@powerhousedao/shared 6.2.3-dev.9 → 6.2.3

package/dist/clis/project-env.d.mts

@@ -11,9 +11,9 @@
  * Idempotent per directory — CLI argument defaults call it lazily and may
  * call it more than once per process.
  */
-declare function loadProjectEnv(cwd?: string): void;
+export declare function loadProjectEnv(cwd?: string): void;
 /** Test seam: forget which directory has already been loaded. */
-declare function resetProjectEnvForTests(): void;
+export declare function resetProjectEnvForTests(): void;
 /**
  * Read an environment variable as a TCP port.
  *
@@ -21,7 +21,7 @@ declare function resetProjectEnvForTests(): void;
  * throwing: a typo in `.env` should fall through to the next source in the
  * precedence chain, not break the CLI.
  */
-declare function readPortEnv(name: string): number | undefined;
+export declare function readPortEnv(name: string): number | undefined;
 //#endregion
-export { loadProjectEnv, readPortEnv, resetProjectEnvForTests };
+export {};
 //# sourceMappingURL=project-env.d.mts.map

package/dist/clis/project-env.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"project-env.d.mts","names":[],"sources":["../../clis/project-env.ts"],"mappings":";;AAiBA;;;;;AAUA;;;;;AAWA;iBArBgB,cAAA,CAAe,GAAA;;iBAUf,uBAAA,CAAA;;;;;;;;iBAWA,WAAA,CAAY,IAAA"}
+{"version":3,"file":"project-env.d.mts","names":[],"sources":["../../clis/project-env.ts"],"mappings":";;;;;;;;;;;;;wBAiBgB,eAAe;;wBAUf;;;;;;;;wBAWA,YAAY"}

package/dist/clis/project-env.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"project-env.mjs","names":[],"sources":["../../clis/project-env.ts"],"sourcesContent":["import dotenv from \"dotenv\";\nimport { join } from \"node:path\";\n\nlet loadedFor: string | undefined;\n\n/**\n * Load the project's `.env.local` and `.env` into `process.env`.\n *\n * `dotenv` never overwrites a variable that is already set, so loading\n * `.env.local` first and `.env` second produces the precedence the CLI\n * documents: a real `process.env` value beats `.env.local`, which beats\n * `.env`. One `process.env` lookup afterwards therefore covers all three\n * sources.\n *\n * Idempotent per directory — CLI argument defaults call it lazily and may\n * call it more than once per process.\n */\nexport function loadProjectEnv(cwd: string = process.cwd()): void {\n  if (loadedFor === cwd) return;\n  loadedFor = cwd;\n  // dotenv 16 logs nothing for a missing file, so no suppression option is\n  // needed here (and none exists before dotenv 17).\n  dotenv.config({ path: join(cwd, \".env.local\") });\n  dotenv.config({ path: join(cwd, \".env\") });\n}\n\n/** Test seam: forget which directory has already been loaded. */\nexport function resetProjectEnvForTests(): void {\n  loadedFor = undefined;\n}\n\n/**\n * Read an environment variable as a TCP port.\n *\n * Anything that is not a plain integer in 1-65535 is ignored rather than\n * throwing: a typo in `.env` should fall through to the next source in the\n * precedence chain, not break the CLI.\n */\nexport function readPortEnv(name: string): number | undefined {\n  const raw = process.env[name]?.trim();\n  if (!raw || !/^\\d+$/.test(raw)) return undefined;\n  const port = Number(raw);\n  if (port < 1 || port > 65535) return undefined;\n  return port;\n}\n"],"mappings":";;;AAGA,IAAI;;;;;;;;;;;;;AAcJ,SAAgB,eAAe,MAAc,QAAQ,KAAK,EAAQ;AAChE,KAAI,cAAc,IAAK;AACvB,aAAY;AAGZ,QAAO,OAAO,EAAE,MAAM,KAAK,KAAK,aAAa,EAAE,CAAC;AAChD,QAAO,OAAO,EAAE,MAAM,KAAK,KAAK,OAAO,EAAE,CAAC;;;AAI5C,SAAgB,0BAAgC;AAC9C,aAAY,KAAA;;;;;;;;;AAUd,SAAgB,YAAY,MAAkC;CAC5D,MAAM,MAAM,QAAQ,IAAI,OAAO,MAAM;AACrC,KAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAE,QAAO,KAAA;CACvC,MAAM,OAAO,OAAO,IAAI;AACxB,KAAI,OAAO,KAAK,OAAO,MAAO,QAAO,KAAA;AACrC,QAAO"}
+{"version":3,"file":"project-env.mjs","names":[],"sources":["../../clis/project-env.ts"],"sourcesContent":["import dotenv from \"dotenv\";\nimport { join } from \"node:path\";\n\nlet loadedFor: string | undefined;\n\n/**\n * Load the project's `.env.local` and `.env` into `process.env`.\n *\n * `dotenv` never overwrites a variable that is already set, so loading\n * `.env.local` first and `.env` second produces the precedence the CLI\n * documents: a real `process.env` value beats `.env.local`, which beats\n * `.env`. One `process.env` lookup afterwards therefore covers all three\n * sources.\n *\n * Idempotent per directory — CLI argument defaults call it lazily and may\n * call it more than once per process.\n */\nexport function loadProjectEnv(cwd: string = process.cwd()): void {\n  if (loadedFor === cwd) return;\n  loadedFor = cwd;\n  // dotenv 16 logs nothing for a missing file, so no suppression option is\n  // needed here (and none exists before dotenv 17).\n  dotenv.config({ path: join(cwd, \".env.local\") });\n  dotenv.config({ path: join(cwd, \".env\") });\n}\n\n/** Test seam: forget which directory has already been loaded. */\nexport function resetProjectEnvForTests(): void {\n  loadedFor = undefined;\n}\n\n/**\n * Read an environment variable as a TCP port.\n *\n * Anything that is not a plain integer in 1-65535 is ignored rather than\n * throwing: a typo in `.env` should fall through to the next source in the\n * precedence chain, not break the CLI.\n */\nexport function readPortEnv(name: string): number | undefined {\n  const raw = process.env[name]?.trim();\n  if (!raw || !/^\\d+$/.test(raw)) return undefined;\n  const port = Number(raw);\n  if (port < 1 || port > 65535) return undefined;\n  return port;\n}\n"],"mappings":";;;AAGA,IAAI;;;;;;;;;;;;;AAcJ,SAAgB,eAAe,MAAc,QAAQ,IAAI,GAAS;CAChE,IAAI,cAAc,KAAK;CACvB,YAAY;CAGZ,OAAO,OAAO,EAAE,MAAM,KAAK,KAAK,YAAY,EAAE,CAAC;CAC/C,OAAO,OAAO,EAAE,MAAM,KAAK,KAAK,MAAM,EAAE,CAAC;AAC3C;;AAGA,SAAgB,0BAAgC;CAC9C,YAAY,KAAA;AACd;;;;;;;;AASA,SAAgB,YAAY,MAAkC;CAC5D,MAAM,MAAM,QAAQ,IAAI,KAAK,EAAE,KAAK;CACpC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,GAAG,GAAG,OAAO,KAAA;CACvC,MAAM,OAAO,OAAO,GAAG;CACvB,IAAI,OAAO,KAAK,OAAO,OAAO,OAAO,KAAA;CACrC,OAAO;AACT"}

package/dist/clis/project-ports.d.mts

@@ -1,5 +1,5 @@
 //#region clis/project-ports.d.ts
-type ProjectPorts = {
+export type ProjectPorts = {
   switchboardPort: number;
   studioPort: number;
   vetraConnectPort: number;
@@ -13,7 +13,7 @@ type ProjectPorts = {
  * bands, and well-known services. Being generous here is nearly free — the
  * whole list costs 83 of 1000 offsets.
  */
-declare const PROJECT_PORT_DENYLIST: ReadonlySet<number>;
+export declare const PROJECT_PORT_DENYLIST: ReadonlySet<number>;
 /**
  * Derive a project's dev-server port triple from its package name.
  *
@@ -29,12 +29,12 @@ declare const PROJECT_PORT_DENYLIST: ReadonlySet<number>;
  * until all three are clear — so the result stays reproducible from the name
  * alone.
  */
-declare function deriveProjectPorts(projectName: string): ProjectPorts;
+export declare function deriveProjectPorts(projectName: string): ProjectPorts;
 /** Every port this scheme can hand out, for cross-checking against other tools. */
-declare function projectPortBands(): {
+export declare function projectPortBands(): {
   from: number;
   to: number;
 }[];
 //#endregion
-export { PROJECT_PORT_DENYLIST, ProjectPorts, deriveProjectPorts, projectPortBands };
+export {};
 //# sourceMappingURL=project-ports.d.mts.map

package/dist/clis/project-ports.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"project-ports.d.mts","names":[],"sources":["../../clis/project-ports.ts"],"mappings":";KAQY,YAAA;EACV,eAAA;EACA,UAAA;EACA,gBAAA;AAAA;;;;;;AAsBF;;;;cAAa,qBAAA,EAAuB,WAAA;AAuDpC;;;;;AAsBA;;;;;;;;;;AAtBA,iBAAgB,kBAAA,CAAmB,WAAA,WAAsB,YAAA;;iBAsBzC,gBAAA,CAAA;EAAsB,IAAA;EAAc,EAAA;AAAA"}
+{"version":3,"file":"project-ports.d.mts","names":[],"sources":["../../clis/project-ports.ts"],"mappings":";YAQY;EACV;EACA;EACA;;;;;;;;;;;qBAsBW,uBAAuB;;;;;;;;;;;;;;;;wBAuDpB,mBAAmB,sBAAsB;;wBAsBzC;EAAsB;EAAc"}

package/dist/clis/project-ports.mjs

@@ -18,7 +18,7 @@ function inclusive(from, to) {
 * bands, and well-known services. Being generous here is nearly free — the
 * whole list costs 83 of 1000 offsets.
 */
-const PROJECT_PORT_DENYLIST = new Set([
+const PROJECT_PORT_DENYLIST = /* @__PURE__ */ new Set([
 	2e3,
 	2049,
 	2181,

package/dist/clis/project-ports.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"project-ports.mjs","names":[],"sources":["../../clis/project-ports.ts"],"sourcesContent":["import fnv1a from \"@sindresorhus/fnv1a\";\nimport {\n  PROJECT_PORT_BAND_SIZE,\n  PROJECT_PORT_BAND_STUDIO,\n  PROJECT_PORT_BAND_SWITCHBOARD,\n  PROJECT_PORT_BAND_VETRA_CONNECT,\n} from \"./constants.js\";\n\nexport type ProjectPorts = {\n  switchboardPort: number;\n  studioPort: number;\n  vetraConnectPort: number;\n};\n\nconst BANDS = [\n  PROJECT_PORT_BAND_SWITCHBOARD,\n  PROJECT_PORT_BAND_STUDIO,\n  PROJECT_PORT_BAND_VETRA_CONNECT,\n] as const;\n\nfunction inclusive(from: number, to: number): number[] {\n  return Array.from({ length: to - from + 1 }, (_, i) => from + i);\n}\n\n/**\n * Offsets whose derived port would land on something a developer machine\n * plausibly already holds. Skipped rather than assigned, so a project never\n * starts life needing a port override.\n *\n * Two sources: ports the Powerhouse repos themselves reference inside these\n * bands, and well-known services. Being generous here is nearly free — the\n * whole list costs 83 of 1000 offsets.\n */\nexport const PROJECT_PORT_DENYLIST: ReadonlySet<number> = new Set<number>([\n  // 2000 band\n  2000, // Cisco SCCP\n  2049, // NFS\n  2181, // ZooKeeper\n  2222, // alternate SSH\n  2375,\n  2376,\n  2377, // Docker daemon and Swarm\n  2483,\n  2484, // Oracle DB\n  // 6000 band\n  ...inclusive(6000, 6063), // X11 TCP listeners\n  6006, // Storybook / TensorBoard\n  6060, // Go pprof\n  6100,\n  6200,\n  6300,\n  6500, // referenced elsewhere in the Powerhouse repos\n  6379, // Redis\n  6443, // Kubernetes API server\n  6666,\n  6667, // IRC\n  // 7000 band\n  7000,\n  7001, // macOS AirPlay receiver / Cassandra\n  7077, // Spark\n  7474,\n  7687, // Neo4j HTTP and Bolt\n  7777, // referenced elsewhere in the Powerhouse repos\n]);\n\nfunction portsForOffset(offset: number): ProjectPorts {\n  return {\n    switchboardPort: PROJECT_PORT_BAND_SWITCHBOARD + offset,\n    studioPort: PROJECT_PORT_BAND_STUDIO + offset,\n    vetraConnectPort: PROJECT_PORT_BAND_VETRA_CONNECT + offset,\n  };\n}\n\n/**\n * Derive a project's dev-server port triple from its package name.\n *\n * Name-derived rather than path-derived on purpose: the switchboard port is\n * written literally into the project's committed `.mcp.json`, because an MCP\n * client resolves that file at session start and cannot read the project\n * config or `.env`. A path-derived value would differ on every machine that\n * clones the repo.\n *\n * The three ports share one offset, so a project's numbers end in the same\n * three digits (`my-package` gets 7834 / 6834 / 2834). When any of the three\n * would hit {@link PROJECT_PORT_DENYLIST}, the offset advances deterministically\n * until all three are clear — so the result stays reproducible from the name\n * alone.\n */\nexport function deriveProjectPorts(projectName: string): ProjectPorts {\n  if (!projectName.trim()) {\n    throw new Error(\"A project name is required to derive project ports.\");\n  }\n  const start = Number(\n    fnv1a(projectName, { size: 32 }) % BigInt(PROJECT_PORT_BAND_SIZE),\n  );\n  for (let step = 0; step < PROJECT_PORT_BAND_SIZE; step++) {\n    const offset = (start + step) % PROJECT_PORT_BAND_SIZE;\n    const ports = portsForOffset(offset);\n    if (!Object.values(ports).some((port) => PROJECT_PORT_DENYLIST.has(port))) {\n      return ports;\n    }\n  }\n  // Unreachable: the denylist covers far fewer offsets than the band holds.\n  throw new Error(\n    `No free port offset for project \"${projectName}\" — every offset in the ` +\n      `${PROJECT_PORT_BAND_SIZE}-wide band is denied.`,\n  );\n}\n\n/** Every port this scheme can hand out, for cross-checking against other tools. */\nexport function projectPortBands(): { from: number; to: number }[] {\n  return BANDS.map((base) => ({\n    from: base,\n    to: base + PROJECT_PORT_BAND_SIZE - 1,\n  }));\n}\n"],"mappings":";;;AAcA,MAAM,QAAQ;CACZ;CACA;CACA;CACD;AAED,SAAS,UAAU,MAAc,IAAsB;AACrD,QAAO,MAAM,KAAK,EAAE,QAAQ,KAAK,OAAO,GAAG,GAAG,GAAG,MAAM,OAAO,EAAE;;;;;;;;;;;AAYlE,MAAa,wBAA6C,IAAI,IAAY;CAExE;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,GAAG,UAAU,KAAM,KAAK;CACxB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAEF,SAAS,eAAe,QAA8B;AACpD,QAAO;EACL,iBAAiB,gCAAgC;EACjD,YAAY,2BAA2B;EACvC,kBAAkB,kCAAkC;EACrD;;;;;;;;;;;;;;;;;AAkBH,SAAgB,mBAAmB,aAAmC;AACpE,KAAI,CAAC,YAAY,MAAM,CACrB,OAAM,IAAI,MAAM,sDAAsD;CAExE,MAAM,QAAQ,OACZ,MAAM,aAAa,EAAE,MAAM,IAAI,CAAC,GAAG,OAAO,uBAAuB,CAClE;AACD,MAAK,IAAI,OAAO,GAAG,OAAO,wBAAwB,QAAQ;EAExD,MAAM,QAAQ,gBADE,QAAQ,QAAQ,uBACI;AACpC,MAAI,CAAC,OAAO,OAAO,MAAM,CAAC,MAAM,SAAS,sBAAsB,IAAI,KAAK,CAAC,CACvE,QAAO;;AAIX,OAAM,IAAI,MACR,oCAAoC,YAAY,0BAC3C,uBAAuB,uBAC7B;;;AAIH,SAAgB,mBAAmD;AACjE,QAAO,MAAM,KAAK,UAAU;EAC1B,MAAM;EACN,IAAI,OAAO,yBAAyB;EACrC,EAAE"}
+{"version":3,"file":"project-ports.mjs","names":[],"sources":["../../clis/project-ports.ts"],"sourcesContent":["import fnv1a from \"@sindresorhus/fnv1a\";\nimport {\n  PROJECT_PORT_BAND_SIZE,\n  PROJECT_PORT_BAND_STUDIO,\n  PROJECT_PORT_BAND_SWITCHBOARD,\n  PROJECT_PORT_BAND_VETRA_CONNECT,\n} from \"./constants.js\";\n\nexport type ProjectPorts = {\n  switchboardPort: number;\n  studioPort: number;\n  vetraConnectPort: number;\n};\n\nconst BANDS = [\n  PROJECT_PORT_BAND_SWITCHBOARD,\n  PROJECT_PORT_BAND_STUDIO,\n  PROJECT_PORT_BAND_VETRA_CONNECT,\n] as const;\n\nfunction inclusive(from: number, to: number): number[] {\n  return Array.from({ length: to - from + 1 }, (_, i) => from + i);\n}\n\n/**\n * Offsets whose derived port would land on something a developer machine\n * plausibly already holds. Skipped rather than assigned, so a project never\n * starts life needing a port override.\n *\n * Two sources: ports the Powerhouse repos themselves reference inside these\n * bands, and well-known services. Being generous here is nearly free — the\n * whole list costs 83 of 1000 offsets.\n */\nexport const PROJECT_PORT_DENYLIST: ReadonlySet<number> = new Set<number>([\n  // 2000 band\n  2000, // Cisco SCCP\n  2049, // NFS\n  2181, // ZooKeeper\n  2222, // alternate SSH\n  2375,\n  2376,\n  2377, // Docker daemon and Swarm\n  2483,\n  2484, // Oracle DB\n  // 6000 band\n  ...inclusive(6000, 6063), // X11 TCP listeners\n  6006, // Storybook / TensorBoard\n  6060, // Go pprof\n  6100,\n  6200,\n  6300,\n  6500, // referenced elsewhere in the Powerhouse repos\n  6379, // Redis\n  6443, // Kubernetes API server\n  6666,\n  6667, // IRC\n  // 7000 band\n  7000,\n  7001, // macOS AirPlay receiver / Cassandra\n  7077, // Spark\n  7474,\n  7687, // Neo4j HTTP and Bolt\n  7777, // referenced elsewhere in the Powerhouse repos\n]);\n\nfunction portsForOffset(offset: number): ProjectPorts {\n  return {\n    switchboardPort: PROJECT_PORT_BAND_SWITCHBOARD + offset,\n    studioPort: PROJECT_PORT_BAND_STUDIO + offset,\n    vetraConnectPort: PROJECT_PORT_BAND_VETRA_CONNECT + offset,\n  };\n}\n\n/**\n * Derive a project's dev-server port triple from its package name.\n *\n * Name-derived rather than path-derived on purpose: the switchboard port is\n * written literally into the project's committed `.mcp.json`, because an MCP\n * client resolves that file at session start and cannot read the project\n * config or `.env`. A path-derived value would differ on every machine that\n * clones the repo.\n *\n * The three ports share one offset, so a project's numbers end in the same\n * three digits (`my-package` gets 7834 / 6834 / 2834). When any of the three\n * would hit {@link PROJECT_PORT_DENYLIST}, the offset advances deterministically\n * until all three are clear — so the result stays reproducible from the name\n * alone.\n */\nexport function deriveProjectPorts(projectName: string): ProjectPorts {\n  if (!projectName.trim()) {\n    throw new Error(\"A project name is required to derive project ports.\");\n  }\n  const start = Number(\n    fnv1a(projectName, { size: 32 }) % BigInt(PROJECT_PORT_BAND_SIZE),\n  );\n  for (let step = 0; step < PROJECT_PORT_BAND_SIZE; step++) {\n    const offset = (start + step) % PROJECT_PORT_BAND_SIZE;\n    const ports = portsForOffset(offset);\n    if (!Object.values(ports).some((port) => PROJECT_PORT_DENYLIST.has(port))) {\n      return ports;\n    }\n  }\n  // Unreachable: the denylist covers far fewer offsets than the band holds.\n  throw new Error(\n    `No free port offset for project \"${projectName}\" — every offset in the ` +\n      `${PROJECT_PORT_BAND_SIZE}-wide band is denied.`,\n  );\n}\n\n/** Every port this scheme can hand out, for cross-checking against other tools. */\nexport function projectPortBands(): { from: number; to: number }[] {\n  return BANDS.map((base) => ({\n    from: base,\n    to: base + PROJECT_PORT_BAND_SIZE - 1,\n  }));\n}\n"],"mappings":";;;AAcA,MAAM,QAAQ;CACZ;CACA;CACA;AACF;AAEA,SAAS,UAAU,MAAc,IAAsB;CACrD,OAAO,MAAM,KAAK,EAAE,QAAQ,KAAK,OAAO,EAAE,IAAI,GAAG,MAAM,OAAO,CAAC;AACjE;;;;;;;;;;AAWA,MAAa,wCAA6C,IAAI,IAAY;CAExE;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,GAAG,UAAU,KAAM,IAAI;CACvB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,eAAe,QAA8B;CACpD,OAAO;EACL,iBAAiB,gCAAgC;EACjD,YAAY,2BAA2B;EACvC,kBAAkB,kCAAkC;CACtD;AACF;;;;;;;;;;;;;;;;AAiBA,SAAgB,mBAAmB,aAAmC;CACpE,IAAI,CAAC,YAAY,KAAK,GACpB,MAAM,IAAI,MAAM,qDAAqD;CAEvE,MAAM,QAAQ,OACZ,MAAM,aAAa,EAAE,MAAM,GAAG,CAAC,IAAI,OAAO,sBAAsB,CAClE;CACA,KAAK,IAAI,OAAO,GAAG,OAAO,wBAAwB,QAAQ;EAExD,MAAM,QAAQ,gBADE,QAAQ,QAAQ,sBACG;EACnC,IAAI,CAAC,OAAO,OAAO,KAAK,CAAC,CAAC,MAAM,SAAS,sBAAsB,IAAI,IAAI,CAAC,GACtE,OAAO;CAEX;CAEA,MAAM,IAAI,MACR,oCAAoC,YAAY,0BAC3C,uBAAuB,sBAC9B;AACF;;AAGA,SAAgB,mBAAmD;CACjE,OAAO,MAAM,KAAK,UAAU;EAC1B,MAAM;EACN,IAAI,OAAO,yBAAyB;CACtC,EAAE;AACJ"}

package/dist/clis/services/telemetry.d.mts

@@ -1,12 +1,12 @@
 //#region clis/services/telemetry.d.ts
-type CliInvocationInfo = {
+export type CliInvocationInfo = {
   command?: string;
   subcommand?: string;
   pm?: string;
   argv: string[];
   cwd?: string;
 };
-type TelemetryClient = {
+export type TelemetryClient = {
   /**
    * Attaches per-invocation context (command, sanitized argv, package
    * manager) as Sentry tags + a `invocation` context block, plus a single
@@ -25,23 +25,23 @@ type TelemetryClient = {
  * Prompts the user once, caches the answer. Must be called before init.
  * Returns `true` if telemetry should be enabled, `false` otherwise.
  */
-declare function resolveTelemetryConsent(): Promise<boolean>;
+export declare function resolveTelemetryConsent(): Promise<boolean>;
 /**
  * Initializes Sentry for CLI error reporting if telemetry is enabled.
  * Safe to call multiple times; only the first call takes effect.
  */
-declare function initCliTelemetry(opts: {
+export declare function initCliTelemetry(opts: {
   cliName: "ph-cli" | "ph-cmd";
   release?: string;
 }): Promise<TelemetryClient | undefined>;
 /**
  * Explicitly set telemetry consent (used by `ph telemetry on|off`).
  */
-declare function setTelemetryConsent(enabled: boolean): void;
+export declare function setTelemetryConsent(enabled: boolean): void;
 /**
  * Returns the current telemetry state — useful for `ph telemetry status`.
  */
-declare function getTelemetryStatus(): {
+export declare function getTelemetryStatus(): {
   source: "env";
   enabled: boolean;
 } | {
@@ -53,5 +53,5 @@ declare function getTelemetryStatus(): {
   enabled: false;
 };
 //#endregion
-export { CliInvocationInfo, TelemetryClient, getTelemetryStatus, initCliTelemetry, resolveTelemetryConsent, setTelemetryConsent };
+export {};
 //# sourceMappingURL=telemetry.d.mts.map

package/dist/clis/services/telemetry.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.d.mts","names":[],"sources":["../../../clis/services/telemetry.ts"],"mappings":";KAmCY,iBAAA;EACV,OAAA;EACA,UAAA;EACA,EAAA;EACA,IAAA;EACA,GAAA;AAAA;AAAA,KAGU,eAAA;EAJV;;;;AAIF;EAME,uBAAA,GAA0B,IAAA,EAAM,iBAAA;;;;;EAKhC,eAAA,GACE,GAAA,WACA,IAAA;IAAS,IAAA;EAAA,MACN,OAAA;AAAA;;;;;iBA8Ce,uBAAA,CAAA,GAA2B,OAAA;;;;;iBAgH3B,gBAAA,CAAiB,IAAA;EACrC,OAAA;EACA,OAAA;AAAA,IACE,OAAA,CAAQ,eAAA;;;;iBAgGI,mBAAA,CAAoB,OAAA;;;;iBAOpB,kBAAA,CAAA;EACV,MAAA;EAAe,OAAA;AAAA;EACf,MAAA;EAAkB,OAAA;EAAkB,OAAA;AAAA;EACpC,MAAA;EAAmB,OAAA;AAAA"}
+{"version":3,"file":"telemetry.d.mts","names":[],"sources":["../../../clis/services/telemetry.ts"],"mappings":";YAmCY;EACV;EACA;EACA;EACA;EACA;;YAGU;;;;;;EAMV,0BAA0B,MAAM;;;;;EAKhC,kBACE,cACA;IAAS;QACN;;;;;;wBA8Ce,2BAA2B;;;;;wBAgH3B,iBAAiB;EACrC;EACA;IACE,QAAQ;;;;wBAgGI,oBAAoB;;;;wBAOpB;EACV;EAAe;;EACf;EAAkB;EAAkB;;EACpC;EAAmB"}

package/dist/clis/services/telemetry.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.mjs","names":[],"sources":["../../../clis/services/telemetry.ts"],"sourcesContent":["/**\n * CLI telemetry (error reporting via Sentry).\n *\n * Design:\n * - Opt-out by default, asked once on first interactive run.\n * - Stores consent in ~/.ph/telemetry.json so we never ask twice.\n * - Respects PH_NO_TELEMETRY=1 and DO_NOT_TRACK=1 as immediate kill switches.\n * - Non-interactive (TTY missing, CI, piped) defaults to DISABLED — we don't\n *   want to hang a CI pipeline on an unanswered prompt, and we don't want to\n *   capture errors without informed consent.\n * - DSN is published in the CLI binary; Sentry DSNs accept events but grant\n *   no read access, so this is safe. Hardcoded so users can't accidentally\n *   misroute events.\n *\n * PII scrubbing in beforeSend hook:\n * - Home-directory paths collapsed to ~\n * - Flag/arg values that look like secrets (tokens, keys) stripped\n * - No source-context from user files\n */\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\n// Sentry project \"ph-cli\" on the powerhouse-hosted Sentry instance.\n// Public DSNs are safe to ship — they grant write-only ingest access.\nconst SENTRY_DSN =\n  \"https://0e7793802288589b4923896118374462@sentry.monitoring.vetra.io/3\";\n\nconst TELEMETRY_FILE = join(homedir(), \".ph\", \"telemetry.json\");\n\ntype TelemetryConfig = {\n  enabled: boolean;\n  askedAt: string;\n};\n\nexport type CliInvocationInfo = {\n  command?: string;\n  subcommand?: string;\n  pm?: string;\n  argv: string[];\n  cwd?: string;\n};\n\nexport type TelemetryClient = {\n  /**\n   * Attaches per-invocation context (command, sanitized argv, package\n   * manager) as Sentry tags + a `invocation` context block, plus a single\n   * \"cli invoked\" breadcrumb. Safe to call once per process.\n   */\n  attachInvocationContext: (info: CliInvocationInfo) => void;\n  /**\n   * Captures an error (if telemetry is initialized) and flushes before the\n   * caller calls process.exit(). Safe no-op when telemetry is disabled.\n   */\n  captureCliError: (\n    err: unknown,\n    opts?: { kind?: \"crash\" | \"user\" },\n  ) => Promise<void>;\n};\n\nfunction isExplicitlyDisabled(): boolean {\n  // Standard opt-out signals respected by most OSS CLIs.\n  return (\n    process.env.PH_NO_TELEMETRY === \"1\" ||\n    process.env.PH_NO_TELEMETRY === \"true\" ||\n    process.env.DO_NOT_TRACK === \"1\" ||\n    process.env.DO_NOT_TRACK === \"true\"\n  );\n}\n\nfunction isExplicitlyEnabled(): boolean {\n  return (\n    process.env.PH_TELEMETRY === \"1\" || process.env.PH_TELEMETRY === \"true\"\n  );\n}\n\nfunction isInteractive(): boolean {\n  // Only ask if stdin is a TTY and CI env isn't set.\n  return Boolean(process.stdin.isTTY) && !process.env.CI;\n}\n\nfunction readConfig(): TelemetryConfig | null {\n  try {\n    if (!existsSync(TELEMETRY_FILE)) return null;\n    return JSON.parse(readFileSync(TELEMETRY_FILE, \"utf8\")) as TelemetryConfig;\n  } catch {\n    return null;\n  }\n}\n\nfunction writeConfig(cfg: TelemetryConfig): void {\n  try {\n    mkdirSync(join(homedir(), \".ph\"), { recursive: true });\n    writeFileSync(TELEMETRY_FILE, JSON.stringify(cfg, null, 2));\n  } catch {\n    // non-fatal; we'll just ask again next time\n  }\n}\n\n/**\n * Prompts the user once, caches the answer. Must be called before init.\n * Returns `true` if telemetry should be enabled, `false` otherwise.\n */\nexport async function resolveTelemetryConsent(): Promise<boolean> {\n  if (isExplicitlyDisabled()) return false;\n  if (isExplicitlyEnabled()) return true;\n\n  const cached = readConfig();\n  if (cached) return cached.enabled;\n\n  if (!isInteractive()) {\n    // Non-interactive first run: stay silent, don't ask, don't send. User can\n    // opt in later with `ph telemetry on` or PH_TELEMETRY=1.\n    return false;\n  }\n\n  const enquirer = await import(\"enquirer\");\n  try {\n    const { enabled } = await enquirer.default.prompt<{ enabled: boolean }>({\n      type: \"confirm\",\n      name: \"enabled\",\n      message:\n        \"Help improve Powerhouse by sending anonymous error reports? \" +\n        \"(stack traces only, paths and secrets are scrubbed)\",\n      initial: true,\n    });\n    writeConfig({ enabled, askedAt: new Date().toISOString() });\n    return enabled;\n  } catch {\n    // user hit Ctrl-C during prompt — treat as no, but don't persist so we\n    // ask again next time\n    return false;\n  }\n}\n\nfunction scrubString(input: string): string {\n  if (!input) return input;\n  const home = homedir();\n  let out = input;\n  // Collapse home dir to ~\n  if (home && out.includes(home)) {\n    out = out.split(home).join(\"~\");\n  }\n  // Strip common secret-shaped flag values: --token=XYZ, --api-key XYZ, etc.\n  out = out.replace(\n    /(--?(?:token|api[-_]?key|password|secret|auth)[=\\s])([^\\s]+)/gi,\n    \"$1<redacted>\",\n  );\n  return out;\n}\n\ntype ScrubbableFrame = {\n  filename?: string;\n  abs_path?: string;\n  pre_context?: unknown;\n  context_line?: unknown;\n  post_context?: unknown;\n  vars?: unknown;\n};\n\ntype ScrubbableException = {\n  value?: string;\n  stacktrace?: { frames?: ScrubbableFrame[] };\n};\n\ntype ScrubbableEvent = {\n  message?: string;\n  logentry?: { message?: string };\n  exception?: { values?: ScrubbableException[] };\n  server_name?: string;\n  extra?: Record<string, unknown>;\n};\n\nfunction scrubEvent<T>(event: T): T {\n  const e = event as ScrubbableEvent;\n  try {\n    if (e.message) e.message = scrubString(e.message);\n    if (e.logentry?.message) {\n      e.logentry.message = scrubString(e.logentry.message);\n    }\n    const values = e.exception?.values;\n    if (Array.isArray(values)) {\n      for (const ex of values) {\n        if (ex.value) ex.value = scrubString(ex.value);\n        const frames = ex.stacktrace?.frames;\n        if (Array.isArray(frames)) {\n          for (const f of frames) {\n            if (f.filename) f.filename = scrubString(f.filename);\n            if (f.abs_path) f.abs_path = scrubString(f.abs_path);\n            // Drop captured source context from user machines — privacy.\n            delete f.pre_context;\n            delete f.context_line;\n            delete f.post_context;\n            delete f.vars;\n          }\n        }\n      }\n    }\n    // Server name can leak the user's machine hostname; drop it.\n    delete e.server_name;\n    // Strip raw argv from extra context.\n    if (e.extra) {\n      delete e.extra.argv;\n      delete e.extra.env;\n    }\n  } catch {\n    // Never let scrubbing throw — worst case we drop the event below.\n  }\n  return event;\n}\n\n/**\n * Initializes Sentry for CLI error reporting if telemetry is enabled.\n * Safe to call multiple times; only the first call takes effect.\n */\nexport async function initCliTelemetry(opts: {\n  cliName: \"ph-cli\" | \"ph-cmd\";\n  release?: string;\n}): Promise<TelemetryClient | undefined> {\n  const enabled = await resolveTelemetryConsent();\n  if (!enabled) return;\n\n  const Sentry = await import(\"@sentry/node-core/light\");\n  const os = await import(\"node:os\");\n  const sentryClient = Sentry.init({\n    dsn: SENTRY_DSN,\n    release: opts.release,\n    environment: process.env.NODE_ENV || \"production\",\n    sendDefaultPii: false,\n    defaultIntegrations: false,\n    integrations: [\n      // Only the bare minimum — no automatic HTTP/FS instrumentation.\n    ],\n    beforeSend(event) {\n      return scrubEvent(event);\n    },\n    beforeBreadcrumb(breadcrumb) {\n      if (breadcrumb.message) {\n        breadcrumb.message = scrubString(breadcrumb.message);\n      }\n      return breadcrumb;\n    },\n  });\n  Sentry.setTag(\"cli_name\", opts.cliName);\n  if (opts.release) Sentry.setTag(\"cli_version\", opts.release);\n  // Environment tags — `defaultIntegrations: false` strips Sentry's auto\n  // node-context, so attach the bits we care about manually (and keep\n  // hostname out of it).\n  Sentry.setTag(\"os\", process.platform);\n  Sentry.setTag(\"arch\", process.arch);\n  Sentry.setTag(\"node_version\", process.version);\n  Sentry.setTag(\"ci\", String(Boolean(process.env.CI)));\n  Sentry.setTag(\"tty\", String(Boolean(process.stdin.isTTY)));\n  Sentry.setContext(\"runtime\", {\n    name: \"node\",\n    version: process.version,\n  });\n  Sentry.setContext(\"os\", {\n    name: process.platform,\n    version: os.release(),\n  });\n  Sentry.setContext(\"device\", {\n    arch: process.arch,\n  });\n  if (!sentryClient) {\n    return;\n  }\n  return {\n    attachInvocationContext(info: CliInvocationInfo) {\n      const argv = info.argv.map(scrubString);\n      const flagNames = info.argv\n        .filter((a) => a.startsWith(\"-\"))\n        .map((a) => a.split(\"=\")[0]);\n      if (info.command) Sentry.setTag(\"command\", info.command);\n      if (info.subcommand) Sentry.setTag(\"subcommand\", info.subcommand);\n      if (info.pm) Sentry.setTag(\"pm\", info.pm);\n      Sentry.setContext(\"invocation\", {\n        command: info.command,\n        subcommand: info.subcommand,\n        argv,\n        flag_names: flagNames,\n        argv_count: argv.length,\n        cwd: info.cwd ? scrubString(info.cwd) : undefined,\n      });\n      Sentry.addBreadcrumb({\n        category: \"cli\",\n        level: \"info\",\n        message: \"cli invoked\",\n        data: {\n          command: info.command,\n          pm: info.pm,\n          tty: Boolean(process.stdin.isTTY),\n          ci: Boolean(process.env.CI),\n        },\n      });\n    },\n    captureCliError: async (\n      err: unknown,\n      captureOpts?: { kind?: \"crash\" | \"user\" },\n    ) => {\n      try {\n        Sentry.setTag(\"error_kind\", captureOpts?.kind ?? \"crash\");\n        sentryClient.captureException(err);\n        await sentryClient.flush(2000);\n      } catch {\n        // Reporting must never mask the real error.\n      }\n    },\n  };\n}\n\n/**\n * Explicitly set telemetry consent (used by `ph telemetry on|off`).\n */\nexport function setTelemetryConsent(enabled: boolean): void {\n  writeConfig({ enabled, askedAt: new Date().toISOString() });\n}\n\n/**\n * Returns the current telemetry state — useful for `ph telemetry status`.\n */\nexport function getTelemetryStatus():\n  | { source: \"env\"; enabled: boolean }\n  | { source: \"config\"; enabled: boolean; askedAt: string }\n  | { source: \"default\"; enabled: false } {\n  if (isExplicitlyDisabled()) return { source: \"env\", enabled: false };\n  if (isExplicitlyEnabled()) return { source: \"env\", enabled: true };\n  const cached = readConfig();\n  if (cached)\n    return {\n      source: \"config\",\n      enabled: cached.enabled,\n      askedAt: cached.askedAt,\n    };\n  return { source: \"default\", enabled: false };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAM,aACJ;AAEF,MAAM,iBAAiB,KAAK,SAAS,EAAE,OAAO,iBAAiB;AAgC/D,SAAS,uBAAgC;AAEvC,QACE,QAAQ,IAAI,oBAAoB,OAChC,QAAQ,IAAI,oBAAoB,UAChC,QAAQ,IAAI,iBAAiB,OAC7B,QAAQ,IAAI,iBAAiB;;AAIjC,SAAS,sBAA+B;AACtC,QACE,QAAQ,IAAI,iBAAiB,OAAO,QAAQ,IAAI,iBAAiB;;AAIrE,SAAS,gBAAyB;AAEhC,QAAO,QAAQ,QAAQ,MAAM,MAAM,IAAI,CAAC,QAAQ,IAAI;;AAGtD,SAAS,aAAqC;AAC5C,KAAI;AACF,MAAI,CAAC,WAAW,eAAe,CAAE,QAAO;AACxC,SAAO,KAAK,MAAM,aAAa,gBAAgB,OAAO,CAAC;SACjD;AACN,SAAO;;;AAIX,SAAS,YAAY,KAA4B;AAC/C,KAAI;AACF,YAAU,KAAK,SAAS,EAAE,MAAM,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,gBAAc,gBAAgB,KAAK,UAAU,KAAK,MAAM,EAAE,CAAC;SACrD;;;;;;AASV,eAAsB,0BAA4C;AAChE,KAAI,sBAAsB,CAAE,QAAO;AACnC,KAAI,qBAAqB,CAAE,QAAO;CAElC,MAAM,SAAS,YAAY;AAC3B,KAAI,OAAQ,QAAO,OAAO;AAE1B,KAAI,CAAC,eAAe,CAGlB,QAAO;CAGT,MAAM,WAAW,MAAM,OAAO;AAC9B,KAAI;EACF,MAAM,EAAE,YAAY,MAAM,SAAS,QAAQ,OAA6B;GACtE,MAAM;GACN,MAAM;GACN,SACE;GAEF,SAAS;GACV,CAAC;AACF,cAAY;GAAE;GAAS,0BAAS,IAAI,MAAM,EAAC,aAAa;GAAE,CAAC;AAC3D,SAAO;SACD;AAGN,SAAO;;;AAIX,SAAS,YAAY,OAAuB;AAC1C,KAAI,CAAC,MAAO,QAAO;CACnB,MAAM,OAAO,SAAS;CACtB,IAAI,MAAM;AAEV,KAAI,QAAQ,IAAI,SAAS,KAAK,CAC5B,OAAM,IAAI,MAAM,KAAK,CAAC,KAAK,IAAI;AAGjC,OAAM,IAAI,QACR,kEACA,eACD;AACD,QAAO;;AAyBT,SAAS,WAAc,OAAa;CAClC,MAAM,IAAI;AACV,KAAI;AACF,MAAI,EAAE,QAAS,GAAE,UAAU,YAAY,EAAE,QAAQ;AACjD,MAAI,EAAE,UAAU,QACd,GAAE,SAAS,UAAU,YAAY,EAAE,SAAS,QAAQ;EAEtD,MAAM,SAAS,EAAE,WAAW;AAC5B,MAAI,MAAM,QAAQ,OAAO,CACvB,MAAK,MAAM,MAAM,QAAQ;AACvB,OAAI,GAAG,MAAO,IAAG,QAAQ,YAAY,GAAG,MAAM;GAC9C,MAAM,SAAS,GAAG,YAAY;AAC9B,OAAI,MAAM,QAAQ,OAAO,CACvB,MAAK,MAAM,KAAK,QAAQ;AACtB,QAAI,EAAE,SAAU,GAAE,WAAW,YAAY,EAAE,SAAS;AACpD,QAAI,EAAE,SAAU,GAAE,WAAW,YAAY,EAAE,SAAS;AAEpD,WAAO,EAAE;AACT,WAAO,EAAE;AACT,WAAO,EAAE;AACT,WAAO,EAAE;;;AAMjB,SAAO,EAAE;AAET,MAAI,EAAE,OAAO;AACX,UAAO,EAAE,MAAM;AACf,UAAO,EAAE,MAAM;;SAEX;AAGR,QAAO;;;;;;AAOT,eAAsB,iBAAiB,MAGE;AAEvC,KAAI,CADY,MAAM,yBAAyB,CACjC;CAEd,MAAM,SAAS,MAAM,OAAO;CAC5B,MAAM,KAAK,MAAM,OAAO;CACxB,MAAM,eAAe,OAAO,KAAK;EAC/B,KAAK;EACL,SAAS,KAAK;EACd,aAAa,QAAQ,IAAI,YAAY;EACrC,gBAAgB;EAChB,qBAAqB;EACrB,cAAc,EAEb;EACD,WAAW,OAAO;AAChB,UAAO,WAAW,MAAM;;EAE1B,iBAAiB,YAAY;AAC3B,OAAI,WAAW,QACb,YAAW,UAAU,YAAY,WAAW,QAAQ;AAEtD,UAAO;;EAEV,CAAC;AACF,QAAO,OAAO,YAAY,KAAK,QAAQ;AACvC,KAAI,KAAK,QAAS,QAAO,OAAO,eAAe,KAAK,QAAQ;AAI5D,QAAO,OAAO,MAAM,QAAQ,SAAS;AACrC,QAAO,OAAO,QAAQ,QAAQ,KAAK;AACnC,QAAO,OAAO,gBAAgB,QAAQ,QAAQ;AAC9C,QAAO,OAAO,MAAM,OAAO,QAAQ,QAAQ,IAAI,GAAG,CAAC,CAAC;AACpD,QAAO,OAAO,OAAO,OAAO,QAAQ,QAAQ,MAAM,MAAM,CAAC,CAAC;AAC1D,QAAO,WAAW,WAAW;EAC3B,MAAM;EACN,SAAS,QAAQ;EAClB,CAAC;AACF,QAAO,WAAW,MAAM;EACtB,MAAM,QAAQ;EACd,SAAS,GAAG,SAAS;EACtB,CAAC;AACF,QAAO,WAAW,UAAU,EAC1B,MAAM,QAAQ,MACf,CAAC;AACF,KAAI,CAAC,aACH;AAEF,QAAO;EACL,wBAAwB,MAAyB;GAC/C,MAAM,OAAO,KAAK,KAAK,IAAI,YAAY;GACvC,MAAM,YAAY,KAAK,KACpB,QAAQ,MAAM,EAAE,WAAW,IAAI,CAAC,CAChC,KAAK,MAAM,EAAE,MAAM,IAAI,CAAC,GAAG;AAC9B,OAAI,KAAK,QAAS,QAAO,OAAO,WAAW,KAAK,QAAQ;AACxD,OAAI,KAAK,WAAY,QAAO,OAAO,cAAc,KAAK,WAAW;AACjE,OAAI,KAAK,GAAI,QAAO,OAAO,MAAM,KAAK,GAAG;AACzC,UAAO,WAAW,cAAc;IAC9B,SAAS,KAAK;IACd,YAAY,KAAK;IACjB;IACA,YAAY;IACZ,YAAY,KAAK;IACjB,KAAK,KAAK,MAAM,YAAY,KAAK,IAAI,GAAG,KAAA;IACzC,CAAC;AACF,UAAO,cAAc;IACnB,UAAU;IACV,OAAO;IACP,SAAS;IACT,MAAM;KACJ,SAAS,KAAK;KACd,IAAI,KAAK;KACT,KAAK,QAAQ,QAAQ,MAAM,MAAM;KACjC,IAAI,QAAQ,QAAQ,IAAI,GAAG;KAC5B;IACF,CAAC;;EAEJ,iBAAiB,OACf,KACA,gBACG;AACH,OAAI;AACF,WAAO,OAAO,cAAc,aAAa,QAAQ,QAAQ;AACzD,iBAAa,iBAAiB,IAAI;AAClC,UAAM,aAAa,MAAM,IAAK;WACxB;;EAIX;;;;;AAMH,SAAgB,oBAAoB,SAAwB;AAC1D,aAAY;EAAE;EAAS,0BAAS,IAAI,MAAM,EAAC,aAAa;EAAE,CAAC;;;;;AAM7D,SAAgB,qBAG0B;AACxC,KAAI,sBAAsB,CAAE,QAAO;EAAE,QAAQ;EAAO,SAAS;EAAO;AACpE,KAAI,qBAAqB,CAAE,QAAO;EAAE,QAAQ;EAAO,SAAS;EAAM;CAClE,MAAM,SAAS,YAAY;AAC3B,KAAI,OACF,QAAO;EACL,QAAQ;EACR,SAAS,OAAO;EAChB,SAAS,OAAO;EACjB;AACH,QAAO;EAAE,QAAQ;EAAW,SAAS;EAAO"}
+{"version":3,"file":"telemetry.mjs","names":[],"sources":["../../../clis/services/telemetry.ts"],"sourcesContent":["/**\n * CLI telemetry (error reporting via Sentry).\n *\n * Design:\n * - Opt-out by default, asked once on first interactive run.\n * - Stores consent in ~/.ph/telemetry.json so we never ask twice.\n * - Respects PH_NO_TELEMETRY=1 and DO_NOT_TRACK=1 as immediate kill switches.\n * - Non-interactive (TTY missing, CI, piped) defaults to DISABLED — we don't\n *   want to hang a CI pipeline on an unanswered prompt, and we don't want to\n *   capture errors without informed consent.\n * - DSN is published in the CLI binary; Sentry DSNs accept events but grant\n *   no read access, so this is safe. Hardcoded so users can't accidentally\n *   misroute events.\n *\n * PII scrubbing in beforeSend hook:\n * - Home-directory paths collapsed to ~\n * - Flag/arg values that look like secrets (tokens, keys) stripped\n * - No source-context from user files\n */\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\n// Sentry project \"ph-cli\" on the powerhouse-hosted Sentry instance.\n// Public DSNs are safe to ship — they grant write-only ingest access.\nconst SENTRY_DSN =\n  \"https://0e7793802288589b4923896118374462@sentry.monitoring.vetra.io/3\";\n\nconst TELEMETRY_FILE = join(homedir(), \".ph\", \"telemetry.json\");\n\ntype TelemetryConfig = {\n  enabled: boolean;\n  askedAt: string;\n};\n\nexport type CliInvocationInfo = {\n  command?: string;\n  subcommand?: string;\n  pm?: string;\n  argv: string[];\n  cwd?: string;\n};\n\nexport type TelemetryClient = {\n  /**\n   * Attaches per-invocation context (command, sanitized argv, package\n   * manager) as Sentry tags + a `invocation` context block, plus a single\n   * \"cli invoked\" breadcrumb. Safe to call once per process.\n   */\n  attachInvocationContext: (info: CliInvocationInfo) => void;\n  /**\n   * Captures an error (if telemetry is initialized) and flushes before the\n   * caller calls process.exit(). Safe no-op when telemetry is disabled.\n   */\n  captureCliError: (\n    err: unknown,\n    opts?: { kind?: \"crash\" | \"user\" },\n  ) => Promise<void>;\n};\n\nfunction isExplicitlyDisabled(): boolean {\n  // Standard opt-out signals respected by most OSS CLIs.\n  return (\n    process.env.PH_NO_TELEMETRY === \"1\" ||\n    process.env.PH_NO_TELEMETRY === \"true\" ||\n    process.env.DO_NOT_TRACK === \"1\" ||\n    process.env.DO_NOT_TRACK === \"true\"\n  );\n}\n\nfunction isExplicitlyEnabled(): boolean {\n  return (\n    process.env.PH_TELEMETRY === \"1\" || process.env.PH_TELEMETRY === \"true\"\n  );\n}\n\nfunction isInteractive(): boolean {\n  // Only ask if stdin is a TTY and CI env isn't set.\n  return Boolean(process.stdin.isTTY) && !process.env.CI;\n}\n\nfunction readConfig(): TelemetryConfig | null {\n  try {\n    if (!existsSync(TELEMETRY_FILE)) return null;\n    return JSON.parse(readFileSync(TELEMETRY_FILE, \"utf8\")) as TelemetryConfig;\n  } catch {\n    return null;\n  }\n}\n\nfunction writeConfig(cfg: TelemetryConfig): void {\n  try {\n    mkdirSync(join(homedir(), \".ph\"), { recursive: true });\n    writeFileSync(TELEMETRY_FILE, JSON.stringify(cfg, null, 2));\n  } catch {\n    // non-fatal; we'll just ask again next time\n  }\n}\n\n/**\n * Prompts the user once, caches the answer. Must be called before init.\n * Returns `true` if telemetry should be enabled, `false` otherwise.\n */\nexport async function resolveTelemetryConsent(): Promise<boolean> {\n  if (isExplicitlyDisabled()) return false;\n  if (isExplicitlyEnabled()) return true;\n\n  const cached = readConfig();\n  if (cached) return cached.enabled;\n\n  if (!isInteractive()) {\n    // Non-interactive first run: stay silent, don't ask, don't send. User can\n    // opt in later with `ph telemetry on` or PH_TELEMETRY=1.\n    return false;\n  }\n\n  const enquirer = await import(\"enquirer\");\n  try {\n    const { enabled } = await enquirer.default.prompt<{ enabled: boolean }>({\n      type: \"confirm\",\n      name: \"enabled\",\n      message:\n        \"Help improve Powerhouse by sending anonymous error reports? \" +\n        \"(stack traces only, paths and secrets are scrubbed)\",\n      initial: true,\n    });\n    writeConfig({ enabled, askedAt: new Date().toISOString() });\n    return enabled;\n  } catch {\n    // user hit Ctrl-C during prompt — treat as no, but don't persist so we\n    // ask again next time\n    return false;\n  }\n}\n\nfunction scrubString(input: string): string {\n  if (!input) return input;\n  const home = homedir();\n  let out = input;\n  // Collapse home dir to ~\n  if (home && out.includes(home)) {\n    out = out.split(home).join(\"~\");\n  }\n  // Strip common secret-shaped flag values: --token=XYZ, --api-key XYZ, etc.\n  out = out.replace(\n    /(--?(?:token|api[-_]?key|password|secret|auth)[=\\s])([^\\s]+)/gi,\n    \"$1<redacted>\",\n  );\n  return out;\n}\n\ntype ScrubbableFrame = {\n  filename?: string;\n  abs_path?: string;\n  pre_context?: unknown;\n  context_line?: unknown;\n  post_context?: unknown;\n  vars?: unknown;\n};\n\ntype ScrubbableException = {\n  value?: string;\n  stacktrace?: { frames?: ScrubbableFrame[] };\n};\n\ntype ScrubbableEvent = {\n  message?: string;\n  logentry?: { message?: string };\n  exception?: { values?: ScrubbableException[] };\n  server_name?: string;\n  extra?: Record<string, unknown>;\n};\n\nfunction scrubEvent<T>(event: T): T {\n  const e = event as ScrubbableEvent;\n  try {\n    if (e.message) e.message = scrubString(e.message);\n    if (e.logentry?.message) {\n      e.logentry.message = scrubString(e.logentry.message);\n    }\n    const values = e.exception?.values;\n    if (Array.isArray(values)) {\n      for (const ex of values) {\n        if (ex.value) ex.value = scrubString(ex.value);\n        const frames = ex.stacktrace?.frames;\n        if (Array.isArray(frames)) {\n          for (const f of frames) {\n            if (f.filename) f.filename = scrubString(f.filename);\n            if (f.abs_path) f.abs_path = scrubString(f.abs_path);\n            // Drop captured source context from user machines — privacy.\n            delete f.pre_context;\n            delete f.context_line;\n            delete f.post_context;\n            delete f.vars;\n          }\n        }\n      }\n    }\n    // Server name can leak the user's machine hostname; drop it.\n    delete e.server_name;\n    // Strip raw argv from extra context.\n    if (e.extra) {\n      delete e.extra.argv;\n      delete e.extra.env;\n    }\n  } catch {\n    // Never let scrubbing throw — worst case we drop the event below.\n  }\n  return event;\n}\n\n/**\n * Initializes Sentry for CLI error reporting if telemetry is enabled.\n * Safe to call multiple times; only the first call takes effect.\n */\nexport async function initCliTelemetry(opts: {\n  cliName: \"ph-cli\" | \"ph-cmd\";\n  release?: string;\n}): Promise<TelemetryClient | undefined> {\n  const enabled = await resolveTelemetryConsent();\n  if (!enabled) return;\n\n  const Sentry = await import(\"@sentry/node-core/light\");\n  const os = await import(\"node:os\");\n  const sentryClient = Sentry.init({\n    dsn: SENTRY_DSN,\n    release: opts.release,\n    environment: process.env.NODE_ENV || \"production\",\n    sendDefaultPii: false,\n    defaultIntegrations: false,\n    integrations: [\n      // Only the bare minimum — no automatic HTTP/FS instrumentation.\n    ],\n    beforeSend(event) {\n      return scrubEvent(event);\n    },\n    beforeBreadcrumb(breadcrumb) {\n      if (breadcrumb.message) {\n        breadcrumb.message = scrubString(breadcrumb.message);\n      }\n      return breadcrumb;\n    },\n  });\n  Sentry.setTag(\"cli_name\", opts.cliName);\n  if (opts.release) Sentry.setTag(\"cli_version\", opts.release);\n  // Environment tags — `defaultIntegrations: false` strips Sentry's auto\n  // node-context, so attach the bits we care about manually (and keep\n  // hostname out of it).\n  Sentry.setTag(\"os\", process.platform);\n  Sentry.setTag(\"arch\", process.arch);\n  Sentry.setTag(\"node_version\", process.version);\n  Sentry.setTag(\"ci\", String(Boolean(process.env.CI)));\n  Sentry.setTag(\"tty\", String(Boolean(process.stdin.isTTY)));\n  Sentry.setContext(\"runtime\", {\n    name: \"node\",\n    version: process.version,\n  });\n  Sentry.setContext(\"os\", {\n    name: process.platform,\n    version: os.release(),\n  });\n  Sentry.setContext(\"device\", {\n    arch: process.arch,\n  });\n  if (!sentryClient) {\n    return;\n  }\n  return {\n    attachInvocationContext(info: CliInvocationInfo) {\n      const argv = info.argv.map(scrubString);\n      const flagNames = info.argv\n        .filter((a) => a.startsWith(\"-\"))\n        .map((a) => a.split(\"=\")[0]);\n      if (info.command) Sentry.setTag(\"command\", info.command);\n      if (info.subcommand) Sentry.setTag(\"subcommand\", info.subcommand);\n      if (info.pm) Sentry.setTag(\"pm\", info.pm);\n      Sentry.setContext(\"invocation\", {\n        command: info.command,\n        subcommand: info.subcommand,\n        argv,\n        flag_names: flagNames,\n        argv_count: argv.length,\n        cwd: info.cwd ? scrubString(info.cwd) : undefined,\n      });\n      Sentry.addBreadcrumb({\n        category: \"cli\",\n        level: \"info\",\n        message: \"cli invoked\",\n        data: {\n          command: info.command,\n          pm: info.pm,\n          tty: Boolean(process.stdin.isTTY),\n          ci: Boolean(process.env.CI),\n        },\n      });\n    },\n    captureCliError: async (\n      err: unknown,\n      captureOpts?: { kind?: \"crash\" | \"user\" },\n    ) => {\n      try {\n        Sentry.setTag(\"error_kind\", captureOpts?.kind ?? \"crash\");\n        sentryClient.captureException(err);\n        await sentryClient.flush(2000);\n      } catch {\n        // Reporting must never mask the real error.\n      }\n    },\n  };\n}\n\n/**\n * Explicitly set telemetry consent (used by `ph telemetry on|off`).\n */\nexport function setTelemetryConsent(enabled: boolean): void {\n  writeConfig({ enabled, askedAt: new Date().toISOString() });\n}\n\n/**\n * Returns the current telemetry state — useful for `ph telemetry status`.\n */\nexport function getTelemetryStatus():\n  | { source: \"env\"; enabled: boolean }\n  | { source: \"config\"; enabled: boolean; askedAt: string }\n  | { source: \"default\"; enabled: false } {\n  if (isExplicitlyDisabled()) return { source: \"env\", enabled: false };\n  if (isExplicitlyEnabled()) return { source: \"env\", enabled: true };\n  const cached = readConfig();\n  if (cached)\n    return {\n      source: \"config\",\n      enabled: cached.enabled,\n      askedAt: cached.askedAt,\n    };\n  return { source: \"default\", enabled: false };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAM,aACJ;AAEF,MAAM,iBAAiB,KAAK,QAAQ,GAAG,OAAO,gBAAgB;AAgC9D,SAAS,uBAAgC;CAEvC,OACE,QAAQ,IAAI,oBAAoB,OAChC,QAAQ,IAAI,oBAAoB,UAChC,QAAQ,IAAI,iBAAiB,OAC7B,QAAQ,IAAI,iBAAiB;AAEjC;AAEA,SAAS,sBAA+B;CACtC,OACE,QAAQ,IAAI,iBAAiB,OAAO,QAAQ,IAAI,iBAAiB;AAErE;AAEA,SAAS,gBAAyB;CAEhC,OAAO,QAAQ,QAAQ,MAAM,KAAK,KAAK,CAAC,QAAQ,IAAI;AACtD;AAEA,SAAS,aAAqC;CAC5C,IAAI;EACF,IAAI,CAAC,WAAW,cAAc,GAAG,OAAO;EACxC,OAAO,KAAK,MAAM,aAAa,gBAAgB,MAAM,CAAC;CACxD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,YAAY,KAA4B;CAC/C,IAAI;EACF,UAAU,KAAK,QAAQ,GAAG,KAAK,GAAG,EAAE,WAAW,KAAK,CAAC;EACrD,cAAc,gBAAgB,KAAK,UAAU,KAAK,MAAM,CAAC,CAAC;CAC5D,QAAQ,CAER;AACF;;;;;AAMA,eAAsB,0BAA4C;CAChE,IAAI,qBAAqB,GAAG,OAAO;CACnC,IAAI,oBAAoB,GAAG,OAAO;CAElC,MAAM,SAAS,WAAW;CAC1B,IAAI,QAAQ,OAAO,OAAO;CAE1B,IAAI,CAAC,cAAc,GAGjB,OAAO;CAGT,MAAM,WAAW,MAAM,OAAO;CAC9B,IAAI;EACF,MAAM,EAAE,YAAY,MAAM,SAAS,QAAQ,OAA6B;GACtE,MAAM;GACN,MAAM;GACN,SACE;GAEF,SAAS;EACX,CAAC;EACD,YAAY;GAAE;GAAS,0BAAS,IAAI,KAAK,EAAA,CAAE,YAAY;EAAE,CAAC;EAC1D,OAAO;CACT,QAAQ;EAGN,OAAO;CACT;AACF;AAEA,SAAS,YAAY,OAAuB;CAC1C,IAAI,CAAC,OAAO,OAAO;CACnB,MAAM,OAAO,QAAQ;CACrB,IAAI,MAAM;CAEV,IAAI,QAAQ,IAAI,SAAS,IAAI,GAC3B,MAAM,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG;CAGhC,MAAM,IAAI,QACR,kEACA,cACF;CACA,OAAO;AACT;AAwBA,SAAS,WAAc,OAAa;CAClC,MAAM,IAAI;CACV,IAAI;EACF,IAAI,EAAE,SAAS,EAAE,UAAU,YAAY,EAAE,OAAO;EAChD,IAAI,EAAE,UAAU,SACd,EAAE,SAAS,UAAU,YAAY,EAAE,SAAS,OAAO;EAErD,MAAM,SAAS,EAAE,WAAW;EAC5B,IAAI,MAAM,QAAQ,MAAM,GACtB,KAAK,MAAM,MAAM,QAAQ;GACvB,IAAI,GAAG,OAAO,GAAG,QAAQ,YAAY,GAAG,KAAK;GAC7C,MAAM,SAAS,GAAG,YAAY;GAC9B,IAAI,MAAM,QAAQ,MAAM,GACtB,KAAK,MAAM,KAAK,QAAQ;IACtB,IAAI,EAAE,UAAU,EAAE,WAAW,YAAY,EAAE,QAAQ;IACnD,IAAI,EAAE,UAAU,EAAE,WAAW,YAAY,EAAE,QAAQ;IAEnD,OAAO,EAAE;IACT,OAAO,EAAE;IACT,OAAO,EAAE;IACT,OAAO,EAAE;GACX;EAEJ;EAGF,OAAO,EAAE;EAET,IAAI,EAAE,OAAO;GACX,OAAO,EAAE,MAAM;GACf,OAAO,EAAE,MAAM;EACjB;CACF,QAAQ,CAER;CACA,OAAO;AACT;;;;;AAMA,eAAsB,iBAAiB,MAGE;CAEvC,IAAI,CAAC,MADiB,wBAAwB,GAChC;CAEd,MAAM,SAAS,MAAM,OAAO;CAC5B,MAAM,KAAK,MAAM,OAAO;CACxB,MAAM,eAAe,OAAO,KAAK;EAC/B,KAAK;EACL,SAAS,KAAK;EACd,aAAa,QAAQ,IAAI,YAAY;EACrC,gBAAgB;EAChB,qBAAqB;EACrB,cAAc,CAEd;EACA,WAAW,OAAO;GAChB,OAAO,WAAW,KAAK;EACzB;EACA,iBAAiB,YAAY;GAC3B,IAAI,WAAW,SACb,WAAW,UAAU,YAAY,WAAW,OAAO;GAErD,OAAO;EACT;CACF,CAAC;CACD,OAAO,OAAO,YAAY,KAAK,OAAO;CACtC,IAAI,KAAK,SAAS,OAAO,OAAO,eAAe,KAAK,OAAO;CAI3D,OAAO,OAAO,MAAM,QAAQ,QAAQ;CACpC,OAAO,OAAO,QAAQ,QAAQ,IAAI;CAClC,OAAO,OAAO,gBAAgB,QAAQ,OAAO;CAC7C,OAAO,OAAO,MAAM,OAAO,QAAQ,QAAQ,IAAI,EAAE,CAAC,CAAC;CACnD,OAAO,OAAO,OAAO,OAAO,QAAQ,QAAQ,MAAM,KAAK,CAAC,CAAC;CACzD,OAAO,WAAW,WAAW;EAC3B,MAAM;EACN,SAAS,QAAQ;CACnB,CAAC;CACD,OAAO,WAAW,MAAM;EACtB,MAAM,QAAQ;EACd,SAAS,GAAG,QAAQ;CACtB,CAAC;CACD,OAAO,WAAW,UAAU,EAC1B,MAAM,QAAQ,KAChB,CAAC;CACD,IAAI,CAAC,cACH;CAEF,OAAO;EACL,wBAAwB,MAAyB;GAC/C,MAAM,OAAO,KAAK,KAAK,IAAI,WAAW;GACtC,MAAM,YAAY,KAAK,KACpB,QAAQ,MAAM,EAAE,WAAW,GAAG,CAAC,CAAC,CAChC,KAAK,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE;GAC7B,IAAI,KAAK,SAAS,OAAO,OAAO,WAAW,KAAK,OAAO;GACvD,IAAI,KAAK,YAAY,OAAO,OAAO,cAAc,KAAK,UAAU;GAChE,IAAI,KAAK,IAAI,OAAO,OAAO,MAAM,KAAK,EAAE;GACxC,OAAO,WAAW,cAAc;IAC9B,SAAS,KAAK;IACd,YAAY,KAAK;IACjB;IACA,YAAY;IACZ,YAAY,KAAK;IACjB,KAAK,KAAK,MAAM,YAAY,KAAK,GAAG,IAAI,KAAA;GAC1C,CAAC;GACD,OAAO,cAAc;IACnB,UAAU;IACV,OAAO;IACP,SAAS;IACT,MAAM;KACJ,SAAS,KAAK;KACd,IAAI,KAAK;KACT,KAAK,QAAQ,QAAQ,MAAM,KAAK;KAChC,IAAI,QAAQ,QAAQ,IAAI,EAAE;IAC5B;GACF,CAAC;EACH;EACA,iBAAiB,OACf,KACA,gBACG;GACH,IAAI;IACF,OAAO,OAAO,cAAc,aAAa,QAAQ,OAAO;IACxD,aAAa,iBAAiB,GAAG;IACjC,MAAM,aAAa,MAAM,GAAI;GAC/B,QAAQ,CAER;EACF;CACF;AACF;;;;AAKA,SAAgB,oBAAoB,SAAwB;CAC1D,YAAY;EAAE;EAAS,0BAAS,IAAI,KAAK,EAAA,CAAE,YAAY;CAAE,CAAC;AAC5D;;;;AAKA,SAAgB,qBAG0B;CACxC,IAAI,qBAAqB,GAAG,OAAO;EAAE,QAAQ;EAAO,SAAS;CAAM;CACnE,IAAI,oBAAoB,GAAG,OAAO;EAAE,QAAQ;EAAO,SAAS;CAAK;CACjE,MAAM,SAAS,WAAW;CAC1B,IAAI,QACF,OAAO;EACL,QAAQ;EACR,SAAS,OAAO;EAChB,SAAS,OAAO;CAClB;CACF,OAAO;EAAE,QAAQ;EAAW,SAAS;CAAM;AAC7C"}