@posthog/wizard 2.9.0 → 2.10.0

package/dist/src/lib/yara-scanner.js

@@ -1,328 +0,0 @@
-"use strict";
-/**
- * YARA content scanner for the PostHog wizard.
- *
- * This file is the single source of truth for all wizard YARA rules.
- *
- * Scans tool inputs (pre-execution) and outputs (post-execution) for
- * security violations including PII leakage, hardcoded secrets,
- * prompt injection, and secret exfiltration.
- *
- * We use YARA-style regex rules rather than the real YARA C library to
- * avoid native binary dependencies in an npx-distributed npm package.
- *
- * This is Layer 2 (L2) in the wizard's defense-in-depth model,
- * complementing the prompt-based commandments (L0) and the
- * canUseTool() allowlist (L1).
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RULES = void 0;
-exports.scan = scan;
-exports.scanSkillDirectory = scanSkillDirectory;
-// ─── Rule Definitions ────────────────────────────────────────────
-//
-// Patterns are compiled once at module load time for performance.
-// Design spec: policies/yara/RULES.md
-const POST_WRITE_EDIT = [
-    { phase: 'PostToolUse', tool: 'Write' },
-    { phase: 'PostToolUse', tool: 'Edit' },
-];
-const POST_READ_GREP = [
-    { phase: 'PostToolUse', tool: 'Read' },
-    { phase: 'PostToolUse', tool: 'Grep' },
-];
-const PRE_BASH = [
-    { phase: 'PreToolUse', tool: 'Bash' },
-];
-// ── §1 PostHog API Violations ────────────────────────────────────
-const pii_in_capture_call = {
-    name: 'pii_in_capture_call',
-    description: "Detects PII fields passed to posthog.capture() — violates 'NEVER send PII in capture()' commandment",
-    severity: 'high',
-    category: 'posthog_pii',
-    appliesTo: POST_WRITE_EDIT,
-    patterns: [
-        // Direct PII field names in capture properties
-        /\.capture\s*\([^)]{0,200}email/i,
-        /\.capture\s*\([^)]{0,200}phone/i,
-        /\.capture\s*\([^)]{0,200}full[_\s]?name/i,
-        /\.capture\s*\([^)]{0,200}first[_\s]?name/i,
-        /\.capture\s*\([^)]{0,200}last[_\s]?name/i,
-        /\.capture\s*\([^)]{0,200}(street|mailing|home|billing)[_\s]?address/i,
-        /\.capture\s*\([^)]{0,200}(ssn|social[_\s]?security)/i,
-        /\.capture\s*\([^)]{0,200}(date[_\s]?of[_\s]?birth|dob|birthday)/i,
-        /\.capture\s*\([^)]{0,200}\$ip/,
-        // identify() allows email/phone/name (standard PostHog user properties),
-        // but highly sensitive PII is still blocked in identify().
-        /\.identify\s*\([^)]{0,200}(ssn|social[_\s]?security)/i,
-        /\.identify\s*\([^)]{0,200}(card[_\s]?number|cvv|credit[_\s]?card)/i,
-        /\.identify\s*\([^)]{0,200}(date[_\s]?of[_\s]?birth|dob|birthday)/i,
-        /\.identify\s*\([^)]{0,200}(street|mailing|home|billing)[_\s]?address/i,
-        // PII in $set properties via capture (bound to same object)
-        /\$set[^}]{0,200}email/i,
-        /\$set[^}]{0,200}phone/i,
-    ],
-};
-const hardcoded_posthog_key = {
-    name: 'hardcoded_posthog_key',
-    description: "Detects hardcoded PostHog API keys in source — violates 'use environment variables' commandment",
-    severity: 'high',
-    category: 'posthog_hardcoded_key',
-    appliesTo: POST_WRITE_EDIT,
-    patterns: [
-        // PostHog project API key (phc_ prefix, 20+ alphanumeric chars)
-        /phc_[a-zA-Z0-9]{20,}/,
-        // PostHog personal API key (phx_ prefix)
-        /phx_[a-zA-Z0-9]{20,}/,
-        // Hardcoded key assignment patterns
-        /apiKey\s*[:=]\s*['"][a-zA-Z0-9_]{20,}['"]/,
-        /api_key\s*[:=]\s*['"][a-zA-Z0-9_]{20,}['"]/,
-        /POSTHOG_PROJECT_TOKEN\s*[:=]\s*['"][a-zA-Z0-9_]{20,}['"]/,
-    ],
-};
-const autocapture_disabled = {
-    name: 'autocapture_disabled',
-    description: "Detects agent disabling autocapture — violates 'don't disable autocapture' commandment",
-    severity: 'medium',
-    category: 'posthog_autocapture',
-    appliesTo: POST_WRITE_EDIT,
-    patterns: [
-        /autocapture\s*:\s*false/,
-        /autocapture\s*:\s*'false'/,
-        /autocapture\s*:\s*"false"/,
-        /autocapture\s*=\s*False/,
-        /disable_autocapture\s*[:=]\s*(true|True|1)/,
-    ],
-};
-// ── §1b Additional PostHog config rules ──────────────────────────
-const hardcoded_posthog_host = {
-    name: 'hardcoded_posthog_host',
-    description: 'Detects hardcoded PostHog host URLs in source — should use environment variables',
-    severity: 'high',
-    category: 'posthog_hardcoded_key',
-    appliesTo: POST_WRITE_EDIT,
-    patterns: [/['"]https:\/\/(us|eu)\.i\.posthog\.com['"]/],
-};
-const session_recording_disabled = {
-    name: 'session_recording_disabled',
-    description: 'Detects agent disabling session recording',
-    severity: 'medium',
-    category: 'posthog_config',
-    appliesTo: POST_WRITE_EDIT,
-    patterns: [
-        /disable_session_recording\s*:\s*true/i,
-        /disable_session_recording\s*=\s*True/,
-    ],
-};
-const opt_out_capturing = {
-    name: 'opt_out_capturing',
-    description: 'Detects agent opting out of PostHog capturing entirely',
-    severity: 'medium',
-    category: 'posthog_config',
-    appliesTo: POST_WRITE_EDIT,
-    patterns: [
-        // Match opt_out_capturing as a config property (in init options), not as a method call.
-        // posthog.opt_out_capturing() is a legitimate GDPR-required API.
-        /opt_out_capturing\s*[:=]\s*(true|True|1)/i,
-        /opted_out\s*[:=]\s*(true|True|1)/i,
-    ],
-};
-// ── §2 Prompt Injection ──────────────────────────────────────────
-const prompt_injection_wizard_override = {
-    name: 'prompt_injection_wizard_override',
-    description: 'Detects classic prompt injection attempting to override agent instructions',
-    severity: 'critical',
-    category: 'prompt_injection',
-    appliesTo: POST_READ_GREP,
-    patterns: [
-        // Direct instruction override — classic injection patterns
-        /ignore previous instructions/i,
-        /disregard all/i,
-        /forget your instructions/i,
-        /override your rules/i,
-        // Role manipulation
-        /act as a different/i,
-        /new instructions:/i,
-    ],
-};
-const prompt_injection_wizard_specific = {
-    name: 'prompt_injection_wizard_specific',
-    description: 'Detects wizard-specific manipulation or tool abuse attempts in project files',
-    severity: 'medium',
-    category: 'prompt_injection',
-    appliesTo: POST_READ_GREP,
-    patterns: [
-        // Wizard-specific manipulation
-        /skip posthog/i,
-        /do not install posthog/i,
-        /remove posthog/i,
-        /uninstall posthog/i,
-        /delete the posthog/i,
-        // Tool abuse via file content
-        /run the following command/i,
-        /execute this shell command/i,
-        // Role hijacking — require "you are now a" to avoid false positives
-        // on legitimate phrases like "you are now ready to..."
-        /you are now a\s/i,
-    ],
-};
-const prompt_injection_base64 = {
-    name: 'prompt_injection_base64',
-    description: 'Detects suspicious base64-encoded blocks in file content that may contain obfuscated prompt injection',
-    severity: 'critical',
-    category: 'prompt_injection',
-    appliesTo: POST_READ_GREP,
-    patterns: [
-        // Long base64 strings (100+ chars) in comments or string literals
-        // that aren't typical data URIs or legitimate base64 content
-        /(?:\/\/|#|\/\*)\s*[A-Za-z0-9+/]{100,}={0,2}/,
-    ],
-};
-// ── §3 Secret Exfiltration ───────────────────────────────────────
-const secret_exfiltration_via_command = {
-    name: 'secret_exfiltration_via_command',
-    description: 'Detects shell commands attempting to exfiltrate secrets or credentials',
-    severity: 'critical',
-    category: 'exfiltration',
-    appliesTo: PRE_BASH,
-    patterns: [
-        // curl/wget with environment variable secrets
-        /curl\s+.*\$\{?[A-Z_]*(KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL)/i,
-        /wget\s+.*\$\{?[A-Z_]*(KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL)/i,
-        // Piping sensitive content to network tools
-        /(\$\{?[A-Z_]*(KEY|TOKEN|SECRET|PASSWORD)|\.env|credentials)\S*.*\|\s*curl/i,
-        /(\$\{?[A-Z_]*(KEY|TOKEN|SECRET|PASSWORD)|\.env|credentials)\S*.*\|\s*wget/i,
-        /\|\s*nc\s/,
-        /\|\s*netcat\s/,
-        // Base64 encoding piped to network
-        /base64.*\|\s*(curl|wget|nc\s)/i,
-        // Reading .env and sending
-        /cat\s+.*\.env.*\|\s*(curl|wget)/,
-        // PostHog key exfiltration specifically
-        /curl.*phc_[a-zA-Z0-9]/,
-        /wget.*phc_[a-zA-Z0-9]/,
-    ],
-};
-// ── §4 Filesystem Safety ─────────────────────────────────────────
-const destructive_rm = {
-    name: 'destructive_rm',
-    description: 'Detects rm -rf or rm -r commands that could mass-delete files',
-    severity: 'critical',
-    category: 'filesystem_safety',
-    appliesTo: PRE_BASH,
-    patterns: [
-        // Combined flags: rm -rf, rm -fr, rm -rfi, etc.
-        /\brm\s+(-[a-zA-Z]*r[a-zA-Z]*f|-[a-zA-Z]*f[a-zA-Z]*r)\b/,
-        // Separated flags: rm -r -f, rm -f -r (with optional other flags)
-        /\brm\s+(-[a-zA-Z]*\s+)*-[a-zA-Z]*r[a-zA-Z]*\s+(-[a-zA-Z]*\s+)*-[a-zA-Z]*f\b/,
-        /\brm\s+(-[a-zA-Z]*\s+)*-[a-zA-Z]*f[a-zA-Z]*\s+(-[a-zA-Z]*\s+)*-[a-zA-Z]*r\b/,
-    ],
-};
-const git_force_push = {
-    name: 'git_force_push',
-    description: 'Detects git push --force which can overwrite remote history',
-    severity: 'critical',
-    category: 'filesystem_safety',
-    appliesTo: PRE_BASH,
-    patterns: [/git\s+push\s+.*--force/, /git\s+push\s+.*-f\b/],
-};
-const git_reset_hard = {
-    name: 'git_reset_hard',
-    description: 'Detects git reset --hard which discards all uncommitted changes',
-    severity: 'critical',
-    category: 'filesystem_safety',
-    appliesTo: PRE_BASH,
-    patterns: [/git\s+reset\s+--hard/],
-};
-// ── §5 Supply Chain ──────────────────────────────────────────────
-const wrong_posthog_package = {
-    name: 'wrong_posthog_package',
-    description: 'Detects installing the wrong PostHog npm package — should be posthog-js or posthog-node',
-    severity: 'high',
-    category: 'supply_chain',
-    appliesTo: PRE_BASH,
-    patterns: [
-        // Match "npm install posthog" but not "posthog-js", "posthog-node", etc.
-        /npm\s+install\s+(?:--save\s+|--save-dev\s+|-[SD]\s+)*posthog(?!\s*-)/,
-        /pnpm\s+(?:add|install)\s+(?:--save\s+|--save-dev\s+|-[SD]\s+)*posthog(?!\s*-)/,
-        /yarn\s+add\s+(?:--dev\s+|-D\s+)*posthog(?!\s*-)/,
-        /bun\s+(?:add|install)\s+(?:--dev\s+|-[dD]\s+)*posthog(?!\s*-)/,
-    ],
-};
-const npm_install_global = {
-    name: 'npm_install_global',
-    description: 'Detects global npm installs — should never install packages globally',
-    severity: 'high',
-    category: 'supply_chain',
-    appliesTo: PRE_BASH,
-    patterns: [/npm\s+install\s+-g\b/, /npm\s+install\s+--global\b/],
-};
-// ─── Rule Registry ───────────────────────────────────────────────
-exports.RULES = [
-    // §1 PostHog API violations
-    pii_in_capture_call,
-    hardcoded_posthog_key,
-    autocapture_disabled,
-    hardcoded_posthog_host,
-    session_recording_disabled,
-    opt_out_capturing,
-    // §2 Prompt injection
-    prompt_injection_wizard_override,
-    prompt_injection_wizard_specific,
-    prompt_injection_base64,
-    // §3 Secret exfiltration
-    secret_exfiltration_via_command,
-    // §4 Filesystem safety
-    destructive_rm,
-    git_force_push,
-    git_reset_hard,
-    // §5 Supply chain
-    wrong_posthog_package,
-    npm_install_global,
-];
-// ─── Scan Engine ─────────────────────────────────────────────────
-/** Maximum content length to scan (100 KB). Inputs beyond this are truncated. */
-const MAX_SCAN_LENGTH = 100_000;
-/**
- * Scan content against rules applicable to a given hook phase and tool.
- * Returns all matching rules (one match per rule, first pattern wins).
- */
-function scan(content, phase, tool) {
-    // Cap input length to prevent pathological regex performance
-    const scanContent = content.length > MAX_SCAN_LENGTH
-        ? content.slice(0, MAX_SCAN_LENGTH)
-        : content;
-    const applicableRules = exports.RULES.filter((r) => r.appliesTo.some((a) => a.phase === phase && a.tool === tool));
-    const matches = [];
-    for (const rule of applicableRules) {
-        for (const pattern of rule.patterns) {
-            const match = pattern.exec(scanContent);
-            if (match) {
-                matches.push({
-                    rule,
-                    matchedText: match[0],
-                    offset: match.index,
-                });
-                break; // One match per rule is sufficient
-            }
-        }
-    }
-    return matches.length > 0 ? { matched: true, matches } : { matched: false };
-}
-/**
- * Scan all files in a skill directory for prompt injection.
- * Used for context-mill scanning after skill installation.
- */
-function scanSkillDirectory(files) {
-    const allMatches = [];
-    for (const file of files) {
-        const result = scan(file.content, 'PostToolUse', 'Read');
-        if (result.matched) {
-            allMatches.push(...result.matches);
-        }
-    }
-    return allMatches.length > 0
-        ? { matched: true, matches: allMatches }
-        : { matched: false };
-}
-//# sourceMappingURL=yara-scanner.js.map

package/dist/src/lib/yara-scanner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"yara-scanner.js","sourceRoot":"","sources":["../../../src/lib/yara-scanner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AA+VH,oBA8BC;AAMD,gDAaC;AArWD,oEAAoE;AACpE,EAAE;AACF,kEAAkE;AAClE,sCAAsC;AAEtC,MAAM,eAAe,GAAkD;IACrE,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;IACvC,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE;CACvC,CAAC;AAEF,MAAM,cAAc,GAAkD;IACpE,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE;IACtC,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE;CACvC,CAAC;AAEF,MAAM,QAAQ,GAAkD;IAC9D,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE;CACtC,CAAC;AAEF,oEAAoE;AAEpE,MAAM,mBAAmB,GAAa;IACpC,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,qGAAqG;IACvG,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,eAAe;IAC1B,QAAQ,EAAE;QACR,+CAA+C;QAC/C,iCAAiC;QACjC,iCAAiC;QACjC,0CAA0C;QAC1C,2CAA2C;QAC3C,0CAA0C;QAC1C,sEAAsE;QACtE,sDAAsD;QACtD,kEAAkE;QAClE,+BAA+B;QAC/B,yEAAyE;QACzE,2DAA2D;QAC3D,uDAAuD;QACvD,oEAAoE;QACpE,mEAAmE;QACnE,uEAAuE;QACvE,4DAA4D;QAC5D,wBAAwB;QACxB,wBAAwB;KACzB;CACF,CAAC;AAEF,MAAM,qBAAqB,GAAa;IACtC,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,iGAAiG;IACnG,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,uBAAuB;IACjC,SAAS,EAAE,eAAe;IAC1B,QAAQ,EAAE;QACR,gEAAgE;QAChE,sBAAsB;QACtB,yCAAyC;QACzC,sBAAsB;QACtB,oCAAoC;QACpC,2CAA2C;QAC3C,4CAA4C;QAC5C,0DAA0D;KAC3D;CACF,CAAC;AAEF,MAAM,oBAAoB,GAAa;IACrC,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EACT,wFAAwF;IAC1F,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,qBAAqB;IAC/B,SAAS,EAAE,eAAe;IAC1B,QAAQ,EAAE;QACR,yBAAyB;QACzB,2BAA2B;QAC3B,2BAA2B;QAC3B,yBAAyB;QACzB,4CAA4C;KAC7C;CACF,CAAC;AAEF,oEAAoE;AAEpE,MAAM,sBAAsB,GAAa;IACvC,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACT,kFAAkF;IACpF,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,uBAAuB;IACjC,SAAS,EAAE,eAAe;IAC1B,QAAQ,EAAE,CAAC,4CAA4C,CAAC;CACzD,CAAC;AAEF,MAAM,0BAA0B,GAAa;IAC3C,IAAI,EAAE,4BAA4B;IAClC,WAAW,EAAE,2CAA2C;IACxD,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,gBAAgB;IAC1B,SAAS,EAAE,eAAe;IAC1B,QAAQ,EAAE;QACR,uCAAuC;QACvC,sCAAsC;KACvC;CACF,CAAC;AAEF,MAAM,iBAAiB,GAAa;IAClC,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,wDAAwD;IACrE,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,gBAAgB;IAC1B,SAAS,EAAE,eAAe;IAC1B,QAAQ,EAAE;QACR,wFAAwF;QACxF,iEAAiE;QACjE,2CAA2C;QAC3C,mCAAmC;KACpC;CACF,CAAC;AAEF,oEAAoE;AAEpE,MAAM,gCAAgC,GAAa;IACjD,IAAI,EAAE,kCAAkC;IACxC,WAAW,EACT,4EAA4E;IAC9E,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,kBAAkB;IAC5B,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE;QACR,2DAA2D;QAC3D,+BAA+B;QAC/B,gBAAgB;QAChB,2BAA2B;QAC3B,sBAAsB;QACtB,oBAAoB;QACpB,qBAAqB;QACrB,oBAAoB;KACrB;CACF,CAAC;AAEF,MAAM,gCAAgC,GAAa;IACjD,IAAI,EAAE,kCAAkC;IACxC,WAAW,EACT,8EAA8E;IAChF,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,kBAAkB;IAC5B,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE;QACR,+BAA+B;QAC/B,eAAe;QACf,yBAAyB;QACzB,iBAAiB;QACjB,oBAAoB;QACpB,qBAAqB;QACrB,8BAA8B;QAC9B,4BAA4B;QAC5B,6BAA6B;QAC7B,oEAAoE;QACpE,uDAAuD;QACvD,kBAAkB;KACnB;CACF,CAAC;AAEF,MAAM,uBAAuB,GAAa;IACxC,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EACT,uGAAuG;IACzG,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,kBAAkB;IAC5B,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE;QACR,kEAAkE;QAClE,6DAA6D;QAC7D,6CAA6C;KAC9C;CACF,CAAC;AAEF,oEAAoE;AAEpE,MAAM,+BAA+B,GAAa;IAChD,IAAI,EAAE,iCAAiC;IACvC,WAAW,EACT,wEAAwE;IAC1E,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE;QACR,8CAA8C;QAC9C,8DAA8D;QAC9D,8DAA8D;QAC9D,4CAA4C;QAC5C,4EAA4E;QAC5E,4EAA4E;QAC5E,WAAW;QACX,eAAe;QACf,mCAAmC;QACnC,gCAAgC;QAChC,2BAA2B;QAC3B,iCAAiC;QACjC,wCAAwC;QACxC,uBAAuB;QACvB,uBAAuB;KACxB;CACF,CAAC;AAEF,oEAAoE;AAEpE,MAAM,cAAc,GAAa;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,+DAA+D;IAC5E,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,mBAAmB;IAC7B,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE;QACR,gDAAgD;QAChD,wDAAwD;QACxD,kEAAkE;QAClE,6EAA6E;QAC7E,6EAA6E;KAC9E;CACF,CAAC;AAEF,MAAM,cAAc,GAAa;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,6DAA6D;IAC1E,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,mBAAmB;IAC7B,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE,CAAC,wBAAwB,EAAE,qBAAqB,CAAC;CAC5D,CAAC;AAEF,MAAM,cAAc,GAAa;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,iEAAiE;IACnE,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,mBAAmB;IAC7B,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE,CAAC,sBAAsB,CAAC;CACnC,CAAC;AAEF,oEAAoE;AAEpE,MAAM,qBAAqB,GAAa;IACtC,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,yFAAyF;IAC3F,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE;QACR,yEAAyE;QACzE,sEAAsE;QACtE,+EAA+E;QAC/E,iDAAiD;QACjD,+DAA+D;KAChE;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAa;IACnC,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACT,sEAAsE;IACxE,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;CACjE,CAAC;AAEF,oEAAoE;AAEvD,QAAA,KAAK,GAAe;IAC/B,4BAA4B;IAC5B,mBAAmB;IACnB,qBAAqB;IACrB,oBAAoB;IACpB,sBAAsB;IACtB,0BAA0B;IAC1B,iBAAiB;IACjB,sBAAsB;IACtB,gCAAgC;IAChC,gCAAgC;IAChC,uBAAuB;IACvB,yBAAyB;IACzB,+BAA+B;IAC/B,uBAAuB;IACvB,cAAc;IACd,cAAc;IACd,cAAc;IACd,kBAAkB;IAClB,qBAAqB;IACrB,kBAAkB;CACnB,CAAC;AAEF,oEAAoE;AAEpE,iFAAiF;AACjF,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC;;;GAGG;AACH,SAAgB,IAAI,CAClB,OAAe,EACf,KAAgB,EAChB,IAAgB;IAEhB,6DAA6D;IAC7D,MAAM,WAAW,GACf,OAAO,CAAC,MAAM,GAAG,eAAe;QAC9B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;QACnC,CAAC,CAAC,OAAO,CAAC;IACd,MAAM,eAAe,GAAG,aAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACzC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAC9D,CAAC;IAEF,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI;oBACJ,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,MAAM,EAAE,KAAK,CAAC,KAAK;iBACpB,CAAC,CAAC;gBACH,MAAM,CAAC,mCAAmC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAChC,KAA+C;IAE/C,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE;QACxC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC","sourcesContent":["/**\n * YARA content scanner for the PostHog wizard.\n *\n * This file is the single source of truth for all wizard YARA rules.\n *\n * Scans tool inputs (pre-execution) and outputs (post-execution) for\n * security violations including PII leakage, hardcoded secrets,\n * prompt injection, and secret exfiltration.\n *\n * We use YARA-style regex rules rather than the real YARA C library to\n * avoid native binary dependencies in an npx-distributed npm package.\n *\n * This is Layer 2 (L2) in the wizard's defense-in-depth model,\n * complementing the prompt-based commandments (L0) and the\n * canUseTool() allowlist (L1).\n */\n\n// ─── Types ───────────────────────────────────────────────────────\n\nexport type YaraSeverity = 'critical' | 'high' | 'medium' | 'low';\n\nexport type YaraCategory =\n  | 'posthog_pii'\n  | 'posthog_hardcoded_key'\n  | 'posthog_autocapture'\n  | 'posthog_config'\n  | 'prompt_injection'\n  | 'exfiltration'\n  | 'filesystem_safety'\n  | 'supply_chain';\n\nexport type HookPhase = 'PreToolUse' | 'PostToolUse';\nexport type ToolTarget = 'Bash' | 'Write' | 'Edit' | 'Read' | 'Grep';\n\nexport interface YaraRule {\n  /** Rule name matching the .yar file (e.g. 'pii_in_capture_call') */\n  name: string;\n  description: string;\n  severity: YaraSeverity;\n  category: YaraCategory;\n  /** Which hook+tool combinations this rule applies to */\n  appliesTo: Array<{ phase: HookPhase; tool: ToolTarget }>;\n  /** Compiled regex patterns — any match triggers the rule */\n  patterns: RegExp[];\n}\n\nexport interface YaraMatch {\n  rule: YaraRule;\n  /** The matched substring */\n  matchedText: string;\n  /** Byte offset in the scanned content */\n  offset: number;\n}\n\nexport type ScanResult =\n  | { matched: false }\n  | { matched: true; matches: YaraMatch[] };\n\n// ─── Rule Definitions ────────────────────────────────────────────\n//\n// Patterns are compiled once at module load time for performance.\n// Design spec: policies/yara/RULES.md\n\nconst POST_WRITE_EDIT: Array<{ phase: HookPhase; tool: ToolTarget }> = [\n  { phase: 'PostToolUse', tool: 'Write' },\n  { phase: 'PostToolUse', tool: 'Edit' },\n];\n\nconst POST_READ_GREP: Array<{ phase: HookPhase; tool: ToolTarget }> = [\n  { phase: 'PostToolUse', tool: 'Read' },\n  { phase: 'PostToolUse', tool: 'Grep' },\n];\n\nconst PRE_BASH: Array<{ phase: HookPhase; tool: ToolTarget }> = [\n  { phase: 'PreToolUse', tool: 'Bash' },\n];\n\n// ── §1 PostHog API Violations ────────────────────────────────────\n\nconst pii_in_capture_call: YaraRule = {\n  name: 'pii_in_capture_call',\n  description:\n    \"Detects PII fields passed to posthog.capture() — violates 'NEVER send PII in capture()' commandment\",\n  severity: 'high',\n  category: 'posthog_pii',\n  appliesTo: POST_WRITE_EDIT,\n  patterns: [\n    // Direct PII field names in capture properties\n    /\\.capture\\s*\\([^)]{0,200}email/i,\n    /\\.capture\\s*\\([^)]{0,200}phone/i,\n    /\\.capture\\s*\\([^)]{0,200}full[_\\s]?name/i,\n    /\\.capture\\s*\\([^)]{0,200}first[_\\s]?name/i,\n    /\\.capture\\s*\\([^)]{0,200}last[_\\s]?name/i,\n    /\\.capture\\s*\\([^)]{0,200}(street|mailing|home|billing)[_\\s]?address/i,\n    /\\.capture\\s*\\([^)]{0,200}(ssn|social[_\\s]?security)/i,\n    /\\.capture\\s*\\([^)]{0,200}(date[_\\s]?of[_\\s]?birth|dob|birthday)/i,\n    /\\.capture\\s*\\([^)]{0,200}\\$ip/,\n    // identify() allows email/phone/name (standard PostHog user properties),\n    // but highly sensitive PII is still blocked in identify().\n    /\\.identify\\s*\\([^)]{0,200}(ssn|social[_\\s]?security)/i,\n    /\\.identify\\s*\\([^)]{0,200}(card[_\\s]?number|cvv|credit[_\\s]?card)/i,\n    /\\.identify\\s*\\([^)]{0,200}(date[_\\s]?of[_\\s]?birth|dob|birthday)/i,\n    /\\.identify\\s*\\([^)]{0,200}(street|mailing|home|billing)[_\\s]?address/i,\n    // PII in $set properties via capture (bound to same object)\n    /\\$set[^}]{0,200}email/i,\n    /\\$set[^}]{0,200}phone/i,\n  ],\n};\n\nconst hardcoded_posthog_key: YaraRule = {\n  name: 'hardcoded_posthog_key',\n  description:\n    \"Detects hardcoded PostHog API keys in source — violates 'use environment variables' commandment\",\n  severity: 'high',\n  category: 'posthog_hardcoded_key',\n  appliesTo: POST_WRITE_EDIT,\n  patterns: [\n    // PostHog project API key (phc_ prefix, 20+ alphanumeric chars)\n    /phc_[a-zA-Z0-9]{20,}/,\n    // PostHog personal API key (phx_ prefix)\n    /phx_[a-zA-Z0-9]{20,}/,\n    // Hardcoded key assignment patterns\n    /apiKey\\s*[:=]\\s*['\"][a-zA-Z0-9_]{20,}['\"]/,\n    /api_key\\s*[:=]\\s*['\"][a-zA-Z0-9_]{20,}['\"]/,\n    /POSTHOG_PROJECT_TOKEN\\s*[:=]\\s*['\"][a-zA-Z0-9_]{20,}['\"]/,\n  ],\n};\n\nconst autocapture_disabled: YaraRule = {\n  name: 'autocapture_disabled',\n  description:\n    \"Detects agent disabling autocapture — violates 'don't disable autocapture' commandment\",\n  severity: 'medium',\n  category: 'posthog_autocapture',\n  appliesTo: POST_WRITE_EDIT,\n  patterns: [\n    /autocapture\\s*:\\s*false/,\n    /autocapture\\s*:\\s*'false'/,\n    /autocapture\\s*:\\s*\"false\"/,\n    /autocapture\\s*=\\s*False/,\n    /disable_autocapture\\s*[:=]\\s*(true|True|1)/,\n  ],\n};\n\n// ── §1b Additional PostHog config rules ──────────────────────────\n\nconst hardcoded_posthog_host: YaraRule = {\n  name: 'hardcoded_posthog_host',\n  description:\n    'Detects hardcoded PostHog host URLs in source — should use environment variables',\n  severity: 'high',\n  category: 'posthog_hardcoded_key',\n  appliesTo: POST_WRITE_EDIT,\n  patterns: [/['\"]https:\\/\\/(us|eu)\\.i\\.posthog\\.com['\"]/],\n};\n\nconst session_recording_disabled: YaraRule = {\n  name: 'session_recording_disabled',\n  description: 'Detects agent disabling session recording',\n  severity: 'medium',\n  category: 'posthog_config',\n  appliesTo: POST_WRITE_EDIT,\n  patterns: [\n    /disable_session_recording\\s*:\\s*true/i,\n    /disable_session_recording\\s*=\\s*True/,\n  ],\n};\n\nconst opt_out_capturing: YaraRule = {\n  name: 'opt_out_capturing',\n  description: 'Detects agent opting out of PostHog capturing entirely',\n  severity: 'medium',\n  category: 'posthog_config',\n  appliesTo: POST_WRITE_EDIT,\n  patterns: [\n    // Match opt_out_capturing as a config property (in init options), not as a method call.\n    // posthog.opt_out_capturing() is a legitimate GDPR-required API.\n    /opt_out_capturing\\s*[:=]\\s*(true|True|1)/i,\n    /opted_out\\s*[:=]\\s*(true|True|1)/i,\n  ],\n};\n\n// ── §2 Prompt Injection ──────────────────────────────────────────\n\nconst prompt_injection_wizard_override: YaraRule = {\n  name: 'prompt_injection_wizard_override',\n  description:\n    'Detects classic prompt injection attempting to override agent instructions',\n  severity: 'critical',\n  category: 'prompt_injection',\n  appliesTo: POST_READ_GREP,\n  patterns: [\n    // Direct instruction override — classic injection patterns\n    /ignore previous instructions/i,\n    /disregard all/i,\n    /forget your instructions/i,\n    /override your rules/i,\n    // Role manipulation\n    /act as a different/i,\n    /new instructions:/i,\n  ],\n};\n\nconst prompt_injection_wizard_specific: YaraRule = {\n  name: 'prompt_injection_wizard_specific',\n  description:\n    'Detects wizard-specific manipulation or tool abuse attempts in project files',\n  severity: 'medium',\n  category: 'prompt_injection',\n  appliesTo: POST_READ_GREP,\n  patterns: [\n    // Wizard-specific manipulation\n    /skip posthog/i,\n    /do not install posthog/i,\n    /remove posthog/i,\n    /uninstall posthog/i,\n    /delete the posthog/i,\n    // Tool abuse via file content\n    /run the following command/i,\n    /execute this shell command/i,\n    // Role hijacking — require \"you are now a\" to avoid false positives\n    // on legitimate phrases like \"you are now ready to...\"\n    /you are now a\\s/i,\n  ],\n};\n\nconst prompt_injection_base64: YaraRule = {\n  name: 'prompt_injection_base64',\n  description:\n    'Detects suspicious base64-encoded blocks in file content that may contain obfuscated prompt injection',\n  severity: 'critical',\n  category: 'prompt_injection',\n  appliesTo: POST_READ_GREP,\n  patterns: [\n    // Long base64 strings (100+ chars) in comments or string literals\n    // that aren't typical data URIs or legitimate base64 content\n    /(?:\\/\\/|#|\\/\\*)\\s*[A-Za-z0-9+/]{100,}={0,2}/,\n  ],\n};\n\n// ── §3 Secret Exfiltration ───────────────────────────────────────\n\nconst secret_exfiltration_via_command: YaraRule = {\n  name: 'secret_exfiltration_via_command',\n  description:\n    'Detects shell commands attempting to exfiltrate secrets or credentials',\n  severity: 'critical',\n  category: 'exfiltration',\n  appliesTo: PRE_BASH,\n  patterns: [\n    // curl/wget with environment variable secrets\n    /curl\\s+.*\\$\\{?[A-Z_]*(KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL)/i,\n    /wget\\s+.*\\$\\{?[A-Z_]*(KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL)/i,\n    // Piping sensitive content to network tools\n    /(\\$\\{?[A-Z_]*(KEY|TOKEN|SECRET|PASSWORD)|\\.env|credentials)\\S*.*\\|\\s*curl/i,\n    /(\\$\\{?[A-Z_]*(KEY|TOKEN|SECRET|PASSWORD)|\\.env|credentials)\\S*.*\\|\\s*wget/i,\n    /\\|\\s*nc\\s/,\n    /\\|\\s*netcat\\s/,\n    // Base64 encoding piped to network\n    /base64.*\\|\\s*(curl|wget|nc\\s)/i,\n    // Reading .env and sending\n    /cat\\s+.*\\.env.*\\|\\s*(curl|wget)/,\n    // PostHog key exfiltration specifically\n    /curl.*phc_[a-zA-Z0-9]/,\n    /wget.*phc_[a-zA-Z0-9]/,\n  ],\n};\n\n// ── §4 Filesystem Safety ─────────────────────────────────────────\n\nconst destructive_rm: YaraRule = {\n  name: 'destructive_rm',\n  description: 'Detects rm -rf or rm -r commands that could mass-delete files',\n  severity: 'critical',\n  category: 'filesystem_safety',\n  appliesTo: PRE_BASH,\n  patterns: [\n    // Combined flags: rm -rf, rm -fr, rm -rfi, etc.\n    /\\brm\\s+(-[a-zA-Z]*r[a-zA-Z]*f|-[a-zA-Z]*f[a-zA-Z]*r)\\b/,\n    // Separated flags: rm -r -f, rm -f -r (with optional other flags)\n    /\\brm\\s+(-[a-zA-Z]*\\s+)*-[a-zA-Z]*r[a-zA-Z]*\\s+(-[a-zA-Z]*\\s+)*-[a-zA-Z]*f\\b/,\n    /\\brm\\s+(-[a-zA-Z]*\\s+)*-[a-zA-Z]*f[a-zA-Z]*\\s+(-[a-zA-Z]*\\s+)*-[a-zA-Z]*r\\b/,\n  ],\n};\n\nconst git_force_push: YaraRule = {\n  name: 'git_force_push',\n  description: 'Detects git push --force which can overwrite remote history',\n  severity: 'critical',\n  category: 'filesystem_safety',\n  appliesTo: PRE_BASH,\n  patterns: [/git\\s+push\\s+.*--force/, /git\\s+push\\s+.*-f\\b/],\n};\n\nconst git_reset_hard: YaraRule = {\n  name: 'git_reset_hard',\n  description:\n    'Detects git reset --hard which discards all uncommitted changes',\n  severity: 'critical',\n  category: 'filesystem_safety',\n  appliesTo: PRE_BASH,\n  patterns: [/git\\s+reset\\s+--hard/],\n};\n\n// ── §5 Supply Chain ──────────────────────────────────────────────\n\nconst wrong_posthog_package: YaraRule = {\n  name: 'wrong_posthog_package',\n  description:\n    'Detects installing the wrong PostHog npm package — should be posthog-js or posthog-node',\n  severity: 'high',\n  category: 'supply_chain',\n  appliesTo: PRE_BASH,\n  patterns: [\n    // Match \"npm install posthog\" but not \"posthog-js\", \"posthog-node\", etc.\n    /npm\\s+install\\s+(?:--save\\s+|--save-dev\\s+|-[SD]\\s+)*posthog(?!\\s*-)/,\n    /pnpm\\s+(?:add|install)\\s+(?:--save\\s+|--save-dev\\s+|-[SD]\\s+)*posthog(?!\\s*-)/,\n    /yarn\\s+add\\s+(?:--dev\\s+|-D\\s+)*posthog(?!\\s*-)/,\n    /bun\\s+(?:add|install)\\s+(?:--dev\\s+|-[dD]\\s+)*posthog(?!\\s*-)/,\n  ],\n};\n\nconst npm_install_global: YaraRule = {\n  name: 'npm_install_global',\n  description:\n    'Detects global npm installs — should never install packages globally',\n  severity: 'high',\n  category: 'supply_chain',\n  appliesTo: PRE_BASH,\n  patterns: [/npm\\s+install\\s+-g\\b/, /npm\\s+install\\s+--global\\b/],\n};\n\n// ─── Rule Registry ───────────────────────────────────────────────\n\nexport const RULES: YaraRule[] = [\n  // §1 PostHog API violations\n  pii_in_capture_call,\n  hardcoded_posthog_key,\n  autocapture_disabled,\n  hardcoded_posthog_host,\n  session_recording_disabled,\n  opt_out_capturing,\n  // §2 Prompt injection\n  prompt_injection_wizard_override,\n  prompt_injection_wizard_specific,\n  prompt_injection_base64,\n  // §3 Secret exfiltration\n  secret_exfiltration_via_command,\n  // §4 Filesystem safety\n  destructive_rm,\n  git_force_push,\n  git_reset_hard,\n  // §5 Supply chain\n  wrong_posthog_package,\n  npm_install_global,\n];\n\n// ─── Scan Engine ─────────────────────────────────────────────────\n\n/** Maximum content length to scan (100 KB). Inputs beyond this are truncated. */\nconst MAX_SCAN_LENGTH = 100_000;\n\n/**\n * Scan content against rules applicable to a given hook phase and tool.\n * Returns all matching rules (one match per rule, first pattern wins).\n */\nexport function scan(\n  content: string,\n  phase: HookPhase,\n  tool: ToolTarget,\n): ScanResult {\n  // Cap input length to prevent pathological regex performance\n  const scanContent =\n    content.length > MAX_SCAN_LENGTH\n      ? content.slice(0, MAX_SCAN_LENGTH)\n      : content;\n  const applicableRules = RULES.filter((r) =>\n    r.appliesTo.some((a) => a.phase === phase && a.tool === tool),\n  );\n\n  const matches: YaraMatch[] = [];\n  for (const rule of applicableRules) {\n    for (const pattern of rule.patterns) {\n      const match = pattern.exec(scanContent);\n      if (match) {\n        matches.push({\n          rule,\n          matchedText: match[0],\n          offset: match.index,\n        });\n        break; // One match per rule is sufficient\n      }\n    }\n  }\n\n  return matches.length > 0 ? { matched: true, matches } : { matched: false };\n}\n\n/**\n * Scan all files in a skill directory for prompt injection.\n * Used for context-mill scanning after skill installation.\n */\nexport function scanSkillDirectory(\n  files: Array<{ path: string; content: string }>,\n): ScanResult {\n  const allMatches: YaraMatch[] = [];\n  for (const file of files) {\n    const result = scan(file.content, 'PostToolUse', 'Read');\n    if (result.matched) {\n      allMatches.push(...result.matches);\n    }\n  }\n  return allMatches.length > 0\n    ? { matched: true, matches: allMatches }\n    : { matched: false };\n}\n"]}

package/dist/src/steps/add-mcp-server-to-clients/MCPClient.d.ts

@@ -1,30 +0,0 @@
-export type MCPServerConfig = Record<string, unknown>;
-export declare abstract class MCPClient {
-    name: string;
-    abstract getConfigPath(): Promise<string>;
-    abstract getServerPropertyName(): string;
-    abstract isServerInstalled(local?: boolean): Promise<boolean>;
-    abstract addServer(apiKey?: string, selectedFeatures?: string[], local?: boolean): Promise<{
-        success: boolean;
-    }>;
-    abstract removeServer(local?: boolean): Promise<{
-        success: boolean;
-    }>;
-    abstract isClientSupported(): Promise<boolean>;
-}
-export declare abstract class DefaultMCPClient extends MCPClient {
-    name: string;
-    constructor();
-    getServerPropertyName(): string;
-    getServerConfig(apiKey: string | undefined, type: 'sse' | 'streamable-http', selectedFeatures?: string[], local?: boolean): MCPServerConfig;
-    isServerInstalled(local?: boolean): Promise<boolean>;
-    addServer(apiKey?: string, selectedFeatures?: string[], local?: boolean): Promise<{
-        success: boolean;
-    }>;
-    _addServerType(apiKey: string | undefined, type: 'sse' | 'streamable-http', selectedFeatures?: string[], local?: boolean): Promise<{
-        success: boolean;
-    }>;
-    removeServer(local?: boolean): Promise<{
-        success: boolean;
-    }>;
-}

package/dist/src/steps/add-mcp-server-to-clients/MCPClient.js

@@ -1,138 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DefaultMCPClient = exports.MCPClient = void 0;
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const jsonc = __importStar(require("jsonc-parser"));
-const defaults_1 = require("./defaults");
-class MCPClient {
-    name;
-}
-exports.MCPClient = MCPClient;
-class DefaultMCPClient extends MCPClient {
-    name = 'Default';
-    constructor() {
-        super();
-    }
-    getServerPropertyName() {
-        return 'mcpServers';
-    }
-    getServerConfig(apiKey, type, selectedFeatures, local) {
-        return (0, defaults_1.getDefaultServerConfig)(apiKey, type, selectedFeatures, local);
-    }
-    async isServerInstalled(local) {
-        try {
-            const configPath = await this.getConfigPath();
-            if (!fs.existsSync(configPath)) {
-                return false;
-            }
-            const configContent = await fs.promises.readFile(configPath, 'utf8');
-            const config = jsonc.parse(configContent);
-            const serverPropertyName = this.getServerPropertyName();
-            const serverName = local ? 'posthog-local' : 'posthog';
-            return (serverPropertyName in config && serverName in config[serverPropertyName]);
-        }
-        catch {
-            return false;
-        }
-    }
-    async addServer(apiKey, selectedFeatures, local) {
-        return this._addServerType(apiKey, 'sse', selectedFeatures, local);
-    }
-    async _addServerType(apiKey, type, selectedFeatures, local) {
-        try {
-            const configPath = await this.getConfigPath();
-            const configDir = path.dirname(configPath);
-            await fs.promises.mkdir(configDir, { recursive: true });
-            const serverPropertyName = this.getServerPropertyName();
-            let configContent = '';
-            let existingConfig = {};
-            if (fs.existsSync(configPath)) {
-                configContent = await fs.promises.readFile(configPath, 'utf8');
-                existingConfig = jsonc.parse(configContent) || {};
-            }
-            const newServerConfig = this.getServerConfig(apiKey, type, selectedFeatures, local);
-            const typedConfig = existingConfig;
-            if (!typedConfig[serverPropertyName]) {
-                typedConfig[serverPropertyName] = {};
-            }
-            const serverName = local ? 'posthog-local' : 'posthog';
-            typedConfig[serverPropertyName][serverName] = newServerConfig;
-            const edits = jsonc.modify(configContent, [serverPropertyName, serverName], newServerConfig, {
-                formattingOptions: {
-                    tabSize: 2,
-                    insertSpaces: true,
-                },
-            });
-            const modifiedContent = jsonc.applyEdits(configContent, edits);
-            await fs.promises.writeFile(configPath, modifiedContent, 'utf8');
-            return { success: true };
-        }
-        catch {
-            return { success: false };
-        }
-    }
-    async removeServer(local) {
-        try {
-            const configPath = await this.getConfigPath();
-            if (!fs.existsSync(configPath)) {
-                return { success: false };
-            }
-            const configContent = await fs.promises.readFile(configPath, 'utf8');
-            const config = jsonc.parse(configContent);
-            const serverPropertyName = this.getServerPropertyName();
-            const serverName = local ? 'posthog-local' : 'posthog';
-            if (serverPropertyName in config &&
-                serverName in config[serverPropertyName]) {
-                const edits = jsonc.modify(configContent, [serverPropertyName, serverName], undefined, {
-                    formattingOptions: {
-                        tabSize: 2,
-                        insertSpaces: true,
-                    },
-                });
-                const modifiedContent = jsonc.applyEdits(configContent, edits);
-                await fs.promises.writeFile(configPath, modifiedContent, 'utf8');
-                return { success: true };
-            }
-        }
-        catch {
-            //
-        }
-        return { success: false };
-    }
-}
-exports.DefaultMCPClient = DefaultMCPClient;
-//# sourceMappingURL=MCPClient.js.map

package/dist/src/steps/add-mcp-server-to-clients/MCPClient.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"MCPClient.js","sourceRoot":"","sources":["../../../../src/steps/add-mcp-server-to-clients/MCPClient.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAC7B,oDAAsC;AACtC,yCAAoD;AAIpD,MAAsB,SAAS;IAC7B,IAAI,CAAS;CAWd;AAZD,8BAYC;AAED,MAAsB,gBAAiB,SAAQ,SAAS;IACtD,IAAI,GAAG,SAAS,CAAC;IAEjB;QACE,KAAK,EAAE,CAAC;IACV,CAAC;IAED,qBAAqB;QACnB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,eAAe,CACb,MAA0B,EAC1B,IAA+B,EAC/B,gBAA2B,EAC3B,KAAe;QAEf,OAAO,IAAA,iCAAsB,EAAC,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAe;QACrC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAE9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAwB,CAAC;YACjE,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACxD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAEvD,OAAO,CACL,kBAAkB,IAAI,MAAM,IAAI,UAAU,IAAI,MAAM,CAAC,kBAAkB,CAAC,CACzE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,MAAe,EACf,gBAA2B,EAC3B,KAAe;QAEf,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,MAA0B,EAC1B,IAA+B,EAC/B,gBAA2B,EAC3B,KAAe;QAEf,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAE3C,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAExD,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACxD,IAAI,aAAa,GAAG,EAAE,CAAC;YACvB,IAAI,cAAc,GAAG,EAAE,CAAC;YAExB,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,aAAa,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC/D,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YACpD,CAAC;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAC1C,MAAM,EACN,IAAI,EACJ,gBAAgB,EAChB,KAAK,CACN,CAAC;YACF,MAAM,WAAW,GAAG,cAAqC,CAAC;YAC1D,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACrC,WAAW,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC;YACvC,CAAC;YACD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACvD,WAAW,CAAC,kBAAkB,CAAC,CAAC,UAAU,CAAC,GAAG,eAAe,CAAC;YAE9D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CACxB,aAAa,EACb,CAAC,kBAAkB,EAAE,UAAU,CAAC,EAChC,eAAe,EACf;gBACE,iBAAiB,EAAE;oBACjB,OAAO,EAAE,CAAC;oBACV,YAAY,EAAE,IAAI;iBACnB;aACF,CACF,CAAC;YAEF,MAAM,eAAe,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAE/D,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;YAEjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAe;QAChC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAE9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YAED,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAwB,CAAC;YACjE,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAExD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAEvD,IACE,kBAAkB,IAAI,MAAM;gBAC5B,UAAU,IAAI,MAAM,CAAC,kBAAkB,CAAC,EACxC,CAAC;gBACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CACxB,aAAa,EACb,CAAC,kBAAkB,EAAE,UAAU,CAAC,EAChC,SAAS,EACT;oBACE,iBAAiB,EAAE;wBACjB,OAAO,EAAE,CAAC;wBACV,YAAY,EAAE,IAAI;qBACnB;iBACF,CACF,CAAC;gBAEF,MAAM,eAAe,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;gBAE/D,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;gBAEjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,EAAE;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;CACF;AAnJD,4CAmJC","sourcesContent":["import * as fs from 'fs';\nimport * as path from 'path';\nimport * as jsonc from 'jsonc-parser';\nimport { getDefaultServerConfig } from './defaults';\n\nexport type MCPServerConfig = Record<string, unknown>;\n\nexport abstract class MCPClient {\n  name: string;\n  abstract getConfigPath(): Promise<string>;\n  abstract getServerPropertyName(): string;\n  abstract isServerInstalled(local?: boolean): Promise<boolean>;\n  abstract addServer(\n    apiKey?: string,\n    selectedFeatures?: string[],\n    local?: boolean,\n  ): Promise<{ success: boolean }>;\n  abstract removeServer(local?: boolean): Promise<{ success: boolean }>;\n  abstract isClientSupported(): Promise<boolean>;\n}\n\nexport abstract class DefaultMCPClient extends MCPClient {\n  name = 'Default';\n\n  constructor() {\n    super();\n  }\n\n  getServerPropertyName(): string {\n    return 'mcpServers';\n  }\n\n  getServerConfig(\n    apiKey: string | undefined,\n    type: 'sse' | 'streamable-http',\n    selectedFeatures?: string[],\n    local?: boolean,\n  ): MCPServerConfig {\n    return getDefaultServerConfig(apiKey, type, selectedFeatures, local);\n  }\n\n  async isServerInstalled(local?: boolean): Promise<boolean> {\n    try {\n      const configPath = await this.getConfigPath();\n\n      if (!fs.existsSync(configPath)) {\n        return false;\n      }\n\n      const configContent = await fs.promises.readFile(configPath, 'utf8');\n      const config = jsonc.parse(configContent) as Record<string, any>;\n      const serverPropertyName = this.getServerPropertyName();\n      const serverName = local ? 'posthog-local' : 'posthog';\n\n      return (\n        serverPropertyName in config && serverName in config[serverPropertyName]\n      );\n    } catch {\n      return false;\n    }\n  }\n\n  async addServer(\n    apiKey?: string,\n    selectedFeatures?: string[],\n    local?: boolean,\n  ): Promise<{ success: boolean }> {\n    return this._addServerType(apiKey, 'sse', selectedFeatures, local);\n  }\n\n  async _addServerType(\n    apiKey: string | undefined,\n    type: 'sse' | 'streamable-http',\n    selectedFeatures?: string[],\n    local?: boolean,\n  ): Promise<{ success: boolean }> {\n    try {\n      const configPath = await this.getConfigPath();\n      const configDir = path.dirname(configPath);\n\n      await fs.promises.mkdir(configDir, { recursive: true });\n\n      const serverPropertyName = this.getServerPropertyName();\n      let configContent = '';\n      let existingConfig = {};\n\n      if (fs.existsSync(configPath)) {\n        configContent = await fs.promises.readFile(configPath, 'utf8');\n        existingConfig = jsonc.parse(configContent) || {};\n      }\n\n      const newServerConfig = this.getServerConfig(\n        apiKey,\n        type,\n        selectedFeatures,\n        local,\n      );\n      const typedConfig = existingConfig as Record<string, any>;\n      if (!typedConfig[serverPropertyName]) {\n        typedConfig[serverPropertyName] = {};\n      }\n      const serverName = local ? 'posthog-local' : 'posthog';\n      typedConfig[serverPropertyName][serverName] = newServerConfig;\n\n      const edits = jsonc.modify(\n        configContent,\n        [serverPropertyName, serverName],\n        newServerConfig,\n        {\n          formattingOptions: {\n            tabSize: 2,\n            insertSpaces: true,\n          },\n        },\n      );\n\n      const modifiedContent = jsonc.applyEdits(configContent, edits);\n\n      await fs.promises.writeFile(configPath, modifiedContent, 'utf8');\n\n      return { success: true };\n    } catch {\n      return { success: false };\n    }\n  }\n\n  async removeServer(local?: boolean): Promise<{ success: boolean }> {\n    try {\n      const configPath = await this.getConfigPath();\n\n      if (!fs.existsSync(configPath)) {\n        return { success: false };\n      }\n\n      const configContent = await fs.promises.readFile(configPath, 'utf8');\n      const config = jsonc.parse(configContent) as Record<string, any>;\n      const serverPropertyName = this.getServerPropertyName();\n\n      const serverName = local ? 'posthog-local' : 'posthog';\n\n      if (\n        serverPropertyName in config &&\n        serverName in config[serverPropertyName]\n      ) {\n        const edits = jsonc.modify(\n          configContent,\n          [serverPropertyName, serverName],\n          undefined,\n          {\n            formattingOptions: {\n              tabSize: 2,\n              insertSpaces: true,\n            },\n          },\n        );\n\n        const modifiedContent = jsonc.applyEdits(configContent, edits);\n\n        await fs.promises.writeFile(configPath, modifiedContent, 'utf8');\n\n        return { success: true };\n      }\n    } catch {\n      //\n    }\n\n    return { success: false };\n  }\n}\n"]}

package/dist/src/steps/add-mcp-server-to-clients/__tests__/defaults.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/src/steps/add-mcp-server-to-clients/__tests__/defaults.test.js

@@ -1,72 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const defaults_1 = require("../defaults");
-describe('defaults', () => {
-    describe('buildMCPUrl', () => {
-        it('should build base URL for streamable-http type', () => {
-            const url = (0, defaults_1.buildMCPUrl)('streamable-http');
-            expect(url).toBe('https://mcp.posthog.com/mcp');
-        });
-        it('should build base URL for sse type', () => {
-            const url = (0, defaults_1.buildMCPUrl)('sse');
-            expect(url).toBe('https://mcp.posthog.com/sse');
-        });
-        it('should use localhost for local mode', () => {
-            const url = (0, defaults_1.buildMCPUrl)('streamable-http', undefined, true);
-            expect(url).toBe('http://localhost:8787/mcp');
-        });
-        it('should add features param when not all features selected', () => {
-            const url = (0, defaults_1.buildMCPUrl)('streamable-http', ['dashboards', 'insights']);
-            expect(url).toBe('https://mcp.posthog.com/mcp?features=dashboards,insights');
-        });
-        it('should not add region param in local mode', () => {
-            const url = (0, defaults_1.buildMCPUrl)('streamable-http', undefined, true);
-            expect(url).toBe('http://localhost:8787/mcp');
-        });
-    });
-    describe('getDefaultServerConfig', () => {
-        it('should return config with auth header when API key provided', () => {
-            const config = (0, defaults_1.getDefaultServerConfig)('phx_test123', 'sse');
-            expect(config).toEqual({
-                command: 'npx',
-                args: [
-                    '-y',
-                    'mcp-remote@latest',
-                    'https://mcp.posthog.com/sse',
-                    '--header',
-                    'Authorization:${POSTHOG_AUTH_HEADER}',
-                ],
-                env: {
-                    POSTHOG_AUTH_HEADER: 'Bearer phx_test123',
-                },
-            });
-        });
-        it('should return config without auth header for OAuth mode (no API key)', () => {
-            const config = (0, defaults_1.getDefaultServerConfig)(undefined, 'sse');
-            expect(config).toEqual({
-                command: 'npx',
-                args: ['-y', 'mcp-remote@latest', 'https://mcp.posthog.com/sse'],
-            });
-            expect(config).not.toHaveProperty('env');
-        });
-    });
-    describe('getNativeHTTPServerConfig', () => {
-        it('should return config with headers when API key provided', () => {
-            const config = (0, defaults_1.getNativeHTTPServerConfig)('phx_test123', 'streamable-http');
-            expect(config).toEqual({
-                url: 'https://mcp.posthog.com/mcp',
-                headers: {
-                    Authorization: 'Bearer phx_test123',
-                },
-            });
-        });
-        it('should return config without headers for OAuth mode (no API key)', () => {
-            const config = (0, defaults_1.getNativeHTTPServerConfig)(undefined, 'streamable-http');
-            expect(config).toEqual({
-                url: 'https://mcp.posthog.com/mcp',
-            });
-            expect(config).not.toHaveProperty('headers');
-        });
-    });
-});
-//# sourceMappingURL=defaults.test.js.map