@theholocron/cli 4.14.0 → 4.14.1

package/dist/cli.mjs

@@ -5823,30 +5823,19 @@ async function writeWorkflowFile(repoRoot, filename, content) {
 //#endregion
 //#region src/telemetry/posthog-sink.ts
 /**
-* `PostHogSink` — the **only** `posthog-node` import in the CLI. Product
-* analytics (usage, adoption, retention), activated self-contained per ADR-0008:
+* `PostHogSink` — the **only** `posthog-node` call site. A portable
+* `AnalyticsSink` adapter: usage, adoption, retention. It reads no environment
+* and ships no credentials — the constructor takes a resolved `key` + `host`;
+* the caller (the CLI's `telemetry.ts`, via `telemetry/resolve.ts`) owns the
+* env chain and the fallback. An empty `key` is the caller's signal to install
+* a `NoopAnalyticsSink` instead — it is never passed here.
 *
-*   HOLOCRON_POSTHOG_PROJECT_TOKEN  →  POSTHOG_PROJECT_TOKEN  →  built-in fallback key
-*   HOLOCRON_POSTHOG_HOST           →  POSTHOG_HOST           →  https://us.i.posthog.com
-*
-* The built-in fallback is an ingest-only project write key (`phc_…`) — it can
-* capture events, never read data — so it ships in the published package, the
-* same risk model as the hard-coded Sentry DSN. {@link resolvePostHogKey}
-* returning `""` is how the caller decides to install a `NoopAnalyticsSink`.
+* Destined for `@theholocron/observability/analytics` (#635).
 */
-const FALLBACK_POSTHOG_PROJECT_TOKEN = "phc_AC4vFCvYzwnzmG7Vg5nEc3PZKZztoPyfKp4Lb9BbXcLK";
-const DEFAULT_POSTHOG_HOST = "https://us.i.posthog.com";
-/** Resolve the PostHog project key. `""` → usage analytics disabled. */
-function resolvePostHogKey() {
-	return env.get("HOLOCRON_POSTHOG_PROJECT_TOKEN") ?? env.get("POSTHOG_PROJECT_TOKEN") ?? FALLBACK_POSTHOG_PROJECT_TOKEN;
-}
-function resolvePostHogHost() {
-	return env.get("HOLOCRON_POSTHOG_HOST") ?? env.get("POSTHOG_HOST") ?? DEFAULT_POSTHOG_HOST;
-}
 var PostHogSink = class {
 	#client;
-	constructor() {
-		this.#client = new PostHog(resolvePostHogKey(), { host: resolvePostHogHost() });
+	constructor(config) {
+		this.#client = new PostHog(config.key, { host: config.host });
 	}
 	identify(distinctId, props) {
 		this.#client.identify({
@@ -5884,12 +5873,42 @@ function redactObject(value) {
 	return JSON.parse(redact(JSON.stringify(value)));
 }
 //#endregion
-//#region src/telemetry/sentry-sink.ts
+//#region src/telemetry/resolve.ts
+/**
+* Holocron-specific credential resolution for the telemetry sinks — the env
+* chain plus Holocron's own shipped fallbacks. This is **CLI policy**, not part
+* of the portable adapter set: `sentry-sink.ts` / `posthog-sink.ts` take a
+* resolved DSN / key and never read the environment. When the adapters move to
+* `@theholocron/observability` (#635) this module stays here.
+*
+*   errors:    HOLOCRON_SENTRY_DSN            → SENTRY_DSN            → FALLBACK_DSN
+*   analytics: HOLOCRON_POSTHOG_PROJECT_TOKEN → POSTHOG_PROJECT_TOKEN → FALLBACK_POSTHOG_PROJECT_TOKEN
+*   host:      HOLOCRON_POSTHOG_HOST          → POSTHOG_HOST          → DEFAULT_POSTHOG_HOST
+*
+* The `SENTRY_DSN` / `POSTHOG_PROJECT_TOKEN` fallbacks are the vendor-native
+* names a consumer repo sets to route CLI telemetry to its own project. The
+* built-in fallbacks are ingest-only keys — publishable by design, same risk
+* model as ADR-0007 / ADR-0008.
+*/
+/** Holocron's own Sentry project — the fallback when no env var points elsewhere. */
 const FALLBACK_DSN = "https://95cbb72ad5636c94e119a5405ee8f55f@o4508238154104832.ingest.us.sentry.io/4511810950791168";
+/** Holocron's own PostHog project write key — ingest-only. */
+const FALLBACK_POSTHOG_PROJECT_TOKEN = "phc_AC4vFCvYzwnzmG7Vg5nEc3PZKZztoPyfKp4Lb9BbXcLK";
+const DEFAULT_POSTHOG_HOST = "https://us.i.posthog.com";
 /** Resolve the Sentry DSN. `""` → error telemetry disabled. */
 function resolveDsn() {
 	return env.get("HOLOCRON_SENTRY_DSN") ?? env.get("SENTRY_DSN") ?? FALLBACK_DSN;
 }
+/** Resolve the PostHog project key. `""` → usage analytics disabled. */
+function resolvePostHogKey() {
+	return env.get("HOLOCRON_POSTHOG_PROJECT_TOKEN") ?? env.get("POSTHOG_PROJECT_TOKEN") ?? FALLBACK_POSTHOG_PROJECT_TOKEN;
+}
+/** Resolve the PostHog ingest host. */
+function resolvePostHogHost() {
+	return env.get("HOLOCRON_POSTHOG_HOST") ?? env.get("POSTHOG_HOST") ?? DEFAULT_POSTHOG_HOST;
+}
+//#endregion
+//#region src/telemetry/sentry-sink.ts
 /** `beforeSend` — token-shaped strings never leave the process. */
 function scrubError(event, _hint) {
 	return redactObject(event);
@@ -5897,7 +5916,7 @@ function scrubError(event, _hint) {
 var SentrySink = class {
 	init(ctx) {
 		Sentry.init({
-			dsn: resolveDsn(),
+			dsn: ctx.dsn,
 			release: ctx.release,
 			environment: ctx.environment,
 			tracesSampleRate: 1,
@@ -5960,9 +5979,10 @@ var NoopAnalyticsSink = class {
 * `posthog-node` call sites, and a `Noop*Sink` is installed when telemetry is
 * off. Same seam `@theholocron/logger` uses for Pino.
 *
-* Activation is env-var + shipped-fallback, resolved inside each sink. The
-* single kill switch is `HOLOCRON_TELEMETRY=false` (legacy alias
-* `NO_HOLOCRON_TELEMETRY`); see ADR-0007 / ADR-0008.
+* Activation is env-var + shipped-fallback, resolved here (`telemetry/resolve.ts`)
+* and passed to the sink — the adapters read no environment. The single kill
+* switch is `HOLOCRON_TELEMETRY=false` (legacy alias `NO_HOLOCRON_TELEMETRY`);
+* see ADR-0007 / ADR-0008.
 */
 let errors = new NoopErrorSink();
 let analytics = new NoopAnalyticsSink();
@@ -5998,9 +6018,11 @@ function baseProps() {
 	};
 }
 function init(version) {
-	if (isEnabled() && resolveDsn() !== "") {
+	const dsn = resolveDsn();
+	if (isEnabled() && dsn !== "") {
 		errors = new SentrySink();
 		errors.init({
+			dsn,
 			release: `holocron@${version}`,
 			environment: env.get("CI") ? "ci" : "local",
 			tags: {
@@ -6010,8 +6032,12 @@ function init(version) {
 			}
 		});
 	}
-	if (isEnabled() && resolvePostHogKey() !== "") {
-		analytics = new PostHogSink();
+	const posthogKey = resolvePostHogKey();
+	if (isEnabled() && posthogKey !== "") {
+		analytics = new PostHogSink({
+			key: posthogKey,
+			host: resolvePostHogHost()
+		});
 		analytics.identify(machineId(), {
 			ci: Boolean(env.get("CI")),
 			os: process.platform,