@snowyroad/braid 0.91.0 → 0.92.0

package/README.md

@@ -284,6 +284,13 @@ relay to reject unsigned machine-agent posts (HTTP 403 `signing_required`).
 Human messages are never gated. The flag ships off by default; enable it only
 once all agents in the workspace are on a signing-capable bridge version.
 
+## Telemetry
+
+The bridge sends a small set of usage signals (which CLI verbs and providers you use, guided-setup
+outcomes, tool-permission denials) — never message content, file paths, or command arguments — tied
+to your account, not anonymous. Disable with `DO_NOT_TRACK=1` (any surface) or `braid telemetry
+disable`. Full collection list: [`telemetry-collection.md`](https://github.com/Snowy-Road/braid-platform/blob/main/docs/telemetry-collection.md).
+
 ## Supply chain
 
 Provider ACP adapters (Claude Code, Codex, Gemini) are exact version-pinned and

package/dist/{chunk-KHC4MLRB.js → chunk-2B5FDTWM.js}

@@ -389,7 +389,7 @@ var InviteExpiredError = class extends Error {
   }
 };
 async function redeemInvite(relayHttpUrl, code) {
-  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-YQL65H2M.js");
+  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-HGIWSVON.js");
   const r = await boundedJsonFetch2(`${relayHttpUrl.replace(/\/$/, "")}/invites/redeem`, {
     method: "POST",
     headers: { "content-type": "application/json" },
@@ -478,7 +478,7 @@ function validateReplacementToken(newToken, currentToken, nowMs = Date.now()) {
   return { ok: true };
 }
 async function mintAccessToken(relayHttpUrl, agentKey, fetchFn = fetch, dpopProof) {
-  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-YQL65H2M.js");
+  const { boundedJsonFetch: boundedJsonFetch2 } = await import("./http-HGIWSVON.js");
   const r = await boundedJsonFetch2(`${relayHttpUrl.replace(/\/$/, "")}/agents/token`, {
     method: "POST",
     headers: {
@@ -6682,6 +6682,10 @@ async function loadConfigFromInvite(code, env, flags, telemetry) {
     provider = choice.provider;
     providerExplicit = choice.persist;
   }
+  telemetry?.captureBridgeEvent("bridge_provider_selected", {
+    provider,
+    surface: flags?.provider !== void 0 ? "flag" : env.BRAID_AGENT?.trim() ? "env" : "prompt"
+  });
   const joinModel = flags?.model ?? (env.BRAID_MODEL?.trim() || void 0);
   const scopePersist = buildJoinScopeBlock(flags, env);
   const dir = configDir(env);

package/dist/cli.js

@@ -71,7 +71,7 @@ import {
   toolStatusLine,
   validateRelayWsUrl,
   wsToHttp
-} from "./chunk-KHC4MLRB.js";
+} from "./chunk-2B5FDTWM.js";
 import {
   externalSourceLabel,
   externalUntrustedPreamble,
@@ -2873,7 +2873,7 @@ Commands:
   scope allow <agent> <host>
                   Approve a custom model endpoint host for a saved agent (BL-148)
   telemetry [status|enable|disable]
-                  Show or change anonymous usage telemetry (tool-mode +
+                  Show or change usage telemetry (tool-mode +
                   blocked-tool-call signals only; never content, paths, or
                   names). Machine-level, no saved agent required. Default: status
   service <install|uninstall|start|stop|restart|status|logs> [name]
@@ -2921,6 +2921,14 @@ Options for join/start (each also has an env twin; flag > env > file > default):
                      background; details any time via: braid status <name>)
 At join, explicit choices persist to the saved agent; at start they apply to
 that run only.`;
+function verbForInvocation(invocation) {
+  if (invocation.kind === "usage") return null;
+  if (invocation.kind === "run") {
+    const first = invocation.argv.find((a) => !a.startsWith("-"));
+    return first === "join" || first === "start" ? first : "run";
+  }
+  return invocation.kind;
+}
 var SERVICE_VERBS = /* @__PURE__ */ new Set([
   "install",
   "uninstall",
@@ -3348,6 +3356,8 @@ async function runGuidedStart(flags, deps) {
     const chosen = await deps.chooseProvider(name);
     provider = chosen.provider;
     if (chosen.persist) patch.provider = chosen.provider;
+    deps.telemetry.captureBridgeEvent("bridge_provider_selected", { provider: chosen.provider, surface: "guided" });
+    deps.telemetry.captureBridgeEvent("bridge_guided_step", { step: "provider", outcome: "completed" });
   }
   let toolMode = flags?.tools ?? envTool ?? stored.toolMode ?? "readonly";
   if (toolsPending) {
@@ -3365,6 +3375,7 @@ async function runGuidedStart(flags, deps) {
       );
       if (toolsPending) {
         deps.telemetry.captureBridgeEvent("tool_mode_selected", { mode: toolMode, surface: "guided", persisted: false });
+        deps.telemetry.captureBridgeEvent("bridge_guided_step", { step: "tool_mode", outcome: "completed" });
       }
       return { action: "continue" };
     }
@@ -3375,6 +3386,7 @@ async function runGuidedStart(flags, deps) {
   }
   if (toolsPending) {
     deps.telemetry.captureBridgeEvent("tool_mode_selected", { mode: toolMode, surface: "guided", persisted: toolModePersistedOnFile });
+    deps.telemetry.captureBridgeEvent("bridge_guided_step", { step: "tool_mode", outcome: "completed" });
   }
   const cont = () => ephemeralToolMode ? { action: "continue", runToolMode: toolMode } : { action: "continue" };
   const wantBackground = await deps.askBackground(buildBackgroundQuestion(displayName));
@@ -3382,6 +3394,7 @@ async function runGuidedStart(flags, deps) {
     deps.out(
       `[braid] starting ${displayName} in the foreground (Ctrl-C stops it). For a background service later: braid service install ${cmdName}`
     );
+    deps.telemetry.captureBridgeEvent("bridge_guided_step", { step: "background", outcome: "aborted" });
     return cont();
   }
   deps.out(`[braid] provider: ${PROVIDER_LABELS[provider] ?? provider} (${provider})`);
@@ -3397,6 +3410,7 @@ async function runGuidedStart(flags, deps) {
     deps.err(
       `[braid] couldn't set up the background service \u2014 starting ${displayName} in the foreground instead (Ctrl-C stops it; restart later with: braid start ${cmdName})`
     );
+    deps.telemetry.captureBridgeEvent("bridge_guided_step", { step: "background", outcome: "aborted" });
     return cont();
   }
   if (deps.verbose) {
@@ -3408,6 +3422,7 @@ async function runGuidedStart(flags, deps) {
   deps.out(`[braid] ${displayName} is running in the background \u2014 it stays online after you close this terminal`);
   deps.out(`[braid] manage it: braid service <stop|restart|logs> ${cmdName} \xB7 details: braid status ${cmdName}`);
   deps.out(`[braid] back in Braid \u2014 talk to ${displayName} in a channel`);
+  deps.telemetry.captureBridgeEvent("bridge_guided_step", { step: "background", outcome: "completed" });
   return { action: "exit", code: 0 };
 }
 
@@ -4575,11 +4590,17 @@ import { readFileSync as readFileSync6, writeFileSync as writeFileSync5, mkdirSy
 import { dirname as dirname5, join as join7 } from "path";
 var EVENT_PROP_ALLOWLIST = {
   tool_mode_selected: ["mode", "surface", "persisted"],
-  tool_call_blocked: ["tool", "mode", "path", "reason"]
+  tool_call_blocked: ["tool", "mode", "path", "reason"],
+  bridge_verb_invoked: ["verb"],
+  bridge_provider_selected: ["provider", "surface"],
+  bridge_guided_step: ["step", "outcome"],
+  bridge_handoff_invoked: [],
+  bridge_service_lifecycle: ["action"]
 };
 var DEBOUNCE_KEY_PROPS = ["tool", "mode", "path", "reason"];
 var DEBOUNCE_MS = 6e4;
-var DISCLOSURE_LINE = "[braid] anonymous usage telemetry is on (tool-mode + blocked-tool-call signals; never content, paths, or names). Disable: braid telemetry disable";
+var PENDING_CAP = 8;
+var DISCLOSURE_LINE = "[braid] usage telemetry is on (tool + CLI usage signals, tied to your account; never content, paths, or names). Disable: braid telemetry disable";
 function isDoNotTrackSet(env) {
   const v = env.DO_NOT_TRACK;
   if (v === void 0) return false;
@@ -4614,7 +4635,7 @@ function writeTelemetryConfig(dir, cfg) {
 function createBridgeTelemetry(deps) {
   let cachedConfig;
   const debounceLast = /* @__PURE__ */ new Map();
-  let pendingFrame = null;
+  const pendingFrames = [];
   function loadConfigCached() {
     if (cachedConfig === void 0) cachedConfig = readTelemetryConfig(deps.configDir);
     return cachedConfig;
@@ -4647,16 +4668,19 @@ function createBridgeTelemetry(deps) {
       }
       const frame = { type: "telemetry", event: name, props: filteredProps };
       const delivered = deps.send(frame);
-      if (delivered !== true) pendingFrame = frame;
+      if (delivered !== true) {
+        pendingFrames.push(frame);
+        if (pendingFrames.length > PENDING_CAP) pendingFrames.shift();
+      }
     } catch {
     }
   }
   function flushPending() {
     try {
-      if (pendingFrame === null) return;
-      const frame = pendingFrame;
-      pendingFrame = null;
-      deps.send(frame);
+      while (pendingFrames.length > 0) {
+        const frame = pendingFrames.shift();
+        deps.send(frame);
+      }
     } catch {
     }
   }
@@ -5929,6 +5953,21 @@ async function main() {
   applyEnvAliases();
   installCrashGuard();
   const invocation = parseCliArgs(process.argv.slice(2));
+  const relayRef = { current: null };
+  const telemetry = createBridgeTelemetry({
+    env: process.env,
+    configDir: configDir(process.env),
+    now: Date.now,
+    // BL-265 review: stderr, not stdout — the verb census can fire this
+    // disclosure ahead of ANY dispatch, including machine-read verbs
+    // (`status --json`, `service status --json`, `version`) whose stdout a
+    // parser consumes verbatim. Mirrors FULL_ACCESS_WARNING's stderr channel.
+    // D6 (disclosure precedes any send) is unaffected — only the channel moved.
+    out: (line) => console.error(line),
+    send: (frame) => relayRef.current ? relayRef.current.sendTelemetry(frame) : false
+  });
+  const invokedVerb = verbForInvocation(invocation);
+  if (invokedVerb !== null) telemetry.captureBridgeEvent("bridge_verb_invoked", { verb: invokedVerb });
   if (invocation.kind === "tui") {
     if (invocation.bare && !process.stdout.isTTY) {
       console.error(USAGE);
@@ -5984,6 +6023,9 @@ async function main() {
     );
   }
   if (invocation.kind === "service") {
+    if (invocation.verb === "install" || invocation.verb === "uninstall" || invocation.verb === "start" || invocation.verb === "stop") {
+      telemetry.captureBridgeEvent("bridge_service_lifecycle", { action: invocation.verb });
+    }
     process.exit(await runServiceVerb(invocation.verb, invocation.agent, invocation.json));
   }
   if (invocation.kind === "update") {
@@ -5993,20 +6035,13 @@ async function main() {
     process.exit(await runAttach(invocation.agent));
   }
   if (invocation.kind === "handoff") {
+    telemetry.captureBridgeEvent("bridge_handoff_invoked", {});
     process.exit(await runHandoffCommand({
       agent: invocation.agent,
       channel: invocation.channel,
       recover: invocation.recover
     }));
   }
-  const relayRef = { current: null };
-  const telemetry = createBridgeTelemetry({
-    env: process.env,
-    configDir: configDir(process.env),
-    now: Date.now,
-    out: (line) => console.log(line),
-    send: (frame) => relayRef.current ? relayRef.current.sendTelemetry(frame) : false
-  });
   {
     const parsed = parseRunFlags(invocation.argv);
     const gate = parsed.ok ? shouldOfferGuidedStart(parsed.rest, process.env) : { offer: false };

package/dist/{http-YQL65H2M.js → http-HGIWSVON.js}

@@ -4,7 +4,7 @@ import {
   boundedJsonFetch,
   resetHttpMetricsForTest,
   snapshotHttpMetrics
-} from "./chunk-KHC4MLRB.js";
+} from "./chunk-2B5FDTWM.js";
 import "./chunk-BDOF72CL.js";
 export {
   assertHttpEndpoint,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.91.0",
+  "version": "0.92.0",
   "description": "Braid: connect your own coding agent (Claude Code, Codex, Gemini, Grok) to a Braid channel and collaborate with other agents and humans.",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "SnowyRoad",
@@ -51,7 +51,7 @@
     "@anthropic-ai/sandbox-runtime": "0.0.63",
     "@anthropic-ai/sdk": "0.104.1",
     "@modelcontextprotocol/sdk": "1.29.0",
-    "@snowyroad/braid-tui": "0.0.26",
+    "@snowyroad/braid-tui": "0.0.27",
     "canonicalize": "^3.0.0",
     "diff": "^9.0.0",
     "jose": "^6.2.3",

package/service-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.91.0",
+  "version": "0.92.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@snowyroad/braid",
-      "version": "0.91.0",
+      "version": "0.92.0",
       "license": "SEE LICENSE IN LICENSE.md",
       "dependencies": {
         "@agentclientprotocol/sdk": "0.25.1",
@@ -14,7 +14,7 @@
         "@anthropic-ai/sandbox-runtime": "0.0.63",
         "@anthropic-ai/sdk": "0.104.1",
         "@modelcontextprotocol/sdk": "1.29.0",
-        "@snowyroad/braid-tui": "0.0.26",
+        "@snowyroad/braid-tui": "0.0.27",
         "canonicalize": "^3.0.0",
         "diff": "^9.0.0",
         "jose": "^6.2.3",
@@ -1204,9 +1204,9 @@
       ]
     },
     "node_modules/@snowyroad/braid-tui": {
-      "version": "0.0.26",
-      "resolved": "https://registry.npmjs.org/@snowyroad/braid-tui/-/braid-tui-0.0.26.tgz",
-      "integrity": "sha512-FTXVV0BB5Ko/gRfbzMjLoh1wG+j7aiBWjEhXp+k0cI67gUuQgxMaykV5gELWepVofUh8t3ZAsRgthZoWoqFVPw==",
+      "version": "0.0.27",
+      "resolved": "https://registry.npmjs.org/@snowyroad/braid-tui/-/braid-tui-0.0.27.tgz",
+      "integrity": "sha512-CZ9ZjImbe7sYHc8vFMOF0KlEYbN/1MyP1HeX8H4cfYQRwi4Q/IzAbWpfOGZo4iWZuwm/P7LbE9quBX4pfL8nww==",
       "license": "SEE LICENSE IN LICENSE.md",
       "dependencies": {
         "ink": "^5.2.0",
@@ -2143,9 +2143,9 @@
       }
     },
     "node_modules/express-rate-limit": {
-      "version": "8.6.1",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.6.1.tgz",
-      "integrity": "sha512-0D493aP61w0TJ2A0wy27riRsO7FMQ7FK+KUHOKCSfPvYo0R55aiC6emCVgFUeShH0fq0ICPVzNcgoS+BsbXQCA==",
+      "version": "8.6.2",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.6.2.tgz",
+      "integrity": "sha512-YH4ru+eOJxQABscKFfRCy9R7x9QFGdezclVMwwgFFndzS2Xnm0uo6B0ABZsLhcpeptGv2qvuJVWlQr9gQZoC3A==",
       "license": "MIT",
       "dependencies": {
         "debug": "^4.4.3",
@@ -2943,9 +2943,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.25",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.25.tgz",
-      "integrity": "sha512-DTPx3RWSSnWyzLxQnlH0rJP+EW5ekl16ZU4/psbIhA0e53kJfdgaN5vKM+xP7yJtXVu+nfdVFmlgFDEKAe4Pyw==",
+      "version": "8.5.26",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.26.tgz",
+      "integrity": "sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==",
       "dev": true,
       "funding": [
         {
@@ -2963,7 +2963,7 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.16",
+        "nanoid": "^3.3.17",
         "picocolors": "^1.1.1",
         "source-map-js": "^1.2.1"
       },
@@ -3713,9 +3713,9 @@
       }
     },
     "node_modules/tsx": {
-      "version": "4.23.5",
-      "resolved": "https://registry.npmjs.org/tsx/-/tsx-4.23.5.tgz",
-      "integrity": "sha512-rw55FUaqOoI7RvlQwLbhO4nSDApnQ4/CykPuiQ/EPvtrX3WA9Ig55jIt9VvbBJbzJuj12ueRu4PMZ2SxPVbihg==",
+      "version": "4.23.9",
+      "resolved": "https://registry.npmjs.org/tsx/-/tsx-4.23.9.tgz",
+      "integrity": "sha512-6q8uTORRGauQVjqMQnKUucLFoeXZAfw6zKvG35GLbdKWbLdeOtZ3H4mhyA5mxuUd2o2cRTskhj59nLLQseUvUw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {