@prisma-next/cli-telemetry 0.14.0-dev.6 → 0.14.0-dev.60

package/dist/{enrich-BhHLLBfL.mjs → enrich-DZlKsZox.mjs}

@@ -1,61 +1,6 @@
 import { readFileSync } from "node:fs";
+import { determineAgent } from "@vercel/detect-agent";
 import { join } from "pathe";
-//#region src/detect-agent.ts
-const AGENT_MARKERS = [
-	{
-		envVar: "CLAUDECODE",
-		agent: "Claude Code"
-	},
-	{
-		envVar: "CURSOR_AGENT",
-		agent: "Cursor"
-	},
-	{
-		envVar: "CODEX_SANDBOX",
-		agent: "Codex CLI"
-	},
-	{
-		envVar: "GEMINI_CLI",
-		agent: "Gemini CLI"
-	},
-	{
-		envVar: "WINDSURF",
-		agent: "Windsurf"
-	},
-	{
-		envVar: "AIDER",
-		agent: "Aider"
-	},
-	{
-		envVar: "CODY",
-		agent: "Cody"
-	},
-	{
-		envVar: "CONTINUE",
-		agent: "Continue"
-	}
-];
-function isTruthyMarker(raw) {
-	if (raw === void 0) return false;
-	const normalised = raw.trim().toLowerCase();
-	if (normalised === "") return false;
-	if (normalised === "0") return false;
-	if (normalised === "false") return false;
-	return true;
-}
-/**
-* Resolve the agent label from an env snapshot, or `null` if no marker
-* is set. Returns the **first** matching marker in `AGENT_MARKERS`
-* order, so when multiple markers are set the agent label is
-* deterministic and the allowlist's first entry wins.
-*
-* Pure: takes an env record, returns a string or null. No I/O.
-*/
-function detectAgent(env) {
-	for (const marker of AGENT_MARKERS) if (isTruthyMarker(env[marker.envVar])) return marker.agent;
-	return null;
-}
-//#endregion
 //#region src/enrich.ts
 const EMPTY_PROJECT_CONFIG = {
 	databaseTarget: null,
@@ -173,11 +118,25 @@ function buildTelemetryEvent(payload, projectConfig, env) {
 		packageManager: parsePackageManager(env.env["npm_config_user_agent"]),
 		databaseTarget: projectConfig.databaseTarget,
 		tsVersion: readTsVersionFromPackageJson(env.readProjectPackageJson()),
-		agent: detectAgent(env.env),
+		agent: env.agent,
 		extensions: projectConfig.extensions
 	};
 }
 /**
+* Resolve the agent label for the telemetry event via
+* `@vercel/detect-agent`, collapsing its discriminated result to the
+* event's `string | null` shape. Any detection failure counts as
+* "no agent" — telemetry is best-effort and non-blocking.
+*/
+async function resolveAgentLabel() {
+	try {
+		const result = await determineAgent();
+		return result.isAgent ? result.agent.name : null;
+	} catch {
+		return null;
+	}
+}
+/**
 * Convenience for the sender entry: build the event from the live
 * `process` plus a c12 load of `prisma-next.config.*` from
 * `payload.projectRoot` plus a real project-package.json reader,
@@ -199,6 +158,7 @@ async function buildTelemetryEventFromProcess(payload) {
 		arch: process.arch,
 		versions: process.versions,
 		env: process.env,
+		agent: await resolveAgentLabel(),
 		readProjectPackageJson: () => {
 			try {
 				return readFileSync(join(payload.projectRoot, "package.json"), "utf-8");
@@ -211,4 +171,4 @@ async function buildTelemetryEventFromProcess(payload) {
 //#endregion
 export { loadProjectConfig as n, buildTelemetryEventFromProcess as t };
 
-//# sourceMappingURL=enrich-BhHLLBfL.mjs.map
+//# sourceMappingURL=enrich-DZlKsZox.mjs.map

package/dist/enrich-DZlKsZox.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrich-DZlKsZox.mjs","names":[],"sources":["../src/enrich.ts"],"sourcesContent":["import { readFileSync } from 'node:fs';\nimport type { PrismaNextConfig } from '@prisma-next/config/config-types';\nimport { determineAgent } from '@vercel/detect-agent';\nimport { join } from 'pathe';\nimport type { ParentToSenderPayload, TelemetryEvent } from './payload';\n\n/**\n * Subset of the user's `prisma-next.config.*` the telemetry event\n * surfaces. Loaded inside the detached child via {@link loadProjectConfig}\n * — see the design rationale on {@link ParentToSenderPayload} for why\n * this side runs c12 instead of the parent CLI.\n */\nexport interface ProjectConfigFields {\n  readonly databaseTarget: string | null;\n  readonly extensions: readonly string[];\n}\n\nconst EMPTY_PROJECT_CONFIG: ProjectConfigFields = {\n  databaseTarget: null,\n  extensions: [],\n};\n\n/**\n * Best-effort load of `prisma-next.config.*` from `projectRoot`,\n * validated against the canonical `@prisma-next/config` schema.\n * Returns `{ databaseTarget: null, extensions: [] }` on any failure\n * mode — missing config file (e.g. before `prisma-next init`), c12\n * throws while evaluating user TS, validator rejects a malformed\n * shape, etc. Telemetry is non-blocking and best-effort; an empty\n * result is the only downside of an unloadable or invalid config.\n *\n * Both `c12` and `@prisma-next/config/config-validation` are imported\n * lazily so the detached sender's cold-start cost is paid only when\n * telemetry actually fires, not on every fork even when gates\n * short-circuit before reaching this code path.\n */\nexport async function loadProjectConfig(projectRoot: string): Promise<ProjectConfigFields> {\n  try {\n    const { loadConfig } = await import('c12');\n    const result = await loadConfig<Record<string, unknown>>({\n      name: 'prisma-next',\n      cwd: projectRoot,\n      dotenv: false,\n      rcFile: false,\n      globalRc: false,\n    });\n    const config = result.config ?? null;\n    // c12 returns an empty object when no config file exists in the\n    // search path — distinct from \"file existed but parsed to an empty\n    // object\". Either way, the canonical validator below would reject\n    // it on the first required field (`family`), so short-circuit\n    // without paying the import cost.\n    if (config === null || Object.keys(config).length === 0) {\n      return EMPTY_PROJECT_CONFIG;\n    }\n    const validation = await import('@prisma-next/config/config-validation');\n    // TS 4.7+ only flows `asserts cfg is X` narrowing when the\n    // assertion function is called via a directly-declared name with\n    // an explicit signature. The dynamic-import binding doesn't\n    // satisfy that, so wrap the call in a local declaration that\n    // re-asserts the signature.\n    const validate: (cfg: unknown) => asserts cfg is PrismaNextConfig = validation.validateConfig;\n    validate(config);\n    return {\n      databaseTarget: config.target.targetId,\n      extensions: (config.extensionPacks ?? []).map((pack) => pack.id),\n    };\n  } catch {\n    return EMPTY_PROJECT_CONFIG;\n  }\n}\n\n/**\n * Versions surface the enrichment cares about. Modelled as a structural\n * record with a required `node` field so tests can pass a literal object\n * without faking every field of `NodeJS.ProcessVersions` (which adds\n * properties between Node versions and includes a long tail the\n * enrichment never touches). Both `bun` and `deno` are read on the\n * runtime-resolution path; everything else is ignored.\n */\nexport interface VersionsSnapshot {\n  readonly node: string;\n  readonly bun?: string;\n  readonly deno?: string;\n}\n\n/**\n * Snapshot of process-level inputs the enrichment reads. Tests pass an\n * explicit snapshot so the enrichment is deterministic per case; the\n * sender entry point passes a fresh snapshot from `process`.\n */\nexport interface EnrichEnvironment {\n  readonly platform: NodeJS.Platform;\n  readonly arch: string;\n  readonly versions: VersionsSnapshot;\n  /**\n   * Included because package-manager detection intentionally reads\n   * environment variables from the same process snapshot as platform/versions.\n   */\n  readonly env: Readonly<Record<string, string | undefined>>;\n  /**\n   * Pre-resolved AI coding-agent label, or `null` for a human session.\n   * Detection lives in `@vercel/detect-agent`, whose `determineAgent()`\n   * reads the live `process.env` and is async (it probes the filesystem\n   * for Devin), so it cannot run inside the pure event builder; the\n   * sender entry resolves it via {@link resolveAgentLabel} and passes\n   * the label here. Detection runs in the **child** sender process,\n   * never the parent. Best-effort: false negatives are expected and\n   * documented in the user-facing telemetry docs.\n   */\n  readonly agent: string | null;\n  /**\n   * Best-effort reader for the project's `package.json`, used only to derive\n   * the optional `tsVersion` telemetry field. Returning `null` means unknown.\n   */\n  readonly readProjectPackageJson: () => string | null;\n}\n\n/**\n * Identify the runtime the sender is running in. Same-runtime as the\n * parent is a correctness requirement: the parent forked us via\n * `child_process.fork`, which inherits the parent's runtime. Detection\n * keys on the runtime-specific version field rather than env vars so a\n * spoofed env can't lie about the actual interpreter.\n */\nfunction resolveRuntime(versions: VersionsSnapshot): {\n  readonly name: 'node' | 'bun' | 'deno';\n  readonly version: string;\n} {\n  if (versions.bun !== undefined) {\n    return { name: 'bun', version: versions.bun };\n  }\n  if (versions.deno !== undefined) {\n    return { name: 'deno', version: versions.deno };\n  }\n  return { name: 'node', version: versions.node };\n}\n\n/**\n * Parse `npm_config_user_agent` into a `<pm>/<version>` token. The\n * value, when present, looks like\n * `\"pnpm/10.27.0 npm/? node/v24.13.0 darwin arm64\"` — we take the first\n * whitespace-separated token. Any failure → `null`.\n */\nexport function parsePackageManager(userAgent: string | undefined): string | null {\n  if (userAgent === undefined) return null;\n  const first = userAgent.split(/\\s+/)[0];\n  if (first === undefined || first.length === 0) return null;\n  if (!first.includes('/')) return null;\n  return first;\n}\n\n/**\n * Read the user's project `package.json` and resolve a TypeScript\n * version from `devDependencies.typescript` (preferred) or\n * `dependencies.typescript`. Strips a leading `^` or `~` semver\n * prefix. Returns `null` on any failure mode — file missing,\n * unreadable, malformed JSON, key absent, not a string.\n */\nexport function readTsVersionFromPackageJson(raw: string | null): string | null {\n  if (raw === null) return null;\n  let parsed: Record<string, unknown>;\n  try {\n    parsed = JSON.parse(raw) as Record<string, unknown>;\n  } catch {\n    return null;\n  }\n  const candidate =\n    pickStringDep(parsed['devDependencies']) ?? pickStringDep(parsed['dependencies']);\n  if (candidate === null) return null;\n  return candidate.replace(/^[\\^~]/, '');\n}\n\nfunction pickStringDep(deps: unknown): string | null {\n  if (deps === null || typeof deps !== 'object' || Array.isArray(deps)) return null;\n  const value = (deps as Record<string, unknown>)['typescript'];\n  return typeof value === 'string' ? value : null;\n}\n\n/**\n * Build the full backend event from the parent's payload, the\n * c12-loaded project-config slice, and the child's per-process\n * snapshot. Pure given a `projectConfig` + `EnrichEnvironment`.\n */\nexport function buildTelemetryEvent(\n  payload: ParentToSenderPayload,\n  projectConfig: ProjectConfigFields,\n  env: EnrichEnvironment,\n): TelemetryEvent {\n  const runtime = resolveRuntime(env.versions);\n  return {\n    installationId: payload.installationId,\n    version: payload.version,\n    command: payload.command,\n    flags: payload.flags,\n    runtimeName: runtime.name,\n    runtimeVersion: runtime.version,\n    os: env.platform,\n    arch: env.arch,\n    packageManager: parsePackageManager(env.env['npm_config_user_agent']),\n    databaseTarget: projectConfig.databaseTarget,\n    tsVersion: readTsVersionFromPackageJson(env.readProjectPackageJson()),\n    agent: env.agent,\n    extensions: projectConfig.extensions,\n  };\n}\n\n/**\n * Resolve the agent label for the telemetry event via\n * `@vercel/detect-agent`, collapsing its discriminated result to the\n * event's `string | null` shape. Any detection failure counts as\n * \"no agent\" — telemetry is best-effort and non-blocking.\n */\nasync function resolveAgentLabel(): Promise<string | null> {\n  try {\n    const result = await determineAgent();\n    return result.isAgent ? result.agent.name : null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Convenience for the sender entry: build the event from the live\n * `process` plus a c12 load of `prisma-next.config.*` from\n * `payload.projectRoot` plus a real project-package.json reader,\n * swallowing any I/O errors in the file read.\n *\n * The parent's `payload.databaseTarget` (when present) wins over the\n * c12-derived value. The parent sets this for the first-`init` run,\n * where the config file does not exist on disk yet but the user has\n * just declared a target via the consent prompt; every other\n * invocation leaves it unset and the c12 load supplies the value.\n */\nexport async function buildTelemetryEventFromProcess(\n  payload: ParentToSenderPayload,\n): Promise<TelemetryEvent> {\n  const loadedConfig = await loadProjectConfig(payload.projectRoot);\n  const projectConfig: ProjectConfigFields = {\n    databaseTarget: payload.databaseTarget ?? loadedConfig.databaseTarget,\n    extensions: loadedConfig.extensions,\n  };\n  return buildTelemetryEvent(payload, projectConfig, {\n    platform: process.platform,\n    arch: process.arch,\n    versions: process.versions,\n    env: process.env,\n    agent: await resolveAgentLabel(),\n    readProjectPackageJson: () => {\n      try {\n        return readFileSync(join(payload.projectRoot, 'package.json'), 'utf-8');\n      } catch {\n        return null;\n      }\n    },\n  });\n}\n"],"mappings":";;;;AAiBA,MAAM,uBAA4C;CAChD,gBAAgB;CAChB,YAAY,CAAC;AACf;;;;;;;;;;;;;;;AAgBA,eAAsB,kBAAkB,aAAmD;CACzF,IAAI;EACF,MAAM,EAAE,eAAe,MAAM,OAAO;EAQpC,MAAM,UAAS,MAPM,WAAoC;GACvD,MAAM;GACN,KAAK;GACL,QAAQ;GACR,QAAQ;GACR,UAAU;EACZ,CAAC,EAAA,CACqB,UAAU;EAMhC,IAAI,WAAW,QAAQ,OAAO,KAAK,MAAM,CAAC,CAAC,WAAW,GACpD,OAAO;EAQT,MAAM,YAA8D,MAN3C,OAAO,yCAAA,CAM+C;EAC/E,SAAS,MAAM;EACf,OAAO;GACL,gBAAgB,OAAO,OAAO;GAC9B,aAAa,OAAO,kBAAkB,CAAC,EAAA,CAAG,KAAK,SAAS,KAAK,EAAE;EACjE;CACF,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;AAuDA,SAAS,eAAe,UAGtB;CACA,IAAI,SAAS,QAAQ,KAAA,GACnB,OAAO;EAAE,MAAM;EAAO,SAAS,SAAS;CAAI;CAE9C,IAAI,SAAS,SAAS,KAAA,GACpB,OAAO;EAAE,MAAM;EAAQ,SAAS,SAAS;CAAK;CAEhD,OAAO;EAAE,MAAM;EAAQ,SAAS,SAAS;CAAK;AAChD;;;;;;;AAQA,SAAgB,oBAAoB,WAA8C;CAChF,IAAI,cAAc,KAAA,GAAW,OAAO;CACpC,MAAM,QAAQ,UAAU,MAAM,KAAK,CAAC,CAAC;CACrC,IAAI,UAAU,KAAA,KAAa,MAAM,WAAW,GAAG,OAAO;CACtD,IAAI,CAAC,MAAM,SAAS,GAAG,GAAG,OAAO;CACjC,OAAO;AACT;;;;;;;;AASA,SAAgB,6BAA6B,KAAmC;CAC9E,IAAI,QAAQ,MAAM,OAAO;CACzB,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,QAAQ;EACN,OAAO;CACT;CACA,MAAM,YACJ,cAAc,OAAO,kBAAkB,KAAK,cAAc,OAAO,eAAe;CAClF,IAAI,cAAc,MAAM,OAAO;CAC/B,OAAO,UAAU,QAAQ,UAAU,EAAE;AACvC;AAEA,SAAS,cAAc,MAA8B;CACnD,IAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG,OAAO;CAC7E,MAAM,QAAS,KAAiC;CAChD,OAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;;;;;;AAOA,SAAgB,oBACd,SACA,eACA,KACgB;CAChB,MAAM,UAAU,eAAe,IAAI,QAAQ;CAC3C,OAAO;EACL,gBAAgB,QAAQ;EACxB,SAAS,QAAQ;EACjB,SAAS,QAAQ;EACjB,OAAO,QAAQ;EACf,aAAa,QAAQ;EACrB,gBAAgB,QAAQ;EACxB,IAAI,IAAI;EACR,MAAM,IAAI;EACV,gBAAgB,oBAAoB,IAAI,IAAI,wBAAwB;EACpE,gBAAgB,cAAc;EAC9B,WAAW,6BAA6B,IAAI,uBAAuB,CAAC;EACpE,OAAO,IAAI;EACX,YAAY,cAAc;CAC5B;AACF;;;;;;;AAQA,eAAe,oBAA4C;CACzD,IAAI;EACF,MAAM,SAAS,MAAM,eAAe;EACpC,OAAO,OAAO,UAAU,OAAO,MAAM,OAAO;CAC9C,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;;;;;;AAcA,eAAsB,+BACpB,SACyB;CACzB,MAAM,eAAe,MAAM,kBAAkB,QAAQ,WAAW;CAKhE,OAAO,oBAAoB,SAAS;EAHlC,gBAAgB,QAAQ,kBAAkB,aAAa;EACvD,YAAY,aAAa;CAEqB,GAAG;EACjD,UAAU,QAAQ;EAClB,MAAM,QAAQ;EACd,UAAU,QAAQ;EAClB,KAAK,QAAQ;EACb,OAAO,MAAM,kBAAkB;EAC/B,8BAA8B;GAC5B,IAAI;IACF,OAAO,aAAa,KAAK,QAAQ,aAAa,cAAc,GAAG,OAAO;GACxE,QAAQ;IACN,OAAO;GACT;EACF;CACF,CAAC;AACH"}

package/dist/exports/index.mjs

@@ -1,4 +1,4 @@
-import { n as loadProjectConfig } from "../enrich-BhHLLBfL.mjs";
+import { n as loadProjectConfig } from "../enrich-DZlKsZox.mjs";
 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { dirname, join } from "pathe";
 import { fork } from "node:child_process";

package/dist/sender.mjs

@@ -1,4 +1,4 @@
-import { t as buildTelemetryEventFromProcess } from "./enrich-BhHLLBfL.mjs";
+import { t as buildTelemetryEventFromProcess } from "./enrich-DZlKsZox.mjs";
 import { type } from "arktype";
 //#region src/payload.ts
 /**

package/package.json

@@ -1,21 +1,22 @@
 {
   "name": "@prisma-next/cli-telemetry",
-  "version": "0.14.0-dev.6",
+  "version": "0.14.0-dev.60",
   "license": "Apache-2.0",
   "type": "module",
   "sideEffects": false,
   "description": "CLI telemetry client for Prisma Next: detached subprocess sender, gating resolution, user-config store, and consent surface",
   "dependencies": {
-    "@prisma-next/config": "0.14.0-dev.6",
-    "@prisma-next/utils": "0.14.0-dev.6",
+    "@prisma-next/config": "0.14.0-dev.60",
+    "@prisma-next/utils": "0.14.0-dev.60",
+    "@vercel/detect-agent": "^1.2.3",
     "arktype": "^2.2.0",
     "c12": "^3.3.4",
     "pathe": "^2.0.3"
   },
   "devDependencies": {
-    "@prisma-next/test-utils": "0.14.0-dev.6",
-    "@prisma-next/tsconfig": "0.14.0-dev.6",
-    "@prisma-next/tsdown": "0.14.0-dev.6",
+    "@prisma-next/test-utils": "0.14.0-dev.60",
+    "@prisma-next/tsconfig": "0.14.0-dev.60",
+    "@prisma-next/tsdown": "0.14.0-dev.60",
     "@types/node": "25.9.1",
     "tsdown": "0.22.1",
     "typescript": "5.9.3",

package/src/enrich.ts

@@ -1,7 +1,7 @@
 import { readFileSync } from 'node:fs';
 import type { PrismaNextConfig } from '@prisma-next/config/config-types';
+import { determineAgent } from '@vercel/detect-agent';
 import { join } from 'pathe';
-import { detectAgent } from './detect-agent';
 import type { ParentToSenderPayload, TelemetryEvent } from './payload';
 
 /**
@@ -94,10 +94,21 @@ export interface EnrichEnvironment {
   readonly arch: string;
   readonly versions: VersionsSnapshot;
   /**
-   * Included because package-manager and agent detection intentionally read
+   * Included because package-manager detection intentionally reads
    * environment variables from the same process snapshot as platform/versions.
    */
   readonly env: Readonly<Record<string, string | undefined>>;
+  /**
+   * Pre-resolved AI coding-agent label, or `null` for a human session.
+   * Detection lives in `@vercel/detect-agent`, whose `determineAgent()`
+   * reads the live `process.env` and is async (it probes the filesystem
+   * for Devin), so it cannot run inside the pure event builder; the
+   * sender entry resolves it via {@link resolveAgentLabel} and passes
+   * the label here. Detection runs in the **child** sender process,
+   * never the parent. Best-effort: false negatives are expected and
+   * documented in the user-facing telemetry docs.
+   */
+  readonly agent: string | null;
   /**
    * Best-effort reader for the project's `package.json`, used only to derive
    * the optional `tsVersion` telemetry field. Returning `null` means unknown.
@@ -189,11 +200,26 @@ export function buildTelemetryEvent(
     packageManager: parsePackageManager(env.env['npm_config_user_agent']),
     databaseTarget: projectConfig.databaseTarget,
     tsVersion: readTsVersionFromPackageJson(env.readProjectPackageJson()),
-    agent: detectAgent(env.env),
+    agent: env.agent,
     extensions: projectConfig.extensions,
   };
 }
 
+/**
+ * Resolve the agent label for the telemetry event via
+ * `@vercel/detect-agent`, collapsing its discriminated result to the
+ * event's `string | null` shape. Any detection failure counts as
+ * "no agent" — telemetry is best-effort and non-blocking.
+ */
+async function resolveAgentLabel(): Promise<string | null> {
+  try {
+    const result = await determineAgent();
+    return result.isAgent ? result.agent.name : null;
+  } catch {
+    return null;
+  }
+}
+
 /**
  * Convenience for the sender entry: build the event from the live
  * `process` plus a c12 load of `prisma-next.config.*` from
@@ -219,6 +245,7 @@ export async function buildTelemetryEventFromProcess(
     arch: process.arch,
     versions: process.versions,
     env: process.env,
+    agent: await resolveAgentLabel(),
     readProjectPackageJson: () => {
       try {
         return readFileSync(join(payload.projectRoot, 'package.json'), 'utf-8');

package/dist/enrich-BhHLLBfL.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"enrich-BhHLLBfL.mjs","names":[],"sources":["../src/detect-agent.ts","../src/enrich.ts"],"sourcesContent":["/**\n * Best-effort identification of AI coding-agent sessions from an\n * env-var allowlist. Detector property: false positives are negligible\n * (a marker present ⇒ confidently an agent); false negatives are\n * expected and documented in the user-facing telemetry docs. New\n * entries should land here, not in per-CLI hand-rolls.\n *\n * Each entry is a `(envVar, agent)` pair with uniform comparison shape:\n * the marker counts as \"present\" when `process.env[envVar]` is set to a\n * truthy string. Truthy = anything other than the empty string, `'0'`,\n * or `'false'` (case-insensitive); see `gating.isTruthyOptOut` for the\n * same convention applied to opt-out env vars.\n *\n * The detector runs in the **child** sender process, never the parent;\n * the parent does not probe env at command start.\n *\n * Codex CLI note: `CODEX_SANDBOX` is the only clear marker available here.\n * Non-sandboxed Codex sessions may be false negatives.\n *\n * TODO: a ci-info-for-agents would be nice — this allowlist drifts the\n * moment a new agent ships its env marker, and consolidating with the\n * other ecosystems that need the same lookup (rate-limited LLM\n * gateways, agent-aware metrics, etc.) would let one library carry the\n * matrix instead of every consumer re-doing it.\n */\nexport interface AgentMarker {\n  /** The env-var name to read. Exact-match; no prefix or fuzzy logic. */\n  readonly envVar: string;\n  /** The agent label written to the `agent` field of the telemetry event. */\n  readonly agent: string;\n}\n\nexport const AGENT_MARKERS: readonly AgentMarker[] = [\n  { envVar: 'CLAUDECODE', agent: 'Claude Code' },\n  { envVar: 'CURSOR_AGENT', agent: 'Cursor' },\n  { envVar: 'CODEX_SANDBOX', agent: 'Codex CLI' },\n  { envVar: 'GEMINI_CLI', agent: 'Gemini CLI' },\n  { envVar: 'WINDSURF', agent: 'Windsurf' },\n  { envVar: 'AIDER', agent: 'Aider' },\n  { envVar: 'CODY', agent: 'Cody' },\n  { envVar: 'CONTINUE', agent: 'Continue' },\n];\n\nfunction isTruthyMarker(raw: string | undefined): boolean {\n  if (raw === undefined) return false;\n  const normalised = raw.trim().toLowerCase();\n  if (normalised === '') return false;\n  if (normalised === '0') return false;\n  if (normalised === 'false') return false;\n  return true;\n}\n\n/**\n * Resolve the agent label from an env snapshot, or `null` if no marker\n * is set. Returns the **first** matching marker in `AGENT_MARKERS`\n * order, so when multiple markers are set the agent label is\n * deterministic and the allowlist's first entry wins.\n *\n * Pure: takes an env record, returns a string or null. No I/O.\n */\nexport function detectAgent(env: Readonly<Record<string, string | undefined>>): string | null {\n  for (const marker of AGENT_MARKERS) {\n    if (isTruthyMarker(env[marker.envVar])) {\n      return marker.agent;\n    }\n  }\n  return null;\n}\n","import { readFileSync } from 'node:fs';\nimport type { PrismaNextConfig } from '@prisma-next/config/config-types';\nimport { join } from 'pathe';\nimport { detectAgent } from './detect-agent';\nimport type { ParentToSenderPayload, TelemetryEvent } from './payload';\n\n/**\n * Subset of the user's `prisma-next.config.*` the telemetry event\n * surfaces. Loaded inside the detached child via {@link loadProjectConfig}\n * — see the design rationale on {@link ParentToSenderPayload} for why\n * this side runs c12 instead of the parent CLI.\n */\nexport interface ProjectConfigFields {\n  readonly databaseTarget: string | null;\n  readonly extensions: readonly string[];\n}\n\nconst EMPTY_PROJECT_CONFIG: ProjectConfigFields = {\n  databaseTarget: null,\n  extensions: [],\n};\n\n/**\n * Best-effort load of `prisma-next.config.*` from `projectRoot`,\n * validated against the canonical `@prisma-next/config` schema.\n * Returns `{ databaseTarget: null, extensions: [] }` on any failure\n * mode — missing config file (e.g. before `prisma-next init`), c12\n * throws while evaluating user TS, validator rejects a malformed\n * shape, etc. Telemetry is non-blocking and best-effort; an empty\n * result is the only downside of an unloadable or invalid config.\n *\n * Both `c12` and `@prisma-next/config/config-validation` are imported\n * lazily so the detached sender's cold-start cost is paid only when\n * telemetry actually fires, not on every fork even when gates\n * short-circuit before reaching this code path.\n */\nexport async function loadProjectConfig(projectRoot: string): Promise<ProjectConfigFields> {\n  try {\n    const { loadConfig } = await import('c12');\n    const result = await loadConfig<Record<string, unknown>>({\n      name: 'prisma-next',\n      cwd: projectRoot,\n      dotenv: false,\n      rcFile: false,\n      globalRc: false,\n    });\n    const config = result.config ?? null;\n    // c12 returns an empty object when no config file exists in the\n    // search path — distinct from \"file existed but parsed to an empty\n    // object\". Either way, the canonical validator below would reject\n    // it on the first required field (`family`), so short-circuit\n    // without paying the import cost.\n    if (config === null || Object.keys(config).length === 0) {\n      return EMPTY_PROJECT_CONFIG;\n    }\n    const validation = await import('@prisma-next/config/config-validation');\n    // TS 4.7+ only flows `asserts cfg is X` narrowing when the\n    // assertion function is called via a directly-declared name with\n    // an explicit signature. The dynamic-import binding doesn't\n    // satisfy that, so wrap the call in a local declaration that\n    // re-asserts the signature.\n    const validate: (cfg: unknown) => asserts cfg is PrismaNextConfig = validation.validateConfig;\n    validate(config);\n    return {\n      databaseTarget: config.target.targetId,\n      extensions: (config.extensionPacks ?? []).map((pack) => pack.id),\n    };\n  } catch {\n    return EMPTY_PROJECT_CONFIG;\n  }\n}\n\n/**\n * Versions surface the enrichment cares about. Modelled as a structural\n * record with a required `node` field so tests can pass a literal object\n * without faking every field of `NodeJS.ProcessVersions` (which adds\n * properties between Node versions and includes a long tail the\n * enrichment never touches). Both `bun` and `deno` are read on the\n * runtime-resolution path; everything else is ignored.\n */\nexport interface VersionsSnapshot {\n  readonly node: string;\n  readonly bun?: string;\n  readonly deno?: string;\n}\n\n/**\n * Snapshot of process-level inputs the enrichment reads. Tests pass an\n * explicit snapshot so the enrichment is deterministic per case; the\n * sender entry point passes a fresh snapshot from `process`.\n */\nexport interface EnrichEnvironment {\n  readonly platform: NodeJS.Platform;\n  readonly arch: string;\n  readonly versions: VersionsSnapshot;\n  /**\n   * Included because package-manager and agent detection intentionally read\n   * environment variables from the same process snapshot as platform/versions.\n   */\n  readonly env: Readonly<Record<string, string | undefined>>;\n  /**\n   * Best-effort reader for the project's `package.json`, used only to derive\n   * the optional `tsVersion` telemetry field. Returning `null` means unknown.\n   */\n  readonly readProjectPackageJson: () => string | null;\n}\n\n/**\n * Identify the runtime the sender is running in. Same-runtime as the\n * parent is a correctness requirement: the parent forked us via\n * `child_process.fork`, which inherits the parent's runtime. Detection\n * keys on the runtime-specific version field rather than env vars so a\n * spoofed env can't lie about the actual interpreter.\n */\nfunction resolveRuntime(versions: VersionsSnapshot): {\n  readonly name: 'node' | 'bun' | 'deno';\n  readonly version: string;\n} {\n  if (versions.bun !== undefined) {\n    return { name: 'bun', version: versions.bun };\n  }\n  if (versions.deno !== undefined) {\n    return { name: 'deno', version: versions.deno };\n  }\n  return { name: 'node', version: versions.node };\n}\n\n/**\n * Parse `npm_config_user_agent` into a `<pm>/<version>` token. The\n * value, when present, looks like\n * `\"pnpm/10.27.0 npm/? node/v24.13.0 darwin arm64\"` — we take the first\n * whitespace-separated token. Any failure → `null`.\n */\nexport function parsePackageManager(userAgent: string | undefined): string | null {\n  if (userAgent === undefined) return null;\n  const first = userAgent.split(/\\s+/)[0];\n  if (first === undefined || first.length === 0) return null;\n  if (!first.includes('/')) return null;\n  return first;\n}\n\n/**\n * Read the user's project `package.json` and resolve a TypeScript\n * version from `devDependencies.typescript` (preferred) or\n * `dependencies.typescript`. Strips a leading `^` or `~` semver\n * prefix. Returns `null` on any failure mode — file missing,\n * unreadable, malformed JSON, key absent, not a string.\n */\nexport function readTsVersionFromPackageJson(raw: string | null): string | null {\n  if (raw === null) return null;\n  let parsed: Record<string, unknown>;\n  try {\n    parsed = JSON.parse(raw) as Record<string, unknown>;\n  } catch {\n    return null;\n  }\n  const candidate =\n    pickStringDep(parsed['devDependencies']) ?? pickStringDep(parsed['dependencies']);\n  if (candidate === null) return null;\n  return candidate.replace(/^[\\^~]/, '');\n}\n\nfunction pickStringDep(deps: unknown): string | null {\n  if (deps === null || typeof deps !== 'object' || Array.isArray(deps)) return null;\n  const value = (deps as Record<string, unknown>)['typescript'];\n  return typeof value === 'string' ? value : null;\n}\n\n/**\n * Build the full backend event from the parent's payload, the\n * c12-loaded project-config slice, and the child's per-process\n * snapshot. Pure given a `projectConfig` + `EnrichEnvironment`.\n */\nexport function buildTelemetryEvent(\n  payload: ParentToSenderPayload,\n  projectConfig: ProjectConfigFields,\n  env: EnrichEnvironment,\n): TelemetryEvent {\n  const runtime = resolveRuntime(env.versions);\n  return {\n    installationId: payload.installationId,\n    version: payload.version,\n    command: payload.command,\n    flags: payload.flags,\n    runtimeName: runtime.name,\n    runtimeVersion: runtime.version,\n    os: env.platform,\n    arch: env.arch,\n    packageManager: parsePackageManager(env.env['npm_config_user_agent']),\n    databaseTarget: projectConfig.databaseTarget,\n    tsVersion: readTsVersionFromPackageJson(env.readProjectPackageJson()),\n    agent: detectAgent(env.env),\n    extensions: projectConfig.extensions,\n  };\n}\n\n/**\n * Convenience for the sender entry: build the event from the live\n * `process` plus a c12 load of `prisma-next.config.*` from\n * `payload.projectRoot` plus a real project-package.json reader,\n * swallowing any I/O errors in the file read.\n *\n * The parent's `payload.databaseTarget` (when present) wins over the\n * c12-derived value. The parent sets this for the first-`init` run,\n * where the config file does not exist on disk yet but the user has\n * just declared a target via the consent prompt; every other\n * invocation leaves it unset and the c12 load supplies the value.\n */\nexport async function buildTelemetryEventFromProcess(\n  payload: ParentToSenderPayload,\n): Promise<TelemetryEvent> {\n  const loadedConfig = await loadProjectConfig(payload.projectRoot);\n  const projectConfig: ProjectConfigFields = {\n    databaseTarget: payload.databaseTarget ?? loadedConfig.databaseTarget,\n    extensions: loadedConfig.extensions,\n  };\n  return buildTelemetryEvent(payload, projectConfig, {\n    platform: process.platform,\n    arch: process.arch,\n    versions: process.versions,\n    env: process.env,\n    readProjectPackageJson: () => {\n      try {\n        return readFileSync(join(payload.projectRoot, 'package.json'), 'utf-8');\n      } catch {\n        return null;\n      }\n    },\n  });\n}\n"],"mappings":";;;AAgCA,MAAa,gBAAwC;CACnD;EAAE,QAAQ;EAAc,OAAO;CAAc;CAC7C;EAAE,QAAQ;EAAgB,OAAO;CAAS;CAC1C;EAAE,QAAQ;EAAiB,OAAO;CAAY;CAC9C;EAAE,QAAQ;EAAc,OAAO;CAAa;CAC5C;EAAE,QAAQ;EAAY,OAAO;CAAW;CACxC;EAAE,QAAQ;EAAS,OAAO;CAAQ;CAClC;EAAE,QAAQ;EAAQ,OAAO;CAAO;CAChC;EAAE,QAAQ;EAAY,OAAO;CAAW;AAC1C;AAEA,SAAS,eAAe,KAAkC;CACxD,IAAI,QAAQ,KAAA,GAAW,OAAO;CAC9B,MAAM,aAAa,IAAI,KAAK,CAAC,CAAC,YAAY;CAC1C,IAAI,eAAe,IAAI,OAAO;CAC9B,IAAI,eAAe,KAAK,OAAO;CAC/B,IAAI,eAAe,SAAS,OAAO;CACnC,OAAO;AACT;;;;;;;;;AAUA,SAAgB,YAAY,KAAkE;CAC5F,KAAK,MAAM,UAAU,eACnB,IAAI,eAAe,IAAI,OAAO,OAAO,GACnC,OAAO,OAAO;CAGlB,OAAO;AACT;;;AClDA,MAAM,uBAA4C;CAChD,gBAAgB;CAChB,YAAY,CAAC;AACf;;;;;;;;;;;;;;;AAgBA,eAAsB,kBAAkB,aAAmD;CACzF,IAAI;EACF,MAAM,EAAE,eAAe,MAAM,OAAO;EAQpC,MAAM,UAAS,MAPM,WAAoC;GACvD,MAAM;GACN,KAAK;GACL,QAAQ;GACR,QAAQ;GACR,UAAU;EACZ,CAAC,EAAA,CACqB,UAAU;EAMhC,IAAI,WAAW,QAAQ,OAAO,KAAK,MAAM,CAAC,CAAC,WAAW,GACpD,OAAO;EAQT,MAAM,YAA8D,MAN3C,OAAO,yCAAA,CAM+C;EAC/E,SAAS,MAAM;EACf,OAAO;GACL,gBAAgB,OAAO,OAAO;GAC9B,aAAa,OAAO,kBAAkB,CAAC,EAAA,CAAG,KAAK,SAAS,KAAK,EAAE;EACjE;CACF,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;AA4CA,SAAS,eAAe,UAGtB;CACA,IAAI,SAAS,QAAQ,KAAA,GACnB,OAAO;EAAE,MAAM;EAAO,SAAS,SAAS;CAAI;CAE9C,IAAI,SAAS,SAAS,KAAA,GACpB,OAAO;EAAE,MAAM;EAAQ,SAAS,SAAS;CAAK;CAEhD,OAAO;EAAE,MAAM;EAAQ,SAAS,SAAS;CAAK;AAChD;;;;;;;AAQA,SAAgB,oBAAoB,WAA8C;CAChF,IAAI,cAAc,KAAA,GAAW,OAAO;CACpC,MAAM,QAAQ,UAAU,MAAM,KAAK,CAAC,CAAC;CACrC,IAAI,UAAU,KAAA,KAAa,MAAM,WAAW,GAAG,OAAO;CACtD,IAAI,CAAC,MAAM,SAAS,GAAG,GAAG,OAAO;CACjC,OAAO;AACT;;;;;;;;AASA,SAAgB,6BAA6B,KAAmC;CAC9E,IAAI,QAAQ,MAAM,OAAO;CACzB,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,QAAQ;EACN,OAAO;CACT;CACA,MAAM,YACJ,cAAc,OAAO,kBAAkB,KAAK,cAAc,OAAO,eAAe;CAClF,IAAI,cAAc,MAAM,OAAO;CAC/B,OAAO,UAAU,QAAQ,UAAU,EAAE;AACvC;AAEA,SAAS,cAAc,MAA8B;CACnD,IAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG,OAAO;CAC7E,MAAM,QAAS,KAAiC;CAChD,OAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;;;;;;AAOA,SAAgB,oBACd,SACA,eACA,KACgB;CAChB,MAAM,UAAU,eAAe,IAAI,QAAQ;CAC3C,OAAO;EACL,gBAAgB,QAAQ;EACxB,SAAS,QAAQ;EACjB,SAAS,QAAQ;EACjB,OAAO,QAAQ;EACf,aAAa,QAAQ;EACrB,gBAAgB,QAAQ;EACxB,IAAI,IAAI;EACR,MAAM,IAAI;EACV,gBAAgB,oBAAoB,IAAI,IAAI,wBAAwB;EACpE,gBAAgB,cAAc;EAC9B,WAAW,6BAA6B,IAAI,uBAAuB,CAAC;EACpE,OAAO,YAAY,IAAI,GAAG;EAC1B,YAAY,cAAc;CAC5B;AACF;;;;;;;;;;;;;AAcA,eAAsB,+BACpB,SACyB;CACzB,MAAM,eAAe,MAAM,kBAAkB,QAAQ,WAAW;CAKhE,OAAO,oBAAoB,SAAS;EAHlC,gBAAgB,QAAQ,kBAAkB,aAAa;EACvD,YAAY,aAAa;CAEqB,GAAG;EACjD,UAAU,QAAQ;EAClB,MAAM,QAAQ;EACd,UAAU,QAAQ;EAClB,KAAK,QAAQ;EACb,8BAA8B;GAC5B,IAAI;IACF,OAAO,aAAa,KAAK,QAAQ,aAAa,cAAc,GAAG,OAAO;GACxE,QAAQ;IACN,OAAO;GACT;EACF;CACF,CAAC;AACH"}

package/src/detect-agent.ts

@@ -1,68 +0,0 @@
-/**
- * Best-effort identification of AI coding-agent sessions from an
- * env-var allowlist. Detector property: false positives are negligible
- * (a marker present ⇒ confidently an agent); false negatives are
- * expected and documented in the user-facing telemetry docs. New
- * entries should land here, not in per-CLI hand-rolls.
- *
- * Each entry is a `(envVar, agent)` pair with uniform comparison shape:
- * the marker counts as "present" when `process.env[envVar]` is set to a
- * truthy string. Truthy = anything other than the empty string, `'0'`,
- * or `'false'` (case-insensitive); see `gating.isTruthyOptOut` for the
- * same convention applied to opt-out env vars.
- *
- * The detector runs in the **child** sender process, never the parent;
- * the parent does not probe env at command start.
- *
- * Codex CLI note: `CODEX_SANDBOX` is the only clear marker available here.
- * Non-sandboxed Codex sessions may be false negatives.
- *
- * TODO: a ci-info-for-agents would be nice — this allowlist drifts the
- * moment a new agent ships its env marker, and consolidating with the
- * other ecosystems that need the same lookup (rate-limited LLM
- * gateways, agent-aware metrics, etc.) would let one library carry the
- * matrix instead of every consumer re-doing it.
- */
-export interface AgentMarker {
-  /** The env-var name to read. Exact-match; no prefix or fuzzy logic. */
-  readonly envVar: string;
-  /** The agent label written to the `agent` field of the telemetry event. */
-  readonly agent: string;
-}
-
-export const AGENT_MARKERS: readonly AgentMarker[] = [
-  { envVar: 'CLAUDECODE', agent: 'Claude Code' },
-  { envVar: 'CURSOR_AGENT', agent: 'Cursor' },
-  { envVar: 'CODEX_SANDBOX', agent: 'Codex CLI' },
-  { envVar: 'GEMINI_CLI', agent: 'Gemini CLI' },
-  { envVar: 'WINDSURF', agent: 'Windsurf' },
-  { envVar: 'AIDER', agent: 'Aider' },
-  { envVar: 'CODY', agent: 'Cody' },
-  { envVar: 'CONTINUE', agent: 'Continue' },
-];
-
-function isTruthyMarker(raw: string | undefined): boolean {
-  if (raw === undefined) return false;
-  const normalised = raw.trim().toLowerCase();
-  if (normalised === '') return false;
-  if (normalised === '0') return false;
-  if (normalised === 'false') return false;
-  return true;
-}
-
-/**
- * Resolve the agent label from an env snapshot, or `null` if no marker
- * is set. Returns the **first** matching marker in `AGENT_MARKERS`
- * order, so when multiple markers are set the agent label is
- * deterministic and the allowlist's first entry wins.
- *
- * Pure: takes an env record, returns a string or null. No I/O.
- */
-export function detectAgent(env: Readonly<Record<string, string | undefined>>): string | null {
-  for (const marker of AGENT_MARKERS) {
-    if (isTruthyMarker(env[marker.envVar])) {
-      return marker.agent;
-    }
-  }
-  return null;
-}