@springbrand/cli 0.1.0

package/dist/lib/setup-telemetry.d.ts

@@ -0,0 +1,273 @@
+/** 复刻自 tiny-fish CLI 编译产物：setup-telemetry.d.ts + setup-telemetry.impl.js */
+import { z } from 'zod';
+import { AuthMode, Registered } from './harness-detect.js';
+/**
+ * `SPRINGBRAND_NO_TELEMETRY` suppresses ALL CLI-emitted network analytics
+ * (setup_completed, connect-event, update check). Any value except `0`/`false`
+ * opts out — a privacy switch must not fail closed on `true`.
+ */
+export declare function telemetryDisabled(): boolean;
+/**
+ * The one POST to `/api/cli/connect-event`, and the only place its security-relevant
+ * properties live: `redirect: "error"`, the 2s cap, trusted-origin notice capture. Never
+ * throws. `endpoint` is the caller's — connect and setup target the `--url` being installed
+ * against, upgrade has none and uses BASE_URL.
+ *
+ * Carries no credential: install events are anonymous, and the endpoint reads no
+ * Authorization. Attribution rides `attempt_id` in the body instead.
+ */
+export declare function postConnectEvent(options: {
+    endpoint: string;
+    body: string;
+    /** 2 where a lost event costs a headline metric — stale keep-alive sockets eat post-install POSTs. */
+    attempts: number;
+    label: string;
+}): Promise<void>;
+declare const harnessResultSchema: z.ZodObject<{
+    harness: z.ZodEnum<{
+        openclaw: "openclaw";
+        omp: "omp";
+        grok: "grok";
+        cursor: "cursor";
+        codex: "codex";
+        hermes: "hermes";
+        "command-code": "command-code";
+        opencode: "opencode";
+        pi: "pi";
+        "claude-code": "claude-code";
+    }>;
+    detected: z.ZodBoolean;
+    installed: z.ZodBoolean;
+    verify_depth: z.ZodNullable<z.ZodEnum<{
+        health: "health";
+        "health+auth": "health+auth";
+    }>>;
+    verify_ok: z.ZodNullable<z.ZodBoolean>;
+}, z.core.$strip>;
+/** First act of a `--all` run; everything upstream of it stays invisible. */
+export declare function sendSetupStarted(mcpUrl: string, attemptId?: string): Promise<void>;
+/** Terminal state for a run the key gate stopped; fires instead of setup_started. */
+export declare function sendSetupBlocked(mcpUrl: string, detail: SetupBlockedDetail): Promise<void>;
+export declare const setupCompletedPayloadSchema: z.ZodObject<{
+    harnesses: z.ZodArray<z.ZodObject<{
+        harness: z.ZodEnum<{
+            openclaw: "openclaw";
+            omp: "omp";
+            grok: "grok";
+            cursor: "cursor";
+            codex: "codex";
+            hermes: "hermes";
+            "command-code": "command-code";
+            opencode: "opencode";
+            pi: "pi";
+            "claude-code": "claude-code";
+        }>;
+        detected: z.ZodBoolean;
+        installed: z.ZodBoolean;
+        verify_depth: z.ZodNullable<z.ZodEnum<{
+            health: "health";
+            "health+auth": "health+auth";
+        }>>;
+        verify_ok: z.ZodNullable<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    cli_version: z.ZodString;
+    mode: z.ZodOptional<z.ZodEnum<{
+        all: "all";
+        pick: "pick";
+        pick_numeric: "pick_numeric";
+    }>>;
+    connect_attempt_id: z.ZodOptional<z.ZodUUID>;
+}, z.core.$strip>;
+/** `toVersion` is null when the run was interrupted or the installed version could not be read. */
+export declare function sendUpgradeCompleted(fromVersion: string, toVersion: string | null, outcome: UpgradeOutcome, scope: UpgradeScope): Promise<void>;
+export declare function sendSetupCompleted(mcpUrl: string, harnesses: HarnessResult[], mode?: SetupMode, attemptId?: string): Promise<void>;
+export declare const DOCTOR_ERROR_CLASSES: readonly ["command_not_found", "timeout", "spawn_error", "nonzero_exit", "unexpected_error"];
+/** Derived, not read: the catch is generic, so only the code is trustworthy. */
+export declare function doctorErrorClass(error: unknown): DoctorErrorClass;
+declare const doctorCompletedPayloadSchema: z.ZodObject<{
+    outcome: z.ZodLiteral<"completed">;
+    schema_version: z.ZodInt;
+    cli_version: z.ZodString;
+    ok_harnesses: z.ZodBoolean;
+    ok_cli: z.ZodBoolean;
+    checks_pass: z.ZodInt;
+    checks_fail: z.ZodInt;
+    checks_warn: z.ZodInt;
+    checks_skip: z.ZodInt;
+    repairs_offered: z.ZodInt;
+    repair_actions: z.ZodArray<z.ZodEnum<{
+        connect: "connect";
+        "auth-login": "auth-login";
+    }>>;
+    repairs_attempted: z.ZodInt;
+    repairs_succeeded: z.ZodInt;
+    fix_mode: z.ZodEnum<{
+        none: "none";
+        fix: "fix";
+        fix_yes: "fix_yes";
+    }>;
+    harness_scope: z.ZodEnum<{
+        [x: string]: string;
+    }>;
+    is_human_initiated: z.ZodBoolean;
+    failed_check_ids: z.ZodArray<z.ZodString>;
+    failed_harnesses: z.ZodArray<z.ZodEnum<{
+        openclaw: "openclaw";
+        omp: "omp";
+        grok: "grok";
+        cursor: "cursor";
+        codex: "codex";
+        hermes: "hermes";
+        "command-code": "command-code";
+        opencode: "opencode";
+        pi: "pi";
+        "claude-code": "claude-code";
+    }>>;
+    harnesses: z.ZodArray<z.ZodObject<{
+        harness: z.ZodEnum<{
+            openclaw: "openclaw";
+            omp: "omp";
+            grok: "grok";
+            cursor: "cursor";
+            codex: "codex";
+            hermes: "hermes";
+            "command-code": "command-code";
+            opencode: "opencode";
+            pi: "pi";
+            "claude-code": "claude-code";
+        }>;
+        detected: z.ZodBoolean;
+        registered: z.ZodEnum<typeof Registered>;
+        auth_mode: z.ZodEnum<typeof AuthMode>;
+        proves_harness_reach: z.ZodBoolean;
+    }, z.core.$strip>>;
+    duration_ms: z.ZodInt;
+    hermes_plugin_version: z.ZodOptional<z.ZodString>;
+    hermes_plugin_expected_version: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const doctorCouldNotRunPayloadSchema: z.ZodObject<{
+    outcome: z.ZodLiteral<"could_not_run">;
+    error_class: z.ZodEnum<{
+        timeout: "timeout";
+        command_not_found: "command_not_found";
+        spawn_error: "spawn_error";
+        nonzero_exit: "nonzero_exit";
+        unexpected_error: "unexpected_error";
+    }>;
+    schema_version: z.ZodInt;
+    cli_version: z.ZodString;
+    fix_mode: z.ZodEnum<{
+        none: "none";
+        fix: "fix";
+        fix_yes: "fix_yes";
+    }>;
+    harness_scope: z.ZodEnum<{
+        [x: string]: string;
+    }>;
+    is_human_initiated: z.ZodBoolean;
+    duration_ms: z.ZodInt;
+}, z.core.$strip>;
+declare const doctorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    outcome: z.ZodLiteral<"completed">;
+    schema_version: z.ZodInt;
+    cli_version: z.ZodString;
+    ok_harnesses: z.ZodBoolean;
+    ok_cli: z.ZodBoolean;
+    checks_pass: z.ZodInt;
+    checks_fail: z.ZodInt;
+    checks_warn: z.ZodInt;
+    checks_skip: z.ZodInt;
+    repairs_offered: z.ZodInt;
+    repair_actions: z.ZodArray<z.ZodEnum<{
+        connect: "connect";
+        "auth-login": "auth-login";
+    }>>;
+    repairs_attempted: z.ZodInt;
+    repairs_succeeded: z.ZodInt;
+    fix_mode: z.ZodEnum<{
+        none: "none";
+        fix: "fix";
+        fix_yes: "fix_yes";
+    }>;
+    harness_scope: z.ZodEnum<{
+        [x: string]: string;
+    }>;
+    is_human_initiated: z.ZodBoolean;
+    failed_check_ids: z.ZodArray<z.ZodString>;
+    failed_harnesses: z.ZodArray<z.ZodEnum<{
+        openclaw: "openclaw";
+        omp: "omp";
+        grok: "grok";
+        cursor: "cursor";
+        codex: "codex";
+        hermes: "hermes";
+        "command-code": "command-code";
+        opencode: "opencode";
+        pi: "pi";
+        "claude-code": "claude-code";
+    }>>;
+    harnesses: z.ZodArray<z.ZodObject<{
+        harness: z.ZodEnum<{
+            openclaw: "openclaw";
+            omp: "omp";
+            grok: "grok";
+            cursor: "cursor";
+            codex: "codex";
+            hermes: "hermes";
+            "command-code": "command-code";
+            opencode: "opencode";
+            pi: "pi";
+            "claude-code": "claude-code";
+        }>;
+        detected: z.ZodBoolean;
+        registered: z.ZodEnum<typeof Registered>;
+        auth_mode: z.ZodEnum<typeof AuthMode>;
+        proves_harness_reach: z.ZodBoolean;
+    }, z.core.$strip>>;
+    duration_ms: z.ZodInt;
+    hermes_plugin_version: z.ZodOptional<z.ZodString>;
+    hermes_plugin_expected_version: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    outcome: z.ZodLiteral<"could_not_run">;
+    error_class: z.ZodEnum<{
+        timeout: "timeout";
+        command_not_found: "command_not_found";
+        spawn_error: "spawn_error";
+        nonzero_exit: "nonzero_exit";
+        unexpected_error: "unexpected_error";
+    }>;
+    schema_version: z.ZodInt;
+    cli_version: z.ZodString;
+    fix_mode: z.ZodEnum<{
+        none: "none";
+        fix: "fix";
+        fix_yes: "fix_yes";
+    }>;
+    harness_scope: z.ZodEnum<{
+        [x: string]: string;
+    }>;
+    is_human_initiated: z.ZodBoolean;
+    duration_ms: z.ZodInt;
+}, z.core.$strip>], "outcome">;
+export declare function sendDoctorCompleted(mcpUrl: string, payload: DoctorPayload): Promise<void>;
+export type SetupBlockReason = 'key_rejected' | 'key_malformed' | 'key_environment_mismatch' | 'key_unreadable';
+export type SetupBlockedMode = 'all' | 'pick' | 'single';
+export interface SetupBlockedDetail {
+    blockReason: SetupBlockReason;
+    keySource: 'env' | 'config' | 'explicit';
+    /** Only a server answer has one; a malformed key never reaches the API. */
+    status?: number;
+    mode: SetupBlockedMode;
+    attemptId?: string;
+}
+type SetupCompletedPayload = z.infer<typeof setupCompletedPayloadSchema>;
+export type HarnessResult = z.infer<typeof harnessResultSchema>;
+export type SetupMode = NonNullable<SetupCompletedPayload['mode']>;
+export type UpgradeOutcome = 'updated' | 'failed' | 'interrupted';
+export type UpgradeScope = 'both' | 'cli' | 'skill';
+export type DoctorErrorClass = (typeof DOCTOR_ERROR_CLASSES)[number];
+export type DoctorCompletedPayload = z.infer<typeof doctorCompletedPayloadSchema>;
+export type DoctorCouldNotRunPayload = z.infer<typeof doctorCouldNotRunPayloadSchema>;
+export type DoctorPayload = z.infer<typeof doctorPayloadSchema>;
+export {};
+//# sourceMappingURL=setup-telemetry.d.ts.map

package/dist/lib/setup-telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-telemetry.d.ts","sourceRoot":"","sources":["../../src/lib/setup-telemetry.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAE5E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAiB,QAAQ,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAK1E;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAG3C;AAqBD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,sGAAsG;IACtG,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ChB;AACD,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;iBAMvB,CAAC;AACH,6EAA6E;AAC7E,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBxF;AACD,qFAAqF;AACrF,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBhG;AACD,eAAO,MAAM,2BAA2B,EAAE,CAAC,CAAC,SAAS,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;YACf,QAAQ,EAAE,UAAU,CAAC;YACrB,GAAG,EAAE,KAAK,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,MAAM,EAAE,QAAQ,CAAC;YACjB,KAAK,EAAE,OAAO,CAAC;YACf,MAAM,EAAE,QAAQ,CAAC;YACjB,cAAc,EAAE,cAAc,CAAC;YAC/B,QAAQ,EAAE,UAAU,CAAC;YACrB,EAAE,EAAE,IAAI,CAAC;YACT,aAAa,EAAE,aAAa,CAAC;SAChC,CAAC,CAAC;QACH,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC;QACvB,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC;QACxB,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;YAClC,MAAM,EAAE,QAAQ,CAAC;YACjB,aAAa,EAAE,aAAa,CAAC;SAChC,CAAC,CAAC,CAAC;QACJ,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;KAC1C,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACnB,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1B,GAAG,EAAE,KAAK,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,EAAE,cAAc,CAAC;KAChC,CAAC,CAAC,CAAC;IACJ,kBAAkB,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;CAChD,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAWd,CAAC;AACH,mGAAmG;AACnG,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAerJ;AACD,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCxI;AAYD,eAAO,MAAM,oBAAoB,EAAE,SAAS,CAAC,mBAAmB,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,kBAAkB,CAM7H,CAAC;AACF,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAOjE;AACD,QAAA,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmChC,CAAC;AAEH,QAAA,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;iBASlC,CAAC;AACH,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BAGvB,CAAC;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B/F;AAGD,MAAM,MAAM,gBAAgB,GAAG,cAAc,GAAG,eAAe,GAAG,0BAA0B,GAAG,gBAAgB,CAAC;AAEhH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IAC/B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,UAAU,CAAC;IACzC,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,KAAK,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEzE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;AAEnE,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,QAAQ,GAAG,aAAa,CAAC;AAElE,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAErE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/lib/setup-telemetry.js

@@ -0,0 +1,309 @@
+/** 复刻自 tiny-fish CLI 编译产物：setup-telemetry.d.ts + setup-telemetry.impl.js */
+import { z } from 'zod';
+import { BASE_URL, CLI_INVOCATION_ID, CLI_VERSION } from './constants.js';
+import { ALL_HARNESSES, AuthMode, Registered } from './harness-detect.js';
+import { detectHarness, detectRuntimeEnv } from './harness.js';
+import { captureNotice } from './notice.js';
+import { errLine } from './output.js';
+const CONNECT_EVENT_TIMEOUT_MS = 2_000;
+/**
+ * `SPRINGBRAND_NO_TELEMETRY` suppresses ALL CLI-emitted network analytics
+ * (setup_completed, connect-event, update check). Any value except `0`/`false`
+ * opts out — a privacy switch must not fail closed on `true`.
+ */
+export function telemetryDisabled() {
+    const value = (process.env['SPRINGBRAND_NO_TELEMETRY'] ?? '').trim().toLowerCase();
+    return value !== '' && value !== '0' && value !== 'false';
+}
+// Only these origins may have their response headers read as a SpringBrand advisory.
+// `--url` accepts any http(s) URL, so a user-supplied host must not print its own text.
+const TRUSTED_TELEMETRY_HOST_SUFFIXES = ['.springbrand.ai', '.springbrand.io'];
+const TRUSTED_TELEMETRY_LOOPBACK_HOSTS = ['localhost', '127.0.0.1', '[::1]'];
+function isTrustedTelemetryOrigin(endpoint) {
+    let url;
+    try {
+        url = new URL(endpoint);
+    }
+    catch {
+        return false;
+    }
+    const host = url.hostname.toLowerCase();
+    // Loopback may use http for local dev; every other trusted origin must be https.
+    if (TRUSTED_TELEMETRY_LOOPBACK_HOSTS.includes(host))
+        return true;
+    if (url.protocol !== 'https:')
+        return false;
+    return TRUSTED_TELEMETRY_HOST_SUFFIXES.some((suffix) => host === suffix.slice(1) || host.endsWith(suffix));
+}
+/**
+ * The one POST to `/api/cli/connect-event`, and the only place its security-relevant
+ * properties live: `redirect: "error"`, the 2s cap, trusted-origin notice capture. Never
+ * throws. `endpoint` is the caller's — connect and setup target the `--url` being installed
+ * against, upgrade has none and uses BASE_URL.
+ *
+ * Carries no credential: install events are anonymous, and the endpoint reads no
+ * Authorization. Attribution rides `attempt_id` in the body instead.
+ */
+export async function postConnectEvent(options) {
+    const { endpoint, body, attempts, label } = options;
+    if (telemetryDisabled())
+        return;
+    // Swallows its own write failure so callers can treat this function as total.
+    const debug = (line) => {
+        if (!process.env['SPRINGBRAND_DEBUG'])
+            return;
+        try {
+            errLine(`${label} telemetry ${line}`);
+        }
+        catch {
+            // no stderr to report to
+        }
+    };
+    const trusted = isTrustedTelemetryOrigin(endpoint);
+    for (let attempt = 0; attempt < attempts; attempt++) {
+        try {
+            const response = await fetch(endpoint, {
+                method: 'POST',
+                headers: { 'content-type': 'application/json' },
+                body,
+                redirect: 'error',
+                signal: AbortSignal.timeout(CONNECT_EVENT_TIMEOUT_MS),
+            });
+            // Before the ok branch so a rejected event still yields a notice; gated on origin so a
+            // `--url` host cannot print its own text as a SpringBrand advisory.
+            if (trusted)
+                captureNotice(response.headers);
+            if (response.ok)
+                return;
+            // 4xx will reject the same body again (schema mismatch, e.g. new stages on an old server).
+            const willRetry = response.status >= 500 && attempt < attempts - 1;
+            if (!willRetry)
+                debug(`rejected: HTTP ${response.status}`);
+            if (response.status < 500)
+                return;
+        }
+        catch (e) {
+            debug(`failed: ${e instanceof Error ? e.message : String(e)}`);
+        }
+    }
+}
+const harnessResultSchema = z.object({
+    harness: z.enum(ALL_HARNESSES),
+    detected: z.boolean(),
+    installed: z.boolean(),
+    verify_depth: z.enum(['health', 'health+auth']).nullable(),
+    verify_ok: z.boolean().nullable(),
+});
+/** First act of a `--all` run; everything upstream of it stays invisible. */
+export async function sendSetupStarted(mcpUrl, attemptId) {
+    if (telemetryDisabled())
+        return;
+    // Route 400s a bad id and postConnectEvent never retries 4xx, losing the whole event.
+    const stamped = attemptId && z.uuid().safeParse(attemptId).success ? attemptId : undefined;
+    await postConnectEvent({
+        endpoint: new URL('/api/cli/connect-event', mcpUrl).toString(),
+        body: JSON.stringify({
+            event: 'setup_started',
+            cli_version: CLI_VERSION,
+            runtime_platform: process.platform,
+            ...(stamped ? { connect_attempt_id: stamped } : {}),
+            cli_invocation_id: CLI_INVOCATION_ID,
+            runtime_env: detectRuntimeEnv(),
+        }),
+        attempts: 1,
+        label: 'setup',
+    });
+}
+/** Terminal state for a run the key gate stopped; fires instead of setup_started. */
+export async function sendSetupBlocked(mcpUrl, detail) {
+    if (telemetryDisabled())
+        return;
+    const stamped = detail.attemptId && z.uuid().safeParse(detail.attemptId).success ? detail.attemptId : undefined;
+    await postConnectEvent({
+        endpoint: new URL('/api/cli/connect-event', mcpUrl).toString(),
+        body: JSON.stringify({
+            event: 'setup_blocked',
+            cli_version: CLI_VERSION,
+            block_reason: detail.blockReason,
+            key_source: detail.keySource,
+            ...(detail.status !== undefined ? { status: detail.status } : {}),
+            mode: detail.mode,
+            runtime_platform: process.platform,
+            ...(stamped ? { connect_attempt_id: stamped } : {}),
+            cli_invocation_id: CLI_INVOCATION_ID,
+            runtime_env: detectRuntimeEnv(),
+        }),
+        attempts: 1,
+        label: 'setup',
+    });
+}
+export const setupCompletedPayloadSchema = z.object({
+    harnesses: z
+        .array(harnessResultSchema)
+        .length(ALL_HARNESSES.length)
+        .refine((results) => new Set(results.map((r) => r.harness)).size === ALL_HARNESSES.length, {
+        message: 'expected one result per harness',
+    }),
+    cli_version: z.string(),
+    // Segments picker runs from --all runs; the server field shipped first.
+    mode: z.enum(['all', 'pick', 'pick_numeric']).optional(),
+    connect_attempt_id: z.uuid().optional(),
+});
+/** `toVersion` is null when the run was interrupted or the installed version could not be read. */
+export async function sendUpgradeCompleted(fromVersion, toVersion, outcome, scope) {
+    await postConnectEvent({
+        endpoint: new URL('/api/cli/connect-event', BASE_URL).toString(),
+        body: JSON.stringify({
+            event: 'upgrade_completed',
+            from_version: fromVersion,
+            to_version: toVersion,
+            outcome,
+            scope,
+            cli_invocation_id: CLI_INVOCATION_ID,
+            runtime_env: detectRuntimeEnv(),
+        }),
+        attempts: 1,
+        label: 'upgrade',
+    });
+}
+export async function sendSetupCompleted(mcpUrl, harnesses, mode, attemptId) {
+    // Ahead of the parse so an opt-out run prints no telemetry debug.
+    if (telemetryDisabled())
+        return;
+    let endpoint;
+    let body;
+    try {
+        // Parse inside try — schema violation must not crash finished setup.
+        const payload = setupCompletedPayloadSchema.parse({
+            harnesses,
+            cli_version: CLI_VERSION,
+            ...(mode ? { mode } : {}),
+            // Guarded here, not only at the route: a parse throw drops the whole event, not one field.
+            ...(attemptId && z.uuid().safeParse(attemptId).success
+                ? { connect_attempt_id: attemptId }
+                : {}),
+        });
+        endpoint = new URL('/api/cli/connect-event', mcpUrl).toString();
+        body = JSON.stringify({
+            event: 'setup_completed',
+            ...payload,
+            cli_invocation_id: CLI_INVOCATION_ID,
+            runtime_env: detectRuntimeEnv(),
+        });
+    }
+    catch (e) {
+        if (process.env['SPRINGBRAND_DEBUG']) {
+            errLine(`setup telemetry skipped: ${e instanceof Error ? e.message : String(e)}`);
+        }
+        return;
+    }
+    await postConnectEvent({ endpoint, body, attempts: 2, label: 'setup' });
+}
+const DOCTOR_HARNESS_SCOPES = ['all', ...ALL_HARNESSES];
+// Mirrors the route's cap; drops what the route would 400 un-retried.
+const versionSchema = z
+    .string()
+    .max(32)
+    .regex(/^[\x20-\x7E]*$/);
+// Ids, harnesses and auth modes are authored here; `detail` never leaves.
+// The plugin version is machine-supplied, sanitized before reaching this schema.
+// Caps mirror the route's schema: a payload the server would 400 is dropped here instead,
+// because postConnectEvent never retries a 4xx and the event would vanish silently.
+// Same spellings as cli_connect_stage.failure_reason; the type pins them.
+export const DOCTOR_ERROR_CLASSES = [
+    'command_not_found',
+    'timeout',
+    'spawn_error',
+    'nonzero_exit',
+    'unexpected_error',
+];
+/** Derived, not read: the catch is generic, so only the code is trustworthy. */
+export function doctorErrorClass(error) {
+    const code = error?.code;
+    if (code === 'ENOENT')
+        return 'command_not_found';
+    if (code === 'ETIMEDOUT')
+        return 'timeout';
+    return code ? 'spawn_error' : 'unexpected_error';
+}
+const doctorCompletedPayloadSchema = z.object({
+    outcome: z.literal('completed'),
+    schema_version: z.int().positive(),
+    cli_version: z.string().max(32),
+    ok_harnesses: z.boolean(),
+    ok_cli: z.boolean(),
+    checks_pass: z.int().nonnegative().max(256),
+    checks_fail: z.int().nonnegative().max(256),
+    checks_warn: z.int().nonnegative().max(256),
+    checks_skip: z.int().nonnegative().max(256),
+    /** Offered by the pre-repair report; the verdicts describe the machine after it. */
+    repairs_offered: z.int().nonnegative().max(256),
+    repair_actions: z.array(z.enum(['connect', 'auth-login'])).max(8),
+    repairs_attempted: z.int().nonnegative().max(256),
+    repairs_succeeded: z.int().nonnegative().max(256),
+    fix_mode: z.enum(['none', 'fix', 'fix_yes']),
+    /** "all" unless --harness scoped the run; the counts above cover only that scope. */
+    harness_scope: z.enum(DOCTOR_HARNESS_SCOPES),
+    is_human_initiated: z.boolean(),
+    /** Flat and distinct: PostHog cannot group by array elements of an object. */
+    failed_check_ids: z.array(z.string().regex(/^[a-z0-9-]{1,64}$/)).max(32),
+    failed_harnesses: z.array(z.enum(ALL_HARNESSES)).max(16),
+    harnesses: z
+        .array(z.object({
+        harness: z.enum(ALL_HARNESSES),
+        detected: z.boolean(),
+        registered: z.enum(Registered),
+        auth_mode: z.enum(AuthMode),
+        proves_harness_reach: z.boolean(),
+    }))
+        .max(16),
+    duration_ms: z.int().nonnegative().max(3_600_000),
+    /** Bounded here, not on the report: a reject drops only telemetry. */
+    hermes_plugin_version: versionSchema.optional(),
+    hermes_plugin_expected_version: versionSchema.optional(),
+});
+// Detection threw, so there is no report to aggregate: enumerated outcome and timing only.
+const doctorCouldNotRunPayloadSchema = z.object({
+    outcome: z.literal('could_not_run'),
+    error_class: z.enum(DOCTOR_ERROR_CLASSES),
+    schema_version: z.int().positive(),
+    cli_version: z.string().max(32),
+    fix_mode: z.enum(['none', 'fix', 'fix_yes']),
+    harness_scope: z.enum(DOCTOR_HARNESS_SCOPES),
+    is_human_initiated: z.boolean(),
+    duration_ms: z.int().nonnegative().max(3_600_000),
+});
+const doctorPayloadSchema = z.discriminatedUnion('outcome', [
+    doctorCompletedPayloadSchema,
+    doctorCouldNotRunPayloadSchema,
+]);
+export async function sendDoctorCompleted(mcpUrl, payload) {
+    if (telemetryDisabled())
+        return;
+    let endpoint;
+    let body;
+    try {
+        // Parse inside try — a schema violation must not fail a diagnosis that already ran.
+        const parsed = doctorPayloadSchema.parse(payload);
+        endpoint = new URL('/api/cli/connect-event', mcpUrl).toString();
+        // Stamped after the parse: process-derived and bounded, cannot trip route caps.
+        body = JSON.stringify({
+            event: 'doctor_completed',
+            ...parsed,
+            runtime_platform: process.platform,
+            node_version: process.version,
+            calling_harness: detectHarness() ?? 'none',
+            cli_invocation_id: CLI_INVOCATION_ID,
+            runtime_env: detectRuntimeEnv(),
+        });
+    }
+    catch (e) {
+        if (process.env['SPRINGBRAND_DEBUG']) {
+            errLine(`doctor telemetry skipped: ${e instanceof Error ? e.message : String(e)}`);
+        }
+        return;
+    }
+    // One attempt: doctor just probed this origin, so a stale keep-alive socket is not the risk.
+    await postConnectEvent({ endpoint, body, attempts: 1, label: 'doctor' });
+}
+//# sourceMappingURL=setup-telemetry.js.map

package/dist/lib/setup-telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-telemetry.js","sourceRoot":"","sources":["../../src/lib/setup-telemetry.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAE5E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC7B,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnF,OAAO,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,OAAO,CAAC;AAC9D,CAAC;AACD,qFAAqF;AACrF,wFAAwF;AACxF,MAAM,+BAA+B,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;AAC/E,MAAM,gCAAgC,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAC7E,SAAS,wBAAwB,CAAC,QAAgB;IAC9C,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACD,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,CAAC;QACH,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,iFAAiF;IACjF,IAAI,gCAAgC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC/C,OAAO,IAAI,CAAC;IAChB,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,OAAO,KAAK,CAAC;IACjB,OAAO,+BAA+B,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/G,CAAC;AACD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAMtC;IACG,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACpD,IAAI,iBAAiB,EAAE;QACnB,OAAO;IACX,8EAA8E;IAC9E,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YACjC,OAAO;QACX,IAAI,CAAC;YACD,OAAO,CAAC,GAAG,KAAK,cAAc,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,CAAC;YACH,yBAAyB;QAC7B,CAAC;IACL,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACnD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBACnC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI;gBACJ,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC;aACxD,CAAC,CAAC;YACH,uFAAuF;YACvF,oEAAoE;YACpE,IAAI,OAAO;gBACP,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,QAAQ,CAAC,EAAE;gBACX,OAAO;YACX,2FAA2F;YAC3F,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,OAAO,GAAG,QAAQ,GAAG,CAAC,CAAC;YACnE,IAAI,CAAC,SAAS;gBACV,KAAK,CAAC,kBAAkB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;gBACrB,OAAO;QACf,CAAC;QACD,OAAO,CAAC,EAAE,CAAC;YACP,KAAK,CAAC,WAAW,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;IACL,CAAC;AACL,CAAC;AACD,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AACH,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,SAAkB;IACrE,IAAI,iBAAiB,EAAE;QACnB,OAAO;IACX,sFAAsF;IACtF,MAAM,OAAO,GAAG,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,MAAM,gBAAgB,CAAC;QACnB,QAAQ,EAAE,IAAI,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE;QAC9D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACjB,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,WAAW;YACxB,gBAAgB,EAAE,OAAO,CAAC,QAAQ;YAClC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,iBAAiB,EAAE,iBAAiB;YACpC,WAAW,EAAE,gBAAgB,EAAE;SAClC,CAAC;QACF,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,OAAO;KACjB,CAAC,CAAC;AACP,CAAC;AACD,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAA0B;IAC7E,IAAI,iBAAiB,EAAE;QACnB,OAAO;IACX,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAChH,MAAM,gBAAgB,CAAC;QACnB,QAAQ,EAAE,IAAI,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE;QAC9D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACjB,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,WAAW;YACxB,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,gBAAgB,EAAE,OAAO,CAAC,QAAQ;YAClC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,iBAAiB,EAAE,iBAAiB;YACpC,WAAW,EAAE,gBAAgB,EAAE;SAClC,CAAC;QACF,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,OAAO;KACjB,CAAC,CAAC;AACP,CAAC;AACD,MAAM,CAAC,MAAM,2BAA2B,GA6BpB,CAAC,CAAC,MAAM,CAAC;IACzB,SAAS,EAAE,CAAC;SACP,KAAK,CAAC,mBAAmB,CAAC;SAC1B,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;SAC5B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE;QAC3F,OAAO,EAAE,iCAAiC;KAC7C,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,wEAAwE;IACxE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,kBAAkB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AACH,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB,EAAE,SAAwB,EAAE,OAAuB,EAAE,KAAmB;IAClI,MAAM,gBAAgB,CAAC;QACnB,QAAQ,EAAE,IAAI,GAAG,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE;QAChE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACjB,KAAK,EAAE,mBAAmB;YAC1B,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,SAAS;YACrB,OAAO;YACP,KAAK;YACL,iBAAiB,EAAE,iBAAiB;YACpC,WAAW,EAAE,gBAAgB,EAAE;SAClC,CAAC;QACF,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,SAAS;KACnB,CAAC,CAAC;AACP,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,SAA0B,EAAE,IAAgB,EAAE,SAAkB;IACrH,kEAAkE;IAClE,IAAI,iBAAiB,EAAE;QACnB,OAAO;IACX,IAAI,QAAQ,CAAC;IACb,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACD,qEAAqE;QACrE,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC;YAC9C,SAAS;YACT,WAAW,EAAE,WAAW;YACxB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,2FAA2F;YAC3F,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,OAAO;gBAClD,CAAC,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE;gBACnC,CAAC,CAAC,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChE,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAClB,KAAK,EAAE,iBAAiB;YACxB,GAAG,OAAO;YACV,iBAAiB,EAAE,iBAAiB;YACpC,WAAW,EAAE,gBAAgB,EAAE;SAClC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,CAAC,EAAE,CAAC;QACP,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,4BAA4B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO;IACX,CAAC;IACD,MAAM,gBAAgB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5E,CAAC;AACD,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,GAAG,aAAa,CAAC,CAAC;AACxD,sEAAsE;AACtE,MAAM,aAAa,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAC7B,0EAA0E;AAC1E,iFAAiF;AACjF,0FAA0F;AAC1F,oFAAoF;AACpF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAiG;IAC9H,mBAAmB;IACnB,SAAS;IACT,aAAa;IACb,cAAc;IACd,kBAAkB;CACrB,CAAC;AACF,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC3C,MAAM,IAAI,GAAI,KAA+C,EAAE,IAAI,CAAC;IACpE,IAAI,IAAI,KAAK,QAAQ;QACjB,OAAO,mBAAmB,CAAC;IAC/B,IAAI,IAAI,KAAK,WAAW;QACpB,OAAO,SAAS,CAAC;IACrB,OAAO,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC;AACrD,CAAC;AACD,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC/B,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,oFAAoF;IACpF,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,iBAAiB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IACjD,iBAAiB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5C,qFAAqF;IACrF,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;IAC5C,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC/B,8EAA8E;IAC9E,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACxE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACxD,SAAS,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAChB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;QAC9B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;QACrB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;QAC9B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC3B,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE;KACpC,CAAC,CAAC;SACE,GAAG,CAAC,EAAE,CAAC;IACZ,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;IACjD,sEAAsE;IACtE,qBAAqB,EAAE,aAAa,CAAC,QAAQ,EAAE;IAC/C,8BAA8B,EAAE,aAAa,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC;AACH,2FAA2F;AAC3F,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IACnC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;IACzC,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5C,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;IAC5C,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;CACpD,CAAC,CAAC;AACH,MAAM,mBAAmB,GAAG,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE;IACxD,4BAA4B;IAC5B,8BAA8B;CACjC,CAAC,CAAC;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAc,EAAE,OAAsB;IAC5E,IAAI,iBAAiB,EAAE;QACnB,OAAO;IACX,IAAI,QAAQ,CAAC;IACb,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACD,oFAAoF;QACpF,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,QAAQ,GAAG,IAAI,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChE,gFAAgF;QAChF,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAClB,KAAK,EAAE,kBAAkB;YACzB,GAAG,MAAM;YACT,gBAAgB,EAAE,OAAO,CAAC,QAAQ;YAClC,YAAY,EAAE,OAAO,CAAC,OAAO;YAC7B,eAAe,EAAE,aAAa,EAAE,IAAI,MAAM;YAC1C,iBAAiB,EAAE,iBAAiB;YACpC,WAAW,EAAE,gBAAgB,EAAE;SAClC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,CAAC,EAAE,CAAC;QACP,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,6BAA6B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO;IACX,CAAC;IACD,6FAA6F;IAC7F,MAAM,gBAAgB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC7E,CAAC"}

package/dist/lib/signals.d.ts

@@ -0,0 +1,14 @@
+/** 复刻自 tiny-fish CLI 编译产物：signals.d.ts + signals.impl.js */
+export declare const SIGNAL_EXIT_CODES: {
+    readonly SIGHUP: 129;
+    readonly SIGINT: 130;
+    readonly SIGTERM: 143;
+};
+/**
+ * Without a parent handler, terminal Ctrl+C kills this process inside spawn.sync before the
+ * child result exists — no event, no flush. `onSignal` runs at most once; a second signal
+ * exits rather than waiting on it.
+ */
+export declare function installSignalGuard(onSignal: (signal: TerminalSignal) => Promise<void> | void): () => void;
+export type TerminalSignal = keyof typeof SIGNAL_EXIT_CODES;
+//# sourceMappingURL=signals.d.ts.map

package/dist/lib/signals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signals.d.ts","sourceRoot":"","sources":["../../src/lib/signals.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAG5D,eAAO,MAAM,iBAAiB,EAAE;IAC5B,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC;CACoB,CAAC;AAC/C;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,cAmB5F;AAGD,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,iBAAiB,CAAC"}

package/dist/lib/signals.js

@@ -0,0 +1,29 @@
+/** 复刻自 tiny-fish CLI 编译产物：signals.d.ts + signals.impl.js */
+// 128 + signal number
+export const SIGNAL_EXIT_CODES = { SIGHUP: 129, SIGINT: 130, SIGTERM: 143 };
+/**
+ * Without a parent handler, terminal Ctrl+C kills this process inside spawn.sync before the
+ * child result exists — no event, no flush. `onSignal` runs at most once; a second signal
+ * exits rather than waiting on it.
+ */
+export function installSignalGuard(onSignal) {
+    let handling = false;
+    const handlers = ['SIGINT', 'SIGTERM', 'SIGHUP'].map((signal) => {
+        const handler = () => {
+            const exit = () => process.exit(SIGNAL_EXIT_CODES[signal]);
+            if (handling)
+                return exit();
+            handling = true;
+            void Promise.resolve(onSignal(signal))
+                .catch(() => { })
+                .finally(exit);
+        };
+        process.on(signal, handler);
+        return [signal, handler];
+    });
+    return () => {
+        for (const [signal, handler] of handlers)
+            process.off(signal, handler);
+    };
+}
+//# sourceMappingURL=signals.js.map

package/dist/lib/signals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signals.js","sourceRoot":"","sources":["../../src/lib/signals.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAE5D,sBAAsB;AACtB,MAAM,CAAC,MAAM,iBAAiB,GAI1B,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAC/C;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAA0D;IACzF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAoC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACvG,MAAM,OAAO,GAAG,GAAG,EAAE;YACjB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3D,IAAI,QAAQ;gBACR,OAAO,IAAI,EAAE,CAAC;YAClB,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;iBACjC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;iBAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5B,OAAO,CAAC,MAAM,EAAE,OAAO,CAAU,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,EAAE;QACR,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,QAAQ;YACpC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC;AACN,CAAC"}