@threadplane/telemetry 0.0.46

package/README.md

@@ -0,0 +1,143 @@
+# @threadplane/telemetry
+
+This README is the public trust contract for `@threadplane/*` telemetry. It is linked
+from package install notices and should stay aligned with implementation.
+
+## Imports
+
+```typescript
+// Browser (Angular DI provider)
+import { provideThreadplaneTelemetry } from '@threadplane/telemetry/browser';
+
+// Node (server adapters)
+import {
+  captureRuntimeInstanceCreated,
+  captureRuntimeRequestCreated,
+  captureStreamStarted,
+  captureStreamEnded,
+  captureStreamErrored,
+  disableTelemetry,
+} from '@threadplane/telemetry/node';
+
+// Shared utilities (events, env detection, hashing)
+import { isTelemetryDisabled, sha256, getAnonId } from '@threadplane/telemetry';
+```
+
+## What this package is
+
+The single telemetry surface for `@threadplane/*`. It exists so we can answer "how is Threadplane being used?" without instrumenting browser packages that ship to end-users.
+
+## What is and isn't telemetered
+
+**Telemetered by default (Node, opt-out):**
+- `ngaf:postinstall` — fires once per dependency/global install of a published `@threadplane/*` package. Properties: package name, package version, Node version, OS, CPU architecture, package manager name/version, installer-reported Node/OS/architecture, workspace/global install flags when npm exposes them, sample weight. It uses a per-process anonymous id. No project path, no raw environment variables, no dependency tree, no installer IP address.
+- `ngaf:runtime_instance_created` — server adapters (LangGraph, AG-UI) call this when they spin up. Properties: which transport, which model provider (string), Angular peer version. **No API keys**, no endpoint hostnames, no user data.
+- `ngaf:runtime_request_created` — server adapters call this when they create a transport request. Properties: transport, request type, provider, model. No prompts, thread IDs, assistant IDs, endpoint URLs, or headers.
+- `ngaf:stream_started` / `ngaf:stream_ended` / `ngaf:stream_errored` — per-request lifecycle on server adapters. Properties: provider, model name, duration, error class. No prompts, no completions, no message content.
+
+**Telemetered only on explicit opt-in (Browser):**
+- Nothing fires unless the consumer calls `provideThreadplaneTelemetry({ enabled: true, sink })` or `provideThreadplaneTelemetry({ enabled: true, endpoint })` in their root providers.
+- When opted in: `ngaf:browser_provided`, `ngaf:browser_chat_init`, and browser-side runtime lifecycle events explicitly captured by the app (`ngaf:runtime_instance_created`, `ngaf:runtime_request_created`, `ngaf:stream_started`, `ngaf:stream_ended`, `ngaf:stream_errored`). Anonymous, no message content.
+
+**Never telemetered (by anyone, at any time):**
+- Message content (user prompts, model completions, tool call inputs/outputs).
+- Personally identifiable information beyond `email_domain` on explicit server conversion events on the website.
+- API keys, vendor credentials, project paths, environment variables.
+
+## Opt-out
+
+Node telemetry is on by default. Three ways to opt out — any one turns it off.
+
+| Method | How |
+|--------|-----|
+| Cross-vendor env var | `DO_NOT_TRACK=1` or `DO_NOT_TRACK=true` |
+| npm config env var | `npm_config_do_not_track=true` |
+| Package env var | `NGAF_TELEMETRY_DISABLED=1` or `NGAF_TELEMETRY_DISABLED=true` |
+| Programmatic | `import { disableTelemetry } from '@threadplane/telemetry/node'; disableTelemetry();` before any other `@threadplane/*` import |
+
+CI environments (`CI=true`, `GITHUB_ACTIONS=true`, etc.) are auto-detected and treated as opt-out by default.
+
+Local top-level installs are skipped by default. Dependency installs and global installs are eligible unless opted out.
+
+The postinstall script prints a single line on stdout only when the install ping was actually accepted by the ingest endpoint. The line is suppressed in CI.
+
+To inspect the install payload locally, run with `DEBUG=ngaf:telemetry`.
+
+## Opt-in (browser)
+
+Browser telemetry is **off by default** and never fires from the library itself. To enable in your Angular app:
+
+```ts
+// app.config.ts (or wherever you bootstrap)
+import { provideThreadplaneTelemetry } from '@threadplane/telemetry/browser';
+
+export const appConfig: ApplicationConfig = {
+  providers: [
+    // ...
+    provideThreadplaneTelemetry({
+      enabled: true,
+      endpoint: '/api/telemetry',
+    }),
+  ],
+};
+```
+
+The endpoint receives neutral JSON:
+
+```json
+{
+  "event": "ngaf:stream_started",
+  "distinctId": "browser:<ephemeral-id>",
+  "properties": {
+    "surface": "my_app",
+    "sample_weight": 1
+  }
+}
+```
+
+You can also pass `sink: async ({ event, properties }) => { ... }` and route events through your own analytics client. Legacy `posthogKey` / `posthogHost` options still work for existing adopters, but new app code should prefer `sink` or `endpoint` so the public API is vendor-neutral.
+
+If you don't call `provideThreadplaneTelemetry({ enabled: true })`, every telemetry helper in `@threadplane/*` browser packages no-ops. No network calls, ever.
+
+## Sampling
+
+- Default sample rate: **1.0** (100%) at current scale.
+- Configurable via `NGAF_TELEMETRY_SAMPLE_RATE` env var (Node).
+- Every event carries a `sample_weight` property so future de-sampling at query time works correctly.
+
+## Anonymous id strategy
+
+- Per-process UUID (`anon_<uuid>`), regenerated every Node process boot.
+- No persistence across restarts. No persistent identifier.
+- Browser opt-in endpoint delivery uses an ephemeral per-service-instance id (`browser:<uuid>`). It is not written to localStorage or cookies.
+
+## Self-hosting
+
+Enterprise users can redirect Node telemetry to their own ingest:
+
+```bash
+NGAF_TELEMETRY_INGEST_URL=https://telemetry.acme-internal.example.com/api/ingest
+```
+
+Default ingest (when env var is unset) is a thin proxy on the Threadplane website (`https://threadplane.ai/api/ingest`) that accepts the `@threadplane/telemetry` JSON payload and forwards `ngaf:*` events to our PostHog project without forwarding installer IP addresses. Source of the proxy lives in `apps/website/src/app/api/ingest/`.
+
+## Verifying telemetry is silent
+
+The `@threadplane/telemetry/browser` unit test suite includes a permanent trust test:
+
+```
+test('no network call occurs when provideThreadplaneTelemetry is never called', ...)
+```
+
+If this test ever fails, the trust contract has been violated and the build blocks.
+
+## What's intentionally not in this package
+
+- Session replay. (Not in Phase 0–1.)
+- Cross-session identity stitching.
+- Heuristic PII detection. (Redaction is explicit and config-driven only.)
+- Default browser writes to anyone's PostHog instance — including ours — without explicit configuration.
+
+## Reporting an issue
+
+If you observe telemetry that you believe contradicts this contract, please open an issue at https://github.com/cacheplane/angular-agent-framework/issues — security-tagged. We treat it as a P0.

package/browser/README.md

@@ -0,0 +1,143 @@
+# @threadplane/telemetry
+
+This README is the public trust contract for `@threadplane/*` telemetry. It is linked
+from package install notices and should stay aligned with implementation.
+
+## Imports
+
+```typescript
+// Browser (Angular DI provider)
+import { provideThreadplaneTelemetry } from '@threadplane/telemetry/browser';
+
+// Node (server adapters)
+import {
+  captureRuntimeInstanceCreated,
+  captureRuntimeRequestCreated,
+  captureStreamStarted,
+  captureStreamEnded,
+  captureStreamErrored,
+  disableTelemetry,
+} from '@threadplane/telemetry/node';
+
+// Shared utilities (events, env detection, hashing)
+import { isTelemetryDisabled, sha256, getAnonId } from '@threadplane/telemetry';
+```
+
+## What this package is
+
+The single telemetry surface for `@threadplane/*`. It exists so we can answer "how is Threadplane being used?" without instrumenting browser packages that ship to end-users.
+
+## What is and isn't telemetered
+
+**Telemetered by default (Node, opt-out):**
+- `ngaf:postinstall` — fires once per dependency/global install of a published `@threadplane/*` package. Properties: package name, package version, Node version, OS, CPU architecture, package manager name/version, installer-reported Node/OS/architecture, workspace/global install flags when npm exposes them, sample weight. It uses a per-process anonymous id. No project path, no raw environment variables, no dependency tree, no installer IP address.
+- `ngaf:runtime_instance_created` — server adapters (LangGraph, AG-UI) call this when they spin up. Properties: which transport, which model provider (string), Angular peer version. **No API keys**, no endpoint hostnames, no user data.
+- `ngaf:runtime_request_created` — server adapters call this when they create a transport request. Properties: transport, request type, provider, model. No prompts, thread IDs, assistant IDs, endpoint URLs, or headers.
+- `ngaf:stream_started` / `ngaf:stream_ended` / `ngaf:stream_errored` — per-request lifecycle on server adapters. Properties: provider, model name, duration, error class. No prompts, no completions, no message content.
+
+**Telemetered only on explicit opt-in (Browser):**
+- Nothing fires unless the consumer calls `provideThreadplaneTelemetry({ enabled: true, sink })` or `provideThreadplaneTelemetry({ enabled: true, endpoint })` in their root providers.
+- When opted in: `ngaf:browser_provided`, `ngaf:browser_chat_init`, and browser-side runtime lifecycle events explicitly captured by the app (`ngaf:runtime_instance_created`, `ngaf:runtime_request_created`, `ngaf:stream_started`, `ngaf:stream_ended`, `ngaf:stream_errored`). Anonymous, no message content.
+
+**Never telemetered (by anyone, at any time):**
+- Message content (user prompts, model completions, tool call inputs/outputs).
+- Personally identifiable information beyond `email_domain` on explicit server conversion events on the website.
+- API keys, vendor credentials, project paths, environment variables.
+
+## Opt-out
+
+Node telemetry is on by default. Three ways to opt out — any one turns it off.
+
+| Method | How |
+|--------|-----|
+| Cross-vendor env var | `DO_NOT_TRACK=1` or `DO_NOT_TRACK=true` |
+| npm config env var | `npm_config_do_not_track=true` |
+| Package env var | `NGAF_TELEMETRY_DISABLED=1` or `NGAF_TELEMETRY_DISABLED=true` |
+| Programmatic | `import { disableTelemetry } from '@threadplane/telemetry/node'; disableTelemetry();` before any other `@threadplane/*` import |
+
+CI environments (`CI=true`, `GITHUB_ACTIONS=true`, etc.) are auto-detected and treated as opt-out by default.
+
+Local top-level installs are skipped by default. Dependency installs and global installs are eligible unless opted out.
+
+The postinstall script prints a single line on stdout only when the install ping was actually accepted by the ingest endpoint. The line is suppressed in CI.
+
+To inspect the install payload locally, run with `DEBUG=ngaf:telemetry`.
+
+## Opt-in (browser)
+
+Browser telemetry is **off by default** and never fires from the library itself. To enable in your Angular app:
+
+```ts
+// app.config.ts (or wherever you bootstrap)
+import { provideThreadplaneTelemetry } from '@threadplane/telemetry/browser';
+
+export const appConfig: ApplicationConfig = {
+  providers: [
+    // ...
+    provideThreadplaneTelemetry({
+      enabled: true,
+      endpoint: '/api/telemetry',
+    }),
+  ],
+};
+```
+
+The endpoint receives neutral JSON:
+
+```json
+{
+  "event": "ngaf:stream_started",
+  "distinctId": "browser:<ephemeral-id>",
+  "properties": {
+    "surface": "my_app",
+    "sample_weight": 1
+  }
+}
+```
+
+You can also pass `sink: async ({ event, properties }) => { ... }` and route events through your own analytics client. Legacy `posthogKey` / `posthogHost` options still work for existing adopters, but new app code should prefer `sink` or `endpoint` so the public API is vendor-neutral.
+
+If you don't call `provideThreadplaneTelemetry({ enabled: true })`, every telemetry helper in `@threadplane/*` browser packages no-ops. No network calls, ever.
+
+## Sampling
+
+- Default sample rate: **1.0** (100%) at current scale.
+- Configurable via `NGAF_TELEMETRY_SAMPLE_RATE` env var (Node).
+- Every event carries a `sample_weight` property so future de-sampling at query time works correctly.
+
+## Anonymous id strategy
+
+- Per-process UUID (`anon_<uuid>`), regenerated every Node process boot.
+- No persistence across restarts. No persistent identifier.
+- Browser opt-in endpoint delivery uses an ephemeral per-service-instance id (`browser:<uuid>`). It is not written to localStorage or cookies.
+
+## Self-hosting
+
+Enterprise users can redirect Node telemetry to their own ingest:
+
+```bash
+NGAF_TELEMETRY_INGEST_URL=https://telemetry.acme-internal.example.com/api/ingest
+```
+
+Default ingest (when env var is unset) is a thin proxy on the Threadplane website (`https://threadplane.ai/api/ingest`) that accepts the `@threadplane/telemetry` JSON payload and forwards `ngaf:*` events to our PostHog project without forwarding installer IP addresses. Source of the proxy lives in `apps/website/src/app/api/ingest/`.
+
+## Verifying telemetry is silent
+
+The `@threadplane/telemetry/browser` unit test suite includes a permanent trust test:
+
+```
+test('no network call occurs when provideThreadplaneTelemetry is never called', ...)
+```
+
+If this test ever fails, the trust contract has been violated and the build blocks.
+
+## What's intentionally not in this package
+
+- Session replay. (Not in Phase 0–1.)
+- Cross-session identity stitching.
+- Heuristic PII detection. (Redaction is explicit and config-driven only.)
+- Default browser writes to anyone's PostHog instance — including ours — without explicit configuration.
+
+## Reporting an issue
+
+If you observe telemetry that you believe contradicts this contract, please open an issue at https://github.com/cacheplane/angular-agent-framework/issues — security-tagged. We treat it as a P0.

package/browser/fesm2022/threadplane-telemetry.mjs

@@ -0,0 +1,168 @@
+import * as i0 from '@angular/core';
+import { InjectionToken, inject, Injectable, makeEnvironmentProviders } from '@angular/core';
+
+const THREADPLANE_TELEMETRY_CONFIG = new InjectionToken('THREADPLANE_TELEMETRY_CONFIG');
+
+function normalizeSampleRate(sampleRate) {
+    if (sampleRate === undefined)
+        return 1;
+    if (!Number.isFinite(sampleRate))
+        return 1;
+    if (sampleRate <= 0)
+        return 0;
+    if (sampleRate >= 1)
+        return 1;
+    return sampleRate;
+}
+function errorClass(error) {
+    if (error instanceof Error && error.name)
+        return error.name;
+    if (error && typeof error === 'object' && 'name' in error && typeof error.name === 'string') {
+        return error.name;
+    }
+    return 'UnknownError';
+}
+class ThreadplaneTelemetryService {
+    config = inject(THREADPLANE_TELEMETRY_CONFIG, { optional: true });
+    postHogPromise = null;
+    distinctId = null;
+    async capture(event, properties) {
+        if (!this.config?.enabled)
+            return;
+        const sampleRate = normalizeSampleRate(this.config.sampleRate);
+        if (sampleRate === 0)
+            return;
+        if (sampleRate < 1 && Math.random() >= sampleRate)
+            return;
+        const enrichedProperties = {
+            ...(properties ?? {}),
+            sample_weight: properties?.['sample_weight'] ?? 1 / sampleRate,
+        };
+        try {
+            if (this.config.sink) {
+                await this.config.sink({ event, properties: enrichedProperties });
+                return;
+            }
+            if (this.config.endpoint) {
+                await this.captureEndpoint(event, enrichedProperties);
+                return;
+            }
+            if (!this.config.posthogKey)
+                return;
+            const ph = await this.loadPostHog();
+            if (!ph)
+                return;
+            ph.capture(event, enrichedProperties);
+        }
+        catch {
+            // silent fail
+        }
+    }
+    captureRuntimeInstanceCreated(input) {
+        return this.capture('ngaf:runtime_instance_created', { ...input });
+    }
+    captureRuntimeRequestCreated(input) {
+        return this.capture('ngaf:runtime_request_created', { ...input });
+    }
+    captureStreamStarted(input) {
+        return this.capture('ngaf:stream_started', { ...input });
+    }
+    captureStreamEnded(input) {
+        return this.capture('ngaf:stream_ended', { ...input });
+    }
+    captureStreamErrored(input) {
+        const { error, ...rest } = input;
+        return this.capture('ngaf:stream_errored', {
+            ...rest,
+            errorClass: errorClass(error),
+        });
+    }
+    async captureEndpoint(event, properties) {
+        if (typeof fetch !== 'function' || !this.config?.endpoint)
+            return;
+        await fetch(this.config.endpoint, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            keepalive: true,
+            body: JSON.stringify({
+                event,
+                distinctId: this.getDistinctId(),
+                properties,
+            }),
+        });
+    }
+    getDistinctId() {
+        if (!this.distinctId) {
+            const cryptoApi = globalThis.crypto;
+            const value = typeof cryptoApi?.randomUUID === 'function'
+                ? cryptoApi.randomUUID()
+                : Math.random().toString(36).slice(2, 12);
+            this.distinctId = `browser:${value}`;
+        }
+        return this.distinctId;
+    }
+    loadPostHog() {
+        if (!this.postHogPromise) {
+            this.postHogPromise = import('posthog-js').then((mod) => {
+                if (!this.config?.posthogKey)
+                    return null;
+                mod.default.init(this.config.posthogKey, {
+                    api_host: this.config.posthogHost ?? 'https://us.i.posthog.com',
+                });
+                return mod.default;
+            }).catch(() => null);
+        }
+        return this.postHogPromise;
+    }
+    static ɵfac = function ThreadplaneTelemetryService_Factory(__ngFactoryType__) { return new (__ngFactoryType__ || ThreadplaneTelemetryService)(); };
+    static ɵprov = /*@__PURE__*/ i0.ɵɵdefineInjectable({ token: ThreadplaneTelemetryService, factory: ThreadplaneTelemetryService.ɵfac, providedIn: 'root' });
+}
+(() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassMetadata(ThreadplaneTelemetryService, [{
+        type: Injectable,
+        args: [{ providedIn: 'root' }]
+    }], null, null); })();
+
+function provideThreadplaneTelemetry(config) {
+    return makeEnvironmentProviders([
+        { provide: THREADPLANE_TELEMETRY_CONFIG, useValue: config },
+        ThreadplaneTelemetryService,
+    ]);
+}
+
+// SPDX-License-Identifier: MIT
+// Note: kept self-contained (no `../shared` import) so ng-packagr can compile
+// this entry point in isolation. The trim+truncate hardening is duplicated
+// from shared/properties.ts on purpose — it's a few lines, and the alternative
+// is a secondary ng-packagr entry point for shared, which is heavier.
+function toSafeString(value, maxLength) {
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    if (!trimmed)
+        return undefined;
+    return trimmed.slice(0, maxLength);
+}
+function isLocalAnalyticsHost(host) {
+    const value = toSafeString(host, 300)?.toLowerCase();
+    if (!value)
+        return false;
+    // IPv6 literal `::1` or `[::1]:port` — don't naively split on `:`.
+    if (value === '::1' || value.startsWith('[::1]'))
+        return true;
+    const hostname = value.split(':')[0];
+    return hostname === 'localhost' || hostname === '127.0.0.1';
+}
+function shouldCaptureAnalytics({ token, captureLocal = false, host }) {
+    if (!toSafeString(token, 500))
+        return false;
+    if (isLocalAnalyticsHost(host) && !captureLocal)
+        return false;
+    return true;
+}
+
+/**
+ * Generated bundle index. Do not edit.
+ */
+
+export { THREADPLANE_TELEMETRY_CONFIG, ThreadplaneTelemetryService, isLocalAnalyticsHost, provideThreadplaneTelemetry, shouldCaptureAnalytics };
+//# sourceMappingURL=threadplane-telemetry.mjs.map

package/browser/fesm2022/threadplane-telemetry.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadplane-telemetry.mjs","sources":["../../../../../libs/telemetry/src/browser/tokens.ts","../../../../../libs/telemetry/src/browser/service.ts","../../../../../libs/telemetry/src/browser/provide.ts","../../../../../libs/telemetry/src/browser/properties.ts","../../../../../libs/telemetry/src/browser/threadplane-telemetry.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\n\nexport type ThreadplaneTelemetryEvent =\n  | 'ngaf:browser_provided'\n  | 'ngaf:browser_chat_init'\n  | 'ngaf:runtime_instance_created'\n  | 'ngaf:runtime_request_created'\n  | 'ngaf:stream_started'\n  | 'ngaf:stream_ended'\n  | 'ngaf:stream_errored';\n\nexport interface ThreadplaneTelemetryEventPayload {\n  event: ThreadplaneTelemetryEvent;\n  properties?: Record<string, unknown>;\n}\n\nexport type ThreadplaneTelemetrySink = (payload: ThreadplaneTelemetryEventPayload) => void | Promise<void>;\n\nexport interface ThreadplaneTelemetryConfig {\n  enabled: boolean;\n  /**\n   * Preferred app-owned delivery hook. Use this when the consuming app wants\n   * to forward events through its own analytics boundary.\n   */\n  sink?: ThreadplaneTelemetrySink;\n  /**\n   * Preferred app-owned ingest URL. The browser service POSTs neutral event\n   * payloads here; the endpoint decides where they ultimately go.\n   */\n  endpoint?: string;\n  /** @deprecated Prefer sink or endpoint so public app code is vendor-neutral. */\n  posthogKey?: string;\n  /** @deprecated Prefer sink or endpoint so public app code is vendor-neutral. */\n  posthogHost?: string;\n  sampleRate?: number;\n}\n\nexport const THREADPLANE_TELEMETRY_CONFIG = new InjectionToken<ThreadplaneTelemetryConfig | null>(\n  'THREADPLANE_TELEMETRY_CONFIG',\n);\n","import { Injectable, inject } from '@angular/core';\nimport {\n  THREADPLANE_TELEMETRY_CONFIG,\n  type ThreadplaneTelemetryConfig,\n  type ThreadplaneTelemetryEvent,\n} from './tokens';\n\n// Inlined from shared/events.ts: ng-packagr enforces rootDir at the entry-file\n// level (src/browser/), so the browser entry cannot import from ../shared/.\n// Keep this type in sync with shared/events.ts.\nexport type ThreadplaneBrowserEvent = ThreadplaneTelemetryEvent;\n\nexport interface ThreadplaneBrowserRuntimeTelemetry {\n  transport: string;\n  surface?: string;\n  provider?: string;\n  model?: string;\n}\n\nexport interface ThreadplaneBrowserStreamTelemetry extends ThreadplaneBrowserRuntimeTelemetry {\n  durationMs?: number;\n}\n\nexport interface ThreadplaneBrowserStreamErrorTelemetry extends ThreadplaneBrowserStreamTelemetry {\n  error?: unknown;\n}\n\nfunction normalizeSampleRate(sampleRate: number | undefined): number {\n  if (sampleRate === undefined) return 1;\n  if (!Number.isFinite(sampleRate)) return 1;\n  if (sampleRate <= 0) return 0;\n  if (sampleRate >= 1) return 1;\n  return sampleRate;\n}\n\nfunction errorClass(error: unknown): string {\n  if (error instanceof Error && error.name) return error.name;\n  if (error && typeof error === 'object' && 'name' in error && typeof error.name === 'string') {\n    return error.name;\n  }\n  return 'UnknownError';\n}\n\n@Injectable({ providedIn: 'root' })\nexport class ThreadplaneTelemetryService {\n  private config: ThreadplaneTelemetryConfig | null = inject(THREADPLANE_TELEMETRY_CONFIG, { optional: true });\n  private postHogPromise: Promise<typeof import('posthog-js')['default'] | null> | null = null;\n  private distinctId: string | null = null;\n\n  async capture(event: ThreadplaneTelemetryEvent, properties?: Record<string, unknown>): Promise<void> {\n    if (!this.config?.enabled) return;\n    const sampleRate = normalizeSampleRate(this.config.sampleRate);\n    if (sampleRate === 0) return;\n    if (sampleRate < 1 && Math.random() >= sampleRate) return;\n\n    const enrichedProperties = {\n      ...(properties ?? {}),\n      sample_weight: properties?.['sample_weight'] ?? 1 / sampleRate,\n    };\n\n    try {\n      if (this.config.sink) {\n        await this.config.sink({ event, properties: enrichedProperties });\n        return;\n      }\n      if (this.config.endpoint) {\n        await this.captureEndpoint(event, enrichedProperties);\n        return;\n      }\n      if (!this.config.posthogKey) return;\n      const ph = await this.loadPostHog();\n      if (!ph) return;\n      ph.capture(event, enrichedProperties);\n    } catch {\n      // silent fail\n    }\n  }\n\n  captureRuntimeInstanceCreated(input: ThreadplaneBrowserRuntimeTelemetry): Promise<void> {\n    return this.capture('ngaf:runtime_instance_created', { ...input });\n  }\n\n  captureRuntimeRequestCreated(input: ThreadplaneBrowserRuntimeTelemetry & { requestType: string }): Promise<void> {\n    return this.capture('ngaf:runtime_request_created', { ...input });\n  }\n\n  captureStreamStarted(input: ThreadplaneBrowserStreamTelemetry): Promise<void> {\n    return this.capture('ngaf:stream_started', { ...input });\n  }\n\n  captureStreamEnded(input: ThreadplaneBrowserStreamTelemetry): Promise<void> {\n    return this.capture('ngaf:stream_ended', { ...input });\n  }\n\n  captureStreamErrored(input: ThreadplaneBrowserStreamErrorTelemetry): Promise<void> {\n    const { error, ...rest } = input;\n    return this.capture('ngaf:stream_errored', {\n      ...rest,\n      errorClass: errorClass(error),\n    });\n  }\n\n  private async captureEndpoint(event: ThreadplaneTelemetryEvent, properties: Record<string, unknown>): Promise<void> {\n    if (typeof fetch !== 'function' || !this.config?.endpoint) return;\n    await fetch(this.config.endpoint, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      keepalive: true,\n      body: JSON.stringify({\n        event,\n        distinctId: this.getDistinctId(),\n        properties,\n      }),\n    });\n  }\n\n  private getDistinctId(): string {\n    if (!this.distinctId) {\n      const cryptoApi = globalThis.crypto as Crypto | undefined;\n      const value = typeof cryptoApi?.randomUUID === 'function'\n        ? cryptoApi.randomUUID()\n        : Math.random().toString(36).slice(2, 12);\n      this.distinctId = `browser:${value}`;\n    }\n    return this.distinctId;\n  }\n\n  private loadPostHog(): Promise<typeof import('posthog-js')['default'] | null> {\n    if (!this.postHogPromise) {\n      this.postHogPromise = import('posthog-js').then((mod) => {\n        if (!this.config?.posthogKey) return null;\n        mod.default.init(this.config.posthogKey, {\n          api_host: this.config.posthogHost ?? 'https://us.i.posthog.com',\n        });\n        return mod.default;\n      }).catch(() => null);\n    }\n    return this.postHogPromise;\n  }\n}\n","import { makeEnvironmentProviders, type EnvironmentProviders } from '@angular/core';\nimport { THREADPLANE_TELEMETRY_CONFIG, type ThreadplaneTelemetryConfig } from './tokens';\nimport { ThreadplaneTelemetryService } from './service';\n\nexport function provideThreadplaneTelemetry(config: ThreadplaneTelemetryConfig): EnvironmentProviders {\n  return makeEnvironmentProviders([\n    { provide: THREADPLANE_TELEMETRY_CONFIG, useValue: config },\n    ThreadplaneTelemetryService,\n  ]);\n}\n","// SPDX-License-Identifier: MIT\n// Note: kept self-contained (no `../shared` import) so ng-packagr can compile\n// this entry point in isolation. The trim+truncate hardening is duplicated\n// from shared/properties.ts on purpose — it's a few lines, and the alternative\n// is a secondary ng-packagr entry point for shared, which is heavier.\nfunction toSafeString(value: unknown, maxLength: number): string | undefined {\n  if (typeof value !== 'string') return undefined;\n  const trimmed = value.trim();\n  if (!trimmed) return undefined;\n  return trimmed.slice(0, maxLength);\n}\n\nexport type CaptureConfig = {\n  token?: string;\n  captureLocal?: boolean;\n  host?: string;\n};\n\nexport function isLocalAnalyticsHost(host: unknown): boolean {\n  const value = toSafeString(host, 300)?.toLowerCase();\n  if (!value) return false;\n\n  // IPv6 literal `::1` or `[::1]:port` — don't naively split on `:`.\n  if (value === '::1' || value.startsWith('[::1]')) return true;\n\n  const hostname = value.split(':')[0];\n  return hostname === 'localhost' || hostname === '127.0.0.1';\n}\n\nexport function shouldCaptureAnalytics({ token, captureLocal = false, host }: CaptureConfig): boolean {\n  if (!toSafeString(token, 500)) return false;\n  if (isLocalAnalyticsHost(host) && !captureLocal) return false;\n  return true;\n}\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;MAqCa,4BAA4B,GAAG,IAAI,cAAc,CAC5D,8BAA8B;;ACXhC,SAAS,mBAAmB,CAAC,UAA8B,EAAA;IACzD,IAAI,UAAU,KAAK,SAAS;AAAE,QAAA,OAAO,CAAC;AACtC,IAAA,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;AAAE,QAAA,OAAO,CAAC;IAC1C,IAAI,UAAU,IAAI,CAAC;AAAE,QAAA,OAAO,CAAC;IAC7B,IAAI,UAAU,IAAI,CAAC;AAAE,QAAA,OAAO,CAAC;AAC7B,IAAA,OAAO,UAAU;AACnB;AAEA,SAAS,UAAU,CAAC,KAAc,EAAA;AAChC,IAAA,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC,IAAI;AAC3D,IAAA,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE;QAC3F,OAAO,KAAK,CAAC,IAAI;IACnB;AACA,IAAA,OAAO,cAAc;AACvB;MAGa,2BAA2B,CAAA;IAC9B,MAAM,GAAsC,MAAM,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpG,cAAc,GAAkE,IAAI;IACpF,UAAU,GAAkB,IAAI;AAExC,IAAA,MAAM,OAAO,CAAC,KAAgC,EAAE,UAAoC,EAAA;AAClF,QAAA,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE;QAC3B,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAC9D,IAAI,UAAU,KAAK,CAAC;YAAE;QACtB,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,UAAU;YAAE;AAEnD,QAAA,MAAM,kBAAkB,GAAG;AACzB,YAAA,IAAI,UAAU,IAAI,EAAE,CAAC;YACrB,aAAa,EAAE,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,UAAU;SAC/D;AAED,QAAA,IAAI;AACF,YAAA,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;AACpB,gBAAA,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;gBACjE;YACF;AACA,YAAA,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;gBACxB,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,kBAAkB,CAAC;gBACrD;YACF;AACA,YAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU;gBAAE;AAC7B,YAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE;AACnC,YAAA,IAAI,CAAC,EAAE;gBAAE;AACT,YAAA,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC;QACvC;AAAE,QAAA,MAAM;;QAER;IACF;AAEA,IAAA,6BAA6B,CAAC,KAAyC,EAAA;QACrE,OAAO,IAAI,CAAC,OAAO,CAAC,+BAA+B,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;IACpE;AAEA,IAAA,4BAA4B,CAAC,KAAmE,EAAA;QAC9F,OAAO,IAAI,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;IACnE;AAEA,IAAA,oBAAoB,CAAC,KAAwC,EAAA;QAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;IAC1D;AAEA,IAAA,kBAAkB,CAAC,KAAwC,EAAA;QACzD,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;IACxD;AAEA,IAAA,oBAAoB,CAAC,KAA6C,EAAA;QAChE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK;AAChC,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE;AACzC,YAAA,GAAG,IAAI;AACP,YAAA,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC;AAC9B,SAAA,CAAC;IACJ;AAEQ,IAAA,MAAM,eAAe,CAAC,KAAgC,EAAE,UAAmC,EAAA;QACjG,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ;YAAE;AAC3D,QAAA,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;AAChC,YAAA,MAAM,EAAE,MAAM;AACd,YAAA,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;AAC/C,YAAA,SAAS,EAAE,IAAI;AACf,YAAA,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK;AACL,gBAAA,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE;gBAChC,UAAU;aACX,CAAC;AACH,SAAA,CAAC;IACJ;IAEQ,aAAa,GAAA;AACnB,QAAA,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;AACpB,YAAA,MAAM,SAAS,GAAG,UAAU,CAAC,MAA4B;AACzD,YAAA,MAAM,KAAK,GAAG,OAAO,SAAS,EAAE,UAAU,KAAK;AAC7C,kBAAE,SAAS,CAAC,UAAU;AACtB,kBAAE,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;AAC3C,YAAA,IAAI,CAAC,UAAU,GAAG,CAAA,QAAA,EAAW,KAAK,EAAE;QACtC;QACA,OAAO,IAAI,CAAC,UAAU;IACxB;IAEQ,WAAW,GAAA;AACjB,QAAA,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;AACxB,YAAA,IAAI,CAAC,cAAc,GAAG,OAAO,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAI;AACtD,gBAAA,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU;AAAE,oBAAA,OAAO,IAAI;gBACzC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;AACvC,oBAAA,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,0BAA0B;AAChE,iBAAA,CAAC;gBACF,OAAO,GAAG,CAAC,OAAO;YACpB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;QACtB;QACA,OAAO,IAAI,CAAC,cAAc;IAC5B;qHA9FW,2BAA2B,GAAA,CAAA,CAAA,CAAA;gEAA3B,2BAA2B,EAAA,OAAA,EAA3B,2BAA2B,CAAA,IAAA,EAAA,UAAA,EADd,MAAM,EAAA,CAAA;;iFACnB,2BAA2B,EAAA,CAAA;cADvC,UAAU;eAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACvC5B,SAAU,2BAA2B,CAAC,MAAkC,EAAA;AAC5E,IAAA,OAAO,wBAAwB,CAAC;AAC9B,QAAA,EAAE,OAAO,EAAE,4BAA4B,EAAE,QAAQ,EAAE,MAAM,EAAE;QAC3D,2BAA2B;AAC5B,KAAA,CAAC;AACJ;;ACTA;AACA;AACA;AACA;AACA;AACA,SAAS,YAAY,CAAC,KAAc,EAAE,SAAiB,EAAA;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;AAAE,QAAA,OAAO,SAAS;AAC/C,IAAA,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE;AAC5B,IAAA,IAAI,CAAC,OAAO;AAAE,QAAA,OAAO,SAAS;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;AACpC;AAQM,SAAU,oBAAoB,CAAC,IAAa,EAAA;IAChD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE;AACpD,IAAA,IAAI,CAAC,KAAK;AAAE,QAAA,OAAO,KAAK;;IAGxB,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;AAAE,QAAA,OAAO,IAAI;IAE7D,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACpC,IAAA,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW;AAC7D;AAEM,SAAU,sBAAsB,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,KAAK,EAAE,IAAI,EAAiB,EAAA;AACzF,IAAA,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC;AAAE,QAAA,OAAO,KAAK;AAC3C,IAAA,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY;AAAE,QAAA,OAAO,KAAK;AAC7D,IAAA,OAAO,IAAI;AACb;;ACjCA;;AAEG;;;;"}

package/browser/index.d.ts

@@ -0,0 +1 @@
+export * from './types/threadplane-telemetry';

package/browser/types/threadplane-telemetry.d.ts

@@ -0,0 +1,74 @@
+import * as i0 from '@angular/core';
+import { InjectionToken, EnvironmentProviders } from '@angular/core';
+
+type ThreadplaneTelemetryEvent = 'ngaf:browser_provided' | 'ngaf:browser_chat_init' | 'ngaf:runtime_instance_created' | 'ngaf:runtime_request_created' | 'ngaf:stream_started' | 'ngaf:stream_ended' | 'ngaf:stream_errored';
+interface ThreadplaneTelemetryEventPayload {
+    event: ThreadplaneTelemetryEvent;
+    properties?: Record<string, unknown>;
+}
+type ThreadplaneTelemetrySink = (payload: ThreadplaneTelemetryEventPayload) => void | Promise<void>;
+interface ThreadplaneTelemetryConfig {
+    enabled: boolean;
+    /**
+     * Preferred app-owned delivery hook. Use this when the consuming app wants
+     * to forward events through its own analytics boundary.
+     */
+    sink?: ThreadplaneTelemetrySink;
+    /**
+     * Preferred app-owned ingest URL. The browser service POSTs neutral event
+     * payloads here; the endpoint decides where they ultimately go.
+     */
+    endpoint?: string;
+    /** @deprecated Prefer sink or endpoint so public app code is vendor-neutral. */
+    posthogKey?: string;
+    /** @deprecated Prefer sink or endpoint so public app code is vendor-neutral. */
+    posthogHost?: string;
+    sampleRate?: number;
+}
+declare const THREADPLANE_TELEMETRY_CONFIG: InjectionToken<ThreadplaneTelemetryConfig | null>;
+
+declare function provideThreadplaneTelemetry(config: ThreadplaneTelemetryConfig): EnvironmentProviders;
+
+type ThreadplaneBrowserEvent = ThreadplaneTelemetryEvent;
+interface ThreadplaneBrowserRuntimeTelemetry {
+    transport: string;
+    surface?: string;
+    provider?: string;
+    model?: string;
+}
+interface ThreadplaneBrowserStreamTelemetry extends ThreadplaneBrowserRuntimeTelemetry {
+    durationMs?: number;
+}
+interface ThreadplaneBrowserStreamErrorTelemetry extends ThreadplaneBrowserStreamTelemetry {
+    error?: unknown;
+}
+declare class ThreadplaneTelemetryService {
+    private config;
+    private postHogPromise;
+    private distinctId;
+    capture(event: ThreadplaneTelemetryEvent, properties?: Record<string, unknown>): Promise<void>;
+    captureRuntimeInstanceCreated(input: ThreadplaneBrowserRuntimeTelemetry): Promise<void>;
+    captureRuntimeRequestCreated(input: ThreadplaneBrowserRuntimeTelemetry & {
+        requestType: string;
+    }): Promise<void>;
+    captureStreamStarted(input: ThreadplaneBrowserStreamTelemetry): Promise<void>;
+    captureStreamEnded(input: ThreadplaneBrowserStreamTelemetry): Promise<void>;
+    captureStreamErrored(input: ThreadplaneBrowserStreamErrorTelemetry): Promise<void>;
+    private captureEndpoint;
+    private getDistinctId;
+    private loadPostHog;
+    static ɵfac: i0.ɵɵFactoryDeclaration<ThreadplaneTelemetryService, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<ThreadplaneTelemetryService>;
+}
+
+type CaptureConfig = {
+    token?: string;
+    captureLocal?: boolean;
+    host?: string;
+};
+declare function isLocalAnalyticsHost(host: unknown): boolean;
+declare function shouldCaptureAnalytics({ token, captureLocal, host }: CaptureConfig): boolean;
+
+export { THREADPLANE_TELEMETRY_CONFIG, ThreadplaneTelemetryService, isLocalAnalyticsHost, provideThreadplaneTelemetry, shouldCaptureAnalytics };
+export type { CaptureConfig, ThreadplaneBrowserEvent, ThreadplaneBrowserRuntimeTelemetry, ThreadplaneBrowserStreamErrorTelemetry, ThreadplaneBrowserStreamTelemetry, ThreadplaneTelemetryConfig, ThreadplaneTelemetryEvent, ThreadplaneTelemetryEventPayload, ThreadplaneTelemetrySink };
+//# sourceMappingURL=threadplane-telemetry.d.ts.map

package/browser/types/threadplane-telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadplane-telemetry.d.ts","sources":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;","names":[]}

package/index.d.ts

@@ -0,0 +1,6 @@
+export { isTelemetryDisabled, getDisableReason } from './shared/env.js';
+export { sha256 } from './shared/hash.js';
+export { getAnonId } from './shared/anon-id.js';
+export { shouldSample } from './shared/sample.js';
+export type { ThreadplaneEvent, ThreadplaneNodeEvent, ThreadplaneBrowserEvent } from './shared/events.js';
+//# sourceMappingURL=index.d.ts.map

package/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../libs/telemetry/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC"}

package/index.js

@@ -0,0 +1,4 @@
+export { isTelemetryDisabled, getDisableReason } from './shared/env.js';
+export { sha256 } from './shared/hash.js';
+export { getAnonId } from './shared/anon-id.js';
+export { shouldSample } from './shared/sample.js';

package/node/adapter.d.ts

@@ -0,0 +1,26 @@
+export interface RuntimeInstanceTelemetry {
+    transport: string;
+    provider?: string;
+    model?: string;
+    angularVersion?: string;
+    apiKey?: string;
+}
+export interface StreamTelemetry {
+    provider: string;
+    model: string;
+    durationMs?: number;
+}
+export interface RuntimeRequestTelemetry {
+    transport: string;
+    requestType: string;
+    provider?: string;
+    model?: string;
+}
+export declare function captureRuntimeInstanceCreated(input: RuntimeInstanceTelemetry): Promise<void>;
+export declare function captureRuntimeRequestCreated(input: RuntimeRequestTelemetry): Promise<void>;
+export declare function captureStreamStarted(input: StreamTelemetry): Promise<void>;
+export declare function captureStreamEnded(input: StreamTelemetry): Promise<void>;
+export declare function captureStreamErrored(input: StreamTelemetry & {
+    error: Error | unknown;
+}): Promise<void>;
+//# sourceMappingURL=adapter.d.ts.map

package/node/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../../libs/telemetry/src/node/adapter.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,wBAAsB,6BAA6B,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMlG;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhG;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhF;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9E;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,eAAe,GAAG;IAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAA;CAAE,GAClD,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/node/adapter.js

@@ -0,0 +1,30 @@
+import { captureEvent } from './client.js';
+async function safe(fn) {
+    try {
+        await fn();
+    }
+    catch { /* silent fail */ }
+}
+export async function captureRuntimeInstanceCreated(input) {
+    await safe(async () => {
+        const { apiKey, ...rest } = input;
+        void apiKey;
+        await captureEvent('ngaf:runtime_instance_created', { ...rest });
+    });
+}
+export async function captureRuntimeRequestCreated(input) {
+    await safe(() => captureEvent('ngaf:runtime_request_created', { ...input }));
+}
+export async function captureStreamStarted(input) {
+    await safe(() => captureEvent('ngaf:stream_started', { ...input }));
+}
+export async function captureStreamEnded(input) {
+    await safe(() => captureEvent('ngaf:stream_ended', { ...input }));
+}
+export async function captureStreamErrored(input) {
+    await safe(async () => {
+        const { error, ...rest } = input;
+        const errorClass = error instanceof Error ? error.constructor.name : 'Unknown';
+        await captureEvent('ngaf:stream_errored', { ...rest, errorClass });
+    });
+}

package/node/client.d.ts

@@ -0,0 +1,16 @@
+import type { ThreadplaneNodeEvent } from '../shared/events.js';
+export type CaptureResult = {
+    sent: true;
+} | {
+    sent: false;
+    reason: 'disabled' | 'sampled' | 'failed';
+};
+export interface PostinstallInput {
+    pkg: string;
+    version: string;
+}
+export declare function createPostinstallProperties(input: PostinstallInput, env?: NodeJS.ProcessEnv): Record<string, unknown>;
+export declare function captureEvent(event: ThreadplaneNodeEvent, properties?: Record<string, unknown>): Promise<CaptureResult>;
+export declare function capturePostinstall(input: PostinstallInput): Promise<CaptureResult>;
+export declare function _resetClientForTesting(): void;
+//# sourceMappingURL=client.d.ts.map

package/node/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../../libs/telemetry/src/node/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAShE,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,GACd;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAA;CAAE,CAAC;AAE/D,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAqDD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gBAAgB,EACvB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB;AAkBD,wBAAsB,YAAY,CAChC,KAAK,EAAE,oBAAoB,EAC3B,UAAU,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACvC,OAAO,CAAC,aAAa,CAAC,CAoBxB;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,aAAa,CAAC,CAExB;AAGD,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C"}

package/node/client.js

@@ -0,0 +1,118 @@
+import { getAnonId } from '../shared/anon-id.js';
+import { isTelemetryDisabled } from '../shared/env.js';
+import { shouldSample } from '../shared/sample.js';
+import { isProgrammaticallyDisabled } from './disable.js';
+const DEFAULT_INGEST = 'https://threadplane.ai/api/ingest';
+const REQUEST_TIMEOUT_MS = 3_000;
+// Public identifier accepted by the Threadplane ingest proxy. The proxy re-keys
+// server-side with the private PostHog token.
+const PUBLIC_INGEST_KEY = 'phc_public_cacheplane_telemetry';
+function getSampleRate(env = process.env) {
+    const parsed = Number(env.NGAF_TELEMETRY_SAMPLE_RATE ?? '1');
+    if (!Number.isFinite(parsed))
+        return 1;
+    return Math.max(0, Math.min(1, parsed));
+}
+function readBooleanToken(value) {
+    if (value === undefined)
+        return undefined;
+    if (/^(1|true|yes)$/i.test(value))
+        return true;
+    if (/^(0|false|no)$/i.test(value))
+        return false;
+    return undefined;
+}
+function getPackageManager(env = process.env) {
+    const userAgent = env.npm_config_user_agent;
+    const tokens = userAgent?.split(/\s+/).filter(Boolean) ?? [];
+    const firstToken = tokens[0];
+    const match = firstToken?.match(/^([^/\s]+)\/([^/\s]+)$/);
+    if (!match)
+        return {};
+    const out = {
+        package_manager: match[1],
+        package_manager_version: match[2],
+    };
+    const nodeTokenIndex = tokens.findIndex((token) => token.startsWith('node/'));
+    const nodeToken = nodeTokenIndex >= 0 ? tokens[nodeTokenIndex] : undefined;
+    const nodeVersion = nodeToken?.match(/^node\/([^/\s]+)$/)?.[1];
+    if (nodeVersion)
+        out.package_manager_node_version = nodeVersion.replace(/^v/, '');
+    if (nodeTokenIndex >= 0) {
+        const platformTokens = tokens
+            .slice(nodeTokenIndex + 1)
+            .filter((token) => !token.includes('/'));
+        if (platformTokens[0])
+            out.package_manager_os = platformTokens[0];
+        if (platformTokens[1])
+            out.package_manager_arch = platformTokens[1];
+    }
+    const workspacesValue = tokens
+        .find((token) => token.startsWith('workspaces/'))
+        ?.split('/')[1];
+    const workspaces = readBooleanToken(workspacesValue);
+    if (workspaces !== undefined)
+        out.package_manager_workspaces = workspaces;
+    return out;
+}
+// @internal
+export function createPostinstallProperties(input, env = process.env) {
+    return {
+        pkg: input.pkg,
+        version: input.version,
+        node: process.version,
+        node_version: process.version,
+        os: process.platform,
+        arch: process.arch,
+        global_install: readBooleanToken(env.npm_config_global) === true ||
+            env.npm_config_location === 'global',
+        ...getPackageManager(env),
+    };
+}
+async function postJson(url, body) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+    try {
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(body),
+            signal: controller.signal,
+        });
+        if (!res.ok)
+            throw new Error(`telemetry ingest failed: ${res.status}`);
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+export async function captureEvent(event, properties = {}) {
+    if (isTelemetryDisabled() || isProgrammaticallyDisabled())
+        return { sent: false, reason: 'disabled' };
+    const rate = getSampleRate();
+    const anonId = getAnonId();
+    if (!shouldSample(rate, anonId))
+        return { sent: false, reason: 'sampled' };
+    try {
+        await postJson(process.env.NGAF_TELEMETRY_INGEST_URL ?? DEFAULT_INGEST, {
+            key: PUBLIC_INGEST_KEY,
+            distinctId: anonId,
+            event,
+            properties: {
+                ...properties,
+                sample_weight: rate > 0 ? 1 / Math.min(1, rate) : 1,
+            },
+        });
+        return { sent: true };
+    }
+    catch {
+        return { sent: false, reason: 'failed' };
+    }
+}
+export async function capturePostinstall(input) {
+    return captureEvent('ngaf:postinstall', createPostinstallProperties(input));
+}
+// @internal — tests only
+export function _resetClientForTesting() {
+    // retained for older tests and downstream test helpers
+}

package/node/disable.d.ts

@@ -0,0 +1,4 @@
+export declare function disableTelemetry(): void;
+export declare function isProgrammaticallyDisabled(): boolean;
+export declare function _resetDisableForTesting(): void;
+//# sourceMappingURL=disable.d.ts.map

package/node/disable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disable.d.ts","sourceRoot":"","sources":["../../../../../libs/telemetry/src/node/disable.ts"],"names":[],"mappings":"AAEA,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED,wBAAgB,0BAA0B,IAAI,OAAO,CAEpD;AAGD,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C"}

package/node/disable.js

@@ -0,0 +1,11 @@
+let disabled = false;
+export function disableTelemetry() {
+    disabled = true;
+}
+export function isProgrammaticallyDisabled() {
+    return disabled;
+}
+// @internal — tests only
+export function _resetDisableForTesting() {
+    disabled = false;
+}

package/node/index.d.ts

@@ -0,0 +1,6 @@
+export { disableTelemetry } from './disable.js';
+export { capturePostinstall, captureEvent } from './client.js';
+export type { CaptureResult } from './client.js';
+export { captureRuntimeInstanceCreated, captureRuntimeRequestCreated, captureStreamStarted, captureStreamEnded, captureStreamErrored, } from './adapter.js';
+export type { RuntimeInstanceTelemetry, RuntimeRequestTelemetry, StreamTelemetry } from './adapter.js';
+//# sourceMappingURL=index.d.ts.map

package/node/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../libs/telemetry/src/node/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC"}

package/node/index.js

@@ -0,0 +1,3 @@
+export { disableTelemetry } from './disable.js';
+export { capturePostinstall, captureEvent } from './client.js';
+export { captureRuntimeInstanceCreated, captureRuntimeRequestCreated, captureStreamStarted, captureStreamEnded, captureStreamErrored, } from './adapter.js';

package/node/postinstall.d.ts

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+interface PostinstallDeps {
+    readPackageJson: () => {
+        name: string;
+        version: string;
+    };
+    write: (s: string) => void;
+    env: NodeJS.ProcessEnv;
+    cwd?: () => string;
+}
+export declare function capturePostinstallScript(deps: PostinstallDeps): Promise<void>;
+export {};
+//# sourceMappingURL=postinstall.d.ts.map

package/node/postinstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postinstall.d.ts","sourceRoot":"","sources":["../../../../../libs/telemetry/src/node/postinstall.ts"],"names":[],"mappings":";AAOA,UAAU,eAAe;IACvB,eAAe,EAAE,MAAM;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AA4CD,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAkCnF"}

package/node/postinstall.js

@@ -0,0 +1,110 @@
+#!/usr/bin/env node
+import { readFileSync, realpathSync } from 'node:fs';
+import { pathToFileURL } from 'node:url';
+import { join, resolve, sep } from 'node:path';
+import { capturePostinstall, createPostinstallProperties } from './client.js';
+import { isTelemetryDisabled } from '../shared/env.js';
+const TRUE_VALUES = new Set(['1', 'true', 'TRUE', 'yes']);
+function truthy(value) {
+    return value !== undefined && TRUE_VALUES.has(value);
+}
+function debugEnabled(env) {
+    return (env.DEBUG ?? '')
+        .split(/[\s,]+/)
+        .some((part) => part === '*' || part === 'ngaf:*' || part === 'ngaf:telemetry');
+}
+function isGlobalInstall(env) {
+    return truthy(env.npm_config_global) || env.npm_config_location === 'global';
+}
+function canonicalPath(path) {
+    try {
+        return realpathSync(path);
+    }
+    catch {
+        return resolve(path);
+    }
+}
+function isInNodeModules(cwd) {
+    return canonicalPath(cwd).split(sep).includes('node_modules');
+}
+function shouldSkipLocalTopLevelInstall(env, cwd) {
+    if (isGlobalInstall(env))
+        return false;
+    const resolvedCwd = canonicalPath(cwd);
+    if (env.INIT_CWD && canonicalPath(env.INIT_CWD) === resolvedCwd)
+        return true;
+    return !isInNodeModules(resolvedCwd);
+}
+function readLifecyclePackageJson(env, cwd) {
+    if (env.npm_package_name && env.npm_package_version) {
+        return { name: env.npm_package_name, version: env.npm_package_version };
+    }
+    return JSON.parse(readFileSync(join(cwd, 'package.json'), 'utf8'));
+}
+export async function capturePostinstallScript(deps) {
+    // Single opt-out gate. DO_NOT_TRACK, npm_config_do_not_track,
+    // NGAF_TELEMETRY_DISABLED, and CI envs all return early: no event, no notice.
+    if (isTelemetryDisabled(deps.env))
+        return;
+    const cwd = deps.cwd?.() ?? process.cwd();
+    if (shouldSkipLocalTopLevelInstall(deps.env, cwd))
+        return;
+    let pkg;
+    try {
+        pkg = deps.readPackageJson();
+    }
+    catch {
+        return;
+    }
+    try {
+        const result = await capturePostinstall({ pkg: pkg.name, version: pkg.version });
+        if (debugEnabled(deps.env)) {
+            deps.write(`@threadplane/telemetry payload: ${JSON.stringify({
+                event: 'ngaf:postinstall',
+                properties: createPostinstallProperties({ pkg: pkg.name, version: pkg.version }, deps.env),
+            })}\n`);
+        }
+        if (result.sent) {
+            deps.write(`@threadplane/telemetry: install telemetry sent (${pkg.name}@${pkg.version}). ` +
+                `Disable: DO_NOT_TRACK=1 or NGAF_TELEMETRY_DISABLED=1. ` +
+                `See https://github.com/cacheplane/angular-agent-framework/blob/main/libs/telemetry/README.md\n`);
+        }
+    }
+    catch {
+        // never break npm install
+    }
+}
+async function flushStdout() {
+    return new Promise((resolve) => {
+        if (process.stdout.writableNeedDrain) {
+            process.stdout.once('drain', () => resolve());
+        }
+        else {
+            setImmediate(() => resolve());
+        }
+    });
+}
+// Entry point — invoked by package.json scripts.postinstall.
+async function main() {
+    await capturePostinstallScript({
+        readPackageJson: () => readLifecyclePackageJson(process.env, process.cwd()),
+        write: (s) => process.stdout.write(s),
+        env: process.env,
+        cwd: () => process.cwd(),
+    });
+    await flushStdout();
+}
+// Only run as main entry, not when imported by tests.
+function isDirectRun() {
+    const entry = process.argv[1];
+    if (!entry)
+        return false;
+    try {
+        return pathToFileURL(realpathSync(entry)).href === import.meta.url;
+    }
+    catch {
+        return false;
+    }
+}
+if (isDirectRun())
+    main();

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@threadplane/telemetry",
+  "version": "0.0.46",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/cacheplane/angular-agent-framework.git",
+    "directory": "libs/telemetry"
+  },
+  "homepage": "https://github.com/cacheplane/angular-agent-framework#readme",
+  "bugs": {
+    "url": "https://github.com/cacheplane/angular-agent-framework/issues"
+  },
+  "sideEffects": false,
+  "type": "module",
+  "bin": {
+    "threadplane-telemetry-postinstall": "./node/postinstall.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./index.d.ts",
+      "default": "./index.js"
+    },
+    "./shared": {
+      "types": "./shared/public-api.d.ts",
+      "default": "./shared/public-api.js"
+    },
+    "./node": {
+      "types": "./node/index.d.ts",
+      "default": "./node/index.js"
+    },
+    "./node/postinstall": {
+      "types": "./node/postinstall.d.ts",
+      "default": "./node/postinstall.js"
+    },
+    "./browser": {
+      "types": "./browser/index.d.ts",
+      "default": "./browser/fesm2022/threadplane-telemetry.mjs"
+    },
+    "./README.md": "./README.md"
+  },
+  "peerDependencies": {
+    "@angular/core": "^20.0.0 || ^21.0.0",
+    "posthog-js": "^1.372.0"
+  },
+  "peerDependenciesMeta": {
+    "@angular/core": {
+      "optional": true
+    },
+    "posthog-js": {
+      "optional": true
+    }
+  },
+  "scripts": {
+    "postinstall": "node ./node/postinstall.js || true"
+  }
+}

package/shared/anon-id.d.ts

@@ -0,0 +1,3 @@
+export declare function getAnonId(): string;
+export declare function _resetAnonIdForTesting(): void;
+//# sourceMappingURL=anon-id.d.ts.map

package/shared/anon-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anon-id.d.ts","sourceRoot":"","sources":["../../../../../libs/telemetry/src/shared/anon-id.ts"],"names":[],"mappings":"AAIA,wBAAgB,SAAS,IAAI,MAAM,CAGlC;AAGD,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C"}

package/shared/anon-id.js

@@ -0,0 +1,11 @@
+import { randomUUID } from 'node:crypto';
+let cached = null;
+export function getAnonId() {
+    if (!cached)
+        cached = `anon_${randomUUID()}`;
+    return cached;
+}
+// @internal — for tests only
+export function _resetAnonIdForTesting() {
+    cached = null;
+}

package/shared/env.d.ts

@@ -0,0 +1,5 @@
+type DisableReason = 'DO_NOT_TRACK' | 'NGAF_TELEMETRY_DISABLED' | 'CI' | null;
+export declare function getDisableReason(env?: NodeJS.ProcessEnv): DisableReason;
+export declare function isTelemetryDisabled(env?: NodeJS.ProcessEnv): boolean;
+export {};
+//# sourceMappingURL=env.d.ts.map

package/shared/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../../../libs/telemetry/src/shared/env.ts"],"names":[],"mappings":"AAMA,KAAK,aAAa,GAAG,cAAc,GAAG,yBAAyB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE9E,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,CAepF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEjF"}

package/shared/env.js

@@ -0,0 +1,22 @@
+const TRUE_VALUES = new Set(['1', 'true', 'TRUE', 'yes']);
+function truthy(v) {
+    return v !== undefined && TRUE_VALUES.has(v);
+}
+export function getDisableReason(env = process.env) {
+    if (truthy(env.DO_NOT_TRACK) || truthy(env.npm_config_do_not_track) || truthy(env.NPM_CONFIG_DO_NOT_TRACK)) {
+        return 'DO_NOT_TRACK';
+    }
+    if (truthy(env.NGAF_TELEMETRY_DISABLED))
+        return 'NGAF_TELEMETRY_DISABLED';
+    if (truthy(env.CI) ||
+        truthy(env.GITHUB_ACTIONS) ||
+        truthy(env.CONTINUOUS_INTEGRATION) ||
+        truthy(env.BUILDKITE) ||
+        truthy(env.CIRCLECI)) {
+        return 'CI';
+    }
+    return null;
+}
+export function isTelemetryDisabled(env = process.env) {
+    return getDisableReason(env) !== null;
+}

package/shared/events.d.ts

@@ -0,0 +1,4 @@
+export type ThreadplaneNodeEvent = 'ngaf:postinstall' | 'ngaf:runtime_instance_created' | 'ngaf:runtime_request_created' | 'ngaf:stream_started' | 'ngaf:stream_ended' | 'ngaf:stream_errored';
+export type ThreadplaneBrowserEvent = 'ngaf:browser_provided' | 'ngaf:browser_chat_init';
+export type ThreadplaneEvent = ThreadplaneNodeEvent | ThreadplaneBrowserEvent;
+//# sourceMappingURL=events.d.ts.map

package/shared/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../../../libs/telemetry/src/shared/events.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,+BAA+B,GAC/B,8BAA8B,GAC9B,qBAAqB,GACrB,mBAAmB,GACnB,qBAAqB,CAAC;AAE1B,MAAM,MAAM,uBAAuB,GAC/B,uBAAuB,GACvB,wBAAwB,CAAC;AAE7B,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,uBAAuB,CAAC"}

package/shared/events.js

@@ -0,0 +1 @@
+export {};

package/shared/hash.d.ts

@@ -0,0 +1,2 @@
+export declare function sha256(input: string): Promise<string>;
+//# sourceMappingURL=hash.d.ts.map

package/shared/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../../../../libs/telemetry/src/shared/hash.ts"],"names":[],"mappings":"AAAA,wBAAsB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAM3D"}

package/shared/hash.js

@@ -0,0 +1,7 @@
+export async function sha256(input) {
+    const data = new TextEncoder().encode(input);
+    const buf = await crypto.subtle.digest('SHA-256', data);
+    return Array.from(new Uint8Array(buf))
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+}

package/shared/personal-email-domains.d.ts

@@ -0,0 +1,3 @@
+export declare const PERSONAL_EMAIL_DOMAINS: ReadonlySet<string>;
+export declare function isPersonalEmailDomain(domain: string | null | undefined): boolean;
+//# sourceMappingURL=personal-email-domains.d.ts.map

package/shared/personal-email-domains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"personal-email-domains.d.ts","sourceRoot":"","sources":["../../../../../libs/telemetry/src/shared/personal-email-domains.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAoBrD,CAAC;AAEH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAGhF"}

package/shared/personal-email-domains.js

@@ -0,0 +1,27 @@
+// SPDX-License-Identifier: MIT
+export const PERSONAL_EMAIL_DOMAINS = new Set([
+    'gmail.com',
+    'yahoo.com',
+    'hotmail.com',
+    'outlook.com',
+    'live.com',
+    'icloud.com',
+    'me.com',
+    'mac.com',
+    'proton.me',
+    'protonmail.com',
+    'aol.com',
+    'gmx.com',
+    'mail.com',
+    'yandex.com',
+    'fastmail.com',
+    'msn.com',
+    'qq.com',
+    '163.com',
+    '126.com',
+]);
+export function isPersonalEmailDomain(domain) {
+    if (!domain)
+        return false;
+    return PERSONAL_EMAIL_DOMAINS.has(domain.toLowerCase());
+}

package/shared/properties.d.ts

@@ -0,0 +1,5 @@
+export declare function toSafeAnalyticsString(value: unknown, maxLength?: number): string | undefined;
+export declare function getEmailDomain(email: unknown): string | null;
+export declare function getSourcePage(value: unknown): string;
+export declare function normalizePostHogHost(host: unknown): string;
+//# sourceMappingURL=properties.d.ts.map

package/shared/properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"properties.d.ts","sourceRoot":"","sources":["../../../../../libs/telemetry/src/shared/properties.ts"],"names":[],"mappings":"AAGA,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,SAAM,GAAG,MAAM,GAAG,SAAS,CAKzF;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAS5D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAYpD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAI1D"}

package/shared/properties.js

@@ -0,0 +1,40 @@
+// SPDX-License-Identifier: MIT
+const DEFAULT_POSTHOG_HOST = 'https://us.i.posthog.com';
+export function toSafeAnalyticsString(value, maxLength = 200) {
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    if (!trimmed)
+        return undefined;
+    return trimmed.slice(0, maxLength);
+}
+export function getEmailDomain(email) {
+    const value = toSafeAnalyticsString(email, 320);
+    if (!value)
+        return null;
+    const atIndex = value.lastIndexOf('@');
+    if (atIndex <= 0 || atIndex === value.length - 1)
+        return null;
+    const domain = value.slice(atIndex + 1).toLowerCase();
+    return domain.includes('.') ? domain : null;
+}
+export function getSourcePage(value) {
+    const source = toSafeAnalyticsString(value, 2000);
+    if (!source)
+        return '/';
+    if (source.startsWith('/'))
+        return source;
+    try {
+        const url = new URL(source);
+        return `${url.pathname}${url.search}${url.hash}` || '/';
+    }
+    catch {
+        return '/';
+    }
+}
+export function normalizePostHogHost(host) {
+    const value = toSafeAnalyticsString(host, 500);
+    if (!value)
+        return DEFAULT_POSTHOG_HOST;
+    return value.endsWith('/') ? value.slice(0, -1) : value;
+}

package/shared/public-api.d.ts

@@ -0,0 +1,4 @@
+export type { ThreadplaneEvent, ThreadplaneNodeEvent, ThreadplaneBrowserEvent } from './events';
+export { getEmailDomain, getSourcePage, normalizePostHogHost, toSafeAnalyticsString, } from './properties';
+export { PERSONAL_EMAIL_DOMAINS, isPersonalEmailDomain } from './personal-email-domains';
+//# sourceMappingURL=public-api.d.ts.map

package/shared/public-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-api.d.ts","sourceRoot":"","sources":["../../../../../libs/telemetry/src/shared/public-api.ts"],"names":[],"mappings":"AACA,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAChG,OAAO,EACL,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC"}

package/shared/public-api.js

@@ -0,0 +1,2 @@
+export { getEmailDomain, getSourcePage, normalizePostHogHost, toSafeAnalyticsString, } from './properties';
+export { PERSONAL_EMAIL_DOMAINS, isPersonalEmailDomain } from './personal-email-domains';

package/shared/sample.d.ts

@@ -0,0 +1,2 @@
+export declare function shouldSample(rate: number, anonId: string): boolean;
+//# sourceMappingURL=sample.d.ts.map

package/shared/sample.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sample.d.ts","sourceRoot":"","sources":["../../../../../libs/telemetry/src/shared/sample.ts"],"names":[],"mappings":"AAUA,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAIlE"}

package/shared/sample.js

@@ -0,0 +1,16 @@
+// Cheap deterministic 32-bit hash (Fnv-1a) — no crypto needed for sampling.
+function hashString(s) {
+    let h = 2166136261;
+    for (let i = 0; i < s.length; i++) {
+        h ^= s.charCodeAt(i);
+        h = (h * 16777619) >>> 0;
+    }
+    return h;
+}
+export function shouldSample(rate, anonId) {
+    if (rate <= 0)
+        return false;
+    if (rate >= 1)
+        return true;
+    return hashString(anonId) / 0xffffffff < rate;
+}