\" terminal\n   * event. Use this from CLI error paths that exit before any wizard run\n   * starts — `shutdown()` would inflate the run count with a \"finished\" event\n   * for a parse error that never actually ran the wizard.\n   */\n  async flush(): Promise<void> {\n    await this.client.shutdown();\n  }\n\n  /**\n   * Evaluate all feature flags for the current user at the start of a run.\n   * Result is cached; subsequent calls in the same run return the same map.\n   * Returns flag key -> string value (booleans become 'true'/'false').\n   */\n  // Only a getFlag read records an exposure; the bulk response records none.\n  async getAllFlagsForWizard(): Promise<Record<string, string>> {\n    if (this.activeFlags !== null) {\n      return this.activeFlags;\n    }\n    const out: Record<string, string> = {};\n    const payloads: Record<string, unknown> = {};\n    try {\n      const distinctId = this.distinctId ?? this.anonymousId;\n      logToFile('[flags] evaluating as', {\n        distinctId,\n        identified: this.distinctId !== undefined,\n        personProperties: this.flagPersonProperties(),\n      });\n      const evaluation = await this.client.evaluateFlags(distinctId, {\n        personProperties: this.flagPersonProperties(),\n      });\n      for (const key of WIZARD_FLAG_KEYS) {\n        const value = evaluation.getFlag(key);\n        if (value === undefined) continue;\n        out[key] = String(value);\n        const payload = evaluation.getFlagPayload(key);\n        if (payload !== undefined) payloads[key] = payload;\n      }\n    } catch (error) {\n      logToFile('Failed to get all feature flags:', error);\n      this.captureException(\n        error instanceof Error ? error : new Error(String(error)),\n        { step: 'get_all_flags' },\n      );\n    }\n    // Outside the fetch guard on purpose: a malformed CI override must fail\n    // the run loudly, and a valid one applies even when the fetch failed —\n    // CI routing stays deterministic either way.\n    const merged = applyCiFlagOverrides(out, payloads);\n    this.activeFlags = merged.flags;\n    this.activeFlagPayloads = merged.payloads;\n    logToFile('[flags] evaluated', this.activeFlags);\n    return this.activeFlags;\n  }\n\n  getCachedWizardFlags(): Readonly<Record<string, string>> | null {\n    return this.activeFlags;\n  }\n\n  /** Flag payloads from the same snapshot; empty until the flags are fetched. */\n  getWizardFlagPayloads(): Record<string, unknown> {\n    return this.activeFlagPayloads;\n  }\n\n  async shutdown(status: 'success' | 'error' | 'cancelled') {\n    if (Object.keys(this.tags).length === 0) {\n      return;\n    }\n\n    // First status wins. The interrupt fallback in start-tui fires\n    // shutdown('cancelled') on every TUI teardown; without this guard a run\n    // that already reported 'success' would emit a second, contradicting\n    // terminal event when the user dismisses the outro.\n    if (this.terminalEventSent) {\n      return;\n    }\n    this.terminalEventSent = true;\n\n    this.client.capture({\n      distinctId: this.distinctId ?? this.anonymousId,\n      event: 'setup wizard finished',\n      properties: {\n        // Flat for filtering; the nested `tags` snapshot stays for back-compat.\n        ...this.tags,\n        run_id: this._runId,\n        ...(this.sessionId ? { $session_id: this.sessionId } : {}),\n        status,\n        tags: this.tags,\n      },\n    });\n\n    await this.client.shutdown();\n  }\n}\n\nexport const analytics = new Analytics();\n"],"mappings":";;;;;;;;;;;;;AAUA,MAAa,yBAAyB;AACtC,MAAa,gBAAgB;;AAE7B,MAAa,oBAAoB;;;;;;AAwBjC,SAAgB,gBAAgB,OAAwC;CACtE,MAAM,WAAW,MAAM,YAAY;AACnC,QAAO;EACL,UAAU,MAAM,YAAY;EAC5B,kBAAkB,MAAM,oBAAoB;EAC5C,cAAc,MAAM,gBAAgB;EACrC;;;AAIH,SAAgB,iBACd,MACkB;CAClB,MAAM,QAAQ,OAAe,UAAuC;EAClE,MAAM,QAAQ,KAAK,UAAU,KAAK;AAClC,SAAO,OAAO,UAAU,YAAY,QAAQ,KAAA;;AAE9C,QAAO,gBAAgB;EACrB,UAAU,KAAK,aAAa,WAAW;EACvC,UAAU,KAAK,aAAa,WAAW;EACvC,kBAAkB,KAAK,sBAAsB,mBAAmB;EAChE,cAAc,KAAK,iBAAiB,eAAe;EACpD,CAAC;;AAGJ,MAAM,qBAAuC;CAC3C,UAAU;CACV,kBAAkB;CAClB,cAAc;CACf;AAED,IAAI,WAAoC;;;;;AAMxC,SAAgB,aAAa,MAAiD;AAC5E,YAAW,iBAAiB,KAAK;AACjC,QAAO;;;;;;;;;;AAWT,SAAgB,cAAgC;AAC9C,QAAO,YAAY;;AAiBrB,MAAM,iBAA0C;CAC9C;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,KAAK,GAAG,uBAAuB;EAC/B,WAAW;EACZ;CACD;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,KAAK;EACL,WACE;EACH;CACD;EACE,KAAK;EACL,OAAO;EACP,MAAM;EACN,KAAK;EACL,WAAW;EACZ;CACF;AAMD,MAAM,mBAAmB;AACzB,MAAM,iBAAiB;AACvB,MAAM,mBAAmB;AAEzB,eAAe,YAAY,KAA+B;AACxD,MAAK,IAAI,UAAU,GAAG,WAAW,gBAAgB,UAC/C,KAAI;AAIF,QAAM,MAAM,KAAK,EAAE,QAAQ,YAAY,QAAQ,iBAAiB,EAAE,CAAC;AACnE,SAAO;SACD;AACN,MAAI,UAAU,eACZ,OAAM,IAAI,SAAS,MACjB,WAAW,GAAG,mBAAmB,MAAM,UAAU,GAAG,CACrD;;AAIP,QAAO;;;;;;;;;;AAWT,eAAsB,mBACpB,UAC6B;CAC7B,MAAM,YAAY,eAAe,QAAQ,MAAM,SAAS,EAAE,KAAK;AAC/D,KAAI,UAAU,WAAW,EAAG,QAAO,KAAA;CAEnC,MAAM,YAAY,MAAM,QAAQ,IAAI,UAAU,KAAK,MAAM,YAAY,EAAE,IAAI,CAAC,CAAC;CAC7E,MAAM,OAAO,UAAU,QAAQ,GAAG,MAAM,CAAC,UAAU,GAAG;AACtD,KAAI,KAAK,WAAW,EAAG,QAAO,KAAA;AAE9B,QAAO;EACL,SAAS,KAAK,WAAW,IAAI,eAAe,eAAe;EAC3D;EACA,GAAG,KAAK,KACL,MACC,KAAK,EAAE,MAAM,0BAA0B,IAAI,IAAI,EAAE,IAAI,CAAC,OAAO,qBACzC,EAAE,KAAK,uBACL,EAAE,YAC3B;EACD;EACA;EACD,CAAC,KAAK,KAAK;;;;;;AAOd,SAAgB,qBAAqB,OAA0C;AAC7E,KAAI,MAAM,aAAa,KAAM,QAAO,KAAA;AACpC,KAAI,MAAM,qBAAqB,KAAA,KAAa,MAAM,aAAa,KAC7D;AAEF,QACE;;;;;;;;AC7LJ,MAAa,iBAAiB;;;;;AAM9B,MAAa,sBAAsB;;AAGnC,MAAa,qBAAqB;;;;;AAMlC,MAAa,cAAc;AAG3B,MAAa,oBAAoB;AACjC,MAAa,qBAAqB;AAClC,MAAa,mBAAmB;;;;;;;;;;;AAchC,IAAY,UAAL,yBAAA,SAAA;AACL,SAAA,eAAA;AACA,SAAA,QAAA;;KACD;AAED,IAAY,WAAL,yBAAA,UAAA;AACL,UAAA,YAAA;AACA,UAAA,kBAAA;;KACD;;;;AAqBD,IAAY,cAAL,yBAAA,aAAA;AAEL,aAAA,YAAA;AACA,aAAA,UAAA;AACA,aAAA,SAAA;AACA,aAAA,iBAAA;AACA,aAAA,mBAAA;AACA,aAAA,oBAAA;AACA,aAAA,iBAAA;AACA,aAAA,aAAA;AACA,aAAA,WAAA;AACA,aAAA,YAAA;AACA,aAAA,WAAA;AACA,aAAA,aAAA;AACA,aAAA,aAAA;AACA,aAAA,eAAA;AACA,aAAA,aAAA;AACA,aAAA,SAAA;AACA,aAAA,WAAA;AACA,aAAA,aAAA;AACA,aAAA,WAAA;AACA,aAAA,YAAA;AACA,aAAA,QAAA;AACA,aAAA,UAAA;AAEA,aAAA,UAAA;AAGA,aAAA,YAAA;AACA,aAAA,UAAA;AACA,aAAA,oBAAA;AACA,aAAA,oBAAA;;KACD;;;;;;;;;;;;AAaD,MAAa,0BAAoD,IAAI,IAAI;;;;;;;;;;;;;;;;;;;;CAoBxE,CAAC;;AAMF,MAAa,2BAA2B;AACxC,MAAa,uBAAuB;;AAEpC,MAAa,+BACX;;AAEF,MAAa,kBAAkB;;AAE/B,MAAa,oBAAoB;;;;;;;AA6BjC,MAAa,kBAET;AAIJ,MAAa,aAAa;;AAE1B,MAAa,0BAA0B;AACvC,MAAa,mBAAmB;;;;;;;;AAQhC,MAAa,4BACX;AACF,MAAa,mBAAmB;AAEhC,MAAa,oBAAoB;AACjC,MAAa,sBAAsB;AACnC,MAAa,8BACX;AACF,MAAa,uBAAuB;;;;;AAMpC,MAAa,yBACX;AACF,MAAa,sBAAsB;;AAEnC,MAAa,wBAAwB;;;;;AAMrC,SAAgB,mBAA2B;AACzC,QAAO,aAAa,CAAC,mBACjB,wBACA;;AAKN,MAAa,6CAA6C;AAC1D,MAAa,qBAAqB;AAClC,MAAa,qBAAqB;AAIlC,MAAa,cAAc;CAAC;CAAM;CAAM;CAAM;CAAM;CAAM;CAAK;AAC/D,MAAa,uBAAuB;AACpC,MAAa,uBAAuB;AACpC,MAAa,wBAAwB;AACrC,MAAa,0BAA0B;AACvC,MAAa,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;AAwBrC,MAAa,6BAA6B;CACxC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BD,MAAa,sBAAsB;CACjC,GAAG;CACH;CACA;CACA;CACA;CACA;CACD;AAID,MAAa,gCAAgC;AAC7C,MAAa,2BAA2B;;AAExC,MAAa,2BAA2B;;AAExC,MAAa,+BAA+B;;AAE5C,MAAa,wCACX;;AAEF,MAAa,8CACX;;AAEF,MAAa,sDACX;;AAEF,MAAa,4CACX;;AAEF,MAAa,mCAAmC;AAGhD,MAAa,mBAAmB;CAC9B;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;AAED,MAAa,oBAAoB,4BAA4B;;;;;;;AAQ7D,SAAgB,0BAA0B,WAA4B;AACpE,QAAO,YACH,GAAG,kBAAkB,aAAa,cAClC;;;AAMN,MAAa,uBAAuB;;AAGpC,MAAa,6CAA6C;AAC1D,MAAa,qCAAqC;;;;;;;;;;AAWlD,MAAa,mBAAmB;;;;ACjVhC,SAAgB,qBAAqB,SAEzB;AACV,QAAO,QAAQ,gBAAA;;;AAIjB,SAAgB,6BAA6B,SAGT;AAClC,QAAO,qBAAqB,QAAQ,GAAG,QAAQ,qBAAqB,KAAA;;;AAItE,SAAgB,6BAA6B,SAGrB;AACtB,QAAO,qBAAqB,QAAQ,GAAG,QAAQ,qBAAqB,KAAA;;;;ACzCtE,SAAgB,qBACd,OACA,WAAoC,EAAE,EACgC;AAI3B,QAAO;EAAE;EAAO;EAAU;;;;;;;;;AAuCvE,SAAgB,sBAAyC;AACZ,QAAO,EAAE;;;;;;;;;ACtCtD,SAAS,uBAA+D;CACtE,MAAM,OAAO,QAAQ,KAAK,MAAM,EAAE;AASlC,QAAO;EAAE,SARO,KAAK,MAAM,MAAM,CAAC,EAAE,WAAW,IAAI,CAAC,IAAI;EAQtC,WAPJ,CACZ,GAAG,IAAI,IACL,KACG,QAAQ,MAAM,EAAE,WAAW,KAAK,CAAC,CACjC,KAAK,MAAM,EAAE,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,CACxC,CACF,CAAC,MAAM,CAC2B,KAAK,IAAI;EAAE;;;;;;AAoBhD,SAAgB,kBACd,SACyB;CAKzB,MAAM,qBAAqB,6BAA6B,QAAQ;CAChE,MAAM,qBAAqB,6BAA6B,QAAQ;AAEhE,QAAO;EACL,aAAa,QAAQ;EAGrB,UAAU,QAAQ;EAClB,oBAAoB,QAAQ;EAC5B,YAAY,QAAQ;EACpB,YAAY,QAAQ,aAAa;EACjC,GAAI,uBAAuB,KAAA,IACvB,EAAE,qBAAqB,oBAAoB,GAC3C,EAAE;EACN,cAAc,QAAQ;EACtB,WAAW,QAAQ;EACnB,GAAI,uBAAuB,KAAA,IACvB,EAAE,sBAAsB,oBAAoB,GAC5C,EAAE;EACP;;AAGH,SAAgB,eACd,MACA,MACwB;CACxB,MAAM,SAAiC,EAAE,UAAU,MAAM;AACzD,KAAI,CAAC,KAAM,QAAO;CAElB,MAAM,iBAAiB,KAAK,cAAc;AAC1C,KAAI,eAAgB,QAAO,eAAe;CAE1C,MAAM,aAAa,KAAK,cAAc;AACtC,KAAI,WAAY,QAAO,WAAW;CAElC,MAAM,cAAc,KAAK,MAAM;AAC/B,KAAI,YAAa,QAAO,UAAU;AAElC,QAAO;;AAGT,MAAM,eAAoC,IAAI,IAAI,iBAAiB;AAGnE,SAAS,kBAAkB,OAAiC;AAC1D,KAAI,UAAU,OAAQ,QAAO;AAC7B,KAAI,UAAU,QAAS,QAAO;AAC9B,QAAO;;AAGT,IAAa,YAAb,MAAuB;CACrB;CACA,OACE,EAAE;CACJ;CACA;CACA;CACA,YAAmC;CACnC,UAAkB;CAClB,cAAqD;CACrD,qBAAsD,EAAE;CACxD,SAAyC,EAAE;CAC3C,mBAAmD,EAAE;CACrD,oBAA4B;CAE5B,cAAc;AACZ,OAAK,SAAS,IAAI,QAAQ,4CAA4C;GACpE,MAAM;GACN,SAAS;GACT,eAAe;GACf,4BAA4B;GAC5B,cAAc,UAAU;AACtB,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,OAAO,KAAK,KAAK,OAAO,CAAC,SAAS,EACpC,OAAM,SAAS;KAAE,GAAG,KAAK;KAAQ,GAAG,MAAM;KAAQ;AAKpD,QAAI,MAAM,UAAU,cAAc;AAChC,WAAM,aAAa,KAAK,cAAc,KAAK;KAC3C,MAAM,EAAE,yBAAyB,GAAG,eAClC,MAAM,cAAc,EAAE;AAExB,WAAM,aAAa;MAAE,GAAG,KAAK;MAAM,GAAG;MAAY;;AAGpD,QAAI,MAAM,UAAU,uBAClB,OAAM,aAAa;KAAE,GAAG,KAAK;KAAM,GAAI,MAAM,cAAc,EAAE;KAAG;AAElE,WAAO;;GAEV,CAAC;AAEF,OAAK,OAAO,EAAE,WAAW,KAAK,SAAS;AAMvC,OAAK,KAAK,QAA8B;AAExC,OAAK,KAAK,cAAc;AAKxB,OAAK,KAAK,UAAU;AAMpB,MAAI,YAAa,MAAK,KAAK,cAAc;AACzC,MAAI,QAAS,MAAK,KAAK,UAAU;AAEjC,OAAK,cAAcA,IAAQ;AAS3B,OAAK,SAASA,IAAQ;AACtB,OAAK,KAAK,SAAS,KAAK;AAExB,OAAK,aAAa,KAAA;;;CAIpB,IAAI,QAAgB;AAClB,SAAO,KAAK;;;CAId,IAAI,QAAgB;AAClB,SAAO,OAAO,KAAK,KAAK,SAAS,MAAM;;;;;;;;;;CAWzC,aAAa,MAAe;EAC1B,MAAM,aAAa,KAAK;AACxB,MAAI,KAAK,eAAe,cAAc,eAAe,KAAK,YACxD;AAEF,OAAK,aAAa;AAMlB,MAAI,CAAC,KAAK,WAAW;AACnB,QAAK,YAAYA,IAAQ;AACzB,QAAK,KAAK,cAAc,KAAK;;EAE/B,MAAM,QAAgC,EAAE;AACxC,MAAI,KAAK,MAAO,OAAM,QAAQ,KAAK;EACnC,MAAM,OAAO,CAAC,KAAK,YAAY,KAAK,UAAU,CAC3C,OAAO,QAAQ,CACf,KAAK,IAAI,CACT,MAAM;AACT,MAAI,KAAM,OAAM,OAAO;AACvB,OAAK,mBAAmB;AACxB,OAAK,OAAO,SAAS;GAAE;GAAY,YAAY,EAAE,MAAM,OAAO;GAAE,CAAC;AACjE,OAAK,OAAO,MAAM;GAChB;GACA,OAAO,KAAK;GACb,CAAC;AAIF,OAAK,cAAc;AACnB,OAAK,qBAAqB,EAAE;;;CAI9B,uBAAuD;AAOrD,SAAO;GACL,WAAW,KAAK;GAChB,SAAS;GACT,aAAa;GACb,OAAO,OAAO,KAAK,KAAK,SAAS,MAAM;GACvC,IAAI,QAAQ;GACZ,YAAY,QAAQ,SAAS,KAAK,MAAM,IAAI,CAAC;GAC7C,GAAG,sBAAsB;GACzB,GAAG,KAAK;GACT;;CAGH,OAAO,KAAa,OAAqD;AACvE,OAAK,KAAK,OAAO;;CAGnB,UAAU,QAAgC;AACxC,OAAK,SAAS;;CAGhB,iBAAiB,OAAc,aAAsC,EAAE,EAAE;AACvE,OAAK,OAAO,iBAAiB,OAAO,KAAK,cAAc,KAAK,aAAa;GACvE,MAAM;GACN,GAAG,KAAK;GACR,GAAG;GACJ,CAAC;;CAGJ,QAAQ,WAAmB,YAAsC;AAC/D,OAAK,OAAO,QAAQ;GAClB,YAAY,KAAK,cAAc,KAAK;GACpC,OAAO;GACP,YAAY;IACV,GAAG,KAAK;IACR,GAAG,KAAK,6BAA6B;IACrC,GAAG;IACJ;GACF,CAAC;;CAGJ,cACE,WACA,UACA,YACA;AACA,OAAK,OAAO,cAAc;GAAE;GAAW;GAAU;GAAY,CAAC;;CAIhE,8BAA+D;AAC7D,MAAI,KAAK,gBAAgB,KAAM,QAAO,EAAE;EACxC,MAAM,QAAiC,EAAE;EACzC,MAAM,SAAmB,EAAE;AAC3B,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,YAAY,EAAE;AAC3D,OAAI,CAAC,aAAa,IAAI,IAAI,CAAE;GAC5B,MAAM,WAAW,kBAAkB,MAAM;AACzC,SAAM,YAAY,SAAS;AAC3B,OAAI,aAAa,MAAO,QAAO,KAAK,IAAI;;AAE1C,MAAI,OAAO,SAAS,EAAG,OAAM,wBAAwB,OAAO,MAAM;AAClE,SAAO;;;;;;CAOT,cAAc,WAAmB,YAA4C;AAC3E,OAAK,QAAQ,WAAW,aAAa,WAAW;;;;;;;;CASlD,MAAM,QAAuB;AAC3B,QAAM,KAAK,OAAO,UAAU;;;;;;;CAS9B,MAAM,uBAAwD;AAC5D,MAAI,KAAK,gBAAgB,KACvB,QAAO,KAAK;EAEd,MAAM,MAA8B,EAAE;EACtC,MAAM,WAAoC,EAAE;AAC5C,MAAI;GACF,MAAM,aAAa,KAAK,cAAc,KAAK;AAC3C,aAAU,yBAAyB;IACjC;IACA,YAAY,KAAK,eAAe,KAAA;IAChC,kBAAkB,KAAK,sBAAsB;IAC9C,CAAC;GACF,MAAM,aAAa,MAAM,KAAK,OAAO,cAAc,YAAY,EAC7D,kBAAkB,KAAK,sBAAsB,EAC9C,CAAC;AACF,QAAK,MAAM,OAAO,kBAAkB;IAClC,MAAM,QAAQ,WAAW,QAAQ,IAAI;AACrC,QAAI,UAAU,KAAA,EAAW;AACzB,QAAI,OAAO,OAAO,MAAM;IACxB,MAAM,UAAU,WAAW,eAAe,IAAI;AAC9C,QAAI,YAAY,KAAA,EAAW,UAAS,OAAO;;WAEtC,OAAO;AACd,aAAU,oCAAoC,MAAM;AACpD,QAAK,iBACH,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC,EACzD,EAAE,MAAM,iBAAiB,CAC1B;;EAKH,MAAM,SAAS,qBAAqB,KAAK,SAAS;AAClD,OAAK,cAAc,OAAO;AAC1B,OAAK,qBAAqB,OAAO;AACjC,YAAU,qBAAqB,KAAK,YAAY;AAChD,SAAO,KAAK;;CAGd,uBAAgE;AAC9D,SAAO,KAAK;;;CAId,wBAAiD;AAC/C,SAAO,KAAK;;CAGd,MAAM,SAAS,QAA2C;AACxD,MAAI,OAAO,KAAK,KAAK,KAAK,CAAC,WAAW,EACpC;AAOF,MAAI,KAAK,kBACP;AAEF,OAAK,oBAAoB;AAEzB,OAAK,OAAO,QAAQ;GAClB,YAAY,KAAK,cAAc,KAAK;GACpC,OAAO;GACP,YAAY;IAEV,GAAG,KAAK;IACR,QAAQ,KAAK;IACb,GAAI,KAAK,YAAY,EAAE,aAAa,KAAK,WAAW,GAAG,EAAE;IACzD;IACA,MAAM,KAAK;IACZ;GACF,CAAC;AAEF,QAAM,KAAK,OAAO,UAAU;;;AAIhC,MAAa,YAAY,IAAI,WAAW"}

package/dist/{api-C3Dc4LFl.js → api-DtGIqQ2U.js}

@@ -1,5 +1,4 @@
-import { Q as WIZARD_USER_AGENT } from "./constants-DO4X70po.js";
-import { n as analytics } from "./analytics-B6q5PN7a.js";
+import { n as analytics, nt as WIZARD_USER_AGENT } from "./analytics-D21z3E5l.js";
 import axios from "axios";
 import { z } from "zod";
 //#region src/shared/api.ts
@@ -164,4 +163,4 @@ function handleApiError(error, operation) {
 //#endregion
 export { fetchGithubConnected as a, fetchUserData as c, ApiUserSchema as i, handleApiError as l, ApiError as n, fetchProjectData as o, ApiProjectSchema as r, fetchSlackConnected as s, ActivityLogEntrySchema as t };
 
-//# sourceMappingURL=api-C3Dc4LFl.js.map
+//# sourceMappingURL=api-DtGIqQ2U.js.map

package/dist/api-DtGIqQ2U.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-DtGIqQ2U.js","names":[],"sources":["../src/shared/api.ts"],"sourcesContent":["import axios, { AxiosError } from 'axios';\nimport { z } from 'zod';\nimport { analytics } from '@utils/analytics';\nimport { WIZARD_USER_AGENT } from './constants';\nimport type { HostResolution } from './host-resolution';\n\n/**\n * User payload from `/api/users/@me/`. Schema typed for the fields the\n * wizard actually reads + passthrough on everything else so the full\n * upstream response rides through to the session for downstream features\n * (account-aware copy, plan-gated flows, org/team metadata, etc.).\n *\n * Top-level uses `.passthrough()` so unknown fields aren't stripped;\n * the few nested objects we care about (team, organization,\n * organizations[]) do the same so their additional fields survive too.\n *\n * Keep `distinct_id` required — analytics depends on it. Everything\n * else added here is nullish so partial responses don't fail parsing.\n */\n/** A pre-issued gateway token and the gateway it's for. */\nexport type GatewayCredential = { token: string; url: string };\n\n/** What a login (or a CI api key) resolves to: the wizard's access to one project. */\nexport interface Credentials {\n  accessToken: string;\n  /** OAuth refresh token when the grant carried one; absent on CI api-key runs. */\n  refreshToken?: string;\n  /** Epoch ms when `accessToken` expires — drives the pre-run refresh. */\n  expiresAt?: number;\n  /** Minting OAuth client when it differs from the default login app (provisioning signups). */\n  oauthClientId?: string;\n  projectApiKey: string;\n  /** Resolved at auth time and immutable thereafter — see {@link HostResolution}. */\n  host: HostResolution;\n  projectId: number;\n  /** A pre-issued gateway token the run uses instead of minting (dev and test `--ci` runs). */\n  gateway?: GatewayCredential;\n  /**\n   * Requested OAuth scopes the grant came back without — deselected on the\n   * consent screen or clamped by the app's ceiling. Read when a run fails so\n   * the error can name the missing permission and the fix (re-run and grant\n   * it during the OAuth flow) instead of the generic report-a-bug line.\n   * Empty/absent on CI api-key runs, where there is no scope request to diff\n   * against.\n   */\n  missingScopes?: readonly string[];\n}\n\nexport const ApiUserSchema = z\n  .object({\n    // Identifiers\n    distinct_id: z.string(),\n    uuid: z.string().nullish(),\n    id: z.number().nullish(),\n\n    // Profile\n    email: z.string().nullish(),\n    first_name: z.string().nullish(),\n    last_name: z.string().nullish(),\n    date_joined: z.string().nullish(),\n    is_email_verified: z.boolean().nullish(),\n    is_2fa_enabled: z.boolean().nullish(),\n    is_staff: z.boolean().nullish(),\n\n    // Preferences\n    theme_mode: z.string().nullish(),\n    toolbar_mode: z.string().nullish(),\n    hide_mcp_hints: z.boolean().nullish(),\n\n    // Optional / nullable on the backend — pre-onboarding signup paths\n    // return null and older accounts may not have it set. Treat as a\n    // hint, never a guarantee.\n    role_at_organization: z.string().nullish(),\n\n    // Current team + organization (objects from the API, kept typed on\n    // the fields the wizard uses; passthrough preserves the rest).\n    team: z\n      .object({\n        id: z.number(),\n        uuid: z.string().nullish(),\n        organization: z.string().uuid(),\n        api_token: z.string().nullish(),\n        project_id: z.number().nullish(),\n        name: z.string().nullish(),\n        timezone: z.string().nullish(),\n      })\n      .passthrough(),\n    organization: z\n      .object({\n        id: z.string().uuid(),\n        name: z.string().nullish(),\n        slug: z.string().nullish(),\n        membership_level: z.number().nullish(),\n        customer_id: z.string().nullish(),\n        // Org-level AI consent gate. Signals drops all findings while\n        // this is not true. Null on older orgs (pre-2026-05 default\n        // flip) — treat null as \"unknown\", not \"off\".\n        is_ai_data_processing_approved: z.boolean().nullish(),\n      })\n      .passthrough(),\n    organizations: z.array(\n      z\n        .object({\n          id: z.string().uuid(),\n          name: z.string().nullish(),\n          membership_level: z.number().nullish(),\n        })\n        .passthrough(),\n    ),\n  })\n  .passthrough();\n\n/**\n * Single activity log entry the wizard cares about. The PostHog endpoint\n * returns much more — schema kept minimal so changes upstream don't break us.\n *\n * @unused — no current caller after the Phase 6 streaming-agent pivot\n * dropped activity_log polling. Deliberately retained: this is a thin,\n * well-typed wrapper around a stable PostHog endpoint, and we're likely\n * to want it again for a future feature (e.g. \"what changed in your\n * project recently\"). Re-deriving the schema is more work than letting\n * it sit dormant.\n */\nexport const ActivityLogEntrySchema = z\n  .object({\n    scope: z.string().nullish(),\n    activity: z.string().nullish(),\n    created_at: z.string().nullish(),\n  })\n  .passthrough();\n\n/** @unused — see ActivityLogEntrySchema. */\nexport const ActivityLogResponseSchema = z.object({\n  results: z.array(ActivityLogEntrySchema),\n});\n\n/** @unused — see ActivityLogEntrySchema. */\nexport type ActivityLogEntry = z.infer<typeof ActivityLogEntrySchema>;\n\nexport const ApiProjectSchema = z.object({\n  id: z.number(),\n  uuid: z.string().uuid(),\n  organization: z.string().uuid(),\n  api_token: z.string(),\n  name: z.string(),\n  // Product opt-ins (TeamSerializer-compat fields on /api/projects/:id).\n  // Project-level truth for \"is this product enabled\" — a product can be\n  // instrumented from another repo or the snippet, so these settings\n  // override repo-local evidence. Null/absent = unknown. Only the\n  // opt-ins a signals decision consumes: replay + exception autocapture\n  // feed signal-source choices; surveys feeds the surveys-scout tuning.\n  session_recording_opt_in: z.boolean().nullish(),\n  autocapture_exceptions_opt_in: z.boolean().nullish(),\n  surveys_opt_in: z.boolean().nullish(),\n});\n\nexport type ApiUser = z.infer<typeof ApiUserSchema>;\nexport type ApiProject = z.infer<typeof ApiProjectSchema>;\n\nexport class ApiError extends Error {\n  constructor(\n    message: string,\n    public readonly statusCode?: number,\n    public readonly endpoint?: string,\n  ) {\n    super(message);\n    this.name = 'ApiError';\n  }\n}\n\nexport async function fetchUserData(\n  accessToken: string,\n  baseUrl: string,\n): Promise<ApiUser> {\n  try {\n    const response = await axios.get(`${baseUrl}/api/users/@me/`, {\n      headers: {\n        Authorization: `Bearer ${accessToken}`,\n        'User-Agent': WIZARD_USER_AGENT,\n      },\n    });\n\n    return ApiUserSchema.parse(response.data);\n  } catch (error) {\n    const apiError = handleApiError(error, 'fetch user data');\n    analytics.captureException(apiError, {\n      endpoint: '/api/users/@me/',\n      baseUrl,\n    });\n    throw apiError;\n  }\n}\n\n/**\n * Best-effort fetch of recent activity log entries. Returns [] on any error\n * so callers can treat absence of results as \"haven't detected anything yet\"\n * rather than a hard failure.\n *\n * @unused — no current caller after the Phase 6 streaming-agent pivot\n * dropped activity_log polling from McpSuggestedPromptsScreen.\n * Deliberately retained for future features that want a soft signal of\n * recent project changes (e.g. dashboards, audit summaries). See the\n * ActivityLogEntrySchema doc comment for the keep-vs-delete rationale.\n */\nexport async function fetchRecentActivity(\n  accessToken: string,\n  projectId: number,\n  baseUrl: string,\n  since: Date,\n): Promise<ActivityLogEntry[]> {\n  try {\n    const response = await axios.get(\n      `${baseUrl}/api/projects/${projectId}/activity_log/`,\n      {\n        params: { limit: 10 },\n        headers: {\n          Authorization: `Bearer ${accessToken}`,\n          'User-Agent': WIZARD_USER_AGENT,\n        },\n        // Short timeout — best-effort probe, not a critical path.\n        timeout: 4000,\n      },\n    );\n    const parsed = ActivityLogResponseSchema.safeParse(response.data);\n    if (!parsed.success) return [];\n    const sinceMs = since.getTime();\n    return parsed.data.results.filter((entry) => {\n      if (!entry.created_at) return false;\n      const t = Date.parse(entry.created_at);\n      return Number.isFinite(t) && t >= sinceMs;\n    });\n  } catch {\n    return [];\n  }\n}\n\nexport async function fetchProjectData(\n  accessToken: string,\n  projectId: number,\n  baseUrl: string,\n): Promise<ApiProject> {\n  try {\n    const response = await axios.get(`${baseUrl}/api/projects/${projectId}/`, {\n      headers: {\n        Authorization: `Bearer ${accessToken}`,\n        'User-Agent': WIZARD_USER_AGENT,\n      },\n    });\n\n    return ApiProjectSchema.parse(response.data);\n  } catch (error) {\n    const apiError = handleApiError(error, 'fetch project data');\n    analytics.captureException(apiError, {\n      endpoint: `/api/projects/${projectId}/`,\n      baseUrl,\n      projectId,\n    });\n    throw apiError;\n  }\n}\n\n/** Minimal shape of `/api/projects/:id/integrations/` — we only read `kind`. */\nconst IntegrationsResponseSchema = z.object({\n  results: z.array(z.object({ kind: z.string().nullish() }).passthrough()),\n});\n\n/**\n * Check whether the project already has a Slack integration connected.\n * Requires the `integration:read` scope. Throws on failure — callers\n * (including the SlackConnectScreen poll) decide how to degrade and\n * are responsible for capturing the error exactly once.\n */\nexport async function fetchSlackConnected(\n  accessToken: string,\n  projectId: number,\n  baseUrl: string,\n  signal?: AbortSignal,\n): Promise<boolean> {\n  const response = await axios.get(\n    `${baseUrl}/api/projects/${projectId}/integrations/`,\n    {\n      headers: {\n        Authorization: `Bearer ${accessToken}`,\n        'User-Agent': WIZARD_USER_AGENT,\n      },\n      signal,\n    },\n  );\n  const parsed = IntegrationsResponseSchema.safeParse(response.data);\n  if (!parsed.success) return false;\n  return parsed.data.results.some((i) => i.kind === 'slack');\n}\n\n/**\n * Check whether the project already has a GitHub App integration connected.\n * Requires the `integration:read` scope. Throws on failure — callers (the\n * SelfDrivingGitHubScreen poll) decide how to degrade and are responsible for\n * capturing the error exactly once.\n */\nexport async function fetchGithubConnected(\n  accessToken: string,\n  projectId: number,\n  baseUrl: string,\n  signal?: AbortSignal,\n): Promise<boolean> {\n  const response = await axios.get(\n    `${baseUrl}/api/projects/${projectId}/integrations/`,\n    {\n      headers: {\n        Authorization: `Bearer ${accessToken}`,\n        'User-Agent': WIZARD_USER_AGENT,\n      },\n      signal,\n    },\n  );\n  const parsed = IntegrationsResponseSchema.safeParse(response.data);\n  if (!parsed.success) return false;\n  return parsed.data.results.some((i) => i.kind === 'github');\n}\n\nexport function handleApiError(error: unknown, operation: string): ApiError {\n  if (axios.isAxiosError(error)) {\n    const axiosError = error as AxiosError<{ detail?: string }>;\n    const status = axiosError.response?.status;\n    const detail = axiosError.response?.data?.detail;\n    const endpoint = axiosError.config?.url;\n\n    if (status === 401) {\n      return new ApiError(\n        `Authentication failed while trying to ${operation}`,\n        status,\n        endpoint,\n      );\n    }\n\n    if (status === 403) {\n      return new ApiError(\n        `Access denied while trying to ${operation}`,\n        status,\n        endpoint,\n      );\n    }\n\n    if (status === 404) {\n      return new ApiError(\n        `Resource not found while trying to ${operation}`,\n        status,\n        endpoint,\n      );\n    }\n\n    const message = detail || `Failed to ${operation}`;\n    return new ApiError(message, status, endpoint);\n  }\n\n  if (error instanceof z.ZodError) {\n    return new ApiError(`Invalid response format while trying to ${operation}`);\n  }\n\n  return new ApiError(\n    `Unexpected error while trying to ${operation}: ${\n      error instanceof Error ? error.message : 'Unknown error'\n    }`,\n  );\n}\n"],"mappings":";;;;AAgDA,MAAa,gBAAgB,EAC1B,OAAO;CAEN,aAAa,EAAE,QAAQ;CACvB,MAAM,EAAE,QAAQ,CAAC,SAAS;CAC1B,IAAI,EAAE,QAAQ,CAAC,SAAS;CAGxB,OAAO,EAAE,QAAQ,CAAC,SAAS;CAC3B,YAAY,EAAE,QAAQ,CAAC,SAAS;CAChC,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,aAAa,EAAE,QAAQ,CAAC,SAAS;CACjC,mBAAmB,EAAE,SAAS,CAAC,SAAS;CACxC,gBAAgB,EAAE,SAAS,CAAC,SAAS;CACrC,UAAU,EAAE,SAAS,CAAC,SAAS;CAG/B,YAAY,EAAE,QAAQ,CAAC,SAAS;CAChC,cAAc,EAAE,QAAQ,CAAC,SAAS;CAClC,gBAAgB,EAAE,SAAS,CAAC,SAAS;CAKrC,sBAAsB,EAAE,QAAQ,CAAC,SAAS;CAI1C,MAAM,EACH,OAAO;EACN,IAAI,EAAE,QAAQ;EACd,MAAM,EAAE,QAAQ,CAAC,SAAS;EAC1B,cAAc,EAAE,QAAQ,CAAC,MAAM;EAC/B,WAAW,EAAE,QAAQ,CAAC,SAAS;EAC/B,YAAY,EAAE,QAAQ,CAAC,SAAS;EAChC,MAAM,EAAE,QAAQ,CAAC,SAAS;EAC1B,UAAU,EAAE,QAAQ,CAAC,SAAS;EAC/B,CAAC,CACD,aAAa;CAChB,cAAc,EACX,OAAO;EACN,IAAI,EAAE,QAAQ,CAAC,MAAM;EACrB,MAAM,EAAE,QAAQ,CAAC,SAAS;EAC1B,MAAM,EAAE,QAAQ,CAAC,SAAS;EAC1B,kBAAkB,EAAE,QAAQ,CAAC,SAAS;EACtC,aAAa,EAAE,QAAQ,CAAC,SAAS;EAIjC,gCAAgC,EAAE,SAAS,CAAC,SAAS;EACtD,CAAC,CACD,aAAa;CAChB,eAAe,EAAE,MACf,EACG,OAAO;EACN,IAAI,EAAE,QAAQ,CAAC,MAAM;EACrB,MAAM,EAAE,QAAQ,CAAC,SAAS;EAC1B,kBAAkB,EAAE,QAAQ,CAAC,SAAS;EACvC,CAAC,CACD,aAAa,CACjB;CACF,CAAC,CACD,aAAa;;;;;;;;;;;;AAahB,MAAa,yBAAyB,EACnC,OAAO;CACN,OAAO,EAAE,QAAQ,CAAC,SAAS;CAC3B,UAAU,EAAE,QAAQ,CAAC,SAAS;CAC9B,YAAY,EAAE,QAAQ,CAAC,SAAS;CACjC,CAAC,CACD,aAAa;AAGyB,EAAE,OAAO,EAChD,SAAS,EAAE,MAAM,uBAAuB,EACzC,CAAC;AAKF,MAAa,mBAAmB,EAAE,OAAO;CACvC,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,QAAQ,CAAC,MAAM;CACvB,cAAc,EAAE,QAAQ,CAAC,MAAM;CAC/B,WAAW,EAAE,QAAQ;CACrB,MAAM,EAAE,QAAQ;CAOhB,0BAA0B,EAAE,SAAS,CAAC,SAAS;CAC/C,+BAA+B,EAAE,SAAS,CAAC,SAAS;CACpD,gBAAgB,EAAE,SAAS,CAAC,SAAS;CACtC,CAAC;AAKF,IAAa,WAAb,cAA8B,MAAM;CAClC,YACE,SACA,YACA,UACA;AACA,QAAM,QAAQ;AAHE,OAAA,aAAA;AACA,OAAA,WAAA;AAGhB,OAAK,OAAO;;;AAIhB,eAAsB,cACpB,aACA,SACkB;AAClB,KAAI;EACF,MAAM,WAAW,MAAM,MAAM,IAAI,GAAG,QAAQ,kBAAkB,EAC5D,SAAS;GACP,eAAe,UAAU;GACzB,cAAc;GACf,EACF,CAAC;AAEF,SAAO,cAAc,MAAM,SAAS,KAAK;UAClC,OAAO;EACd,MAAM,WAAW,eAAe,OAAO,kBAAkB;AACzD,YAAU,iBAAiB,UAAU;GACnC,UAAU;GACV;GACD,CAAC;AACF,QAAM;;;AA+CV,eAAsB,iBACpB,aACA,WACA,SACqB;AACrB,KAAI;EACF,MAAM,WAAW,MAAM,MAAM,IAAI,GAAG,QAAQ,gBAAgB,UAAU,IAAI,EACxE,SAAS;GACP,eAAe,UAAU;GACzB,cAAc;GACf,EACF,CAAC;AAEF,SAAO,iBAAiB,MAAM,SAAS,KAAK;UACrC,OAAO;EACd,MAAM,WAAW,eAAe,OAAO,qBAAqB;AAC5D,YAAU,iBAAiB,UAAU;GACnC,UAAU,iBAAiB,UAAU;GACrC;GACA;GACD,CAAC;AACF,QAAM;;;;AAKV,MAAM,6BAA6B,EAAE,OAAO,EAC1C,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,EACzE,CAAC;;;;;;;AAQF,eAAsB,oBACpB,aACA,WACA,SACA,QACkB;CAClB,MAAM,WAAW,MAAM,MAAM,IAC3B,GAAG,QAAQ,gBAAgB,UAAU,iBACrC;EACE,SAAS;GACP,eAAe,UAAU;GACzB,cAAc;GACf;EACD;EACD,CACF;CACD,MAAM,SAAS,2BAA2B,UAAU,SAAS,KAAK;AAClE,KAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,QAAO,OAAO,KAAK,QAAQ,MAAM,MAAM,EAAE,SAAS,QAAQ;;;;;;;;AAS5D,eAAsB,qBACpB,aACA,WACA,SACA,QACkB;CAClB,MAAM,WAAW,MAAM,MAAM,IAC3B,GAAG,QAAQ,gBAAgB,UAAU,iBACrC;EACE,SAAS;GACP,eAAe,UAAU;GACzB,cAAc;GACf;EACD;EACD,CACF;CACD,MAAM,SAAS,2BAA2B,UAAU,SAAS,KAAK;AAClE,KAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,QAAO,OAAO,KAAK,QAAQ,MAAM,MAAM,EAAE,SAAS,SAAS;;AAG7D,SAAgB,eAAe,OAAgB,WAA6B;AAC1E,KAAI,MAAM,aAAa,MAAM,EAAE;EAC7B,MAAM,aAAa;EACnB,MAAM,SAAS,WAAW,UAAU;EACpC,MAAM,SAAS,WAAW,UAAU,MAAM;EAC1C,MAAM,WAAW,WAAW,QAAQ;AAEpC,MAAI,WAAW,IACb,QAAO,IAAI,SACT,yCAAyC,aACzC,QACA,SACD;AAGH,MAAI,WAAW,IACb,QAAO,IAAI,SACT,iCAAiC,aACjC,QACA,SACD;AAGH,MAAI,WAAW,IACb,QAAO,IAAI,SACT,sCAAsC,aACtC,QACA,SACD;AAIH,SAAO,IAAI,SADK,UAAU,aAAa,aACV,QAAQ,SAAS;;AAGhD,KAAI,iBAAiB,EAAE,SACrB,QAAO,IAAI,SAAS,2CAA2C,YAAY;AAG7E,QAAO,IAAI,SACT,oCAAoC,UAAU,IAC5C,iBAAiB,QAAQ,MAAM,UAAU,kBAE5C"}

package/dist/api-IhROOQNv.js

@@ -0,0 +1,2 @@
+import { n as ApiError } from "./api-DtGIqQ2U.js";
+export { ApiError };

package/dist/api-key-login-OEntFvu5.js

@@ -0,0 +1,2 @@
+import { t as resolveApiKeyProject } from "./api-key-login-h3E2G3zu.js";
+export { resolveApiKeyProject };

package/dist/api-key-login-h3E2G3zu.js

@@ -0,0 +1,55 @@
+import { o as logToFile } from "./debug-BfQPD2Hg.js";
+import { n as analytics } from "./analytics-D21z3E5l.js";
+import { t as HostResolution } from "./host-resolution-D8GhEVoX.js";
+import { c as fetchUserData, o as fetchProjectData } from "./api-DtGIqQ2U.js";
+//#region src/shared/api-key-login.ts
+/** What a personal API key logs in to, the way `--ci` does: no browser, no OAuth. */
+/** The host, the project and, when the key can read it, the user `apiKey` belongs to. */
+async function resolveApiKeyProject(apiKey, options = {}) {
+	options.onInfo?.("Using provided API key (CI mode - OAuth bypassed)");
+	const host = await HostResolution.fromAccessToken(apiKey, {
+		region: options.region,
+		localMcp: options.localMcp,
+		baseUrl: options.baseUrl
+	});
+	const cloudUrl = host.appHost;
+	const projectData = options.projectId != null ? await fetchProjectDataById(apiKey, options.projectId, cloudUrl) : await fetchProjectDataWithApiKey(apiKey, cloudUrl);
+	let apiUser = null;
+	try {
+		apiUser = await fetchUserData(apiKey, cloudUrl);
+	} catch (err) {
+		logToFile("[ci-auth] user lookup failed:", err instanceof Error ? err.message : String(err));
+	}
+	if (apiUser) {
+		analytics.identifyUser(apiUser);
+		logToFile("[ci-auth] identified via API key; flags evaluate as the key owner");
+	} else options.onWarning?.("Could not resolve the API key user (key needs user:read scope) — feature flags evaluate anonymously; user-targeted flags will not match.");
+	return {
+		host,
+		project: projectData.project,
+		projectId: projectData.id,
+		apiUser
+	};
+}
+async function fetchProjectDataWithApiKey(apiKey, cloudUrl) {
+	const projectId = (await fetchUserData(apiKey, cloudUrl)).team?.id;
+	if (!projectId) throw new Error("Could not determine project ID from API key. Please ensure your API key has access to a project in this cloud region.");
+	const projectData = await fetchProjectData(apiKey, projectId, cloudUrl);
+	return {
+		api_token: projectData.api_token,
+		id: projectId,
+		project: projectData
+	};
+}
+async function fetchProjectDataById(apiKey, projectId, cloudUrl) {
+	const projectData = await fetchProjectData(apiKey, projectId, cloudUrl);
+	return {
+		api_token: projectData.api_token,
+		id: projectId,
+		project: projectData
+	};
+}
+//#endregion
+export { resolveApiKeyProject as t };
+
+//# sourceMappingURL=api-key-login-h3E2G3zu.js.map

package/dist/api-key-login-h3E2G3zu.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-login-h3E2G3zu.js","names":[],"sources":["../src/shared/api-key-login.ts"],"sourcesContent":["/** What a personal API key logs in to, the way `--ci` does: no browser, no OAuth. */\n\nimport {\n  fetchProjectData,\n  fetchUserData,\n  type ApiProject,\n  type ApiUser,\n} from './api';\nimport { HostResolution } from './host-resolution';\nimport { analytics } from './utils/analytics';\nimport { logToFile } from './utils/debug';\nimport type { CloudRegion } from './utils/types';\n\nexport type ApiKeyLoginOptions = {\n  region?: CloudRegion;\n  baseUrl?: string; // pins every PostHog origin and skips region resolution\n  localMcp?: boolean; // resolves `host.mcpUrl` to the local MCP server\n  projectId?: number; // the project to use; else the key's current project\n  onWarning?: (message: string) => void; // shown when the key can't read its user\n  onInfo?: (message: string) => void; // the login's progress line\n};\n\n/** The host, the project and, when the key can read it, the user `apiKey` belongs to. */\nexport async function resolveApiKeyProject(\n  apiKey: string,\n  options: ApiKeyLoginOptions = {},\n): Promise<{\n  host: HostResolution;\n  project: ApiProject;\n  projectId: number;\n  apiUser: ApiUser | null;\n}> {\n  options.onInfo?.('Using provided API key (CI mode - OAuth bypassed)');\n  const host = await HostResolution.fromAccessToken(apiKey, {\n    region: options.region,\n    localMcp: options.localMcp,\n    baseUrl: options.baseUrl,\n  });\n  const cloudUrl = host.appHost;\n  const projectData =\n    options.projectId != null\n      ? await fetchProjectDataById(apiKey, options.projectId, cloudUrl)\n      : await fetchProjectDataWithApiKey(apiKey, cloudUrl);\n\n  // Best-effort user fetch — CI flows may run with project-scoped keys\n  // that 403 on /api/users/@me/, so swallow errors and continue with\n  // a null user (and null role).\n  let apiUser: ApiUser | null = null;\n  try {\n    apiUser = await fetchUserData(apiKey, cloudUrl);\n  } catch (err) {\n    logToFile(\n      '[ci-auth] user lookup failed:',\n      err instanceof Error ? err.message : String(err),\n    );\n  }\n  if (apiUser) {\n    analytics.identifyUser(apiUser);\n    logToFile(\n      '[ci-auth] identified via API key; flags evaluate as the key owner',\n    );\n  } else {\n    options.onWarning?.(\n      'Could not resolve the API key user (key needs user:read scope) — feature flags evaluate anonymously; user-targeted flags will not match.',\n    );\n  }\n  return {\n    host,\n    project: projectData.project,\n    projectId: projectData.id,\n    apiUser,\n  };\n}\n\nasync function fetchProjectDataWithApiKey(\n  apiKey: string,\n  cloudUrl: string,\n): Promise<{ api_token: string; id: number; project: ApiProject }> {\n  const userData = await fetchUserData(apiKey, cloudUrl);\n  const projectId = userData.team?.id;\n\n  if (!projectId) {\n    throw new Error(\n      'Could not determine project ID from API key. Please ensure your API key has access to a project in this cloud region.',\n    );\n  }\n\n  const projectData = await fetchProjectData(apiKey, projectId, cloudUrl);\n  return {\n    api_token: projectData.api_token,\n    id: projectId,\n    project: projectData,\n  };\n}\n\nasync function fetchProjectDataById(\n  apiKey: string,\n  projectId: number,\n  cloudUrl: string,\n): Promise<{ api_token: string; id: number; project: ApiProject }> {\n  const projectData = await fetchProjectData(apiKey, projectId, cloudUrl);\n  return {\n    api_token: projectData.api_token,\n    id: projectId,\n    project: projectData,\n  };\n}\n"],"mappings":";;;;;;;AAuBA,eAAsB,qBACpB,QACA,UAA8B,EAAE,EAM/B;AACD,SAAQ,SAAS,oDAAoD;CACrE,MAAM,OAAO,MAAM,eAAe,gBAAgB,QAAQ;EACxD,QAAQ,QAAQ;EAChB,UAAU,QAAQ;EAClB,SAAS,QAAQ;EAClB,CAAC;CACF,MAAM,WAAW,KAAK;CACtB,MAAM,cACJ,QAAQ,aAAa,OACjB,MAAM,qBAAqB,QAAQ,QAAQ,WAAW,SAAS,GAC/D,MAAM,2BAA2B,QAAQ,SAAS;CAKxD,IAAI,UAA0B;AAC9B,KAAI;AACF,YAAU,MAAM,cAAc,QAAQ,SAAS;UACxC,KAAK;AACZ,YACE,iCACA,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CACjD;;AAEH,KAAI,SAAS;AACX,YAAU,aAAa,QAAQ;AAC/B,YACE,oEACD;OAED,SAAQ,YACN,2IACD;AAEH,QAAO;EACL;EACA,SAAS,YAAY;EACrB,WAAW,YAAY;EACvB;EACD;;AAGH,eAAe,2BACb,QACA,UACiE;CAEjE,MAAM,aADW,MAAM,cAAc,QAAQ,SAAS,EAC3B,MAAM;AAEjC,KAAI,CAAC,UACH,OAAM,IAAI,MACR,wHACD;CAGH,MAAM,cAAc,MAAM,iBAAiB,QAAQ,WAAW,SAAS;AACvE,QAAO;EACL,WAAW,YAAY;EACvB,IAAI;EACJ,SAAS;EACV;;AAGH,eAAe,qBACb,QACA,WACA,UACiE;CACjE,MAAM,cAAc,MAAM,iBAAiB,QAAQ,WAAW,SAAS;AACvE,QAAO;EACL,WAAW,YAAY;EACvB,IAAI;EACJ,SAAS;EACV"}

package/dist/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { n as ErrorCodes, t as emitWizardError } from "./emit-BSetXzDV.js";
+import { n as ErrorCodes, t as emitWizardError } from "./emit-RfAewcWv.js";
 import { satisfies } from "semver";
 //#region bin.ts
 const NODE_VERSION_RANGE = ">=22.22.0";
@@ -23,7 +23,7 @@ if (!satisfies(process.version, NODE_VERSION_RANGE)) {
 	});
 	process.exit(1);
 }
-await import("./main-DKPjFHEV.js");
+await import("./main-0p-YxUNa.js");
 //#endregion
 export {};
 

package/dist/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","names":[],"sources":["../bin.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { satisfies } from 'semver';\nimport { ErrorCodes } from '@shared/errors/codes.js';\nimport { emitWizardError } from '@shared/errors/emit.js';\n\n// Keep in sync with `engines.node` in package.json. npx does not enforce\n// engines, so this preflight is the only thing standing between an old Node\n// runtime and a cryptic dependency crash (e.g. undici's markAsUncloneable\n// TypeError on Node < 22.10).\nconst NODE_VERSION_RANGE = '>=22.22.0';\n\nif (!satisfies(process.version, NODE_VERSION_RANGE)) {\n  // eslint-disable-next-line no-console\n  console.log(\n    [\n      `The PostHog wizard needs a newer version of Node.js to run.`,\n      ``,\n      `  You have:  ${process.version}`,\n      `  You need:  v${NODE_VERSION_RANGE.replace('>=', '')} or later`,\n      ``,\n      `To update Node.js:`,\n      ``,\n      `  Download the latest version from https://nodejs.org/en/download`,\n      `  Or, if you use nvm, run: nvm install 24 && nvm use 24`,\n      ``,\n      `Then run the wizard again. Stuck? Email wizard@posthog.com and we'll help.`,\n    ].join('\\n'),\n  );\n  emitWizardError({\n    code: ErrorCodes.CliNodeVersion,\n    message: `Node ${process.version} is below the required range ${NODE_VERSION_RANGE}`,\n  });\n  process.exit(1);\n}\n\n// Loaded dynamically so no dependency is evaluated before the check above.\nawait import('./main');\n"],"mappings":";;;;AASA,MAAM,qBAAqB;AAE3B,IAAI,CAAC,UAAU,QAAQ,SAAS,mBAAmB,EAAE;AAEnD,SAAQ,IACN;EACE;EACA;EACA,gBAAgB,QAAQ;EACxB,iBAAiB,mBAAmB,QAAQ,MAAM,GAAG,CAAC;EACtD;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK,CACb;AACD,iBAAgB;EACd,MAAM,WAAW;EACjB,SAAS,QAAQ,QAAQ,QAAQ,+BAA+B;EACjE,CAAC;AACF,SAAQ,KAAK,EAAE;;AAIjB,MAAM,OAAO"}
+{"version":3,"file":"bin.js","names":[],"sources":["../bin.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { satisfies } from 'semver';\nimport { ErrorCodes } from '@shared/errors/codes.js';\nimport { emitWizardError } from '@shared/errors/emit.js';\n\n// Keep in sync with `engines.node` in package.json. npx does not enforce\n// engines, so this preflight is the only thing standing between an old Node\n// runtime and a cryptic dependency crash (e.g. undici's markAsUncloneable\n// TypeError on Node < 22.10).\nconst NODE_VERSION_RANGE = '>=22.22.0';\n\nif (!satisfies(process.version, NODE_VERSION_RANGE)) {\n  // eslint-disable-next-line no-console\n  console.log(\n    [\n      `The PostHog wizard needs a newer version of Node.js to run.`,\n      ``,\n      `  You have:  ${process.version}`,\n      `  You need:  v${NODE_VERSION_RANGE.replace('>=', '')} or later`,\n      ``,\n      `To update Node.js:`,\n      ``,\n      `  Download the latest version from https://nodejs.org/en/download`,\n      `  Or, if you use nvm, run: nvm install 24 && nvm use 24`,\n      ``,\n      `Then run the wizard again. Stuck? Email wizard@posthog.com and we'll help.`,\n    ].join('\\n'),\n  );\n  emitWizardError({\n    code: ErrorCodes.CliNodeVersion,\n    message: `Node ${process.version} is below the required range ${NODE_VERSION_RANGE}`,\n  });\n  process.exit(1);\n}\n\n// Loaded dynamically so no dependency is evaluated before the check above.\n// eslint-disable-next-line no-restricted-syntax -- main.ts is bin.ts's own layer.\nawait import('./main');\n"],"mappings":";;;;AASA,MAAM,qBAAqB;AAE3B,IAAI,CAAC,UAAU,QAAQ,SAAS,mBAAmB,EAAE;AAEnD,SAAQ,IACN;EACE;EACA;EACA,gBAAgB,QAAQ;EACxB,iBAAiB,mBAAmB,QAAQ,MAAM,GAAG,CAAC;EACtD;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK,CACb;AACD,iBAAgB;EACd,MAAM,WAAW;EACjB,SAAS,QAAQ,QAAQ,QAAQ,+BAA+B;EACjE,CAAC;AACF,SAAQ,KAAK,EAAE;;AAKjB,MAAM,OAAO"}

package/dist/{bounded-fs-CC_NDtoP.js → bounded-fs-CAsuF6al.js}

@@ -1,5 +1,5 @@
-import { s as logToFile } from "./debug-DyARf5TF.js";
-import { n as analytics } from "./analytics-B6q5PN7a.js";
+import { o as logToFile } from "./debug-BfQPD2Hg.js";
+import { n as analytics } from "./analytics-D21z3E5l.js";
 import fs from "fs";
 import path from "path";
 import fg from "fast-glob";
@@ -239,4 +239,4 @@ function readFileHead(filePath, bytes) {
 //#endregion
 export { safeReadFile as a, readProjectFile as i, boundedGlob as n, walkProjectFiles as o, readFileHead as r, IGNORED_DIRS as t };
 
-//# sourceMappingURL=bounded-fs-CC_NDtoP.js.map
+//# sourceMappingURL=bounded-fs-CAsuF6al.js.map

package/dist/{bounded-fs-CC_NDtoP.js.map → bounded-fs-CAsuF6al.js.map}

@@ -1 +1 @@
-{"version":3,"file":"bounded-fs-CC_NDtoP.js","names":[],"sources":["../src/shared/utils/bounded-fs.ts"],"sourcesContent":["/**\n * Bounded filesystem primitives for scanning USER project trees. Every\n * detection-time glob, walk, and project-file read goes through here so the\n * worst case is a constant, never a function of the user's repo.\n */\nimport path from 'path';\nimport fs from 'fs';\nimport type { Dirent } from 'fs';\nimport fg from 'fast-glob';\nimport { analytics } from './analytics';\nimport { logToFile } from './debug';\nimport type { WizardRunOptions } from './types';\n\n/**\n * Errno codes that are expected while walking an arbitrary tree and mean\n * \"skip this entry\", not \"something is broken\". Scanning from a broad dir\n * (e.g. `~`) routinely hits OS-protected paths (macOS `Library/Group\n * Containers/group.com.apple.*`) that throw EPERM/EACCES per entry — capturing\n * each as an exception buried real errors under thousands of noise events.\n */\nconst BENIGN_FS_ERROR_CODES = new Set<string>([\n  'EACCES', // permission denied\n  'EPERM', // operation not permitted (macOS-protected dirs)\n  'ENOENT', // entry vanished mid-walk\n  'ENOTDIR', // path component isn't a directory\n  'ELOOP', // symlink loop\n  'ENAMETOOLONG', // path too long\n  'EMFILE', // too many open files (environmental, not a wizard bug)\n  'ENFILE',\n]);\n\n/**\n * Report a swallowed filesystem error. Traversal stays best-effort — the caller\n * still skips the failing entry. Expected errno codes (permission denied, entry\n * vanished, symlink loops…) are logged to the debug file only; anything else is\n * genuinely unexpected and gets captured to error tracking. Preserves the\n * original Error (and its `code`, e.g. EACCES / ENOENT) when available.\n */\nfunction reportFsError(step: string, filePath: string, error: unknown): void {\n  const code = (error as NodeJS.ErrnoException | null)?.code;\n  if (code && BENIGN_FS_ERROR_CODES.has(code)) {\n    logToFile(`[bounded-fs] skipped ${step} (${code}): ${filePath}`);\n    return;\n  }\n  analytics.captureException(\n    error instanceof Error ? error : new Error(String(error)),\n    { step, path: filePath },\n  );\n}\n\nexport function getDotGitignore({\n  installDir,\n}: Pick<WizardRunOptions, 'installDir'>) {\n  const gitignorePath = path.join(installDir, '.gitignore');\n  const gitignoreExists = fs.existsSync(gitignorePath);\n\n  if (gitignoreExists) {\n    return gitignorePath;\n  }\n\n  return undefined;\n}\n\n/**\n * Directory names to skip when scanning a project tree — dependency\n * directories, build output, virtual environments, vendored trees.\n * Used verbatim by walkProjectFiles and as glob patterns by boundedGlob.\n */\nexport const IGNORED_DIRS = new Set<string>([\n  'node_modules',\n  '.git',\n  '.next',\n  '.nuxt',\n  '.svelte-kit',\n  '.turbo',\n  '.cache',\n  '.parcel-cache',\n  'dist',\n  'build',\n  'out',\n  'coverage',\n  '.coverage',\n  'venv',\n  '.venv',\n  '__pycache__',\n  '.pytest_cache',\n  'vendor',\n  'target',\n  '.gradle',\n  '.idea',\n  '.vscode',\n  'site-packages',\n  'DerivedData',\n  'Pods',\n]);\n\n/** IGNORED_DIRS as fast-glob ignore patterns. */\nexport const PROJECT_IGNORE_GLOBS: readonly string[] = [...IGNORED_DIRS].map(\n  (dir) => `**/${dir}/**`,\n);\n\n// Files larger than this are skipped, never materialized.\nexport const MAX_PROJECT_FILE_BYTES = 2 * 1024 * 1024;\n\n// A glob returns at most this many entries.\nexport const MAX_GLOB_MATCHES = 500;\n\n// A glob's traversal is destroyed after this long, even when abandoned.\nexport const GLOB_DEADLINE_MS = 8_000;\n\n// A directory contributes at most this many entries to a walk.\nexport const MAX_DIR_ENTRIES = 10_000;\n\n// A walk fires at most this many onFile callbacks.\nexport const MAX_WALK_FILES = 100_000;\n\nexport interface BoundedGlobOptions {\n  cwd: string;\n  /** Appended to PROJECT_IGNORE_GLOBS. */\n  extraIgnore?: readonly string[];\n  /** Stop after this many matches. Defaults to MAX_GLOB_MATCHES. */\n  limit?: number;\n  /** Match dotfiles. Traversal of dot-DIRECTORIES stays blocked by the ignore set. */\n  dot?: boolean;\n  /** fast-glob `deep` — maximum directory depth. */\n  deep?: number;\n}\n\n/**\n * Streams matches, stops at `limit`, destroys the crawl at GLOB_DEADLINE_MS.\n * Returns paths relative to `cwd`, possibly truncated.\n */\nexport async function boundedGlob(\n  patterns: string | string[],\n  options: BoundedGlobOptions,\n): Promise<string[]> {\n  const limit = options.limit ?? MAX_GLOB_MATCHES;\n  const stream = fg.stream(patterns, {\n    cwd: options.cwd,\n    dot: options.dot ?? false,\n    onlyFiles: true,\n    deep: options.deep,\n    ignore: [...PROJECT_IGNORE_GLOBS, ...(options.extraIgnore ?? [])],\n    suppressErrors: true,\n    followSymbolicLinks: false,\n  }) as NodeJS.ReadableStream & { destroy(): void };\n\n  const matches: string[] = [];\n  return new Promise((resolve) => {\n    let settled = false;\n    const finish = (): void => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      resolve(matches);\n    };\n    const timer = setTimeout(() => {\n      stream.destroy();\n      finish();\n    }, GLOB_DEADLINE_MS);\n    stream.on('data', (entry: string | Buffer) => {\n      matches.push(String(entry));\n      if (matches.length >= limit) {\n        stream.destroy();\n        finish();\n      }\n    });\n    stream.once('error', finish);\n    stream.once('end', finish);\n    stream.once('close', finish);\n  });\n}\n\n/**\n * Walk a project tree, invoking `onFile(name, fullPath)` for every regular\n * file — including dotfiles like `.env` (the caller decides what it cares\n * about). Skips `IGNORED_DIRS` and hidden directories, follows symlinked\n * directories with realpath-based loop protection, descends at most\n * `maxDepth` levels below `rootDir`, and stops at the per-directory and\n * whole-walk caps. Filesystem errors are reported and skipped (best-effort).\n */\nexport function walkProjectFiles(\n  rootDir: string,\n  onFile: (name: string, fullPath: string) => void,\n  maxDepth = 3,\n): void {\n  const visited = new Set<string>();\n  let filesSeen = 0;\n  // Explicit stack — no call-stack recursion.\n  const stack: Array<{ dir: string; depth: number }> = [\n    { dir: rootDir, depth: 0 },\n  ];\n\n  while (stack.length > 0 && filesSeen < MAX_WALK_FILES) {\n    const { dir, depth } = stack.pop()!;\n\n    // realpath both resolves symlinked dirs and gives us a stable key to\n    // detect loops (symlink cycles, e.g. a -> ../a).\n    let realDir: string;\n    try {\n      realDir = fs.realpathSync(dir);\n    } catch (error) {\n      reportFsError('walkProjectFiles.realpath', dir, error);\n      continue;\n    }\n    if (visited.has(realDir)) continue;\n    visited.add(realDir);\n\n    let handle: fs.Dir;\n    try {\n      handle = fs.opendirSync(dir);\n    } catch (error) {\n      reportFsError('walkProjectFiles.opendir', dir, error);\n      continue;\n    }\n    try {\n      let entriesRead = 0;\n      let entry: Dirent | null;\n      while ((entry = handle.readSync()) !== null) {\n        if (++entriesRead > MAX_DIR_ENTRIES || filesSeen >= MAX_WALK_FILES) {\n          logToFile(\n            `[bounded-fs] walk capped in ${dir} (entries=${entriesRead}, files=${filesSeen})`,\n          );\n          break;\n        }\n        if (IGNORED_DIRS.has(entry.name)) continue;\n\n        const fullPath = path.join(dir, entry.name);\n\n        // Symlinks report isDirectory()/isFile() as false under withFileTypes,\n        // so resolve the target before deciding how to handle the entry.\n        let isDir = entry.isDirectory();\n        let isFile = entry.isFile();\n        if (entry.isSymbolicLink()) {\n          try {\n            const st = fs.statSync(fullPath);\n            isDir = st.isDirectory();\n            isFile = st.isFile();\n          } catch (error) {\n            reportFsError('walkProjectFiles.stat', fullPath, error);\n            continue;\n          }\n        }\n\n        if (isDir) {\n          if (entry.name.startsWith('.')) continue; // skip hidden directories\n          if (depth < maxDepth) stack.push({ dir: fullPath, depth: depth + 1 });\n        } else if (isFile) {\n          filesSeen += 1;\n          onFile(entry.name, fullPath);\n        }\n      }\n    } finally {\n      try {\n        handle.closeSync();\n      } catch {\n        /* already closed */\n      }\n    }\n  }\n}\n\n/**\n * Read a project file as UTF-8, or null when missing, unreadable, or over\n * `maxBytes` (stat-gated: an oversized file is never materialized).\n */\nexport function readProjectFile(\n  filePath: string,\n  maxBytes = MAX_PROJECT_FILE_BYTES,\n): string | null {\n  try {\n    if (fs.statSync(filePath).size > maxBytes) return null;\n    return fs.readFileSync(filePath, 'utf-8');\n  } catch {\n    return null;\n  }\n}\n\n/**\n * `readProjectFile` that also reports unexpected errors to error tracking.\n * For walk callbacks where a failing read is worth a telemetry breadcrumb.\n */\nexport function safeReadFile(fullPath: string): string | null {\n  try {\n    if (fs.statSync(fullPath).size > MAX_PROJECT_FILE_BYTES) {\n      logToFile(`[bounded-fs] skipped oversized file: ${fullPath}`);\n      return null;\n    }\n    return fs.readFileSync(fullPath, 'utf-8');\n  } catch (error) {\n    reportFsError('safeReadFile', fullPath, error);\n    return null;\n  }\n}\n\n/**\n * The first `bytes` of a file without materializing the rest.\n */\nexport function readFileHead(filePath: string, bytes: number): string | null {\n  try {\n    const fd = fs.openSync(filePath, 'r');\n    try {\n      const buffer = Buffer.alloc(bytes);\n      const read = fs.readSync(fd, buffer, 0, bytes, 0);\n      return buffer.toString('utf-8', 0, read);\n    } finally {\n      fs.closeSync(fd);\n    }\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAoBA,MAAM,wBAAwB,IAAI,IAAY;CAC5C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;;;;;;;;AASF,SAAS,cAAc,MAAc,UAAkB,OAAsB;CAC3E,MAAM,OAAQ,OAAwC;AACtD,KAAI,QAAQ,sBAAsB,IAAI,KAAK,EAAE;AAC3C,YAAU,wBAAwB,KAAK,IAAI,KAAK,KAAK,WAAW;AAChE;;AAEF,WAAU,iBACR,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC,EACzD;EAAE;EAAM,MAAM;EAAU,CACzB;;;;;;;AAqBH,MAAa,eAAe,IAAI,IAAY;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;;AAGF,MAAa,uBAA0C,CAAC,GAAG,aAAa,CAAC,KACtE,QAAQ,MAAM,IAAI,KACpB;AAGD,MAAa,yBAAyB,IAAI,OAAO;AAMjD,MAAa,mBAAmB;;;;;AAwBhC,eAAsB,YACpB,UACA,SACmB;CACnB,MAAM,QAAQ,QAAQ,SAAA;CACtB,MAAM,SAAS,GAAG,OAAO,UAAU;EACjC,KAAK,QAAQ;EACb,KAAK,QAAQ,OAAO;EACpB,WAAW;EACX,MAAM,QAAQ;EACd,QAAQ,CAAC,GAAG,sBAAsB,GAAI,QAAQ,eAAe,EAAE,CAAE;EACjE,gBAAgB;EAChB,qBAAqB;EACtB,CAAC;CAEF,MAAM,UAAoB,EAAE;AAC5B,QAAO,IAAI,SAAS,YAAY;EAC9B,IAAI,UAAU;EACd,MAAM,eAAqB;AACzB,OAAI,QAAS;AACb,aAAU;AACV,gBAAa,MAAM;AACnB,WAAQ,QAAQ;;EAElB,MAAM,QAAQ,iBAAiB;AAC7B,UAAO,SAAS;AAChB,WAAQ;KACP,iBAAiB;AACpB,SAAO,GAAG,SAAS,UAA2B;AAC5C,WAAQ,KAAK,OAAO,MAAM,CAAC;AAC3B,OAAI,QAAQ,UAAU,OAAO;AAC3B,WAAO,SAAS;AAChB,YAAQ;;IAEV;AACF,SAAO,KAAK,SAAS,OAAO;AAC5B,SAAO,KAAK,OAAO,OAAO;AAC1B,SAAO,KAAK,SAAS,OAAO;GAC5B;;;;;;;;;;AAWJ,SAAgB,iBACd,SACA,QACA,WAAW,GACL;CACN,MAAM,0BAAU,IAAI,KAAa;CACjC,IAAI,YAAY;CAEhB,MAAM,QAA+C,CACnD;EAAE,KAAK;EAAS,OAAO;EAAG,CAC3B;AAED,QAAO,MAAM,SAAS,KAAK,YAAA,KAA4B;EACrD,MAAM,EAAE,KAAK,UAAU,MAAM,KAAK;EAIlC,IAAI;AACJ,MAAI;AACF,aAAU,GAAG,aAAa,IAAI;WACvB,OAAO;AACd,iBAAc,6BAA6B,KAAK,MAAM;AACtD;;AAEF,MAAI,QAAQ,IAAI,QAAQ,CAAE;AAC1B,UAAQ,IAAI,QAAQ;EAEpB,IAAI;AACJ,MAAI;AACF,YAAS,GAAG,YAAY,IAAI;WACrB,OAAO;AACd,iBAAc,4BAA4B,KAAK,MAAM;AACrD;;AAEF,MAAI;GACF,IAAI,cAAc;GAClB,IAAI;AACJ,WAAQ,QAAQ,OAAO,UAAU,MAAM,MAAM;AAC3C,QAAI,EAAE,cAAA,OAAiC,aAAA,KAA6B;AAClE,eACE,+BAA+B,IAAI,YAAY,YAAY,UAAU,UAAU,GAChF;AACD;;AAEF,QAAI,aAAa,IAAI,MAAM,KAAK,CAAE;IAElC,MAAM,WAAW,KAAK,KAAK,KAAK,MAAM,KAAK;IAI3C,IAAI,QAAQ,MAAM,aAAa;IAC/B,IAAI,SAAS,MAAM,QAAQ;AAC3B,QAAI,MAAM,gBAAgB,CACxB,KAAI;KACF,MAAM,KAAK,GAAG,SAAS,SAAS;AAChC,aAAQ,GAAG,aAAa;AACxB,cAAS,GAAG,QAAQ;aACb,OAAO;AACd,mBAAc,yBAAyB,UAAU,MAAM;AACvD;;AAIJ,QAAI,OAAO;AACT,SAAI,MAAM,KAAK,WAAW,IAAI,CAAE;AAChC,SAAI,QAAQ,SAAU,OAAM,KAAK;MAAE,KAAK;MAAU,OAAO,QAAQ;MAAG,CAAC;eAC5D,QAAQ;AACjB,kBAAa;AACb,YAAO,MAAM,MAAM,SAAS;;;YAGxB;AACR,OAAI;AACF,WAAO,WAAW;WACZ;;;;;;;;AAWd,SAAgB,gBACd,UACA,WAAW,wBACI;AACf,KAAI;AACF,MAAI,GAAG,SAAS,SAAS,CAAC,OAAO,SAAU,QAAO;AAClD,SAAO,GAAG,aAAa,UAAU,QAAQ;SACnC;AACN,SAAO;;;;;;;AAQX,SAAgB,aAAa,UAAiC;AAC5D,KAAI;AACF,MAAI,GAAG,SAAS,SAAS,CAAC,OAAA,SAA+B;AACvD,aAAU,wCAAwC,WAAW;AAC7D,UAAO;;AAET,SAAO,GAAG,aAAa,UAAU,QAAQ;UAClC,OAAO;AACd,gBAAc,gBAAgB,UAAU,MAAM;AAC9C,SAAO;;;;;;AAOX,SAAgB,aAAa,UAAkB,OAA8B;AAC3E,KAAI;EACF,MAAM,KAAK,GAAG,SAAS,UAAU,IAAI;AACrC,MAAI;GACF,MAAM,SAAS,OAAO,MAAM,MAAM;GAClC,MAAM,OAAO,GAAG,SAAS,IAAI,QAAQ,GAAG,OAAO,EAAE;AACjD,UAAO,OAAO,SAAS,SAAS,GAAG,KAAK;YAChC;AACR,MAAG,UAAU,GAAG;;SAEZ;AACN,SAAO"}
+{"version":3,"file":"bounded-fs-CAsuF6al.js","names":[],"sources":["../src/shared/utils/bounded-fs.ts"],"sourcesContent":["/**\n * Bounded filesystem primitives for scanning USER project trees. Every\n * detection-time glob, walk, and project-file read goes through here so the\n * worst case is a constant, never a function of the user's repo.\n */\nimport path from 'path';\nimport fs from 'fs';\nimport type { Dirent } from 'fs';\nimport fg from 'fast-glob';\nimport { analytics } from './analytics';\nimport { logToFile } from './debug';\nimport type { WizardRunOptions } from './types';\n\n/**\n * Errno codes that are expected while walking an arbitrary tree and mean\n * \"skip this entry\", not \"something is broken\". Scanning from a broad dir\n * (e.g. `~`) routinely hits OS-protected paths (macOS `Library/Group\n * Containers/group.com.apple.*`) that throw EPERM/EACCES per entry — capturing\n * each as an exception buried real errors under thousands of noise events.\n */\nconst BENIGN_FS_ERROR_CODES = new Set<string>([\n  'EACCES', // permission denied\n  'EPERM', // operation not permitted (macOS-protected dirs)\n  'ENOENT', // entry vanished mid-walk\n  'ENOTDIR', // path component isn't a directory\n  'ELOOP', // symlink loop\n  'ENAMETOOLONG', // path too long\n  'EMFILE', // too many open files (environmental, not a wizard bug)\n  'ENFILE',\n]);\n\n/**\n * Report a swallowed filesystem error. Traversal stays best-effort — the caller\n * still skips the failing entry. Expected errno codes (permission denied, entry\n * vanished, symlink loops…) are logged to the debug file only; anything else is\n * genuinely unexpected and gets captured to error tracking. Preserves the\n * original Error (and its `code`, e.g. EACCES / ENOENT) when available.\n */\nfunction reportFsError(step: string, filePath: string, error: unknown): void {\n  const code = (error as NodeJS.ErrnoException | null)?.code;\n  if (code && BENIGN_FS_ERROR_CODES.has(code)) {\n    logToFile(`[bounded-fs] skipped ${step} (${code}): ${filePath}`);\n    return;\n  }\n  analytics.captureException(\n    error instanceof Error ? error : new Error(String(error)),\n    { step, path: filePath },\n  );\n}\n\nexport function getDotGitignore({\n  installDir,\n}: Pick<WizardRunOptions, 'installDir'>) {\n  const gitignorePath = path.join(installDir, '.gitignore');\n  const gitignoreExists = fs.existsSync(gitignorePath);\n\n  if (gitignoreExists) {\n    return gitignorePath;\n  }\n\n  return undefined;\n}\n\n/**\n * Directory names to skip when scanning a project tree — dependency\n * directories, build output, virtual environments, vendored trees.\n * Used verbatim by walkProjectFiles and as glob patterns by boundedGlob.\n */\nexport const IGNORED_DIRS = new Set<string>([\n  'node_modules',\n  '.git',\n  '.next',\n  '.nuxt',\n  '.svelte-kit',\n  '.turbo',\n  '.cache',\n  '.parcel-cache',\n  'dist',\n  'build',\n  'out',\n  'coverage',\n  '.coverage',\n  'venv',\n  '.venv',\n  '__pycache__',\n  '.pytest_cache',\n  'vendor',\n  'target',\n  '.gradle',\n  '.idea',\n  '.vscode',\n  'site-packages',\n  'DerivedData',\n  'Pods',\n]);\n\n/** IGNORED_DIRS as fast-glob ignore patterns. */\nexport const PROJECT_IGNORE_GLOBS: readonly string[] = [...IGNORED_DIRS].map(\n  (dir) => `**/${dir}/**`,\n);\n\n// Files larger than this are skipped, never materialized.\nexport const MAX_PROJECT_FILE_BYTES = 2 * 1024 * 1024;\n\n// A glob returns at most this many entries.\nexport const MAX_GLOB_MATCHES = 500;\n\n// A glob's traversal is destroyed after this long, even when abandoned.\nexport const GLOB_DEADLINE_MS = 8_000;\n\n// A directory contributes at most this many entries to a walk.\nexport const MAX_DIR_ENTRIES = 10_000;\n\n// A walk fires at most this many onFile callbacks.\nexport const MAX_WALK_FILES = 100_000;\n\nexport interface BoundedGlobOptions {\n  cwd: string;\n  /** Appended to PROJECT_IGNORE_GLOBS. */\n  extraIgnore?: readonly string[];\n  /** Stop after this many matches. Defaults to MAX_GLOB_MATCHES. */\n  limit?: number;\n  /** Match dotfiles. Traversal of dot-DIRECTORIES stays blocked by the ignore set. */\n  dot?: boolean;\n  /** fast-glob `deep` — maximum directory depth. */\n  deep?: number;\n}\n\n/**\n * Streams matches, stops at `limit`, destroys the crawl at GLOB_DEADLINE_MS.\n * Returns paths relative to `cwd`, possibly truncated.\n */\nexport async function boundedGlob(\n  patterns: string | string[],\n  options: BoundedGlobOptions,\n): Promise<string[]> {\n  const limit = options.limit ?? MAX_GLOB_MATCHES;\n  const stream = fg.stream(patterns, {\n    cwd: options.cwd,\n    dot: options.dot ?? false,\n    onlyFiles: true,\n    deep: options.deep,\n    ignore: [...PROJECT_IGNORE_GLOBS, ...(options.extraIgnore ?? [])],\n    suppressErrors: true,\n    followSymbolicLinks: false,\n  }) as NodeJS.ReadableStream & { destroy(): void };\n\n  const matches: string[] = [];\n  return new Promise((resolve) => {\n    let settled = false;\n    const finish = (): void => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      resolve(matches);\n    };\n    const timer = setTimeout(() => {\n      stream.destroy();\n      finish();\n    }, GLOB_DEADLINE_MS);\n    stream.on('data', (entry: string | Buffer) => {\n      matches.push(String(entry));\n      if (matches.length >= limit) {\n        stream.destroy();\n        finish();\n      }\n    });\n    stream.once('error', finish);\n    stream.once('end', finish);\n    stream.once('close', finish);\n  });\n}\n\n/**\n * Walk a project tree, invoking `onFile(name, fullPath)` for every regular\n * file — including dotfiles like `.env` (the caller decides what it cares\n * about). Skips `IGNORED_DIRS` and hidden directories, follows symlinked\n * directories with realpath-based loop protection, descends at most\n * `maxDepth` levels below `rootDir`, and stops at the per-directory and\n * whole-walk caps. Filesystem errors are reported and skipped (best-effort).\n */\nexport function walkProjectFiles(\n  rootDir: string,\n  onFile: (name: string, fullPath: string) => void,\n  maxDepth = 3,\n): void {\n  const visited = new Set<string>();\n  let filesSeen = 0;\n  // Explicit stack — no call-stack recursion.\n  const stack: Array<{ dir: string; depth: number }> = [\n    { dir: rootDir, depth: 0 },\n  ];\n\n  while (stack.length > 0 && filesSeen < MAX_WALK_FILES) {\n    const { dir, depth } = stack.pop()!;\n\n    // realpath both resolves symlinked dirs and gives us a stable key to\n    // detect loops (symlink cycles, e.g. a -> ../a).\n    let realDir: string;\n    try {\n      realDir = fs.realpathSync(dir);\n    } catch (error) {\n      reportFsError('walkProjectFiles.realpath', dir, error);\n      continue;\n    }\n    if (visited.has(realDir)) continue;\n    visited.add(realDir);\n\n    let handle: fs.Dir;\n    try {\n      handle = fs.opendirSync(dir);\n    } catch (error) {\n      reportFsError('walkProjectFiles.opendir', dir, error);\n      continue;\n    }\n    try {\n      let entriesRead = 0;\n      let entry: Dirent | null;\n      while ((entry = handle.readSync()) !== null) {\n        if (++entriesRead > MAX_DIR_ENTRIES || filesSeen >= MAX_WALK_FILES) {\n          logToFile(\n            `[bounded-fs] walk capped in ${dir} (entries=${entriesRead}, files=${filesSeen})`,\n          );\n          break;\n        }\n        if (IGNORED_DIRS.has(entry.name)) continue;\n\n        const fullPath = path.join(dir, entry.name);\n\n        // Symlinks report isDirectory()/isFile() as false under withFileTypes,\n        // so resolve the target before deciding how to handle the entry.\n        let isDir = entry.isDirectory();\n        let isFile = entry.isFile();\n        if (entry.isSymbolicLink()) {\n          try {\n            const st = fs.statSync(fullPath);\n            isDir = st.isDirectory();\n            isFile = st.isFile();\n          } catch (error) {\n            reportFsError('walkProjectFiles.stat', fullPath, error);\n            continue;\n          }\n        }\n\n        if (isDir) {\n          if (entry.name.startsWith('.')) continue; // skip hidden directories\n          if (depth < maxDepth) stack.push({ dir: fullPath, depth: depth + 1 });\n        } else if (isFile) {\n          filesSeen += 1;\n          onFile(entry.name, fullPath);\n        }\n      }\n    } finally {\n      try {\n        handle.closeSync();\n      } catch {\n        /* already closed */\n      }\n    }\n  }\n}\n\n/**\n * Read a project file as UTF-8, or null when missing, unreadable, or over\n * `maxBytes` (stat-gated: an oversized file is never materialized).\n */\nexport function readProjectFile(\n  filePath: string,\n  maxBytes = MAX_PROJECT_FILE_BYTES,\n): string | null {\n  try {\n    if (fs.statSync(filePath).size > maxBytes) return null;\n    return fs.readFileSync(filePath, 'utf-8');\n  } catch {\n    return null;\n  }\n}\n\n/**\n * `readProjectFile` that also reports unexpected errors to error tracking.\n * For walk callbacks where a failing read is worth a telemetry breadcrumb.\n */\nexport function safeReadFile(fullPath: string): string | null {\n  try {\n    if (fs.statSync(fullPath).size > MAX_PROJECT_FILE_BYTES) {\n      logToFile(`[bounded-fs] skipped oversized file: ${fullPath}`);\n      return null;\n    }\n    return fs.readFileSync(fullPath, 'utf-8');\n  } catch (error) {\n    reportFsError('safeReadFile', fullPath, error);\n    return null;\n  }\n}\n\n/**\n * The first `bytes` of a file without materializing the rest.\n */\nexport function readFileHead(filePath: string, bytes: number): string | null {\n  try {\n    const fd = fs.openSync(filePath, 'r');\n    try {\n      const buffer = Buffer.alloc(bytes);\n      const read = fs.readSync(fd, buffer, 0, bytes, 0);\n      return buffer.toString('utf-8', 0, read);\n    } finally {\n      fs.closeSync(fd);\n    }\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAoBA,MAAM,wBAAwB,IAAI,IAAY;CAC5C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;;;;;;;;AASF,SAAS,cAAc,MAAc,UAAkB,OAAsB;CAC3E,MAAM,OAAQ,OAAwC;AACtD,KAAI,QAAQ,sBAAsB,IAAI,KAAK,EAAE;AAC3C,YAAU,wBAAwB,KAAK,IAAI,KAAK,KAAK,WAAW;AAChE;;AAEF,WAAU,iBACR,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC,EACzD;EAAE;EAAM,MAAM;EAAU,CACzB;;;;;;;AAqBH,MAAa,eAAe,IAAI,IAAY;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;;AAGF,MAAa,uBAA0C,CAAC,GAAG,aAAa,CAAC,KACtE,QAAQ,MAAM,IAAI,KACpB;AAGD,MAAa,yBAAyB,IAAI,OAAO;AAMjD,MAAa,mBAAmB;;;;;AAwBhC,eAAsB,YACpB,UACA,SACmB;CACnB,MAAM,QAAQ,QAAQ,SAAA;CACtB,MAAM,SAAS,GAAG,OAAO,UAAU;EACjC,KAAK,QAAQ;EACb,KAAK,QAAQ,OAAO;EACpB,WAAW;EACX,MAAM,QAAQ;EACd,QAAQ,CAAC,GAAG,sBAAsB,GAAI,QAAQ,eAAe,EAAE,CAAE;EACjE,gBAAgB;EAChB,qBAAqB;EACtB,CAAC;CAEF,MAAM,UAAoB,EAAE;AAC5B,QAAO,IAAI,SAAS,YAAY;EAC9B,IAAI,UAAU;EACd,MAAM,eAAqB;AACzB,OAAI,QAAS;AACb,aAAU;AACV,gBAAa,MAAM;AACnB,WAAQ,QAAQ;;EAElB,MAAM,QAAQ,iBAAiB;AAC7B,UAAO,SAAS;AAChB,WAAQ;KACP,iBAAiB;AACpB,SAAO,GAAG,SAAS,UAA2B;AAC5C,WAAQ,KAAK,OAAO,MAAM,CAAC;AAC3B,OAAI,QAAQ,UAAU,OAAO;AAC3B,WAAO,SAAS;AAChB,YAAQ;;IAEV;AACF,SAAO,KAAK,SAAS,OAAO;AAC5B,SAAO,KAAK,OAAO,OAAO;AAC1B,SAAO,KAAK,SAAS,OAAO;GAC5B;;;;;;;;;;AAWJ,SAAgB,iBACd,SACA,QACA,WAAW,GACL;CACN,MAAM,0BAAU,IAAI,KAAa;CACjC,IAAI,YAAY;CAEhB,MAAM,QAA+C,CACnD;EAAE,KAAK;EAAS,OAAO;EAAG,CAC3B;AAED,QAAO,MAAM,SAAS,KAAK,YAAA,KAA4B;EACrD,MAAM,EAAE,KAAK,UAAU,MAAM,KAAK;EAIlC,IAAI;AACJ,MAAI;AACF,aAAU,GAAG,aAAa,IAAI;WACvB,OAAO;AACd,iBAAc,6BAA6B,KAAK,MAAM;AACtD;;AAEF,MAAI,QAAQ,IAAI,QAAQ,CAAE;AAC1B,UAAQ,IAAI,QAAQ;EAEpB,IAAI;AACJ,MAAI;AACF,YAAS,GAAG,YAAY,IAAI;WACrB,OAAO;AACd,iBAAc,4BAA4B,KAAK,MAAM;AACrD;;AAEF,MAAI;GACF,IAAI,cAAc;GAClB,IAAI;AACJ,WAAQ,QAAQ,OAAO,UAAU,MAAM,MAAM;AAC3C,QAAI,EAAE,cAAA,OAAiC,aAAA,KAA6B;AAClE,eACE,+BAA+B,IAAI,YAAY,YAAY,UAAU,UAAU,GAChF;AACD;;AAEF,QAAI,aAAa,IAAI,MAAM,KAAK,CAAE;IAElC,MAAM,WAAW,KAAK,KAAK,KAAK,MAAM,KAAK;IAI3C,IAAI,QAAQ,MAAM,aAAa;IAC/B,IAAI,SAAS,MAAM,QAAQ;AAC3B,QAAI,MAAM,gBAAgB,CACxB,KAAI;KACF,MAAM,KAAK,GAAG,SAAS,SAAS;AAChC,aAAQ,GAAG,aAAa;AACxB,cAAS,GAAG,QAAQ;aACb,OAAO;AACd,mBAAc,yBAAyB,UAAU,MAAM;AACvD;;AAIJ,QAAI,OAAO;AACT,SAAI,MAAM,KAAK,WAAW,IAAI,CAAE;AAChC,SAAI,QAAQ,SAAU,OAAM,KAAK;MAAE,KAAK;MAAU,OAAO,QAAQ;MAAG,CAAC;eAC5D,QAAQ;AACjB,kBAAa;AACb,YAAO,MAAM,MAAM,SAAS;;;YAGxB;AACR,OAAI;AACF,WAAO,WAAW;WACZ;;;;;;;;AAWd,SAAgB,gBACd,UACA,WAAW,wBACI;AACf,KAAI;AACF,MAAI,GAAG,SAAS,SAAS,CAAC,OAAO,SAAU,QAAO;AAClD,SAAO,GAAG,aAAa,UAAU,QAAQ;SACnC;AACN,SAAO;;;;;;;AAQX,SAAgB,aAAa,UAAiC;AAC5D,KAAI;AACF,MAAI,GAAG,SAAS,SAAS,CAAC,OAAA,SAA+B;AACvD,aAAU,wCAAwC,WAAW;AAC7D,UAAO;;AAET,SAAO,GAAG,aAAa,UAAU,QAAQ;UAClC,OAAO;AACd,gBAAc,gBAAgB,UAAU,MAAM;AAC9C,SAAO;;;;;;AAOX,SAAgB,aAAa,UAAkB,OAA8B;AAC3E,KAAI;EACF,MAAM,KAAK,GAAG,SAAS,UAAU,IAAI;AACrC,MAAI;GACF,MAAM,SAAS,OAAO,MAAM,MAAM;GAClC,MAAM,OAAO,GAAG,SAAS,IAAI,QAAQ,GAAG,OAAO,EAAE;AACjD,UAAO,OAAO,SAAS,SAAS,GAAG,KAAK;YAChC;AACR,MAAG,UAAU,GAAG;;SAEZ;AACN,SAAO"}

package/dist/{ci-install-DfcAMhlu.js → ci-install-CEYE02t-.js}

@@ -1,10 +1,9 @@
-import { n as ErrorCodes, t as emitWizardError } from "./emit-BSetXzDV.js";
-import "./errors-C2domSkK.js";
-import { t as LoggingUI } from "./logging-ui-p6XKVmTx.js";
-import { n as setUI, t as getUI } from "./ui-tPNpM6vj.js";
-import { n as provisionNewAccount } from "./provisioning-CLhuKqXH.js";
-import { X as posthogIntegrationConfig } from "./mint-failure-C0HyvEwO.js";
-import { n as runWizardCI, r as API_KEY_HINT, t as runWizardHeadless } from "./runners-D1PqqpjA.js";
+import { n as ErrorCodes, t as emitWizardError } from "./emit-RfAewcWv.js";
+import "./errors-CHrJzAZb.js";
+import { n as runWizardCI, r as API_KEY_HINT, t as runWizardHeadless } from "./runners-Dhu4pZTN.js";
+import { t as consoleLog } from "./console-log-O828zyiq.js";
+import { t as config } from "./posthog-integration-bwHwE87a.js";
+import { n as provisionNewAccount } from "./provisioning-JbJtq7hq.js";
 //#region src/cli/commands/basic-integration/ci-install.ts
 /**
 * CI-mode install entry point (`--ci`, dev/test builds). Thin shell over the
@@ -15,7 +14,7 @@ function runCIInstall(argv) {
 }
 /**
 * Headless install entry point (the experimental published-build run path; see
-* @lib/headless-mode). Thin shell over the shared non-interactive install.
+* @shared/headless-mode). Thin shell over the shared non-interactive install.
 * Today it behaves exactly like `runCIInstall`; it is a separate function so
 * headless can diverge later (auth, prompts, …) without touching the CI path.
 */
@@ -43,7 +42,7 @@ function runNonInteractiveInstall(argv, mode) {
 			options.apiKey = provisioned.personalApiKey;
 			if (options.projectId == null) options.projectId = provisioned.projectId;
 		}
-		runWizard(posthogIntegrationConfig, options);
+		runWizard(config, options);
 	})().catch((error) => {
 		emitWizardError({
 			code: ErrorCodes.ArgsSignupProvisionFailed,
@@ -53,9 +52,8 @@ function runNonInteractiveInstall(argv, mode) {
 	});
 }
 function failCI(message, code) {
-	setUI(new LoggingUI());
-	getUI().intro("PostHog Wizard");
-	getUI().log.error(message);
+	consoleLog.intro("PostHog Wizard");
+	consoleLog.log.error(message);
 	if (code) emitWizardError({
 		code,
 		message
@@ -80,9 +78,8 @@ function keyPrefixWarning(apiKey) {
 function warnOnUnexpectedKeyPrefix(apiKey) {
 	const message = keyPrefixWarning(apiKey);
 	if (!message) return;
-	setUI(new LoggingUI());
-	getUI().intro("PostHog Wizard");
-	getUI().log.warn(message);
+	consoleLog.intro("PostHog Wizard");
+	consoleLog.log.warn(message);
 }
 /**
 * Provision a new account and return its credentials. Throws on any failure
@@ -90,26 +87,25 @@ function warnOnUnexpectedKeyPrefix(apiKey) {
 * into a non-zero exit. The return type carries no failure sentinel.
 */
 async function provisionForSignup(options) {
-	setUI(new LoggingUI());
-	getUI().intro("PostHog Wizard");
+	consoleLog.intro("PostHog Wizard");
 	const signupRegion = (options.region || "us").toUpperCase();
-	getUI().log.info(`Provisioning new PostHog account for ${String(options.email)} in ${signupRegion}...`);
+	consoleLog.log.info(`Provisioning new PostHog account for ${String(options.email)} in ${signupRegion}...`);
 	let result;
 	try {
 		result = await provisionNewAccount(options.email, options.name ?? "", signupRegion, { baseUrl: options.baseUrl });
 	} catch (error) {
 		const msg = error instanceof Error ? error.message : String(error);
-		getUI().log.error(`Provisioning failed: ${msg}`);
+		consoleLog.log.error(`Provisioning failed: ${msg}`);
 		throw error;
 	}
 	if (!result.personalApiKey) {
-		getUI().log.error("Provisioning succeeded but no personal API key was returned — cannot continue install.");
+		consoleLog.log.error("Provisioning succeeded but no personal API key was returned — cannot continue install.");
 		throw new Error("provisioning returned no personal API key");
 	}
-	getUI().log.success("Account ready.");
-	getUI().log.info(`  Project API Key:  ${result.projectApiKey}`);
-	getUI().log.info(`  Personal API Key: ${result.personalApiKey}`);
-	getUI().log.info(`  Host:             ${result.host}`);
+	consoleLog.log.success("Account ready.");
+	consoleLog.log.info(`  Project API Key:  ${result.projectApiKey}`);
+	consoleLog.log.info(`  Personal API Key: ${result.personalApiKey}`);
+	consoleLog.log.info(`  Host:             ${result.host}`);
 	return {
 		personalApiKey: result.personalApiKey,
 		projectId: result.projectId
@@ -118,4 +114,4 @@ async function provisionForSignup(options) {
 //#endregion
 export { runCIInstall, runHeadlessInstall };
 
-//# sourceMappingURL=ci-install-DfcAMhlu.js.map
+//# sourceMappingURL=ci-install-CEYE02t-.js.map

package/dist/ci-install-CEYE02t-.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-install-CEYE02t-.js","names":["posthogIntegrationConfig"],"sources":["../src/cli/commands/basic-integration/ci-install.ts"],"sourcesContent":["import type { Arguments } from 'yargs';\nimport { consoleLog } from '@shared/console-log';\nimport { API_KEY_HINT, runWizardCI, runWizardHeadless } from '@cli/runners';\nimport type { NonInteractiveMode } from '@headless';\nimport { provisionNewAccount } from '@utils/provisioning';\nimport { config as posthogIntegrationConfig } from '@programs/posthog-integration';\nimport { ErrorCodes, type ErrorCode } from '@shared/errors';\nimport { emitWizardError } from '@shared/errors';\n\ntype Options = Arguments & {\n  region?: string;\n  baseUrl?: string;\n  installDir?: string;\n  apiKey?: string;\n  signup?: boolean;\n  email?: string;\n  name?: string;\n  projectId?: string;\n};\n\n/**\n * CI-mode install entry point (`--ci`, dev/test builds). Thin shell over the\n * shared non-interactive install — see `runNonInteractiveInstall`.\n */\nexport function runCIInstall(argv: Arguments): void {\n  runNonInteractiveInstall(argv, 'ci');\n}\n\n/**\n * Headless install entry point (the experimental published-build run path; see\n * @shared/headless-mode). Thin shell over the shared non-interactive install.\n * Today it behaves exactly like `runCIInstall`; it is a separate function so\n * headless can diverge later (auth, prompts, …) without touching the CI path.\n */\nexport function runHeadlessInstall(argv: Arguments): void {\n  runNonInteractiveInstall(argv, 'headless');\n}\n\n/**\n * Non-interactive install shared by CI and headless. Validates signup flags,\n * optionally provisions an account, then installs. `mode` only changes\n * user-facing labels and which runner is invoked; the accepted keys and the\n * install itself are identical (see runNonInteractive).\n */\nfunction runNonInteractiveInstall(\n  argv: Arguments,\n  mode: NonInteractiveMode,\n): void {\n  const options = { ...argv } as Options;\n  const headless = mode === 'headless';\n  const label = headless ? 'Headless' : 'CI';\n  const runWizard = headless ? runWizardHeadless : runWizardCI;\n\n  // Base validation (region/install-dir/api-key) is owned by the runner.\n  // This layer only adds the signup branch on top.\n  if (!options.apiKey && !options.signup) {\n    return failCI(\n      `${label} mode requires --api-key (${API_KEY_HINT}). ` +\n        'To create a new account instead, use --signup --email you@example.com.',\n      ErrorCodes.ArgsMissingApiKey,\n    );\n  }\n  if (!options.apiKey && options.signup && !options.email) {\n    return failCI(\n      `${label} --signup requires --email to create a new account.`,\n      ErrorCodes.ArgsMissingEmail,\n    );\n  }\n  warnOnUnexpectedKeyPrefix(options.apiKey);\n\n  void (async () => {\n    if (!options.apiKey && options.signup) {\n      // Fail before the irreversible provisioning step rather than after it.\n      if (!options.installDir) {\n        return failCI(\n          `${label} mode requires --install-dir (directory to install in)`,\n          ErrorCodes.ArgsMissingInstallDir,\n        );\n      }\n      const provisioned = await provisionForSignup(options);\n      options.apiKey = provisioned.personalApiKey;\n      if (options.projectId == null) options.projectId = provisioned.projectId;\n    }\n    runWizard(posthogIntegrationConfig, options);\n  })().catch((error: unknown) => {\n    emitWizardError({\n      code: ErrorCodes.ArgsSignupProvisionFailed,\n      message: error instanceof Error ? error.message : String(error),\n    });\n    process.exit(1);\n  });\n}\n\nfunction failCI(message: string, code?: ErrorCode): void {\n  consoleLog.intro('PostHog Wizard');\n  consoleLog.log.error(message);\n  if (code) emitWizardError({ code, message });\n  process.exit(1);\n}\n\n/**\n * Decide whether to warn about an unexpected `--api-key` prefix, and with what\n * message. Returns `null` when the key is acceptable.\n *\n * CI and headless accept the same two credentials: a personal API key (`phx_`)\n * and a `pha_` OAuth access token minted under the wizard's own OAuth\n * application (cloud runs, and the CI bot). Both authenticate the mint the\n * same way. Anything else is unexpected and warns.\n *\n * Extracted as a pure predicate so it can be unit-tested without a UI.\n */\nexport function keyPrefixWarning(apiKey: string | undefined): string | null {\n  if (!apiKey || apiKey.startsWith('phx_') || apiKey.startsWith('pha_')) {\n    return null;\n  }\n  const hint = apiKey.startsWith('phc_')\n    ? ' (phc_ is a project/client key; expected a personal API key or a wizard-app token)'\n    : '';\n  return `--api-key does not start with \"phx_\" or \"pha_\"${hint}. Continuing anyway, but the LLM Gateway may reject it with a 401.`;\n}\n\nfunction warnOnUnexpectedKeyPrefix(apiKey: string | undefined): void {\n  const message = keyPrefixWarning(apiKey);\n  if (!message) return;\n  consoleLog.intro('PostHog Wizard');\n  consoleLog.log.warn(message);\n}\n\n/**\n * Provision a new account and return its credentials. Throws on any failure\n * (after logging a user-facing message); the caller's `.catch` turns that\n * into a non-zero exit. The return type carries no failure sentinel.\n */\nasync function provisionForSignup(\n  options: Options,\n): Promise<{ personalApiKey: string; projectId: string }> {\n  consoleLog.intro('PostHog Wizard');\n  const signupRegion = ((options.region as string) || 'us').toUpperCase() as\n    | 'US'\n    | 'EU';\n  consoleLog.log.info(\n    `Provisioning new PostHog account for ${String(\n      options.email,\n    )} in ${signupRegion}...`,\n  );\n\n  let result;\n  try {\n    result = await provisionNewAccount(\n      options.email as string,\n      options.name ?? '',\n      signupRegion,\n      { baseUrl: options.baseUrl },\n    );\n  } catch (error) {\n    const msg = error instanceof Error ? error.message : String(error);\n    consoleLog.log.error(`Provisioning failed: ${msg}`);\n    throw error;\n  }\n\n  if (!result.personalApiKey) {\n    consoleLog.log.error(\n      'Provisioning succeeded but no personal API key was returned — cannot continue install.',\n    );\n    throw new Error('provisioning returned no personal API key');\n  }\n\n  consoleLog.log.success('Account ready.');\n  consoleLog.log.info(`  Project API Key:  ${result.projectApiKey}`);\n  consoleLog.log.info(`  Personal API Key: ${result.personalApiKey}`);\n  consoleLog.log.info(`  Host:             ${result.host}`);\n  return {\n    personalApiKey: result.personalApiKey,\n    projectId: result.projectId,\n  };\n}\n"],"mappings":";;;;;;;;;;;AAwBA,SAAgB,aAAa,MAAuB;AAClD,0BAAyB,MAAM,KAAK;;;;;;;;AAStC,SAAgB,mBAAmB,MAAuB;AACxD,0BAAyB,MAAM,WAAW;;;;;;;;AAS5C,SAAS,yBACP,MACA,MACM;CACN,MAAM,UAAU,EAAE,GAAG,MAAM;CAC3B,MAAM,WAAW,SAAS;CAC1B,MAAM,QAAQ,WAAW,aAAa;CACtC,MAAM,YAAY,WAAW,oBAAoB;AAIjD,KAAI,CAAC,QAAQ,UAAU,CAAC,QAAQ,OAC9B,QAAO,OACL,GAAG,MAAM,4BAA4B,aAAa,4EAElD,WAAW,kBACZ;AAEH,KAAI,CAAC,QAAQ,UAAU,QAAQ,UAAU,CAAC,QAAQ,MAChD,QAAO,OACL,GAAG,MAAM,sDACT,WAAW,iBACZ;AAEH,2BAA0B,QAAQ,OAAO;AAEzC,EAAM,YAAY;AAChB,MAAI,CAAC,QAAQ,UAAU,QAAQ,QAAQ;AAErC,OAAI,CAAC,QAAQ,WACX,QAAO,OACL,GAAG,MAAM,yDACT,WAAW,sBACZ;GAEH,MAAM,cAAc,MAAM,mBAAmB,QAAQ;AACrD,WAAQ,SAAS,YAAY;AAC7B,OAAI,QAAQ,aAAa,KAAM,SAAQ,YAAY,YAAY;;AAEjE,YAAUA,QAA0B,QAAQ;KAC1C,CAAC,OAAO,UAAmB;AAC7B,kBAAgB;GACd,MAAM,WAAW;GACjB,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAChE,CAAC;AACF,UAAQ,KAAK,EAAE;GACf;;AAGJ,SAAS,OAAO,SAAiB,MAAwB;AACvD,YAAW,MAAM,iBAAiB;AAClC,YAAW,IAAI,MAAM,QAAQ;AAC7B,KAAI,KAAM,iBAAgB;EAAE;EAAM;EAAS,CAAC;AAC5C,SAAQ,KAAK,EAAE;;;;;;;;;;;;;AAcjB,SAAgB,iBAAiB,QAA2C;AAC1E,KAAI,CAAC,UAAU,OAAO,WAAW,OAAO,IAAI,OAAO,WAAW,OAAO,CACnE,QAAO;AAKT,QAAO,iDAHM,OAAO,WAAW,OAAO,GAClC,uFACA,GACyD;;AAG/D,SAAS,0BAA0B,QAAkC;CACnE,MAAM,UAAU,iBAAiB,OAAO;AACxC,KAAI,CAAC,QAAS;AACd,YAAW,MAAM,iBAAiB;AAClC,YAAW,IAAI,KAAK,QAAQ;;;;;;;AAQ9B,eAAe,mBACb,SACwD;AACxD,YAAW,MAAM,iBAAiB;CAClC,MAAM,gBAAiB,QAAQ,UAAqB,MAAM,aAAa;AAGvE,YAAW,IAAI,KACb,wCAAwC,OACtC,QAAQ,MACT,CAAC,MAAM,aAAa,KACtB;CAED,IAAI;AACJ,KAAI;AACF,WAAS,MAAM,oBACb,QAAQ,OACR,QAAQ,QAAQ,IAChB,cACA,EAAE,SAAS,QAAQ,SAAS,CAC7B;UACM,OAAO;EACd,MAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAClE,aAAW,IAAI,MAAM,wBAAwB,MAAM;AACnD,QAAM;;AAGR,KAAI,CAAC,OAAO,gBAAgB;AAC1B,aAAW,IAAI,MACb,yFACD;AACD,QAAM,IAAI,MAAM,4CAA4C;;AAG9D,YAAW,IAAI,QAAQ,iBAAiB;AACxC,YAAW,IAAI,KAAK,uBAAuB,OAAO,gBAAgB;AAClE,YAAW,IAAI,KAAK,uBAAuB,OAAO,iBAAiB;AACnE,YAAW,IAAI,KAAK,uBAAuB,OAAO,OAAO;AACzD,QAAO;EACL,gBAAgB,OAAO;EACvB,WAAW,OAAO;EACnB"}

package/dist/console-log-O828zyiq.js

@@ -0,0 +1,32 @@
+import { t as emitWizardError } from "./emit-RfAewcWv.js";
+import { n as sanitizeErrorDetail } from "./errors-CHrJzAZb.js";
+//#region src/shared/console-log.ts
+/** Console output with the wizard's glyphs, for commands and runs that print instead of drawing screens. */
+/** The printer every console command and headless's log lines share. */
+const consoleLog = {
+	intro: (message) => console.log(`┌  ${message}`),
+	outro: (message) => console.log(`└  ${message}`),
+	log: {
+		info: (message) => console.log(`│  ${message}`),
+		warn: (message) => console.log(`▲  ${message}`),
+		error: (message) => console.log(`✖  ${message}`),
+		success: (message) => console.log(`✔  ${message}`),
+		step: (message) => console.log(`◇  ${message}`)
+	}
+};
+/** An abort's outro as console lines, then the machine-readable error line when it has a code. Resolves at once. */
+function printAbortOutro(outro, report) {
+	console.log(`✖  ${outro.message ?? "Wizard aborted"}`);
+	if (outro.body) console.log(`│  ${outro.body}`);
+	if (outro.docsUrl) console.log(`│  Docs: ${outro.docsUrl}`);
+	if (report.code) emitWizardError({
+		code: report.code,
+		message: outro.message ?? report.message,
+		detail: sanitizeErrorDetail(outro.errorDetail ?? report.detail)
+	});
+	return Promise.resolve();
+}
+//#endregion
+export { printAbortOutro as n, consoleLog as t };
+
+//# sourceMappingURL=console-log-O828zyiq.js.map

package/dist/console-log-O828zyiq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"console-log-O828zyiq.js","names":[],"sources":["../src/shared/console-log.ts"],"sourcesContent":["/* eslint-disable no-console */\n/** Console output with the wizard's glyphs, for commands and runs that print instead of drawing screens. */\nimport { emitWizardError, sanitizeErrorDetail } from './errors';\nimport type { ErrorCode } from './errors';\nimport type { OutroData } from './outro';\n\n/** Where a console command prints: an intro and outro line, and one line per log call. */\nexport type ConsoleLog = {\n  intro(message: string): void;\n  outro(message: string): void;\n  log: {\n    info(message: string): void;\n    warn(message: string): void;\n    error(message: string): void;\n    success(message: string): void;\n    step(message: string): void;\n  };\n};\n\n/** The printer every console command and headless's log lines share. */\nexport const consoleLog: ConsoleLog = {\n  intro: (message) => console.log(`┌  ${message}`),\n  outro: (message) => console.log(`└  ${message}`),\n  log: {\n    info: (message) => console.log(`│  ${message}`),\n    warn: (message) => console.log(`▲  ${message}`),\n    error: (message) => console.log(`✖  ${message}`),\n    success: (message) => console.log(`✔  ${message}`),\n    step: (message) => console.log(`◇  ${message}`),\n  },\n};\n\n/** An abort's outro as console lines, then the machine-readable error line when it has a code. Resolves at once. */\nexport function printAbortOutro(\n  outro: OutroData,\n  report: {\n    code?: ErrorCode;\n    message: string;\n    detail?: Record<string, unknown>;\n  },\n): Promise<void> {\n  console.log(`✖  ${outro.message ?? 'Wizard aborted'}`);\n  if (outro.body) console.log(`│  ${outro.body}`);\n  if (outro.docsUrl) console.log(`│  Docs: ${outro.docsUrl}`);\n  if (report.code) {\n    emitWizardError({\n      code: report.code,\n      message: outro.message ?? report.message,\n      detail: sanitizeErrorDetail(outro.errorDetail ?? report.detail),\n    });\n  }\n  return Promise.resolve();\n}\n"],"mappings":";;;;;AAoBA,MAAa,aAAyB;CACpC,QAAQ,YAAY,QAAQ,IAAI,MAAM,UAAU;CAChD,QAAQ,YAAY,QAAQ,IAAI,MAAM,UAAU;CAChD,KAAK;EACH,OAAO,YAAY,QAAQ,IAAI,MAAM,UAAU;EAC/C,OAAO,YAAY,QAAQ,IAAI,MAAM,UAAU;EAC/C,QAAQ,YAAY,QAAQ,IAAI,MAAM,UAAU;EAChD,UAAU,YAAY,QAAQ,IAAI,MAAM,UAAU;EAClD,OAAO,YAAY,QAAQ,IAAI,MAAM,UAAU;EAChD;CACF;;AAGD,SAAgB,gBACd,OACA,QAKe;AACf,SAAQ,IAAI,MAAM,MAAM,WAAW,mBAAmB;AACtD,KAAI,MAAM,KAAM,SAAQ,IAAI,MAAM,MAAM,OAAO;AAC/C,KAAI,MAAM,QAAS,SAAQ,IAAI,YAAY,MAAM,UAAU;AAC3D,KAAI,OAAO,KACT,iBAAgB;EACd,MAAM,OAAO;EACb,SAAS,MAAM,WAAW,OAAO;EACjC,QAAQ,oBAAoB,MAAM,eAAe,OAAO,OAAO;EAChE,CAAC;AAEJ,QAAO,QAAQ,SAAS"}