@unbrained/pm-cli 2026.9.6 → 2026.9.8

package/dist/core/telemetry/runtime.js

@@ -1,1989 +1,5 @@
-/**
- * @module core/telemetry/runtime
- *
- * Captures consent-aware telemetry and observability events for Runtime.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="26ea62d9-874d-5826-9822-83c5523b673b")}catch(e){}}();
-import crypto from "node:crypto";
-import { spawn } from "node:child_process";
-import { mkdirSync, rmSync, statSync } from "node:fs";
-import { mkdir, readdir, rm, stat } from "node:fs/promises";
-import { request as httpRequest } from "node:http";
-import { request as httpsRequest } from "node:https";
-import os from "node:os";
-import path from "node:path";
-import { resolvePmPackageRootFromModule } from "../packages/root.js";
-import { isFileMissingError, appendLineAtomic, readFileIfExists, writeFileAtomic, } from "../fs/fs-utils.js";
-import { resolveTelemetryErrorCategory, } from "../shared/constants.js";
-import { nowIso } from "../shared/time.js";
-import { detectAgentIdentity, readAuthorEnvironment, } from "../shared/author.js";
-import { resolveGlobalPmRoot } from "../store/paths.js";
-import { readSettings, writeSettings } from "../store/settings.js";
-import { deriveTelemetryCommandResolution, deriveTelemetryCommandTaxonomy, inferTelemetryErrorCode, } from "./observability.js";
-const TELEMETRY_QUEUE_RELATIVE_PATH = path.join("runtime", "telemetry", "events.jsonl");
-const TELEMETRY_STATE_RELATIVE_PATH = path.join("runtime", "telemetry", "state.json");
-const TELEMETRY_OTEL_SPANS_RELATIVE_PATH = path.join("runtime", "telemetry", "otel-spans.jsonl");
-// OTLP requests run concurrently, while event and OTLP phases run sequentially.
-// The maximum configurable HTTP timeout therefore keeps two worst-case network
-// phases below TELEMETRY_FLUSH_LOCK_STALE_MS (60s), preventing a later command
-// from treating a live worker's lock as stale and starting a second worker.
-const TELEMETRY_OTEL_SPANS_FLUSH_BATCH_SIZE = 8;
-const TELEMETRY_OTEL_SPANS_MAX_PENDING = 500;
-/** Public contract for telemetry schema version, shared by SDK and presentation-layer consumers. */
-export const TELEMETRY_SCHEMA_VERSION = 1;
-const TELEMETRY_CLIENT_SCHEMA_VERSION = 1;
-const TELEMETRY_FLUSH_BATCH_SIZE = 100;
-const TELEMETRY_MAX_RETRY_DELAY_MS = 3_600_000;
-const TELEMETRY_RETRY_BASE_DELAY_MS = 30_000;
-const TELEMETRY_HTTP_TIMEOUT_DEFAULT_MS = 20_000;
-const TELEMETRY_HTTP_TIMEOUT_MIN_MS = 1_000;
-const TELEMETRY_HTTP_TIMEOUT_MAX_MS = 25_000;
-const MILLISECONDS_PER_DAY = 86_400_000;
-const TELEMETRY_MAX_EVENT_BYTES = 65_536;
-const TELEMETRY_SANITIZE_MAX_DEPTH = 6;
-const TELEMETRY_SANITIZE_MAX_ARRAY_ITEMS = 20;
-/** Public contract for telemetry max queue entry attempts, shared by SDK and presentation-layer consumers. */
-export const TELEMETRY_MAX_QUEUE_ENTRY_ATTEMPTS = 15;
-const TELEMETRY_RESULT_PREVIEW_MAX_BYTES = 8_192;
-const TELEMETRY_QUEUE_REWRITE_RETRY_DELAYS_MS = [25, 50, 100, 200];
-const TELEMETRY_QUEUE_TMP_ORPHAN_MAX_AGE_MS = 60 * 60 * 1000;
-const TELEMETRY_FLUSH_LOCK_STALE_MS = 60_000;
-const TELEMETRY_FLUSH_SPAWN_LOCK_STALE_MS = 60_000;
-const OTEL_TRACES_ENDPOINT_ENV = "OTEL_EXPORTER_OTLP_TRACES_ENDPOINT";
-const OTEL_BASE_ENDPOINT_ENV = "OTEL_EXPORTER_OTLP_ENDPOINT";
-const OTEL_SERVICE_NAME_ENV = "OTEL_SERVICE_NAME";
-const PM_TELEMETRY_DISABLED_ENV = "PM_TELEMETRY_DISABLED";
-const PM_NO_TELEMETRY_ENV = "PM_NO_TELEMETRY";
-const PM_TELEMETRY_DISABLED_VALUES = new Set(["1", "true", "yes", "on"]);
-const PM_TELEMETRY_OTEL_DISABLED_ENV = "PM_TELEMETRY_OTEL_DISABLED";
-const PM_TELEMETRY_OTEL_DISABLED_VALUES = new Set(["1", "true", "yes", "on"]);
-const PM_TELEMETRY_INLINE_FLUSH_ENV = "PM_TELEMETRY_INLINE_FLUSH";
-const PM_TELEMETRY_FLUSH_CHILD_ENV = "PM_TELEMETRY_FLUSH_CHILD";
-const PM_TELEMETRY_SOURCE_CONTEXT_ENV = "PM_TELEMETRY_SOURCE_CONTEXT";
-const PM_TELEMETRY_HTTP_TIMEOUT_MS_ENV = "PM_TELEMETRY_HTTP_TIMEOUT_MS";
-const NATIVE_FETCH = globalThis.fetch;
-/** Supported values accepted by the pm telemetry source context contract. */
-export const PM_TELEMETRY_SOURCE_CONTEXT_VALUES = [
-    "user",
-    "automation",
-    "test",
-    "dogfood",
-];
-let _lastFlushPromise = Promise.resolve();
-let _queueMutationPromise = Promise.resolve();
-/** Wait for the most recent background flush to settle. Test-only helper. */
-export async function waitForPendingFlush() {
-    await _lastFlushPromise;
-    await _queueMutationPromise;
-}
-const PM_TELEMETRY_SOURCE_CONTEXT_SET = new Set(PM_TELEMETRY_SOURCE_CONTEXT_VALUES);
-const BOOLEAN_TRUE_VALUES = new Set(["1", "true", "yes", "on"]);
-const PROCESS_SESSION_ID = crypto.randomUUID();
-const SENSITIVE_KEYWORDS = [
-    "token",
-    "secret",
-    "password",
-    "passwd",
-    "api_key",
-    "apikey",
-    "authorization",
-    "cookie",
-    "session",
-    "credentials",
-    "bearer",
-];
-const REDACTION_INPUT_KEYS = new Set([
-    "literal",
-    "literals",
-    "regex",
-    "regexes",
-    "replacement",
-    "replacements",
-]);
-const SENSITIVE_INLINE_KEY_PATTERN = "(?:token|secret|password|passwd|api[_-]?key|apikey|authorization|cookie|session|credentials|bearer|literals?|regex(?:es)?|replacements?)";
-const INLINE_SENSITIVE_ASSIGNMENT_PATTERN = new RegExp(`\\b(${SENSITIVE_INLINE_KEY_PATTERN})\\s*([:=])\\s*([^\\s,;]+)`, "giu");
-const INLINE_SENSITIVE_FLAG_PATTERN = new RegExp(`(--${SENSITIVE_INLINE_KEY_PATTERN})(=|\\s+)([^\\s,;]+)`, "giu");
-const ABSOLUTE_PATH_TOKEN_PATTERN = /(^|[\s"'`(=])\/(?:[^\s"'`),;]+)/g;
-const BEARER_TOKEN_PATTERN = /bearer\s+[a-z0-9._=-]+/giu;
-const PRIVATE_IP_PATTERN = /\b(?:10\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)|172\.(?:1[6-9]|2\d|3[01])\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)|192\.168\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d))\b/g;
-function queuePath(globalPmRoot) {
-    return path.join(globalPmRoot, TELEMETRY_QUEUE_RELATIVE_PATH);
-}
-function otelSpansQueuePath(globalPmRoot) {
-    return path.join(globalPmRoot, TELEMETRY_OTEL_SPANS_RELATIVE_PATH);
-}
-function telemetryRuntimeDirectory(globalPmRoot) {
-    return path.dirname(queuePath(globalPmRoot));
-}
-function runtimeStatePath(globalPmRoot) {
-    return path.join(globalPmRoot, TELEMETRY_STATE_RELATIVE_PATH);
-}
-function flushLockPath(globalPmRoot) {
-    return path.join(globalPmRoot, "runtime", "telemetry", "flush.lock");
-}
-function flushSpawnLockPath(globalPmRoot) {
-    return path.join(globalPmRoot, "runtime", "telemetry", "flush.spawn.lock");
-}
-function telemetryFlushRunnerPath() {
-    return path.join(resolvePmPackageRootFromModule(import.meta.url, ["../../.."]), "dist", "cli", "telemetry-flush.js");
-}
-function shouldFlushInline() {
-    if (parseBooleanTrueLike(process.env[PM_TELEMETRY_INLINE_FLUSH_ENV])) {
-        return true;
-    }
-    if (parseBooleanTrueLike(process.env[PM_TELEMETRY_FLUSH_CHILD_ENV])) {
-        return true;
-    }
-    const nodeEnv = (process.env.NODE_ENV ?? "").trim().toLowerCase();
-    return (typeof process.env.VITEST === "string" ||
-        typeof process.env.VITEST_WORKER_ID === "string" ||
-        nodeEnv === "test");
-}
-async function readRuntimeState(globalPmRoot) {
-    const raw = await readFileIfExists(runtimeStatePath(globalPmRoot));
-    if (!raw || raw.trim().length === 0) {
-        return {};
-    }
-    try {
-        const parsed = JSON.parse(raw);
-        if (typeof parsed !== "object" ||
-            parsed === null ||
-            Array.isArray(parsed)) {
-            return {};
-        }
-        return parsed;
-    }
-    catch {
-        return {};
-    }
-}
-async function writeRuntimeState(globalPmRoot, patch) {
-    try {
-        const current = await readRuntimeState(globalPmRoot);
-        const next = {
-            ...current,
-            ...patch,
-        };
-        const normalized = Object.fromEntries(Object.entries(next)
-            .filter(([, value]) => value !== undefined)
-            .sort((left, right) => left[0].localeCompare(right[0])));
-        await writeFileAtomic(runtimeStatePath(globalPmRoot), `${JSON.stringify(normalized, null, 2)}\n`);
-    }
-    catch {
-        // Runtime state persistence is best effort and must not block command execution.
-    }
-}
-function isSensitiveKey(key) {
-    const normalized = key
-        .trim()
-        .toLowerCase()
-        .replaceAll("-", "_")
-        .replaceAll(/[^a-z0-9_]+/g, "_");
-    const tokens = normalized.split("_").filter((token) => token.length > 0);
-    return (REDACTION_INPUT_KEYS.has(normalized) ||
-        SENSITIVE_KEYWORDS.some((keyword) => normalized === keyword ||
-            normalized.endsWith(`_${keyword}`) ||
-            tokens.includes(keyword)));
-}
-function redactInlineSensitiveAssignments(input) {
-    const withoutAssignments = input.replaceAll(INLINE_SENSITIVE_ASSIGNMENT_PATTERN, (_match, key, delimiter) => `${key}${delimiter}[redacted]`);
-    return withoutAssignments.replaceAll(INLINE_SENSITIVE_FLAG_PATTERN, (_match, flag, delimiter) => `${flag}${delimiter}[redacted]`);
-}
-function redactAbsolutePathTokens(input) {
-    return input.replaceAll(ABSOLUTE_PATH_TOKEN_PATTERN, (_match, prefix) => `${prefix}[redacted_path]`);
-}
-function isAsciiLetterOrDigitCode(code) {
-    const isUpper = code >= 65 && code <= 90;
-    const isLower = code >= 97 && code <= 122;
-    const isDigit = code >= 48 && code <= 57;
-    return isUpper || isLower || isDigit;
-}
-function isEmailLocalCharacter(character) {
-    if (!character) {
-        return false;
-    }
-    const code = character.charCodeAt(0);
-    if (isAsciiLetterOrDigitCode(code)) {
-        return true;
-    }
-    return (character === "." ||
-        character === "_" ||
-        character === "%" ||
-        character === "+" ||
-        character === "-");
-}
-function isEmailDomainCharacter(character) {
-    if (!character) {
-        return false;
-    }
-    const code = character.charCodeAt(0);
-    if (isAsciiLetterOrDigitCode(code)) {
-        return true;
-    }
-    return character === "." || character === "-";
-}
-function looksLikeEmailToken(token) {
-    const atIndex = token.indexOf("@");
-    if (atIndex <= 0 ||
-        atIndex !== token.lastIndexOf("@") ||
-        atIndex === token.length - 1) {
-        return false;
-    }
-    const localPart = token.slice(0, atIndex);
-    const domainPart = token.slice(atIndex + 1);
-    const lastDot = domainPart.lastIndexOf(".");
-    if (lastDot <= 0 || lastDot === domainPart.length - 1) {
-        return false;
-    }
-    if (domainPart.length - (lastDot + 1) < 2) {
-        return false;
-    }
-    for (const character of localPart) {
-        if (!isEmailLocalCharacter(character)) {
-            return false;
-        }
-    }
-    for (const character of domainPart) {
-        if (!isEmailDomainCharacter(character)) {
-            return false;
-        }
-    }
-    return true;
-}
-function redactEmailTokens(input) {
-    let redacted = "";
-    let cursor = 0;
-    while (cursor < input.length) {
-        const atIndex = input.indexOf("@", cursor);
-        if (atIndex < 0) {
-            redacted += input.slice(cursor);
-            break;
-        }
-        let start = atIndex - 1;
-        while (start >= cursor && isEmailLocalCharacter(input[start])) {
-            start -= 1;
-        }
-        start += 1;
-        let end = atIndex + 1;
-        while (end < input.length && isEmailDomainCharacter(input[end])) {
-            end += 1;
-        }
-        const candidate = input.slice(start, end);
-        if (looksLikeEmailToken(candidate)) {
-            redacted += input.slice(cursor, start);
-            redacted += "[redacted_email]";
-            cursor = end;
-            continue;
-        }
-        redacted += input.slice(cursor, atIndex + 1);
-        cursor = atIndex + 1;
-    }
-    return redacted;
-}
-function sanitizeCommonSensitiveTokens(input) {
-    const withoutEmails = redactEmailTokens(input);
-    const withoutBearer = withoutEmails.replaceAll(BEARER_TOKEN_PATTERN, "bearer [redacted_token]");
-    return withoutBearer.replaceAll(PRIVATE_IP_PATTERN, "[redacted_ip]");
-}
-function sanitizeStringRedacted(input) {
-    const withoutCommonSensitiveTokens = sanitizeCommonSensitiveTokens(input);
-    const withoutInlineSecrets = redactInlineSensitiveAssignments(withoutCommonSensitiveTokens);
-    const withoutAbsolutePaths = redactAbsolutePathTokens(withoutInlineSecrets);
-    const trimmed = withoutAbsolutePaths.trim();
-    if (trimmed.startsWith("/") && trimmed.length > 1) {
-        return "[redacted_path]";
-    }
-    if (withoutAbsolutePaths.length > 512) {
-        return `${withoutAbsolutePaths.slice(0, 509)}...`;
-    }
-    return withoutAbsolutePaths;
-}
-function sanitizeStringMax(input) {
-    const withoutCommonSensitiveTokens = sanitizeCommonSensitiveTokens(input);
-    const withoutInlineSecrets = redactInlineSensitiveAssignments(withoutCommonSensitiveTokens);
-    const withoutAbsolutePaths = redactAbsolutePathTokens(withoutInlineSecrets);
-    const trimmed = withoutAbsolutePaths.trim();
-    if (trimmed.startsWith("/") && trimmed.length > 1) {
-        return "[redacted_path]";
-    }
-    if (withoutAbsolutePaths.length > 2048) {
-        return `${withoutAbsolutePaths.slice(0, 2045)}...`;
-    }
-    return withoutAbsolutePaths;
-}
-function sanitizeString(input, captureLevel = "redacted") {
-    if (captureLevel === "max") {
-        return sanitizeStringMax(input);
-    }
-    return sanitizeStringRedacted(input);
-}
-function sanitizeValue(value, keyHint, captureLevel = "redacted", depth = 0) {
-    if (keyHint && isSensitiveKey(keyHint)) {
-        return "[redacted]";
-    }
-    if (value === null || value === undefined) {
-        return value;
-    }
-    if (typeof value === "string") {
-        return sanitizeString(value, captureLevel);
-    }
-    if (typeof value === "number" || typeof value === "boolean") {
-        return value;
-    }
-    if (depth >= TELEMETRY_SANITIZE_MAX_DEPTH) {
-        return "[depth_truncated]";
-    }
-    if (Array.isArray(value)) {
-        return value
-            .slice(0, TELEMETRY_SANITIZE_MAX_ARRAY_ITEMS)
-            .map((entry) => sanitizeValue(entry, undefined, captureLevel, depth + 1));
-    }
-    if (typeof value === "object") {
-        const record = value;
-        const sanitized = {};
-        for (const [key, nested] of Object.entries(record)) {
-            sanitized[key] = sanitizeValue(nested, key, captureLevel, depth + 1);
-        }
-        return sanitized;
-    }
-    return String(value);
-}
-function sanitizeCommandArgs(args, captureLevel = "redacted") {
-    const sanitized = [];
-    let nextIsSensitiveValue = false;
-    for (const rawArg of args) {
-        const arg = sanitizeString(rawArg, captureLevel);
-        if (nextIsSensitiveValue) {
-            sanitized.push("[redacted]");
-            nextIsSensitiveValue = false;
-            continue;
-        }
-        if (arg.startsWith("--")) {
-            const withoutPrefix = arg.slice(2);
-            const delimiterIndex = withoutPrefix.indexOf("=");
-            if (delimiterIndex >= 0) {
-                const key = withoutPrefix.slice(0, delimiterIndex);
-                const value = withoutPrefix.slice(delimiterIndex + 1);
-                if (isSensitiveKey(key)) {
-                    sanitized.push(`--${key}=[redacted]`);
-                }
-                else {
-                    sanitized.push(`--${key}=${sanitizeString(value, captureLevel)}`);
-                }
-                continue;
-            }
-            if (isSensitiveKey(withoutPrefix)) {
-                sanitized.push(`--${withoutPrefix}`);
-                nextIsSensitiveValue = true;
-                continue;
-            }
-        }
-        sanitized.push(arg);
-    }
-    return sanitized;
-}
-function normalizeCaptureLevel(value) {
-    const normalized = value?.trim().toLowerCase();
-    if (normalized === "minimal" ||
-        normalized === "redacted" ||
-        normalized === "max") {
-        return normalized;
-    }
-    return "redacted";
-}
-function parseBooleanTrueLike(value) {
-    return BOOLEAN_TRUE_VALUES.has((value ?? "").trim().toLowerCase());
-}
-/** Resolve the background event and OTLP request timeout within the flush-lock safety envelope. */
-function resolveTelemetryHttpTimeoutMs() {
-    const rawConfigured = process.env[PM_TELEMETRY_HTTP_TIMEOUT_MS_ENV]?.trim();
-    if (!rawConfigured) {
-        return TELEMETRY_HTTP_TIMEOUT_DEFAULT_MS;
-    }
-    const configured = Number(rawConfigured);
-    if (!Number.isFinite(configured)) {
-        return TELEMETRY_HTTP_TIMEOUT_DEFAULT_MS;
-    }
-    return Math.min(TELEMETRY_HTTP_TIMEOUT_MAX_MS, Math.max(TELEMETRY_HTTP_TIMEOUT_MIN_MS, Math.trunc(configured)));
-}
-/** POST a JSON payload with one total timeout that covers DNS, connection, TLS, and response completion. */
-async function postTelemetryJson(endpoint, headers, body) {
-    const url = new URL(endpoint);
-    // A replaced global fetch is an intentional runtime adapter used by the
-    // repository's deterministic tests and by embedders that instrument network
-    // traffic. Production retains the native HTTP transport below so Node's
-    // independent built-in-fetch connect timeout cannot preempt our bound.
-    if (globalThis.fetch !== NATIVE_FETCH) {
-        const controller = new AbortController();
-        let timeout;
-        const deadline = new Promise((_resolve, reject) => {
-            timeout = setTimeout(() => {
-                controller.abort();
-                reject(new Error("telemetry_http_timeout"));
-            }, resolveTelemetryHttpTimeoutMs());
-        });
-        try {
-            const response = await Promise.race([
-                globalThis.fetch(endpoint, {
-                    method: "POST",
-                    headers,
-                    body,
-                    signal: controller.signal,
-                }),
-                deadline,
-            ]);
-            return response.status;
-        }
-        finally {
-            clearTimeout(timeout);
-        }
-    }
-    const request = url.protocol === "https:"
-        ? httpsRequest
-        : url.protocol === "http:"
-            ? httpRequest
-            : undefined;
-    if (!request) {
-        throw new Error(`telemetry_http_protocol_unsupported_${url.protocol}`);
-    }
-    return new Promise((resolve, reject) => {
-        const timeoutMs = resolveTelemetryHttpTimeoutMs();
-        const requestOptions = {
-            method: "POST",
-            headers: {
-                ...headers,
-                "content-length": Buffer.byteLength(body),
-            },
-            signal: AbortSignal.timeout(timeoutMs),
-            autoSelectFamilyAttemptTimeout: Math.min(5_000, timeoutMs),
-        };
-        const clientRequest = request(url, requestOptions, (response) => {
-            response.once("error", reject);
-            // Client responses always carry an HTTP status code; Node's shared
-            // IncomingMessage type is also used for server requests where it is absent.
-            response.once("end", () => resolve(response.statusCode));
-            response.resume();
-        });
-        clientRequest.once("error", reject);
-        clientRequest.end(body);
-    });
-}
-function normalizePmVersion(value) {
-    const trimmed = typeof value === "string" ? value.trim() : "";
-    return trimmed.length > 0 ? trimmed : "0.0.0";
-}
-function normalizeTelemetryErrorCode(value) {
-    const normalized = value?.trim();
-    return normalized && normalized.length > 0 ? normalized : undefined;
-}
-function normalizeTelemetryExitCode(exitCode, ok) {
-    if (Number.isFinite(exitCode)) {
-        return Math.max(0, Math.trunc(exitCode));
-    }
-    return ok ? 0 : 1;
-}
-function normalizeTelemetryErrorCategory(params) {
-    if (params.ok) {
-        return undefined;
-    }
-    if (typeof params.errorCategory === "string" &&
-        params.errorCategory.trim().length > 0) {
-        return params.errorCategory;
-    }
-    if (typeof params.errorCode === "string" &&
-        params.errorCode.trim().length > 0) {
-        return resolveTelemetryErrorCategory(params.errorCode);
-    }
-    return "unknown";
-}
-function resolveTelemetrySourceContext(globalOptions) {
-    const override = (process.env[PM_TELEMETRY_SOURCE_CONTEXT_ENV] ?? "")
-        .trim()
-        .toLowerCase();
-    if (PM_TELEMETRY_SOURCE_CONTEXT_SET.has(override)) {
-        return {
-            source_context: override,
-            source_context_source: "env_override",
-        };
-    }
-    const nodeEnv = (process.env.NODE_ENV ?? "").trim().toLowerCase();
-    if (typeof process.env.VITEST === "string" ||
-        typeof process.env.VITEST_WORKER_ID === "string" ||
-        nodeEnv === "test") {
-        return {
-            source_context: "test",
-            source_context_source: "inferred",
-        };
-    }
-    const nonTty = process.stdin.isTTY !== true || process.stdout.isTTY !== true;
-    const ci = parseBooleanTrueLike(process.env.CI);
-    const scriptLikeMode = globalOptions.json === true || globalOptions.quiet === true;
-    if (nonTty || ci || scriptLikeMode) {
-        return {
-            source_context: "automation",
-            source_context_source: "inferred",
-        };
-    }
-    return {
-        source_context: "user",
-        source_context_source: "inferred",
-    };
-}
-function hashWithInstallationId(installationId, value) {
-    return crypto
-        .createHash("sha256")
-        .update(`${installationId}:${value}`)
-        .digest("hex");
-}
-/**
- * Builds privacy-bounded author and agent dimensions for a telemetry payload.
- *
- * The raw `PM_AUTHOR` value (e.g. `claude-code-agent`) is never emitted. At
- * non-minimal capture levels a stable `author_context_hash` is attached — the
- * same installation-id-keyed one-way hash used for `pm_root_hash`/`cwd_hash`, so
- * agent-driven invocations can be segmented in Sentry/dashboards while the same
- * author hashes differently across installations. Because the field is a one-way
- * hash, it intentionally bypasses the {@link SENSITIVE_KEYWORDS} redaction path.
- * Harness and model values use the same installation-keyed one-way hashing.
- * Model source is a fixed enum and can be emitted directly. The local
- * invocation/session identifier is deliberately excluded at every capture
- * level. At minimal capture only presence booleans are surfaced.
- */
-function buildAuthorContextPayloadFields(captureLevel, installationId) {
-    const author = (readAuthorEnvironment() ?? "").trim();
-    const agent = detectAgentIdentity({
-        env: process.env,
-        argv: process.argv,
-    });
-    const hasAgentContext = agent.harness !== undefined || agent.model !== undefined;
-    if (captureLevel === "minimal") {
-        return {
-            has_author_context: author.length > 0,
-            has_agent_context: hasAgentContext,
-        };
-    }
-    return {
-        ...(author.length > 0
-            ? {
-                author_context_hash: hashWithInstallationId(installationId, author),
-            }
-            : {}),
-        ...(agent.harness
-            ? {
-                agent_harness_hash: hashWithInstallationId(installationId, agent.harness),
-            }
-            : {}),
-        ...(agent.model
-            ? {
-                agent_model_hash: hashWithInstallationId(installationId, agent.model),
-            }
-            : {}),
-        ...(agent.model_source
-            ? { agent_model_source: agent.model_source }
-            : {}),
-    };
-}
-function normalizeForHash(value, depth = 0) {
-    if (value === null || value === undefined) {
-        return value;
-    }
-    if (typeof value === "string" ||
-        typeof value === "number" ||
-        typeof value === "boolean") {
-        return value;
-    }
-    if (depth >= TELEMETRY_SANITIZE_MAX_DEPTH) {
-        return "[depth_truncated]";
-    }
-    if (Array.isArray(value)) {
-        return value
-            .slice(0, TELEMETRY_SANITIZE_MAX_ARRAY_ITEMS)
-            .map((entry) => normalizeForHash(entry, depth + 1));
-    }
-    if (typeof value === "object") {
-        const record = value;
-        const normalized = {};
-        const sortedKeys = Object.keys(record).sort((left, right) => left.localeCompare(right));
-        for (const key of sortedKeys) {
-            normalized[key] = normalizeForHash(record[key], depth + 1);
-        }
-        return normalized;
-    }
-    return String(value);
-}
-function hashTelemetryValue(installationId, value) {
-    return hashWithInstallationId(installationId, JSON.stringify(normalizeForHash(value)));
-}
-function hashCommandArgs(installationId, args) {
-    return {
-        hashes: args.map((arg) => hashWithInstallationId(installationId, arg)),
-        digest: hashWithInstallationId(installationId, args.join("\u0000")),
-    };
-}
-function hashTelemetryErrorFingerprint(installationId, command, errorCode, errorMessage) {
-    const normalizedMessage = sanitizeString(typeof errorMessage === "string" ? errorMessage : "", "redacted");
-    const normalizedCode = typeof errorCode === "string" && errorCode.length > 0
-        ? errorCode
-        : "unknown_error";
-    const fingerprintSource = `${command}\u0000${normalizedCode}\u0000${normalizedMessage}`;
-    return hashWithInstallationId(installationId, fingerprintSource);
-}
-function telemetryDisabledByEnvironment() {
-    return (PM_TELEMETRY_DISABLED_VALUES.has((process.env[PM_TELEMETRY_DISABLED_ENV] ?? "").trim().toLowerCase()) ||
-        PM_TELEMETRY_DISABLED_VALUES.has((process.env[PM_NO_TELEMETRY_ENV] ?? "").trim().toLowerCase()));
-}
-function resolveOtelTracesEndpoint() {
-    if (PM_TELEMETRY_OTEL_DISABLED_VALUES.has((process.env[PM_TELEMETRY_OTEL_DISABLED_ENV] ?? "").trim().toLowerCase())) {
-        return null;
-    }
-    const directEndpoint = (process.env[OTEL_TRACES_ENDPOINT_ENV] ?? "").trim();
-    if (directEndpoint.length > 0) {
-        try {
-            return new URL(directEndpoint).toString();
-        }
-        catch {
-            return null;
-        }
-    }
-    const baseEndpoint = (process.env[OTEL_BASE_ENDPOINT_ENV] ?? "").trim();
-    if (baseEndpoint.length === 0) {
-        return null;
-    }
-    try {
-        const url = new URL(baseEndpoint);
-        const normalizedPath = url.pathname.replace(/\/+$/, "");
-        if (!normalizedPath.endsWith("/v1/traces")) {
-            url.pathname = `${normalizedPath.length === 0 ? "" : normalizedPath}/v1/traces`;
-        }
-        return url.toString();
-    }
-    catch {
-        return null;
-    }
-}
-function isoToUnixNano(iso) {
-    const parsedMs = Date.parse(iso);
-    const epochMs = Number.isNaN(parsedMs) ? Date.now() : parsedMs;
-    return `${BigInt(epochMs) * 1000000n}`;
-}
-function otlpStringAttribute(key, value) {
-    return {
-        key,
-        value: { stringValue: value },
-    };
-}
-function otlpBoolAttribute(key, value) {
-    return {
-        key,
-        value: { boolValue: value },
-    };
-}
-function otlpIntAttribute(key, value) {
-    return {
-        key,
-        value: { intValue: String(Math.max(0, Math.trunc(value))) },
-    };
-}
-/**
- * Build the OTLP trace-export request for a finished command without performing
- * any network I/O. Returns `null` when OTLP export is not configured (no traces
- * endpoint / trace ids). The actual POST is deferred to the detached flush worker
- * via {@link enqueuePendingOtelSpan} so the foreground command never blocks on a
- * connecting socket (GH-209).
- */
-function buildOtelSpanRequest(activeCommand, outcome, finishedAtIso, durationMs) {
-    if (typeof activeCommand.otel_traces_endpoint !== "string" ||
-        activeCommand.otel_traces_endpoint.trim().length === 0 ||
-        typeof activeCommand.otel_trace_id !== "string" ||
-        activeCommand.otel_trace_id.length === 0 ||
-        typeof activeCommand.otel_span_id !== "string" ||
-        activeCommand.otel_span_id.length === 0) {
-        return null;
-    }
-    const serviceNameCandidate = sanitizeString((process.env[OTEL_SERVICE_NAME_ENV] ?? "").trim());
-    const serviceName = serviceNameCandidate.length > 0 ? serviceNameCandidate : "pm-cli";
-    const normalizedExitCode = normalizeTelemetryExitCode(outcome.exit_code, outcome.ok);
-    const normalizedErrorCode = normalizeTelemetryErrorCode(outcome.error_code);
-    const normalizedErrorCategory = normalizeTelemetryErrorCategory({
-        ok: outcome.ok,
-        errorCode: normalizedErrorCode,
-        errorCategory: outcome.error_category,
-    });
-    const attributes = [
-        otlpStringAttribute("pm.command", sanitizeString(activeCommand.command)),
-        otlpStringAttribute("pm.version", activeCommand.pm_version),
-        otlpStringAttribute("pm.source_context", activeCommand.source_context),
-        otlpStringAttribute("pm.source_context_source", activeCommand.source_context_source),
-        otlpStringAttribute("pm.installation_id", activeCommand.installation_id),
-        otlpStringAttribute("pm.session_id", PROCESS_SESSION_ID),
-        otlpStringAttribute("pm.pm_root_hash", activeCommand.pm_root_hash),
-        otlpStringAttribute("pm.cwd_hash", activeCommand.cwd_hash),
-        otlpBoolAttribute("pm.ok", outcome.ok),
-        otlpIntAttribute("pm.exit_code", normalizedExitCode),
-        otlpIntAttribute("pm.duration_ms", durationMs),
-    ];
-    if (typeof normalizedErrorCode === "string") {
-        attributes.push(otlpStringAttribute("pm.error_code", normalizedErrorCode));
-    }
-    if (typeof normalizedErrorCategory === "string") {
-        attributes.push(otlpStringAttribute("pm.error_category", normalizedErrorCategory));
-    }
-    if (typeof outcome.error === "string" && outcome.error.trim().length > 0) {
-        attributes.push(otlpStringAttribute("pm.error", sanitizeString(outcome.error)));
-    }
-    const payload = {
-        resourceSpans: [
-            {
-                resource: {
-                    attributes: [otlpStringAttribute("service.name", serviceName)],
-                },
-                scopeSpans: [
-                    {
-                        scope: {
-                            name: "pm-cli.telemetry",
-                            version: "1",
-                        },
-                        spans: [
-                            {
-                                traceId: activeCommand.otel_trace_id,
-                                spanId: activeCommand.otel_span_id,
-                                name: `pm.command.${sanitizeString(activeCommand.command)}`,
-                                kind: 1,
-                                startTimeUnixNano: isoToUnixNano(activeCommand.started_at),
-                                endTimeUnixNano: isoToUnixNano(finishedAtIso),
-                                attributes,
-                                status: {
-                                    code: outcome.ok ? 1 : 2,
-                                    message: outcome.ok
-                                        ? ""
-                                        : sanitizeString(typeof outcome.error === "string"
-                                            ? outcome.error
-                                            : "command_failed"),
-                                },
-                            },
-                        ],
-                    },
-                ],
-            },
-        ],
-    };
-    return { endpoint: activeCommand.otel_traces_endpoint, payload };
-}
-function summarizeResult(result, captureLevel = "redacted") {
-    if (result === null || result === undefined) {
-        return { type: "nullish" };
-    }
-    if (typeof result === "string") {
-        return { type: "string", value: sanitizeString(result, captureLevel) };
-    }
-    if (typeof result === "number" || typeof result === "boolean") {
-        return { type: typeof result, value: result };
-    }
-    if (Array.isArray(result)) {
-        return {
-            type: "array",
-            length: result.length,
-            sample: result
-                .slice(0, 5)
-                .map((entry) => sanitizeValue(entry, undefined, captureLevel)),
-        };
-    }
-    if (typeof result === "object") {
-        const record = result;
-        const keys = Object.keys(record).sort((left, right) => left.localeCompare(right));
-        const sanitized = {};
-        let previewBytes = 0;
-        for (const key of keys.slice(0, 25)) {
-            const sanitizedValue = sanitizeValue(record[key], key, captureLevel);
-            const entrySize = JSON.stringify(sanitizedValue).length;
-            if (previewBytes + entrySize > TELEMETRY_RESULT_PREVIEW_MAX_BYTES) {
-                sanitized[key] = "[preview_truncated]";
-                break;
-            }
-            previewBytes += entrySize;
-            sanitized[key] = sanitizedValue;
-        }
-        return {
-            type: "object",
-            key_count: keys.length,
-            keys_preview: keys.slice(0, 50),
-            preview: sanitized,
-        };
-    }
-    return { type: typeof result, value: String(result) };
-}
-function buildCommandStartPayload(params) {
-    const { captureLevel, context, pmVersion, sourceContext, pmRootHash, cwdHash, installationId, } = params;
-    const commandTaxonomy = deriveTelemetryCommandTaxonomy(context.command);
-    const hashedArgs = hashCommandArgs(installationId, context.args);
-    const commandInvocationDigest = hashWithInstallationId(installationId, `${context.command}\u0000${context.args.join("\u0000")}`);
-    const commandOptionsDigest = hashTelemetryValue(installationId, context.options);
-    const globalOptionsDigest = hashTelemetryValue(installationId, context.global);
-    const authorContextFields = buildAuthorContextPayloadFields(captureLevel, installationId);
-    if (captureLevel === "minimal") {
-        return {
-            capture_level: captureLevel,
-            pm_version: pmVersion,
-            source_context: sourceContext.source_context,
-            source_context_source: sourceContext.source_context_source,
-            command_taxonomy: commandTaxonomy,
-            command_args_digest: hashedArgs.digest,
-            command_invocation_digest: commandInvocationDigest,
-            command_options_digest: commandOptionsDigest,
-            global_options_digest: globalOptionsDigest,
-            ...authorContextFields,
-        };
-    }
-    return {
-        pm_version: pmVersion,
-        source_context: sourceContext.source_context,
-        source_context_source: sourceContext.source_context_source,
-        command_taxonomy: commandTaxonomy,
-        ...authorContextFields,
-        command_args: sanitizeCommandArgs(context.args, captureLevel),
-        command_args_hashes: hashedArgs.hashes,
-        command_args_digest: hashedArgs.digest,
-        command_invocation_digest: commandInvocationDigest,
-        command_options: sanitizeValue(context.options, undefined, captureLevel),
-        command_options_digest: commandOptionsDigest,
-        global_options: sanitizeValue(context.global, undefined, captureLevel),
-        global_options_digest: globalOptionsDigest,
-        pm_root_hash: pmRootHash,
-        cwd_hash: cwdHash,
-        capture_level: captureLevel,
-        runtime: {
-            node: process.version,
-            platform: process.platform,
-            arch: process.arch,
-            hostname_hash: hashWithInstallationId(installationId, os.hostname()),
-            stdin_tty: process.stdin.isTTY === true,
-            stdout_tty: process.stdout.isTTY === true,
-        },
-    };
-}
-function buildCommandFinishPayload(params) {
-    const { captureLevel, pmVersion, sourceContext, outcome, durationMs, startedAt, command, installationId, commandTaxonomy, exitCode, errorCode, errorCategory, commandResolution, resolutionStage, } = params;
-    const errorFingerprint = outcome.ok === false
-        ? hashTelemetryErrorFingerprint(installationId, command, errorCode, outcome.error)
-        : undefined;
-    const authorContextFields = buildAuthorContextPayloadFields(captureLevel, installationId);
-    if (captureLevel === "minimal") {
-        return {
-            capture_level: captureLevel,
-            pm_version: pmVersion,
-            source_context: sourceContext.source_context,
-            source_context_source: sourceContext.source_context_source,
-            command_taxonomy: commandTaxonomy,
-            command_resolution: commandResolution,
-            resolution_stage: resolutionStage,
-            ok: outcome.ok,
-            exit_code: exitCode,
-            error_code: errorCode,
-            error_category: errorCategory,
-            error: outcome.error
-                ? sanitizeString(outcome.error, "redacted")
-                : undefined,
-            error_fingerprint: errorFingerprint,
-            duration_ms: durationMs,
-            ...authorContextFields,
-        };
-    }
-    return {
-        capture_level: captureLevel,
-        pm_version: pmVersion,
-        source_context: sourceContext.source_context,
-        source_context_source: sourceContext.source_context_source,
-        command_taxonomy: commandTaxonomy,
-        command_resolution: commandResolution,
-        resolution_stage: resolutionStage,
-        ...authorContextFields,
-        ok: outcome.ok,
-        exit_code: exitCode,
-        error_code: errorCode,
-        error_category: errorCategory,
-        error: outcome.error
-            ? sanitizeString(outcome.error, captureLevel)
-            : undefined,
-        error_fingerprint: errorFingerprint,
-        duration_ms: durationMs,
-        started_at: startedAt,
-        result_summary: summarizeResult(outcome.result, captureLevel),
-    };
-}
-function buildCommandErrorPayload(params) {
-    const { captureLevel, pmVersion, sourceContext, command, commandTaxonomy, commandResolution, resolutionStage, args, options, pmRootHash, cwdHash, installationId, errorCode, errorMessage, errorCategory, exitCode, } = params;
-    const attemptedArgHashes = hashCommandArgs(installationId, args);
-    const attemptedCommandDigest = hashWithInstallationId(installationId, command);
-    const attemptedOptionsDigest = hashTelemetryValue(installationId, options);
-    const errorFingerprint = hashTelemetryErrorFingerprint(installationId, command, errorCode, errorMessage);
-    const authorContextFields = buildAuthorContextPayloadFields(captureLevel, installationId);
-    if (captureLevel === "minimal") {
-        return {
-            capture_level: captureLevel,
-            pm_version: pmVersion,
-            source_context: sourceContext.source_context,
-            source_context_source: sourceContext.source_context_source,
-            command_taxonomy: commandTaxonomy,
-            command_resolution: commandResolution,
-            resolution_stage: resolutionStage,
-            attempted_command_digest: attemptedCommandDigest,
-            attempted_args_digest: attemptedArgHashes.digest,
-            attempted_options_digest: attemptedOptionsDigest,
-            error_code: errorCode,
-            error_category: errorCategory,
-            exit_code: exitCode,
-            error: sanitizeString(errorMessage, "redacted"),
-            error_fingerprint: errorFingerprint,
-            ...authorContextFields,
-        };
-    }
-    return {
-        capture_level: captureLevel,
-        pm_version: pmVersion,
-        source_context: sourceContext.source_context,
-        source_context_source: sourceContext.source_context_source,
-        command_taxonomy: commandTaxonomy,
-        command_resolution: commandResolution,
-        resolution_stage: resolutionStage,
-        ...authorContextFields,
-        attempted_command: sanitizeString(command, captureLevel),
-        attempted_command_digest: attemptedCommandDigest,
-        attempted_args: sanitizeCommandArgs(args, captureLevel),
-        attempted_args_hashes: attemptedArgHashes.hashes,
-        attempted_args_digest: attemptedArgHashes.digest,
-        attempted_options: sanitizeValue(options, undefined, captureLevel),
-        attempted_options_digest: attemptedOptionsDigest,
-        error_code: errorCode,
-        error_category: errorCategory,
-        exit_code: exitCode,
-        error: sanitizeString(errorMessage, captureLevel),
-        error_fingerprint: errorFingerprint,
-        pm_root_hash: pmRootHash,
-        cwd_hash: cwdHash,
-        runtime: {
-            node: process.version,
-            platform: process.platform,
-            arch: process.arch,
-            hostname_hash: hashWithInstallationId(installationId, os.hostname()),
-            stdin_tty: process.stdin.isTTY === true,
-            stdout_tty: process.stdout.isTTY === true,
-        },
-    };
-}
-async function ensureInstallationId(globalPmRoot) {
-    const settings = await readSettings(globalPmRoot);
-    let changed = false;
-    if (settings.telemetry.installation_id.trim().length === 0) {
-        settings.telemetry.installation_id = crypto.randomUUID();
-        changed = true;
-    }
-    if (changed) {
-        await writeSettings(globalPmRoot, settings, "telemetry:install_id");
-    }
-    return {
-        installationId: settings.telemetry.installation_id,
-        endpoint: settings.telemetry.endpoint,
-        retentionDays: Math.max(1, Math.trunc(settings.telemetry.retention_days)),
-    };
-}
-async function enqueueTelemetryEvent(globalPmRoot, event) {
-    const queued = {
-        client_schema_version: TELEMETRY_CLIENT_SCHEMA_VERSION,
-        event,
-        attempts: 0,
-    };
-    let serialized = JSON.stringify(queued);
-    if (serialized.length > TELEMETRY_MAX_EVENT_BYTES) {
-        const trimmed = {
-            ...event,
-            payload: {
-                ...event.payload,
-                result_summary: {
-                    truncated: true,
-                    reason: "payload_size_exceeded",
-                    original_bytes: serialized.length,
-                },
-            },
-        };
-        const trimmedQueued = {
-            client_schema_version: TELEMETRY_CLIENT_SCHEMA_VERSION,
-            event: trimmed,
-            attempts: 0,
-        };
-        serialized = JSON.stringify(trimmedQueued);
-    }
-    await withQueueMutation(async () => {
-        await appendLineAtomic(queuePath(globalPmRoot), serialized);
-    });
-}
-function parseQueueLines(raw) {
-    const entries = [];
-    for (const line of raw.split("\n")) {
-        const trimmed = line.trim();
-        if (trimmed.length === 0) {
-            continue;
-        }
-        try {
-            const parsed = JSON.parse(trimmed);
-            if (parsed &&
-                typeof parsed === "object" &&
-                parsed.event &&
-                typeof parsed.event === "object" &&
-                typeof parsed.attempts === "number" &&
-                (parsed.client_schema_version === undefined ||
-                    (typeof parsed.client_schema_version === "number" &&
-                        Number.isFinite(parsed.client_schema_version)))) {
-                entries.push(parsed);
-            }
-        }
-        catch {
-            // Drop malformed lines to preserve queue forward progress.
-        }
-    }
-    return entries;
-}
-function nextRetryIso(attempts) {
-    const delay = Math.min(TELEMETRY_RETRY_BASE_DELAY_MS * 2 ** Math.max(attempts - 1, 0), TELEMETRY_MAX_RETRY_DELAY_MS);
-    return new Date(Date.now() + delay).toISOString();
-}
-function isDueForRetryAt(nextAttemptAfter) {
-    if (typeof nextAttemptAfter !== "string" ||
-        nextAttemptAfter.trim().length === 0) {
-        return true;
-    }
-    const dueAtMs = Date.parse(nextAttemptAfter);
-    if (Number.isNaN(dueAtMs)) {
-        return true;
-    }
-    return dueAtMs <= Date.now();
-}
-function isDueForRetry(entry) {
-    return isDueForRetryAt(entry.next_attempt_after);
-}
-function retentionCutoffMs(retentionDays) {
-    const normalizedDays = Number.isFinite(retentionDays)
-        ? Math.max(1, Math.trunc(retentionDays))
-        : 1;
-    return Date.now() - normalizedDays * MILLISECONDS_PER_DAY;
-}
-function isExpiredQueueEntry(entry, cutoffMs) {
-    const occurredAt = entry.event?.occurred_at;
-    if (typeof occurredAt !== "string" || occurredAt.trim().length === 0) {
-        return false;
-    }
-    const occurredAtMs = Date.parse(occurredAt);
-    if (Number.isNaN(occurredAtMs)) {
-        return false;
-    }
-    return occurredAtMs < cutoffMs;
-}
-function pruneExpiredQueueEntries(entries, retentionDays) {
-    const cutoffMs = retentionCutoffMs(retentionDays);
-    const retained = [];
-    let prunedCount = 0;
-    for (const entry of entries) {
-        const serializedSize = JSON.stringify(entry).length;
-        const oversized = serializedSize > TELEMETRY_MAX_EVENT_BYTES;
-        if (oversized ||
-            isExpiredQueueEntry(entry, cutoffMs) ||
-            entry.attempts >= TELEMETRY_MAX_QUEUE_ENTRY_ATTEMPTS) {
-            prunedCount += 1;
-            continue;
-        }
-        retained.push(entry);
-    }
-    return { entries: retained, prunedCount };
-}
-async function rewriteQueue(globalPmRoot, entries) {
-    const serialized = entries.map((entry) => JSON.stringify(entry)).join("\n");
-    const contents = serialized.length > 0 ? `${serialized}\n` : "";
-    for (let attempt = 0;; attempt += 1) {
-        try {
-            await writeFileAtomic(queuePath(globalPmRoot), contents);
-            return;
-        }
-        catch (error) {
-            const retryDelay = TELEMETRY_QUEUE_REWRITE_RETRY_DELAYS_MS[attempt];
-            if (retryDelay === undefined || !isRetryableQueueRewriteError(error)) {
-                throw error;
-            }
-            await sleep(retryDelay);
-        }
-    }
-}
-function isRetryableQueueRewriteError(error) {
-    if (typeof error !== "object" || error === null || !("code" in error)) {
-        return false;
-    }
-    const code = error.code;
-    return code === "EACCES" || code === "EBUSY" || code === "EPERM";
-}
-function sleep(milliseconds) {
-    return new Promise((resolve) => {
-        setTimeout(resolve, milliseconds);
-    });
-}
-/** Append a built OTLP span request to the bounded pending-spans queue. The detached flush worker drains and POSTs these so the foreground command never performs OTLP network I/O (GH-209). Best effort: a write failure never blocks the command, and the span is simply not exported. */
-async function enqueuePendingOtelSpan(globalPmRoot, request) {
-    const pending = {
-        id: crypto.randomUUID(),
-        endpoint: request.endpoint,
-        payload: request.payload,
-        enqueued_at: nowIso(),
-        attempts: 0,
-    };
-    const serialized = JSON.stringify(pending);
-    // Drop oversized spans rather than poison the queue; they would never flush.
-    if (serialized.length > TELEMETRY_MAX_EVENT_BYTES) {
-        return;
-    }
-    await withQueueMutation(async () => {
-        await appendLineAtomic(otelSpansQueuePath(globalPmRoot), serialized);
-    });
-}
-/** Derive a stable id for a legacy id-less pending span from its identity fields. Deterministic so the same on-disk line yields the same id across reads, which is what lets reconciliation remove/update it after a flush. */
-function backfillPendingOtelSpanId(entry) {
-    const material = JSON.stringify([
-        entry.endpoint,
-        entry.enqueued_at,
-        entry.payload,
-    ]);
-    return crypto
-        .createHash("sha256")
-        .update(material)
-        .digest("hex")
-        .slice(0, 32);
-}
-function parsePendingOtelSpanLines(raw) {
-    const entries = [];
-    for (const line of raw.split("\n")) {
-        const trimmed = line.trim();
-        if (trimmed.length === 0) {
-            continue;
-        }
-        try {
-            const parsed = JSON.parse(trimmed);
-            if (parsed &&
-                typeof parsed === "object" &&
-                typeof parsed.endpoint === "string" &&
-                parsed.endpoint.trim().length > 0 &&
-                "payload" in parsed &&
-                typeof parsed.attempts === "number" &&
-                Number.isFinite(parsed.attempts)) {
-                // Backfill an id for legacy entries written before id tracking existed.
-                // It MUST be deterministic from the entry's content so the post-flush
-                // re-read derives the same id and reconciliation can address the entry;
-                // a random id would differ between reads and strand the span.
-                if (typeof parsed.id !== "string" || parsed.id.length === 0) {
-                    parsed.id = backfillPendingOtelSpanId(parsed);
-                }
-                entries.push(parsed);
-            }
-        }
-        catch {
-            // Drop malformed lines to preserve forward progress.
-        }
-    }
-    return entries;
-}
-function isExpiredPendingOtelSpan(entry, cutoffMs) {
-    if (typeof entry.enqueued_at !== "string" ||
-        entry.enqueued_at.trim().length === 0) {
-        return false;
-    }
-    const enqueuedAtMs = Date.parse(entry.enqueued_at);
-    if (Number.isNaN(enqueuedAtMs)) {
-        return false;
-    }
-    return enqueuedAtMs < cutoffMs;
-}
-function prunePendingOtelSpans(entries, retentionDays) {
-    const cutoffMs = retentionCutoffMs(retentionDays);
-    const retained = [];
-    let prunedCount = 0;
-    for (const entry of entries) {
-        const oversized = JSON.stringify(entry).length > TELEMETRY_MAX_EVENT_BYTES;
-        if (oversized ||
-            isExpiredPendingOtelSpan(entry, cutoffMs) ||
-            entry.attempts >= TELEMETRY_MAX_QUEUE_ENTRY_ATTEMPTS) {
-            prunedCount += 1;
-            continue;
-        }
-        retained.push(entry);
-    }
-    if (retained.length > TELEMETRY_OTEL_SPANS_MAX_PENDING) {
-        const overflow = retained.length - TELEMETRY_OTEL_SPANS_MAX_PENDING;
-        prunedCount += overflow;
-        // Keep the most recently enqueued spans; oldest beyond the cap are dropped.
-        return { entries: retained.slice(overflow), prunedCount };
-    }
-    return { entries: retained, prunedCount };
-}
-async function rewritePendingOtelSpans(globalPmRoot, entries) {
-    const serialized = entries.map((entry) => JSON.stringify(entry)).join("\n");
-    const contents = serialized.length > 0 ? `${serialized}\n` : "";
-    for (let attempt = 0;; attempt += 1) {
-        try {
-            await writeFileAtomic(otelSpansQueuePath(globalPmRoot), contents);
-            return;
-        }
-        catch (error) {
-            const retryDelay = TELEMETRY_QUEUE_REWRITE_RETRY_DELAYS_MS[attempt];
-            if (retryDelay === undefined || !isRetryableQueueRewriteError(error)) {
-                throw error;
-            }
-            await sleep(retryDelay);
-        }
-    }
-}
-/** Drain the pending OTLP span queue and POST due spans to their traces endpoint. Runs only inside the flush worker (detached child) or the inline test path, so the foreground command never makes OTLP network calls. Failures increment per-span attempts with backoff and are retried by a later flush; runtime state records OTLP export diagnostics for `pm health` (GH-205). */
-/** Re-read the spans queue under the mutation serializer and rewrite it with the processed spans removed/updated by id, preserving any spans a concurrent foreground process appended during the (network) flush window. `succeededIds` are dropped; `failedUpdates` patch attempts/next_attempt_after by id; all other (incl. newly-appended) entries are retained, then pruned. Returns the count of spans left in the queue. Mirrors removeFlushedEntriesFromCurrentQueue. */
-async function reconcilePendingOtelSpansAfterFlush(globalPmRoot, retentionDays, succeededIds, failedUpdates) {
-    return withQueueMutation(async () => {
-        const raw = await readFileIfExists(otelSpansQueuePath(globalPmRoot));
-        const current = raw === null ? [] : parsePendingOtelSpanLines(raw);
-        const reconciled = [];
-        for (const entry of current) {
-            if (succeededIds.has(entry.id)) {
-                continue;
-            }
-            const failure = failedUpdates.get(entry.id);
-            reconciled.push(failure
-                ? {
-                    ...entry,
-                    attempts: failure.attempts,
-                    next_attempt_after: failure.next_attempt_after,
-                }
-                : entry);
-        }
-        const { entries: retained } = prunePendingOtelSpans(reconciled, retentionDays);
-        await rewritePendingOtelSpans(globalPmRoot, retained);
-        return retained.length;
-    });
-}
-async function flushPendingOtelSpans(globalPmRoot, retentionDays) {
-    const raw = await readFileIfExists(otelSpansQueuePath(globalPmRoot));
-    if (raw === null || raw.trim().length === 0) {
-        await writeRuntimeState(globalPmRoot, { pending_otel_spans: 0 });
-        return;
-    }
-    const entries = parsePendingOtelSpanLines(raw);
-    const { entries: retained, prunedCount } = prunePendingOtelSpans(entries, retentionDays);
-    const due = retained
-        .filter((entry) => isDueForRetryAt(entry.next_attempt_after))
-        .slice(0, TELEMETRY_OTEL_SPANS_FLUSH_BATCH_SIZE);
-    if (due.length === 0) {
-        // Nothing to POST. Still reconcile so pruning persists, but only if pruning
-        // actually changed the on-disk set (avoids a redundant rewrite each command).
-        const remaining = prunedCount > 0
-            ? await reconcilePendingOtelSpansAfterFlush(globalPmRoot, retentionDays, new Set(), new Map())
-            : retained.length;
-        await writeRuntimeState(globalPmRoot, { pending_otel_spans: remaining });
-        return;
-    }
-    const attemptTime = nowIso();
-    const succeededIds = new Set();
-    const failedUpdates = new Map();
-    let succeededCount = 0;
-    let lastError;
-    // Export the batch concurrently so a slow/blackholed collector caps the worker
-    // at one TELEMETRY_HTTP_TIMEOUT_MS rather than batch-size x timeout — keeping it
-    // well within the flush-lock TTL. The Set/Map/counter mutations are synchronous
-    // and safe under Node's single-threaded event loop.
-    await Promise.all(due.map(async (span) => {
-        try {
-            const status = await postTelemetryJson(span.endpoint, { "content-type": "application/json" }, JSON.stringify(span.payload));
-            if (status < 200 || status >= 300) {
-                throw new Error(`local_otel_export_http_${status}`);
-            }
-            succeededIds.add(span.id);
-            succeededCount += 1;
-        }
-        catch (error) {
-            lastError =
-                error instanceof Error
-                    ? sanitizeString(error.message, "redacted")
-                    : "local_otel_export_failed";
-            const nextAttempts = span.attempts + 1;
-            failedUpdates.set(span.id, {
-                attempts: nextAttempts,
-                next_attempt_after: nextRetryIso(nextAttempts),
-            });
-        }
-    }));
-    const remaining = await reconcilePendingOtelSpansAfterFlush(globalPmRoot, retentionDays, succeededIds, failedUpdates);
-    const statePatch = {
-        pending_otel_spans: remaining,
-        last_otel_attempt_at: attemptTime,
-    };
-    if (succeededCount > 0) {
-        statePatch.last_otel_success_at = attemptTime;
-    }
-    if (lastError !== undefined) {
-        statePatch.last_otel_failure_at = attemptTime;
-        statePatch.last_otel_failure_error = lastError;
-    }
-    else if (remaining === 0) {
-        // Only clear the failure diagnostic once the queue is fully drained. A
-        // clean batch while other (not-yet-due) spans still wait could be hiding
-        // earlier failures; keep the last known failure until nothing is pending.
-        statePatch.last_otel_failure_at = undefined;
-        statePatch.last_otel_failure_error = undefined;
-    }
-    await writeRuntimeState(globalPmRoot, statePatch);
-}
-/** Flush both telemetry artifacts under the same worker invocation: the event ingest queue and the pending OTLP span queue. Used by the detached flush worker and the inline (test) path so OTLP export always happens off the foreground command's critical path. */
-async function flushTelemetryArtifacts(globalPmRoot, endpoint, retentionDays) {
-    // Isolate the two artifacts: a failure flushing the event queue (e.g. a corrupt
-    // queue file) must not strand the OTLP span flush in the same pass, and vice
-    // versa. Both are best effort and retried on the next dispatch.
-    try {
-        await flushQueue(globalPmRoot, endpoint, retentionDays);
-    }
-    catch {
-        // Best effort; event-queue flush is retried on the next dispatch.
-    }
-    try {
-        await flushPendingOtelSpans(globalPmRoot, retentionDays);
-    }
-    catch {
-        // Best effort; span flush is retried on the next dispatch.
-    }
-}
-async function cleanupTelemetryQueueTempOrphans(globalPmRoot, maxAgeMs = TELEMETRY_QUEUE_TMP_ORPHAN_MAX_AGE_MS) {
-    try {
-        const dirPath = telemetryRuntimeDirectory(globalPmRoot);
-        const entries = await readdir(dirPath, { withFileTypes: true });
-        const cutoffMs = Date.now() - Math.max(0, maxAgeMs);
-        await Promise.all(entries
-            .filter((entry) => entry.isFile() &&
-            /^\.events\.jsonl\.\d+\.\d+\.[a-f0-9]+\.tmp$/.test(entry.name))
-            .map(async (entry) => {
-            const candidate = path.join(dirPath, entry.name);
-            const candidateStats = await stat(candidate);
-            if (candidateStats.mtimeMs < cutoffMs) {
-                await rm(candidate, { force: true });
-            }
-        }));
-    }
-    catch {
-        // Telemetry cleanup is best-effort and must not affect command execution.
-    }
-}
-async function withQueueMutation(operation) {
-    const run = _queueMutationPromise
-        .catch(
-    /* c8 ignore next */
-    () => { })
-        .then(operation);
-    _queueMutationPromise = run.catch(
-    /* c8 ignore next */
-    () => { });
-    return run;
-}
-async function readCurrentQueueEntries(globalPmRoot) {
-    const raw = await readFileIfExists(queuePath(globalPmRoot));
-    if (raw === null || raw.trim().length === 0) {
-        return [];
-    }
-    return parseQueueLines(raw);
-}
-async function removeFlushedEntriesFromCurrentQueue(globalPmRoot, flushedIds, retentionDays) {
-    return withQueueMutation(async () => {
-        const currentEntries = await readCurrentQueueEntries(globalPmRoot);
-        const { entries: retainedEntries } = pruneExpiredQueueEntries(currentEntries, retentionDays);
-        const remaining = retainedEntries.filter((entry) => !flushedIds.has(entry.event.event_id));
-        await rewriteQueue(globalPmRoot, remaining);
-        return remaining;
-    });
-}
-async function markFailedEntriesInCurrentQueue(globalPmRoot, failedIds, attemptTime, retentionDays) {
-    return withQueueMutation(async () => {
-        const currentEntries = await readCurrentQueueEntries(globalPmRoot);
-        const { entries: retainedEntries } = pruneExpiredQueueEntries(currentEntries, retentionDays);
-        const retried = retainedEntries.map((entry) => {
-            if (!failedIds.has(entry.event.event_id)) {
-                return entry;
-            }
-            const attempts = entry.attempts + 1;
-            return {
-                ...entry,
-                attempts,
-                last_attempt_at: attemptTime,
-                next_attempt_after: nextRetryIso(attempts),
-            };
-        });
-        await rewriteQueue(globalPmRoot, retried);
-        return retried;
-    });
-}
-async function flushQueue(globalPmRoot, endpoint, retentionDays) {
-    await cleanupTelemetryQueueTempOrphans(globalPmRoot);
-    const normalizedEndpoint = endpoint.trim();
-    if (normalizedEndpoint.length === 0) {
-        return;
-    }
-    const raw = await readFileIfExists(queuePath(globalPmRoot));
-    if (raw === null || raw.trim().length === 0) {
-        await writeRuntimeState(globalPmRoot, {
-            endpoint: normalizedEndpoint,
-            queue_entries: 0,
-        });
-        return;
-    }
-    const queueEntries = parseQueueLines(raw);
-    if (queueEntries.length === 0) {
-        await writeRuntimeState(globalPmRoot, {
-            endpoint: normalizedEndpoint,
-            queue_entries: 0,
-        });
-        return;
-    }
-    const { entries: retainedEntries, prunedCount } = pruneExpiredQueueEntries(queueEntries, retentionDays);
-    if (retainedEntries.length === 0) {
-        await rewriteQueue(globalPmRoot, []);
-        await writeRuntimeState(globalPmRoot, {
-            endpoint: normalizedEndpoint,
-            queue_entries: 0,
-        });
-        return;
-    }
-    const dueEntries = retainedEntries
-        .filter((entry) => isDueForRetry(entry))
-        .slice(0, TELEMETRY_FLUSH_BATCH_SIZE);
-    if (dueEntries.length === 0) {
-        if (prunedCount > 0) {
-            await rewriteQueue(globalPmRoot, retainedEntries);
-        }
-        await writeRuntimeState(globalPmRoot, {
-            endpoint: normalizedEndpoint,
-            queue_entries: retainedEntries.length,
-        });
-        return;
-    }
-    const dueIds = new Set(dueEntries.map((entry) => entry.event.event_id));
-    const attemptTime = nowIso();
-    const requestHeaders = {
-        "content-type": "application/json",
-    };
-    const ingestKey = process.env.PM_TELEMETRY_INGEST_KEY?.trim();
-    if (ingestKey) {
-        requestHeaders["x-pm-telemetry-key"] = ingestKey;
-    }
-    try {
-        const status = await postTelemetryJson(normalizedEndpoint, requestHeaders, JSON.stringify({
-            schema_version: TELEMETRY_SCHEMA_VERSION,
-            events: dueEntries.map((entry) => entry.event),
-        }));
-        if (status < 200 || status >= 300) {
-            throw new Error(`telemetry_flush_http_${status}`);
-        }
-    }
-    catch (error) {
-        const retried = await markFailedEntriesInCurrentQueue(globalPmRoot, dueIds, attemptTime, retentionDays);
-        const errorMessage = (() => {
-            if (error instanceof Error) {
-                return sanitizeString(error.message, "redacted");
-            }
-            return "telemetry_flush_failed";
-        })();
-        await writeRuntimeState(globalPmRoot, {
-            endpoint: normalizedEndpoint,
-            queue_entries: retried.length,
-            last_attempted_flush_at: attemptTime,
-            last_failed_flush_at: attemptTime,
-            last_failed_flush_error: errorMessage,
-        });
-        return;
-    }
-    try {
-        const remaining = await removeFlushedEntriesFromCurrentQueue(globalPmRoot, dueIds, retentionDays);
-        await writeRuntimeState(globalPmRoot, {
-            endpoint: normalizedEndpoint,
-            queue_entries: remaining.length,
-            last_attempted_flush_at: attemptTime,
-            last_successful_flush_at: attemptTime,
-            last_failed_flush_at: undefined,
-            last_failed_flush_error: undefined,
-        });
-        /* c8 ignore start */
-    }
-    catch (error) {
-        const errorMessage = (() => {
-            if (error instanceof Error) {
-                return sanitizeString(error.message, "redacted");
-            }
-            return "telemetry_flush_failed";
-        })();
-        const currentEntries = await readCurrentQueueEntries(globalPmRoot).catch(() => retainedEntries);
-        await writeRuntimeState(globalPmRoot, {
-            endpoint: normalizedEndpoint,
-            queue_entries: currentEntries.length,
-            last_attempted_flush_at: attemptTime,
-            last_failed_flush_at: attemptTime,
-            last_failed_flush_error: errorMessage,
-        });
-    }
-    /* c8 ignore stop */
-}
-async function acquireTelemetryFlushLock(globalPmRoot) {
-    const lockPath = flushLockPath(globalPmRoot);
-    await mkdir(path.dirname(lockPath), { recursive: true });
-    try {
-        await mkdir(lockPath);
-        return true;
-    }
-    catch (error) {
-        if (typeof error !== "object" ||
-            error === null ||
-            !("code" in error) ||
-            error.code !== "EEXIST") {
-            throw error;
-        }
-    }
-    try {
-        const lockStats = await stat(lockPath);
-        if (Date.now() - lockStats.mtimeMs < TELEMETRY_FLUSH_LOCK_STALE_MS) {
-            return false;
-        }
-        await rm(lockPath, { recursive: true, force: true });
-        await mkdir(lockPath);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-function isFreshDirectoryLock(lockPath, staleMs) {
-    try {
-        return Date.now() - statSync(lockPath).mtimeMs < staleMs;
-    }
-    catch {
-        return false;
-    }
-}
-function removeDirectoryLockBestEffort(lockPath) {
-    try {
-        rmSync(lockPath, { recursive: true, force: true });
-    }
-    catch {
-        // Flush scheduling is best effort and must never fail user commands.
-    }
-}
-function errorCode(error) {
-    if (typeof error !== "object" || error === null || !("code" in error)) {
-        return undefined;
-    }
-    const code = error.code;
-    return typeof code === "string" ? code : undefined;
-}
-function createDirectoryLock(lockPath) {
-    try {
-        mkdirSync(lockPath);
-        return true;
-    }
-    catch (error) {
-        const code = errorCode(error);
-        if (code === "EEXIST") {
-            return false;
-        }
-        if (!isFileMissingError(error)) {
-            return false;
-        }
-    }
-    /* c8 ignore start */
-    try {
-        mkdirSync(path.dirname(lockPath), { recursive: true });
-        mkdirSync(lockPath);
-        return true;
-    }
-    catch {
-        return false;
-    }
-    /* c8 ignore stop */
-}
-function acquireTelemetryFlushSpawnGate(globalPmRoot) {
-    if (isFreshDirectoryLock(flushLockPath(globalPmRoot), TELEMETRY_FLUSH_LOCK_STALE_MS)) {
-        return false;
-    }
-    const lockPath = flushSpawnLockPath(globalPmRoot);
-    try {
-        if (Date.now() - statSync(lockPath).mtimeMs <
-            TELEMETRY_FLUSH_SPAWN_LOCK_STALE_MS) {
-            return false;
-        }
-        removeDirectoryLockBestEffort(lockPath);
-    }
-    catch (error) {
-        if (!isFileMissingError(error)) {
-            return false;
-        }
-    }
-    return createDirectoryLock(lockPath);
-}
-function releaseTelemetryFlushSpawnGate(globalPmRoot) {
-    removeDirectoryLockBestEffort(flushSpawnLockPath(globalPmRoot));
-}
-/** Public contract for test only, shared by SDK and presentation-layer consumers. */
-export const _testOnly = {
-    acquireTelemetryFlushSpawnGate,
-    acquireTelemetryFlushLock,
-    buildAuthorContextPayloadFields,
-    buildCommandErrorPayload,
-    buildCommandFinishPayload,
-    buildCommandStartPayload,
-    buildOtelSpanRequest,
-    createDirectoryLock,
-    enqueuePendingOtelSpan,
-    enqueueTelemetryEvent,
-    errorCode,
-    flushPendingOtelSpans,
-    flushQueue,
-    flushQueueWithProcessLock,
-    flushTelemetryArtifacts,
-    hashTelemetryErrorFingerprint,
-    hashTelemetryValue,
-    isEmailDomainCharacter,
-    isEmailLocalCharacter,
-    isExpiredPendingOtelSpan,
-    isExpiredQueueEntry,
-    isFreshDirectoryLock,
-    isDueForRetry,
-    isDueForRetryAt,
-    isRetryableQueueRewriteError,
-    looksLikeEmailToken,
-    otelSpansQueuePath,
-    parseBooleanTrueLike,
-    postTelemetryJson,
-    parsePendingOtelSpanLines,
-    prunePendingOtelSpans,
-    reconcilePendingOtelSpansAfterFlush,
-    retentionCutoffMs,
-    resolveOtelTracesEndpoint,
-    resolveTelemetryHttpTimeoutMs,
-    rewritePendingOtelSpans,
-    normalizeForHash,
-    normalizeCaptureLevel,
-    normalizePmVersion,
-    normalizeTelemetryErrorCategory,
-    normalizeTelemetryErrorCode,
-    normalizeTelemetryExitCode,
-    parseQueueLines,
-    pruneExpiredQueueEntries,
-    readRuntimeState,
-    readCurrentQueueEntries,
-    releaseTelemetryFlushSpawnGate,
-    removeFlushedEntriesFromCurrentQueue,
-    removeDirectoryLockBestEffort,
-    resolveTelemetrySourceContext,
-    rewriteQueue,
-    sanitizeCommandArgs,
-    sanitizeStringMax,
-    sanitizeStringRedacted,
-    sanitizeValue,
-    scheduleTelemetryFlush,
-    shouldFlushInline,
-    sleep,
-    summarizeResult,
-    telemetryFlushRunnerPath,
-    withQueueMutation,
-    flushLockPath,
-    flushSpawnLockPath,
-    runtimeStatePath,
-    writeRuntimeState,
-};
-async function flushQueueWithProcessLock(globalPmRoot, endpoint, retentionDays) {
-    const acquired = await acquireTelemetryFlushLock(globalPmRoot);
-    releaseTelemetryFlushSpawnGate(globalPmRoot);
-    if (!acquired) {
-        return;
-    }
-    try {
-        await flushTelemetryArtifacts(globalPmRoot, endpoint, retentionDays);
-    }
-    finally {
-        try {
-            await rm(flushLockPath(globalPmRoot), { recursive: true, force: true });
-        }
-        catch {
-            // Best effort lock cleanup; stale locks are recovered by TTL checks.
-        }
-    }
-}
-function scheduleTelemetryFlush(globalPmRoot, endpoint, retentionDays) {
-    if (shouldFlushInline()) {
-        const previousFlush = _lastFlushPromise;
-        const nextFlush = flushTelemetryArtifacts(globalPmRoot, endpoint, retentionDays);
-        _lastFlushPromise = Promise.allSettled([previousFlush, nextFlush]).then(() => { });
-        return;
-    }
-    try {
-        const acquiredSpawnGate = acquireTelemetryFlushSpawnGate(globalPmRoot);
-        if (!acquiredSpawnGate) {
-            return;
-        }
-        const child = spawn(process.execPath, [telemetryFlushRunnerPath()], {
-            detached: true,
-            stdio: "ignore",
-            // Detached workers inherit cwd by default. On Windows that can keep a
-            // disposable project directory locked after the foreground command exits.
-            cwd: os.tmpdir(),
-            env: {
-                ...process.env,
-                PM_GLOBAL_PATH: globalPmRoot,
-                [PM_TELEMETRY_FLUSH_CHILD_ENV]: "1",
-            },
-        });
-        // A detached spawn can fail asynchronously — the runtime cannot launch the
-        // executable (locked-down Windows runners, missing flush runner, EACCES).
-        // Node re-throws an 'error' event with no listener as an uncaught exception,
-        // which would crash the foreground CLI and, under the test runner, the
-        // vitest worker during teardown (GH-348). Flush is strictly best effort, so
-        // swallow the failure and release the spawn gate to permit a later retry.
-        child.on("error", () => {
-            releaseTelemetryFlushSpawnGate(globalPmRoot);
-        });
-        child.unref();
-    }
-    catch {
-        releaseTelemetryFlushSpawnGate(globalPmRoot);
-        // Flush scheduling is best effort and must not keep the CLI alive.
-    }
-}
-/** Implements flush telemetry queue now for the public runtime surface of this module. */
-export async function flushTelemetryQueueNow(globalPmRoot = resolveGlobalPmRoot(process.cwd())) {
-    if (telemetryDisabledByEnvironment()) {
-        return;
-    }
-    try {
-        const settings = await readSettings(globalPmRoot);
-        if (!settings.telemetry.enabled) {
-            return;
-        }
-        const { endpoint, retentionDays } = await ensureInstallationId(globalPmRoot);
-        await flushQueueWithProcessLock(globalPmRoot, endpoint, retentionDays);
-    }
-    catch {
-        // Telemetry workers are best effort and must never fail user commands.
-    }
-}
-/** Implements start telemetry command for the public runtime surface of this module. */
-export async function startTelemetryCommand(context) {
-    if (telemetryDisabledByEnvironment()) {
-        return null;
-    }
-    if (context.command === "telemetry" &&
-        context.args.some((token) => token.trim().toLowerCase() === "clear")) {
-        return null;
-    }
-    try {
-        const globalPmRoot = resolveGlobalPmRoot(process.cwd());
-        const settings = await readSettings(globalPmRoot);
-        if (!settings.telemetry.enabled) {
-            return null;
-        }
-        const captureLevel = normalizeCaptureLevel(settings.telemetry.capture_level);
-        const { installationId, endpoint, retentionDays } = await ensureInstallationId(globalPmRoot);
-        const pmVersion = normalizePmVersion(context.pm_version);
-        const sourceContext = resolveTelemetrySourceContext(context.global);
-        const pmRootHash = hashWithInstallationId(installationId, context.pm_root);
-        const cwdHash = hashWithInstallationId(installationId, process.cwd());
-        const otelTracesEndpoint = resolveOtelTracesEndpoint();
-        const occurredAt = nowIso();
-        const event = {
-            schema_version: TELEMETRY_SCHEMA_VERSION,
-            event_id: crypto.randomUUID(),
-            event_type: "command_start",
-            occurred_at: occurredAt,
-            installation_id: installationId,
-            session_id: PROCESS_SESSION_ID,
-            command: context.command,
-            payload: buildCommandStartPayload({
-                captureLevel,
-                context,
-                pmVersion,
-                sourceContext,
-                pmRootHash,
-                cwdHash,
-                installationId,
-            }),
-        };
-        await enqueueTelemetryEvent(globalPmRoot, event);
-        scheduleTelemetryFlush(globalPmRoot, endpoint, retentionDays);
-        const commandTaxonomy = deriveTelemetryCommandTaxonomy(context.command);
-        return {
-            started_at: occurredAt,
-            started_at_ms: Date.now(),
-            command: context.command,
-            command_taxonomy: commandTaxonomy,
-            pm_version: pmVersion,
-            source_context: sourceContext.source_context,
-            source_context_source: sourceContext.source_context_source,
-            installation_id: installationId,
-            pm_root_hash: pmRootHash,
-            cwd_hash: cwdHash,
-            endpoint,
-            retention_days: retentionDays,
-            global_pm_root: globalPmRoot,
-            capture_level: captureLevel,
-            otel_traces_endpoint: otelTracesEndpoint ?? undefined,
-            otel_trace_id: otelTracesEndpoint
-                ? crypto.randomBytes(16).toString("hex")
-                : undefined,
-            otel_span_id: otelTracesEndpoint
-                ? crypto.randomBytes(8).toString("hex")
-                : undefined,
-        };
-    }
-    catch {
-        // Telemetry must never block command execution.
-        return null;
-    }
-}
-/** Implements finish telemetry command for the public runtime surface of this module. */
-export async function finishTelemetryCommand(activeCommand, outcome) {
-    if (!activeCommand) {
-        return;
-    }
-    try {
-        const finishedAt = nowIso();
-        const durationMs = Math.max(0, Date.now() - activeCommand.started_at_ms);
-        const normalizedErrorCode = normalizeTelemetryErrorCode(inferTelemetryErrorCode({
-            ok: outcome.ok,
-            errorCode: outcome.error_code,
-            errorMessage: outcome.error,
-            exitCode: outcome.exit_code,
-        }));
-        const normalizedErrorCategory = normalizeTelemetryErrorCategory({
-            ok: outcome.ok,
-            errorCode: normalizedErrorCode,
-            errorCategory: outcome.error_category,
-        });
-        const normalizedExitCode = normalizeTelemetryExitCode(outcome.exit_code, outcome.ok);
-        const commandResolution = outcome.command_resolution ??
-            deriveTelemetryCommandResolution({
-                ok: outcome.ok,
-                errorCode: normalizedErrorCode,
-                errorCategory: normalizedErrorCategory,
-            });
-        const resolutionStage = outcome.resolution_stage ?? "execute";
-        const event = {
-            schema_version: TELEMETRY_SCHEMA_VERSION,
-            event_id: crypto.randomUUID(),
-            event_type: "command_finish",
-            occurred_at: finishedAt,
-            installation_id: activeCommand.installation_id,
-            session_id: PROCESS_SESSION_ID,
-            command: activeCommand.command,
-            payload: buildCommandFinishPayload({
-                captureLevel: activeCommand.capture_level,
-                pmVersion: activeCommand.pm_version,
-                sourceContext: {
-                    source_context: activeCommand.source_context,
-                    source_context_source: activeCommand.source_context_source,
-                },
-                outcome,
-                durationMs,
-                startedAt: activeCommand.started_at,
-                command: activeCommand.command,
-                installationId: activeCommand.installation_id,
-                commandTaxonomy: activeCommand.command_taxonomy,
-                exitCode: normalizedExitCode,
-                errorCode: normalizedErrorCode,
-                errorCategory: normalizedErrorCategory,
-                commandResolution,
-                resolutionStage,
-            }),
-        };
-        await enqueueTelemetryEvent(activeCommand.global_pm_root, event);
-        const otelRequest = buildOtelSpanRequest(activeCommand, {
-            ...outcome,
-            exit_code: normalizedExitCode,
-            error_code: normalizedErrorCode,
-            error_category: normalizedErrorCategory,
-        }, finishedAt, durationMs);
-        if (otelRequest) {
-            // Persist the span for the detached worker; never POST inline so the
-            // foreground command exits promptly even if the traces endpoint is
-            // unreachable (GH-209).
-            await enqueuePendingOtelSpan(activeCommand.global_pm_root, otelRequest);
-        }
-        scheduleTelemetryFlush(activeCommand.global_pm_root, activeCommand.endpoint, activeCommand.retention_days);
-    }
-    catch {
-        // Telemetry must never block command execution.
-    }
-}
-/** Implements emit telemetry error event for the public runtime surface of this module. */
-export async function emitTelemetryErrorEvent(context) {
-    if (telemetryDisabledByEnvironment()) {
-        return;
-    }
-    try {
-        const globalPmRoot = resolveGlobalPmRoot(process.cwd());
-        const settings = await readSettings(globalPmRoot);
-        if (!settings.telemetry.enabled) {
-            return;
-        }
-        const captureLevel = normalizeCaptureLevel(settings.telemetry.capture_level);
-        const { installationId, endpoint, retentionDays } = await ensureInstallationId(globalPmRoot);
-        const pmVersion = normalizePmVersion(context.pm_version);
-        const sourceContext = resolveTelemetrySourceContext(context.global);
-        const pmRootHash = hashWithInstallationId(installationId, context.pm_root);
-        const cwdHash = hashWithInstallationId(installationId, process.cwd());
-        const occurredAt = nowIso();
-        const normalizedErrorCode = normalizeTelemetryErrorCode(inferTelemetryErrorCode({
-            ok: false,
-            errorCode: context.error_code,
-            errorMessage: context.error_message,
-            exitCode: context.exit_code,
-        }));
-        const normalizedErrorCategory = context.error_category ??
-            resolveTelemetryErrorCategory(normalizedErrorCode);
-        const normalizedExitCode = normalizeTelemetryExitCode(context.exit_code, false);
-        const normalizedCommand = context.command.trim().length > 0 ? context.command : "<unknown>";
-        const commandTaxonomy = deriveTelemetryCommandTaxonomy(normalizedCommand);
-        const commandResolution = context.command_resolution ??
-            deriveTelemetryCommandResolution({
-                ok: false,
-                errorCode: normalizedErrorCode,
-                errorCategory: normalizedErrorCategory,
-            });
-        const resolutionStage = context.resolution_stage ?? "unknown";
-        const event = {
-            schema_version: TELEMETRY_SCHEMA_VERSION,
-            event_id: crypto.randomUUID(),
-            event_type: "command_error",
-            occurred_at: occurredAt,
-            installation_id: installationId,
-            session_id: PROCESS_SESSION_ID,
-            command: sanitizeString(normalizedCommand, "redacted"),
-            payload: buildCommandErrorPayload({
-                captureLevel,
-                pmVersion,
-                sourceContext,
-                command: normalizedCommand,
-                commandTaxonomy,
-                commandResolution,
-                resolutionStage,
-                args: context.args,
-                options: context.options,
-                pmRootHash,
-                cwdHash,
-                installationId,
-                errorCode: normalizedErrorCode,
-                errorCategory: normalizedErrorCategory,
-                exitCode: normalizedExitCode,
-                errorMessage: context.error_message,
-            }),
-        };
-        await enqueueTelemetryEvent(globalPmRoot, event);
-        scheduleTelemetryFlush(globalPmRoot, endpoint, retentionDays);
-    }
-    catch {
-        // Telemetry must never block command execution.
-    }
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a80b4f33-b43b-5056-a4eb-ba784c9746a4")}catch(e2){}})();import crypto from"node:crypto";import{spawn}from"node:child_process";import{mkdirSync,rmSync,statSync}from"node:fs";import{mkdir,readdir,rm,stat}from"node:fs/promises";import{request as httpRequest}from"node:http";import{request as httpsRequest}from"node:https";import os from"node:os";import path from"node:path";import{resolvePmPackageRootFromModule}from"../packages/root.js";import{isFileMissingError,appendLineAtomic,readFileIfExists,writeFileAtomic}from"../fs/fs-utils.js";import{resolveTelemetryErrorCategory}from"../shared/constants.js";import{nowIso}from"../shared/time.js";import{detectAgentIdentity,readAuthorEnvironment}from"../shared/author.js";import{resolveGlobalPmRoot}from"../store/paths.js";import{readSettings,writeSettings}from"../store/settings.js";import{deriveTelemetryCommandResolution,deriveTelemetryCommandTaxonomy,inferTelemetryErrorCode}from"./observability.js";const TELEMETRY_QUEUE_RELATIVE_PATH=path.join("runtime","telemetry","events.jsonl");const TELEMETRY_STATE_RELATIVE_PATH=path.join("runtime","telemetry","state.json");const TELEMETRY_OTEL_SPANS_RELATIVE_PATH=path.join("runtime","telemetry","otel-spans.jsonl");const TELEMETRY_OTEL_SPANS_FLUSH_BATCH_SIZE=8;const TELEMETRY_OTEL_SPANS_MAX_PENDING=500;const TELEMETRY_SCHEMA_VERSION=1;const TELEMETRY_CLIENT_SCHEMA_VERSION=1;const TELEMETRY_FLUSH_BATCH_SIZE=100;const TELEMETRY_MAX_RETRY_DELAY_MS=36e5;const TELEMETRY_RETRY_BASE_DELAY_MS=3e4;const TELEMETRY_HTTP_TIMEOUT_DEFAULT_MS=2e4;const TELEMETRY_HTTP_TIMEOUT_MIN_MS=1e3;const TELEMETRY_HTTP_TIMEOUT_MAX_MS=25e3;const MILLISECONDS_PER_DAY=864e5;const TELEMETRY_MAX_EVENT_BYTES=65536;const TELEMETRY_SANITIZE_MAX_DEPTH=6;const TELEMETRY_SANITIZE_MAX_ARRAY_ITEMS=20;const TELEMETRY_MAX_QUEUE_ENTRY_ATTEMPTS=15;const TELEMETRY_RESULT_PREVIEW_MAX_BYTES=8192;const TELEMETRY_QUEUE_REWRITE_RETRY_DELAYS_MS=[25,50,100,200];const TELEMETRY_QUEUE_TMP_ORPHAN_MAX_AGE_MS=60*60*1e3;const TELEMETRY_FLUSH_LOCK_STALE_MS=6e4;const TELEMETRY_FLUSH_SPAWN_LOCK_STALE_MS=6e4;const OTEL_TRACES_ENDPOINT_ENV="OTEL_EXPORTER_OTLP_TRACES_ENDPOINT";const OTEL_BASE_ENDPOINT_ENV="OTEL_EXPORTER_OTLP_ENDPOINT";const OTEL_SERVICE_NAME_ENV="OTEL_SERVICE_NAME";const PM_TELEMETRY_DISABLED_ENV="PM_TELEMETRY_DISABLED";const PM_NO_TELEMETRY_ENV="PM_NO_TELEMETRY";const PM_TELEMETRY_DISABLED_VALUES=new Set(["1","true","yes","on"]);const PM_TELEMETRY_OTEL_DISABLED_ENV="PM_TELEMETRY_OTEL_DISABLED";const PM_TELEMETRY_OTEL_DISABLED_VALUES=new Set(["1","true","yes","on"]);const PM_TELEMETRY_INLINE_FLUSH_ENV="PM_TELEMETRY_INLINE_FLUSH";const PM_TELEMETRY_FLUSH_CHILD_ENV="PM_TELEMETRY_FLUSH_CHILD";const PM_TELEMETRY_SOURCE_CONTEXT_ENV="PM_TELEMETRY_SOURCE_CONTEXT";const PM_TELEMETRY_HTTP_TIMEOUT_MS_ENV="PM_TELEMETRY_HTTP_TIMEOUT_MS";const NATIVE_FETCH=globalThis.fetch;const PM_TELEMETRY_SOURCE_CONTEXT_VALUES=["user","automation","test","dogfood"];let _lastFlushPromise=Promise.resolve();let _queueMutationPromise=Promise.resolve();async function waitForPendingFlush(){await _lastFlushPromise;await _queueMutationPromise}const PM_TELEMETRY_SOURCE_CONTEXT_SET=new Set(PM_TELEMETRY_SOURCE_CONTEXT_VALUES);const BOOLEAN_TRUE_VALUES=new Set(["1","true","yes","on"]);const PROCESS_SESSION_ID=crypto.randomUUID();const SENSITIVE_KEYWORDS=["token","secret","password","passwd","api_key","apikey","authorization","cookie","session","credentials","bearer"];const REDACTION_INPUT_KEYS=new Set(["literal","literals","regex","regexes","replacement","replacements"]);const SENSITIVE_INLINE_KEY_PATTERN="(?:token|secret|password|passwd|api[_-]?key|apikey|authorization|cookie|session|credentials|bearer|literals?|regex(?:es)?|replacements?)";const INLINE_SENSITIVE_ASSIGNMENT_PATTERN=new RegExp(`\\b(${SENSITIVE_INLINE_KEY_PATTERN})\\s*([:=])\\s*([^\\s,;]+)`,"giu");const INLINE_SENSITIVE_FLAG_PATTERN=new RegExp(`(--${SENSITIVE_INLINE_KEY_PATTERN})(=|\\s+)([^\\s,;]+)`,"giu");const ABSOLUTE_PATH_TOKEN_PATTERN=/(^|[\s"'`(=])\/(?:[^\s"'`),;]+)/g;const BEARER_TOKEN_PATTERN=/bearer\s+[a-z0-9._=-]+/giu;const PRIVATE_IP_PATTERN=/\b(?:10\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)|172\.(?:1[6-9]|2\d|3[01])\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)|192\.168\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d))\b/g;function queuePath(globalPmRoot){return path.join(globalPmRoot,TELEMETRY_QUEUE_RELATIVE_PATH)}function otelSpansQueuePath(globalPmRoot){return path.join(globalPmRoot,TELEMETRY_OTEL_SPANS_RELATIVE_PATH)}function telemetryRuntimeDirectory(globalPmRoot){return path.dirname(queuePath(globalPmRoot))}function runtimeStatePath(globalPmRoot){return path.join(globalPmRoot,TELEMETRY_STATE_RELATIVE_PATH)}function flushLockPath(globalPmRoot){return path.join(globalPmRoot,"runtime","telemetry","flush.lock")}function flushSpawnLockPath(globalPmRoot){return path.join(globalPmRoot,"runtime","telemetry","flush.spawn.lock")}function telemetryFlushRunnerPath(){return path.join(resolvePmPackageRootFromModule(import.meta.url,["../../.."]),"dist","cli","telemetry-flush.js")}function shouldFlushInline(){if(parseBooleanTrueLike(process.env[PM_TELEMETRY_INLINE_FLUSH_ENV])){return true}if(parseBooleanTrueLike(process.env[PM_TELEMETRY_FLUSH_CHILD_ENV])){return true}const nodeEnv=(process.env.NODE_ENV??"").trim().toLowerCase();return typeof process.env.VITEST==="string"||typeof process.env.VITEST_WORKER_ID==="string"||nodeEnv==="test"}async function readRuntimeState(globalPmRoot){const raw=await readFileIfExists(runtimeStatePath(globalPmRoot));if(!raw||raw.trim().length===0){return{}}try{const parsed=JSON.parse(raw);if(typeof parsed!=="object"||parsed===null||Array.isArray(parsed)){return{}}return parsed}catch{return{}}}async function writeRuntimeState(globalPmRoot,patch){try{const current=await readRuntimeState(globalPmRoot);const next={...current,...patch};const normalized=Object.fromEntries(Object.entries(next).filter(([,value])=>value!==void 0).sort((left,right)=>left[0].localeCompare(right[0])));await writeFileAtomic(runtimeStatePath(globalPmRoot),`${JSON.stringify(normalized,null,2)}
+`)}catch{}}function isSensitiveKey(key){const normalized=key.trim().toLowerCase().replaceAll("-","_").replaceAll(/[^a-z0-9_]+/g,"_");const tokens=normalized.split("_").filter(token=>token.length>0);return REDACTION_INPUT_KEYS.has(normalized)||SENSITIVE_KEYWORDS.some(keyword=>normalized===keyword||normalized.endsWith(`_${keyword}`)||tokens.includes(keyword))}function redactInlineSensitiveAssignments(input){const withoutAssignments=input.replaceAll(INLINE_SENSITIVE_ASSIGNMENT_PATTERN,(_match,key,delimiter)=>`${key}${delimiter}[redacted]`);return withoutAssignments.replaceAll(INLINE_SENSITIVE_FLAG_PATTERN,(_match,flag,delimiter)=>`${flag}${delimiter}[redacted]`)}function redactAbsolutePathTokens(input){return input.replaceAll(ABSOLUTE_PATH_TOKEN_PATTERN,(_match,prefix)=>`${prefix}[redacted_path]`)}function isAsciiLetterOrDigitCode(code){const isUpper=code>=65&&code<=90;const isLower=code>=97&&code<=122;const isDigit=code>=48&&code<=57;return isUpper||isLower||isDigit}function isEmailLocalCharacter(character){if(!character){return false}const code=character.charCodeAt(0);if(isAsciiLetterOrDigitCode(code)){return true}return character==="."||character==="_"||character==="%"||character==="+"||character==="-"}function isEmailDomainCharacter(character){if(!character){return false}const code=character.charCodeAt(0);if(isAsciiLetterOrDigitCode(code)){return true}return character==="."||character==="-"}function looksLikeEmailToken(token){const atIndex=token.indexOf("@");if(atIndex<=0||atIndex!==token.lastIndexOf("@")||atIndex===token.length-1){return false}const localPart=token.slice(0,atIndex);const domainPart=token.slice(atIndex+1);const lastDot=domainPart.lastIndexOf(".");if(lastDot<=0||lastDot===domainPart.length-1){return false}if(domainPart.length-(lastDot+1)<2){return false}for(const character of localPart){if(!isEmailLocalCharacter(character)){return false}}for(const character of domainPart){if(!isEmailDomainCharacter(character)){return false}}return true}function redactEmailTokens(input){let redacted="";let cursor=0;while(cursor<input.length){const atIndex=input.indexOf("@",cursor);if(atIndex<0){redacted+=input.slice(cursor);break}let start=atIndex-1;while(start>=cursor&&isEmailLocalCharacter(input[start])){start-=1}start+=1;let end=atIndex+1;while(end<input.length&&isEmailDomainCharacter(input[end])){end+=1}const candidate=input.slice(start,end);if(looksLikeEmailToken(candidate)){redacted+=input.slice(cursor,start);redacted+="[redacted_email]";cursor=end;continue}redacted+=input.slice(cursor,atIndex+1);cursor=atIndex+1}return redacted}function sanitizeCommonSensitiveTokens(input){const withoutEmails=redactEmailTokens(input);const withoutBearer=withoutEmails.replaceAll(BEARER_TOKEN_PATTERN,"bearer [redacted_token]");return withoutBearer.replaceAll(PRIVATE_IP_PATTERN,"[redacted_ip]")}function sanitizeStringRedacted(input){const withoutCommonSensitiveTokens=sanitizeCommonSensitiveTokens(input);const withoutInlineSecrets=redactInlineSensitiveAssignments(withoutCommonSensitiveTokens);const withoutAbsolutePaths=redactAbsolutePathTokens(withoutInlineSecrets);const trimmed=withoutAbsolutePaths.trim();if(trimmed.startsWith("/")&&trimmed.length>1){return"[redacted_path]"}if(withoutAbsolutePaths.length>512){return`${withoutAbsolutePaths.slice(0,509)}...`}return withoutAbsolutePaths}function sanitizeStringMax(input){const withoutCommonSensitiveTokens=sanitizeCommonSensitiveTokens(input);const withoutInlineSecrets=redactInlineSensitiveAssignments(withoutCommonSensitiveTokens);const withoutAbsolutePaths=redactAbsolutePathTokens(withoutInlineSecrets);const trimmed=withoutAbsolutePaths.trim();if(trimmed.startsWith("/")&&trimmed.length>1){return"[redacted_path]"}if(withoutAbsolutePaths.length>2048){return`${withoutAbsolutePaths.slice(0,2045)}...`}return withoutAbsolutePaths}function sanitizeString(input,captureLevel="redacted"){if(captureLevel==="max"){return sanitizeStringMax(input)}return sanitizeStringRedacted(input)}function sanitizeValue(value,keyHint,captureLevel="redacted",depth=0){if(keyHint&&isSensitiveKey(keyHint)){return"[redacted]"}if(value===null||value===void 0){return value}if(typeof value==="string"){return sanitizeString(value,captureLevel)}if(typeof value==="number"||typeof value==="boolean"){return value}if(depth>=TELEMETRY_SANITIZE_MAX_DEPTH){return"[depth_truncated]"}if(Array.isArray(value)){return value.slice(0,TELEMETRY_SANITIZE_MAX_ARRAY_ITEMS).map(entry=>sanitizeValue(entry,void 0,captureLevel,depth+1))}if(typeof value==="object"){const record=value;const sanitized={};for(const[key,nested]of Object.entries(record)){sanitized[key]=sanitizeValue(nested,key,captureLevel,depth+1)}return sanitized}return String(value)}function sanitizeCommandArgs(args,captureLevel="redacted"){const sanitized=[];let nextIsSensitiveValue=false;for(const rawArg of args){const arg=sanitizeString(rawArg,captureLevel);if(nextIsSensitiveValue){sanitized.push("[redacted]");nextIsSensitiveValue=false;continue}if(arg.startsWith("--")){const withoutPrefix=arg.slice(2);const delimiterIndex=withoutPrefix.indexOf("=");if(delimiterIndex>=0){const key=withoutPrefix.slice(0,delimiterIndex);const value=withoutPrefix.slice(delimiterIndex+1);if(isSensitiveKey(key)){sanitized.push(`--${key}=[redacted]`)}else{sanitized.push(`--${key}=${sanitizeString(value,captureLevel)}`)}continue}if(isSensitiveKey(withoutPrefix)){sanitized.push(`--${withoutPrefix}`);nextIsSensitiveValue=true;continue}}sanitized.push(arg)}return sanitized}function normalizeCaptureLevel(value){const normalized=value?.trim().toLowerCase();if(normalized==="minimal"||normalized==="redacted"||normalized==="max"){return normalized}return"redacted"}function parseBooleanTrueLike(value){return BOOLEAN_TRUE_VALUES.has((value??"").trim().toLowerCase())}function resolveTelemetryHttpTimeoutMs(){const rawConfigured=process.env[PM_TELEMETRY_HTTP_TIMEOUT_MS_ENV]?.trim();if(!rawConfigured){return TELEMETRY_HTTP_TIMEOUT_DEFAULT_MS}const configured=Number(rawConfigured);if(!Number.isFinite(configured)){return TELEMETRY_HTTP_TIMEOUT_DEFAULT_MS}return Math.min(TELEMETRY_HTTP_TIMEOUT_MAX_MS,Math.max(TELEMETRY_HTTP_TIMEOUT_MIN_MS,Math.trunc(configured)))}async function postTelemetryJson(endpoint,headers,body){const url=new URL(endpoint);if(globalThis.fetch!==NATIVE_FETCH){const controller=new AbortController;let timeout;const deadline=new Promise((_resolve,reject)=>{timeout=setTimeout(()=>{controller.abort();reject(new Error("telemetry_http_timeout"))},resolveTelemetryHttpTimeoutMs())});try{const response=await Promise.race([globalThis.fetch(endpoint,{method:"POST",headers,body,signal:controller.signal}),deadline]);return response.status}finally{clearTimeout(timeout)}}const request=url.protocol==="https:"?httpsRequest:url.protocol==="http:"?httpRequest:void 0;if(!request){throw new Error(`telemetry_http_protocol_unsupported_${url.protocol}`)}return new Promise((resolve,reject)=>{const timeoutMs=resolveTelemetryHttpTimeoutMs();const requestOptions={method:"POST",headers:{...headers,"content-length":Buffer.byteLength(body)},signal:AbortSignal.timeout(timeoutMs),autoSelectFamilyAttemptTimeout:Math.min(5e3,timeoutMs)};const clientRequest=request(url,requestOptions,response=>{response.once("error",reject);response.once("end",()=>resolve(response.statusCode));response.resume()});clientRequest.once("error",reject);clientRequest.end(body)})}function normalizePmVersion(value){const trimmed=typeof value==="string"?value.trim():"";return trimmed.length>0?trimmed:"0.0.0"}function normalizeTelemetryErrorCode(value){const normalized=value?.trim();return normalized&&normalized.length>0?normalized:void 0}function normalizeTelemetryExitCode(exitCode,ok){if(Number.isFinite(exitCode)){return Math.max(0,Math.trunc(exitCode))}return ok?0:1}function normalizeTelemetryErrorCategory(params){if(params.ok){return void 0}if(typeof params.errorCategory==="string"&&params.errorCategory.trim().length>0){return params.errorCategory}if(typeof params.errorCode==="string"&&params.errorCode.trim().length>0){return resolveTelemetryErrorCategory(params.errorCode)}return"unknown"}function resolveTelemetrySourceContext(globalOptions){const override=(process.env[PM_TELEMETRY_SOURCE_CONTEXT_ENV]??"").trim().toLowerCase();if(PM_TELEMETRY_SOURCE_CONTEXT_SET.has(override)){return{source_context:override,source_context_source:"env_override"}}const nodeEnv=(process.env.NODE_ENV??"").trim().toLowerCase();if(typeof process.env.VITEST==="string"||typeof process.env.VITEST_WORKER_ID==="string"||nodeEnv==="test"){return{source_context:"test",source_context_source:"inferred"}}const nonTty=process.stdin.isTTY!==true||process.stdout.isTTY!==true;const ci=parseBooleanTrueLike(process.env.CI);const scriptLikeMode=globalOptions.json===true||globalOptions.quiet===true;if(nonTty||ci||scriptLikeMode){return{source_context:"automation",source_context_source:"inferred"}}return{source_context:"user",source_context_source:"inferred"}}function hashWithInstallationId(installationId,value){return crypto.createHash("sha256").update(`${installationId}:${value}`).digest("hex")}function buildAuthorContextPayloadFields(captureLevel,installationId){const author=(readAuthorEnvironment()??"").trim();const agent=detectAgentIdentity({env:process.env,argv:process.argv});const hasAgentContext=agent.harness!==void 0||agent.model!==void 0;if(captureLevel==="minimal"){return{has_author_context:author.length>0,has_agent_context:hasAgentContext}}return{...author.length>0?{author_context_hash:hashWithInstallationId(installationId,author)}:{},...agent.harness?{agent_harness_hash:hashWithInstallationId(installationId,agent.harness)}:{},...agent.model?{agent_model_hash:hashWithInstallationId(installationId,agent.model)}:{},...agent.model_source?{agent_model_source:agent.model_source}:{}}}function normalizeForHash(value,depth=0){if(value===null||value===void 0){return value}if(typeof value==="string"||typeof value==="number"||typeof value==="boolean"){return value}if(depth>=TELEMETRY_SANITIZE_MAX_DEPTH){return"[depth_truncated]"}if(Array.isArray(value)){return value.slice(0,TELEMETRY_SANITIZE_MAX_ARRAY_ITEMS).map(entry=>normalizeForHash(entry,depth+1))}if(typeof value==="object"){const record=value;const normalized={};const sortedKeys=Object.keys(record).sort((left,right)=>left.localeCompare(right));for(const key of sortedKeys){normalized[key]=normalizeForHash(record[key],depth+1)}return normalized}return String(value)}function hashTelemetryValue(installationId,value){return hashWithInstallationId(installationId,JSON.stringify(normalizeForHash(value)))}function hashCommandArgs(installationId,args){return{hashes:args.map(arg=>hashWithInstallationId(installationId,arg)),digest:hashWithInstallationId(installationId,args.join("\0"))}}function hashTelemetryErrorFingerprint(installationId,command,errorCode2,errorMessage){const normalizedMessage=sanitizeString(typeof errorMessage==="string"?errorMessage:"","redacted");const normalizedCode=typeof errorCode2==="string"&&errorCode2.length>0?errorCode2:"unknown_error";const fingerprintSource=`${command}\0${normalizedCode}\0${normalizedMessage}`;return hashWithInstallationId(installationId,fingerprintSource)}function telemetryDisabledByEnvironment(){return PM_TELEMETRY_DISABLED_VALUES.has((process.env[PM_TELEMETRY_DISABLED_ENV]??"").trim().toLowerCase())||PM_TELEMETRY_DISABLED_VALUES.has((process.env[PM_NO_TELEMETRY_ENV]??"").trim().toLowerCase())}function resolveOtelTracesEndpoint(){if(PM_TELEMETRY_OTEL_DISABLED_VALUES.has((process.env[PM_TELEMETRY_OTEL_DISABLED_ENV]??"").trim().toLowerCase())){return null}const directEndpoint=(process.env[OTEL_TRACES_ENDPOINT_ENV]??"").trim();if(directEndpoint.length>0){try{return new URL(directEndpoint).toString()}catch{return null}}const baseEndpoint=(process.env[OTEL_BASE_ENDPOINT_ENV]??"").trim();if(baseEndpoint.length===0){return null}try{const url=new URL(baseEndpoint);const normalizedPath=url.pathname.replace(/\/+$/,"");if(!normalizedPath.endsWith("/v1/traces")){url.pathname=`${normalizedPath.length===0?"":normalizedPath}/v1/traces`}return url.toString()}catch{return null}}function isoToUnixNano(iso){const parsedMs=Date.parse(iso);const epochMs=Number.isNaN(parsedMs)?Date.now():parsedMs;return`${BigInt(epochMs)*1000000n}`}function otlpStringAttribute(key,value){return{key,value:{stringValue:value}}}function otlpBoolAttribute(key,value){return{key,value:{boolValue:value}}}function otlpIntAttribute(key,value){return{key,value:{intValue:String(Math.max(0,Math.trunc(value)))}}}function buildOtelSpanRequest(activeCommand,outcome,finishedAtIso,durationMs){if(typeof activeCommand.otel_traces_endpoint!=="string"||activeCommand.otel_traces_endpoint.trim().length===0||typeof activeCommand.otel_trace_id!=="string"||activeCommand.otel_trace_id.length===0||typeof activeCommand.otel_span_id!=="string"||activeCommand.otel_span_id.length===0){return null}const serviceNameCandidate=sanitizeString((process.env[OTEL_SERVICE_NAME_ENV]??"").trim());const serviceName=serviceNameCandidate.length>0?serviceNameCandidate:"pm-cli";const normalizedExitCode=normalizeTelemetryExitCode(outcome.exit_code,outcome.ok);const normalizedErrorCode=normalizeTelemetryErrorCode(outcome.error_code);const normalizedErrorCategory=normalizeTelemetryErrorCategory({ok:outcome.ok,errorCode:normalizedErrorCode,errorCategory:outcome.error_category});const attributes=[otlpStringAttribute("pm.command",sanitizeString(activeCommand.command)),otlpStringAttribute("pm.version",activeCommand.pm_version),otlpStringAttribute("pm.source_context",activeCommand.source_context),otlpStringAttribute("pm.source_context_source",activeCommand.source_context_source),otlpStringAttribute("pm.installation_id",activeCommand.installation_id),otlpStringAttribute("pm.session_id",PROCESS_SESSION_ID),otlpStringAttribute("pm.pm_root_hash",activeCommand.pm_root_hash),otlpStringAttribute("pm.cwd_hash",activeCommand.cwd_hash),otlpBoolAttribute("pm.ok",outcome.ok),otlpIntAttribute("pm.exit_code",normalizedExitCode),otlpIntAttribute("pm.duration_ms",durationMs)];if(typeof normalizedErrorCode==="string"){attributes.push(otlpStringAttribute("pm.error_code",normalizedErrorCode))}if(typeof normalizedErrorCategory==="string"){attributes.push(otlpStringAttribute("pm.error_category",normalizedErrorCategory))}if(typeof outcome.error==="string"&&outcome.error.trim().length>0){attributes.push(otlpStringAttribute("pm.error",sanitizeString(outcome.error)))}const payload={resourceSpans:[{resource:{attributes:[otlpStringAttribute("service.name",serviceName)]},scopeSpans:[{scope:{name:"pm-cli.telemetry",version:"1"},spans:[{traceId:activeCommand.otel_trace_id,spanId:activeCommand.otel_span_id,name:`pm.command.${sanitizeString(activeCommand.command)}`,kind:1,startTimeUnixNano:isoToUnixNano(activeCommand.started_at),endTimeUnixNano:isoToUnixNano(finishedAtIso),attributes,status:{code:outcome.ok?1:2,message:outcome.ok?"":sanitizeString(typeof outcome.error==="string"?outcome.error:"command_failed")}}]}]}]};return{endpoint:activeCommand.otel_traces_endpoint,payload}}function summarizeResult(result,captureLevel="redacted"){if(result===null||result===void 0){return{type:"nullish"}}if(typeof result==="string"){return{type:"string",value:sanitizeString(result,captureLevel)}}if(typeof result==="number"||typeof result==="boolean"){return{type:typeof result,value:result}}if(Array.isArray(result)){return{type:"array",length:result.length,sample:result.slice(0,5).map(entry=>sanitizeValue(entry,void 0,captureLevel))}}if(typeof result==="object"){const record=result;const keys=Object.keys(record).sort((left,right)=>left.localeCompare(right));const sanitized={};let previewBytes=0;for(const key of keys.slice(0,25)){const sanitizedValue=sanitizeValue(record[key],key,captureLevel);const entrySize=JSON.stringify(sanitizedValue).length;if(previewBytes+entrySize>TELEMETRY_RESULT_PREVIEW_MAX_BYTES){sanitized[key]="[preview_truncated]";break}previewBytes+=entrySize;sanitized[key]=sanitizedValue}return{type:"object",key_count:keys.length,keys_preview:keys.slice(0,50),preview:sanitized}}return{type:typeof result,value:String(result)}}function buildCommandStartPayload(params){const{captureLevel,context,pmVersion,sourceContext,pmRootHash,cwdHash,installationId}=params;const commandTaxonomy=deriveTelemetryCommandTaxonomy(context.command);const hashedArgs=hashCommandArgs(installationId,context.args);const commandInvocationDigest=hashWithInstallationId(installationId,`${context.command}\0${context.args.join("\0")}`);const commandOptionsDigest=hashTelemetryValue(installationId,context.options);const globalOptionsDigest=hashTelemetryValue(installationId,context.global);const authorContextFields=buildAuthorContextPayloadFields(captureLevel,installationId);if(captureLevel==="minimal"){return{capture_level:captureLevel,pm_version:pmVersion,source_context:sourceContext.source_context,source_context_source:sourceContext.source_context_source,command_taxonomy:commandTaxonomy,command_args_digest:hashedArgs.digest,command_invocation_digest:commandInvocationDigest,command_options_digest:commandOptionsDigest,global_options_digest:globalOptionsDigest,...authorContextFields}}return{pm_version:pmVersion,source_context:sourceContext.source_context,source_context_source:sourceContext.source_context_source,command_taxonomy:commandTaxonomy,...authorContextFields,command_args:sanitizeCommandArgs(context.args,captureLevel),command_args_hashes:hashedArgs.hashes,command_args_digest:hashedArgs.digest,command_invocation_digest:commandInvocationDigest,command_options:sanitizeValue(context.options,void 0,captureLevel),command_options_digest:commandOptionsDigest,global_options:sanitizeValue(context.global,void 0,captureLevel),global_options_digest:globalOptionsDigest,pm_root_hash:pmRootHash,cwd_hash:cwdHash,capture_level:captureLevel,runtime:{node:process.version,platform:process.platform,arch:process.arch,hostname_hash:hashWithInstallationId(installationId,os.hostname()),stdin_tty:process.stdin.isTTY===true,stdout_tty:process.stdout.isTTY===true}}}function buildCommandFinishPayload(params){const{captureLevel,pmVersion,sourceContext,outcome,durationMs,startedAt,command,installationId,commandTaxonomy,exitCode,errorCode:errorCode2,errorCategory,commandResolution,resolutionStage}=params;const errorFingerprint=outcome.ok===false?hashTelemetryErrorFingerprint(installationId,command,errorCode2,outcome.error):void 0;const authorContextFields=buildAuthorContextPayloadFields(captureLevel,installationId);if(captureLevel==="minimal"){return{capture_level:captureLevel,pm_version:pmVersion,source_context:sourceContext.source_context,source_context_source:sourceContext.source_context_source,command_taxonomy:commandTaxonomy,command_resolution:commandResolution,resolution_stage:resolutionStage,ok:outcome.ok,exit_code:exitCode,error_code:errorCode2,error_category:errorCategory,error:outcome.error?sanitizeString(outcome.error,"redacted"):void 0,error_fingerprint:errorFingerprint,duration_ms:durationMs,...authorContextFields}}return{capture_level:captureLevel,pm_version:pmVersion,source_context:sourceContext.source_context,source_context_source:sourceContext.source_context_source,command_taxonomy:commandTaxonomy,command_resolution:commandResolution,resolution_stage:resolutionStage,...authorContextFields,ok:outcome.ok,exit_code:exitCode,error_code:errorCode2,error_category:errorCategory,error:outcome.error?sanitizeString(outcome.error,captureLevel):void 0,error_fingerprint:errorFingerprint,duration_ms:durationMs,started_at:startedAt,result_summary:summarizeResult(outcome.result,captureLevel)}}function buildCommandErrorPayload(params){const{captureLevel,pmVersion,sourceContext,command,commandTaxonomy,commandResolution,resolutionStage,args,options,pmRootHash,cwdHash,installationId,errorCode:errorCode2,errorMessage,errorCategory,exitCode}=params;const attemptedArgHashes=hashCommandArgs(installationId,args);const attemptedCommandDigest=hashWithInstallationId(installationId,command);const attemptedOptionsDigest=hashTelemetryValue(installationId,options);const errorFingerprint=hashTelemetryErrorFingerprint(installationId,command,errorCode2,errorMessage);const authorContextFields=buildAuthorContextPayloadFields(captureLevel,installationId);if(captureLevel==="minimal"){return{capture_level:captureLevel,pm_version:pmVersion,source_context:sourceContext.source_context,source_context_source:sourceContext.source_context_source,command_taxonomy:commandTaxonomy,command_resolution:commandResolution,resolution_stage:resolutionStage,attempted_command_digest:attemptedCommandDigest,attempted_args_digest:attemptedArgHashes.digest,attempted_options_digest:attemptedOptionsDigest,error_code:errorCode2,error_category:errorCategory,exit_code:exitCode,error:sanitizeString(errorMessage,"redacted"),error_fingerprint:errorFingerprint,...authorContextFields}}return{capture_level:captureLevel,pm_version:pmVersion,source_context:sourceContext.source_context,source_context_source:sourceContext.source_context_source,command_taxonomy:commandTaxonomy,command_resolution:commandResolution,resolution_stage:resolutionStage,...authorContextFields,attempted_command:sanitizeString(command,captureLevel),attempted_command_digest:attemptedCommandDigest,attempted_args:sanitizeCommandArgs(args,captureLevel),attempted_args_hashes:attemptedArgHashes.hashes,attempted_args_digest:attemptedArgHashes.digest,attempted_options:sanitizeValue(options,void 0,captureLevel),attempted_options_digest:attemptedOptionsDigest,error_code:errorCode2,error_category:errorCategory,exit_code:exitCode,error:sanitizeString(errorMessage,captureLevel),error_fingerprint:errorFingerprint,pm_root_hash:pmRootHash,cwd_hash:cwdHash,runtime:{node:process.version,platform:process.platform,arch:process.arch,hostname_hash:hashWithInstallationId(installationId,os.hostname()),stdin_tty:process.stdin.isTTY===true,stdout_tty:process.stdout.isTTY===true}}}async function ensureInstallationId(globalPmRoot){const settings=await readSettings(globalPmRoot);let changed=false;if(settings.telemetry.installation_id.trim().length===0){settings.telemetry.installation_id=crypto.randomUUID();changed=true}if(changed){await writeSettings(globalPmRoot,settings,"telemetry:install_id")}return{installationId:settings.telemetry.installation_id,endpoint:settings.telemetry.endpoint,retentionDays:Math.max(1,Math.trunc(settings.telemetry.retention_days))}}async function enqueueTelemetryEvent(globalPmRoot,event){const queued={client_schema_version:TELEMETRY_CLIENT_SCHEMA_VERSION,event,attempts:0};let serialized=JSON.stringify(queued);if(serialized.length>TELEMETRY_MAX_EVENT_BYTES){const trimmed={...event,payload:{...event.payload,result_summary:{truncated:true,reason:"payload_size_exceeded",original_bytes:serialized.length}}};const trimmedQueued={client_schema_version:TELEMETRY_CLIENT_SCHEMA_VERSION,event:trimmed,attempts:0};serialized=JSON.stringify(trimmedQueued)}await withQueueMutation(async()=>{await appendLineAtomic(queuePath(globalPmRoot),serialized)})}function parseQueueLines(raw){const entries=[];for(const line of raw.split("\n")){const trimmed=line.trim();if(trimmed.length===0){continue}try{const parsed=JSON.parse(trimmed);if(parsed&&typeof parsed==="object"&&parsed.event&&typeof parsed.event==="object"&&typeof parsed.attempts==="number"&&(parsed.client_schema_version===void 0||typeof parsed.client_schema_version==="number"&&Number.isFinite(parsed.client_schema_version))){entries.push(parsed)}}catch{}}return entries}function nextRetryIso(attempts){const delay=Math.min(TELEMETRY_RETRY_BASE_DELAY_MS*2**Math.max(attempts-1,0),TELEMETRY_MAX_RETRY_DELAY_MS);return new Date(Date.now()+delay).toISOString()}function isDueForRetryAt(nextAttemptAfter){if(typeof nextAttemptAfter!=="string"||nextAttemptAfter.trim().length===0){return true}const dueAtMs=Date.parse(nextAttemptAfter);if(Number.isNaN(dueAtMs)){return true}return dueAtMs<=Date.now()}function isDueForRetry(entry){return isDueForRetryAt(entry.next_attempt_after)}function retentionCutoffMs(retentionDays){const normalizedDays=Number.isFinite(retentionDays)?Math.max(1,Math.trunc(retentionDays)):1;return Date.now()-normalizedDays*MILLISECONDS_PER_DAY}function isExpiredQueueEntry(entry,cutoffMs){const occurredAt=entry.event?.occurred_at;if(typeof occurredAt!=="string"||occurredAt.trim().length===0){return false}const occurredAtMs=Date.parse(occurredAt);if(Number.isNaN(occurredAtMs)){return false}return occurredAtMs<cutoffMs}function pruneExpiredQueueEntries(entries,retentionDays){const cutoffMs=retentionCutoffMs(retentionDays);const retained=[];let prunedCount=0;for(const entry of entries){const serializedSize=JSON.stringify(entry).length;const oversized=serializedSize>TELEMETRY_MAX_EVENT_BYTES;if(oversized||isExpiredQueueEntry(entry,cutoffMs)||entry.attempts>=TELEMETRY_MAX_QUEUE_ENTRY_ATTEMPTS){prunedCount+=1;continue}retained.push(entry)}return{entries:retained,prunedCount}}async function rewriteQueue(globalPmRoot,entries){const serialized=entries.map(entry=>JSON.stringify(entry)).join("\n");const contents=serialized.length>0?`${serialized}
+`:"";for(let attempt=0;;attempt+=1){try{await writeFileAtomic(queuePath(globalPmRoot),contents);return}catch(error){const retryDelay=TELEMETRY_QUEUE_REWRITE_RETRY_DELAYS_MS[attempt];if(retryDelay===void 0||!isRetryableQueueRewriteError(error)){throw error}await sleep(retryDelay)}}}function isRetryableQueueRewriteError(error){if(typeof error!=="object"||error===null||!("code"in error)){return false}const code=error.code;return code==="EACCES"||code==="EBUSY"||code==="EPERM"}function sleep(milliseconds){return new Promise(resolve=>{setTimeout(resolve,milliseconds)})}async function enqueuePendingOtelSpan(globalPmRoot,request){const pending={id:crypto.randomUUID(),endpoint:request.endpoint,payload:request.payload,enqueued_at:nowIso(),attempts:0};const serialized=JSON.stringify(pending);if(serialized.length>TELEMETRY_MAX_EVENT_BYTES){return}await withQueueMutation(async()=>{await appendLineAtomic(otelSpansQueuePath(globalPmRoot),serialized)})}function backfillPendingOtelSpanId(entry){const material=JSON.stringify([entry.endpoint,entry.enqueued_at,entry.payload]);return crypto.createHash("sha256").update(material).digest("hex").slice(0,32)}function parsePendingOtelSpanLines(raw){const entries=[];for(const line of raw.split("\n")){const trimmed=line.trim();if(trimmed.length===0){continue}try{const parsed=JSON.parse(trimmed);if(parsed&&typeof parsed==="object"&&typeof parsed.endpoint==="string"&&parsed.endpoint.trim().length>0&&"payload"in parsed&&typeof parsed.attempts==="number"&&Number.isFinite(parsed.attempts)){if(typeof parsed.id!=="string"||parsed.id.length===0){parsed.id=backfillPendingOtelSpanId(parsed)}entries.push(parsed)}}catch{}}return entries}function isExpiredPendingOtelSpan(entry,cutoffMs){if(typeof entry.enqueued_at!=="string"||entry.enqueued_at.trim().length===0){return false}const enqueuedAtMs=Date.parse(entry.enqueued_at);if(Number.isNaN(enqueuedAtMs)){return false}return enqueuedAtMs<cutoffMs}function prunePendingOtelSpans(entries,retentionDays){const cutoffMs=retentionCutoffMs(retentionDays);const retained=[];let prunedCount=0;for(const entry of entries){const oversized=JSON.stringify(entry).length>TELEMETRY_MAX_EVENT_BYTES;if(oversized||isExpiredPendingOtelSpan(entry,cutoffMs)||entry.attempts>=TELEMETRY_MAX_QUEUE_ENTRY_ATTEMPTS){prunedCount+=1;continue}retained.push(entry)}if(retained.length>TELEMETRY_OTEL_SPANS_MAX_PENDING){const overflow=retained.length-TELEMETRY_OTEL_SPANS_MAX_PENDING;prunedCount+=overflow;return{entries:retained.slice(overflow),prunedCount}}return{entries:retained,prunedCount}}async function rewritePendingOtelSpans(globalPmRoot,entries){const serialized=entries.map(entry=>JSON.stringify(entry)).join("\n");const contents=serialized.length>0?`${serialized}
+`:"";for(let attempt=0;;attempt+=1){try{await writeFileAtomic(otelSpansQueuePath(globalPmRoot),contents);return}catch(error){const retryDelay=TELEMETRY_QUEUE_REWRITE_RETRY_DELAYS_MS[attempt];if(retryDelay===void 0||!isRetryableQueueRewriteError(error)){throw error}await sleep(retryDelay)}}}async function reconcilePendingOtelSpansAfterFlush(globalPmRoot,retentionDays,succeededIds,failedUpdates){return withQueueMutation(async()=>{const raw=await readFileIfExists(otelSpansQueuePath(globalPmRoot));const current=raw===null?[]:parsePendingOtelSpanLines(raw);const reconciled=[];for(const entry of current){if(succeededIds.has(entry.id)){continue}const failure=failedUpdates.get(entry.id);reconciled.push(failure?{...entry,attempts:failure.attempts,next_attempt_after:failure.next_attempt_after}:entry)}const{entries:retained}=prunePendingOtelSpans(reconciled,retentionDays);await rewritePendingOtelSpans(globalPmRoot,retained);return retained.length})}async function flushPendingOtelSpans(globalPmRoot,retentionDays){const raw=await readFileIfExists(otelSpansQueuePath(globalPmRoot));if(raw===null||raw.trim().length===0){await writeRuntimeState(globalPmRoot,{pending_otel_spans:0});return}const entries=parsePendingOtelSpanLines(raw);const{entries:retained,prunedCount}=prunePendingOtelSpans(entries,retentionDays);const due=retained.filter(entry=>isDueForRetryAt(entry.next_attempt_after)).slice(0,TELEMETRY_OTEL_SPANS_FLUSH_BATCH_SIZE);if(due.length===0){const remaining2=prunedCount>0?await reconcilePendingOtelSpansAfterFlush(globalPmRoot,retentionDays,new Set,new Map):retained.length;await writeRuntimeState(globalPmRoot,{pending_otel_spans:remaining2});return}const attemptTime=nowIso();const succeededIds=new Set;const failedUpdates=new Map;let succeededCount=0;let lastError;await Promise.all(due.map(async span=>{try{const status=await postTelemetryJson(span.endpoint,{"content-type":"application/json"},JSON.stringify(span.payload));if(status<200||status>=300){throw new Error(`local_otel_export_http_${status}`)}succeededIds.add(span.id);succeededCount+=1}catch(error){lastError=error instanceof Error?sanitizeString(error.message,"redacted"):"local_otel_export_failed";const nextAttempts=span.attempts+1;failedUpdates.set(span.id,{attempts:nextAttempts,next_attempt_after:nextRetryIso(nextAttempts)})}}));const remaining=await reconcilePendingOtelSpansAfterFlush(globalPmRoot,retentionDays,succeededIds,failedUpdates);const statePatch={pending_otel_spans:remaining,last_otel_attempt_at:attemptTime};if(succeededCount>0){statePatch.last_otel_success_at=attemptTime}if(lastError!==void 0){statePatch.last_otel_failure_at=attemptTime;statePatch.last_otel_failure_error=lastError}else if(remaining===0){statePatch.last_otel_failure_at=void 0;statePatch.last_otel_failure_error=void 0}await writeRuntimeState(globalPmRoot,statePatch)}async function flushTelemetryArtifacts(globalPmRoot,endpoint,retentionDays){try{await flushQueue(globalPmRoot,endpoint,retentionDays)}catch{}try{await flushPendingOtelSpans(globalPmRoot,retentionDays)}catch{}}async function cleanupTelemetryQueueTempOrphans(globalPmRoot,maxAgeMs=TELEMETRY_QUEUE_TMP_ORPHAN_MAX_AGE_MS){try{const dirPath=telemetryRuntimeDirectory(globalPmRoot);const entries=await readdir(dirPath,{withFileTypes:true});const cutoffMs=Date.now()-Math.max(0,maxAgeMs);await Promise.all(entries.filter(entry=>entry.isFile()&&/^\.events\.jsonl\.\d+\.\d+\.[a-f0-9]+\.tmp$/.test(entry.name)).map(async entry=>{const candidate=path.join(dirPath,entry.name);const candidateStats=await stat(candidate);if(candidateStats.mtimeMs<cutoffMs){await rm(candidate,{force:true})}}))}catch{}}async function withQueueMutation(operation){const run=_queueMutationPromise.catch(()=>{}).then(operation);_queueMutationPromise=run.catch(()=>{});return run}async function readCurrentQueueEntries(globalPmRoot){const raw=await readFileIfExists(queuePath(globalPmRoot));if(raw===null||raw.trim().length===0){return[]}return parseQueueLines(raw)}async function removeFlushedEntriesFromCurrentQueue(globalPmRoot,flushedIds,retentionDays){return withQueueMutation(async()=>{const currentEntries=await readCurrentQueueEntries(globalPmRoot);const{entries:retainedEntries}=pruneExpiredQueueEntries(currentEntries,retentionDays);const remaining=retainedEntries.filter(entry=>!flushedIds.has(entry.event.event_id));await rewriteQueue(globalPmRoot,remaining);return remaining})}async function markFailedEntriesInCurrentQueue(globalPmRoot,failedIds,attemptTime,retentionDays){return withQueueMutation(async()=>{const currentEntries=await readCurrentQueueEntries(globalPmRoot);const{entries:retainedEntries}=pruneExpiredQueueEntries(currentEntries,retentionDays);const retried=retainedEntries.map(entry=>{if(!failedIds.has(entry.event.event_id)){return entry}const attempts=entry.attempts+1;return{...entry,attempts,last_attempt_at:attemptTime,next_attempt_after:nextRetryIso(attempts)}});await rewriteQueue(globalPmRoot,retried);return retried})}async function flushQueue(globalPmRoot,endpoint,retentionDays){await cleanupTelemetryQueueTempOrphans(globalPmRoot);const normalizedEndpoint=endpoint.trim();if(normalizedEndpoint.length===0){return}const raw=await readFileIfExists(queuePath(globalPmRoot));if(raw===null||raw.trim().length===0){await writeRuntimeState(globalPmRoot,{endpoint:normalizedEndpoint,queue_entries:0});return}const queueEntries=parseQueueLines(raw);if(queueEntries.length===0){await writeRuntimeState(globalPmRoot,{endpoint:normalizedEndpoint,queue_entries:0});return}const{entries:retainedEntries,prunedCount}=pruneExpiredQueueEntries(queueEntries,retentionDays);if(retainedEntries.length===0){await rewriteQueue(globalPmRoot,[]);await writeRuntimeState(globalPmRoot,{endpoint:normalizedEndpoint,queue_entries:0});return}const dueEntries=retainedEntries.filter(entry=>isDueForRetry(entry)).slice(0,TELEMETRY_FLUSH_BATCH_SIZE);if(dueEntries.length===0){if(prunedCount>0){await rewriteQueue(globalPmRoot,retainedEntries)}await writeRuntimeState(globalPmRoot,{endpoint:normalizedEndpoint,queue_entries:retainedEntries.length});return}const dueIds=new Set(dueEntries.map(entry=>entry.event.event_id));const attemptTime=nowIso();const requestHeaders={"content-type":"application/json"};const ingestKey=process.env.PM_TELEMETRY_INGEST_KEY?.trim();if(ingestKey){requestHeaders["x-pm-telemetry-key"]=ingestKey}try{const status=await postTelemetryJson(normalizedEndpoint,requestHeaders,JSON.stringify({schema_version:TELEMETRY_SCHEMA_VERSION,events:dueEntries.map(entry=>entry.event)}));if(status<200||status>=300){throw new Error(`telemetry_flush_http_${status}`)}}catch(error){const retried=await markFailedEntriesInCurrentQueue(globalPmRoot,dueIds,attemptTime,retentionDays);const errorMessage=(()=>{if(error instanceof Error){return sanitizeString(error.message,"redacted")}return"telemetry_flush_failed"})();await writeRuntimeState(globalPmRoot,{endpoint:normalizedEndpoint,queue_entries:retried.length,last_attempted_flush_at:attemptTime,last_failed_flush_at:attemptTime,last_failed_flush_error:errorMessage});return}try{const remaining=await removeFlushedEntriesFromCurrentQueue(globalPmRoot,dueIds,retentionDays);await writeRuntimeState(globalPmRoot,{endpoint:normalizedEndpoint,queue_entries:remaining.length,last_attempted_flush_at:attemptTime,last_successful_flush_at:attemptTime,last_failed_flush_at:void 0,last_failed_flush_error:void 0})}catch(error){const errorMessage=(()=>{if(error instanceof Error){return sanitizeString(error.message,"redacted")}return"telemetry_flush_failed"})();const currentEntries=await readCurrentQueueEntries(globalPmRoot).catch(()=>retainedEntries);await writeRuntimeState(globalPmRoot,{endpoint:normalizedEndpoint,queue_entries:currentEntries.length,last_attempted_flush_at:attemptTime,last_failed_flush_at:attemptTime,last_failed_flush_error:errorMessage})}}async function acquireTelemetryFlushLock(globalPmRoot){const lockPath=flushLockPath(globalPmRoot);await mkdir(path.dirname(lockPath),{recursive:true});try{await mkdir(lockPath);return true}catch(error){if(typeof error!=="object"||error===null||!("code"in error)||error.code!=="EEXIST"){throw error}}try{const lockStats=await stat(lockPath);if(Date.now()-lockStats.mtimeMs<TELEMETRY_FLUSH_LOCK_STALE_MS){return false}await rm(lockPath,{recursive:true,force:true});await mkdir(lockPath);return true}catch{return false}}function isFreshDirectoryLock(lockPath,staleMs){try{return Date.now()-statSync(lockPath).mtimeMs<staleMs}catch{return false}}function removeDirectoryLockBestEffort(lockPath){try{rmSync(lockPath,{recursive:true,force:true})}catch{}}function errorCode(error){if(typeof error!=="object"||error===null||!("code"in error)){return void 0}const code=error.code;return typeof code==="string"?code:void 0}function createDirectoryLock(lockPath){try{mkdirSync(lockPath);return true}catch(error){const code=errorCode(error);if(code==="EEXIST"){return false}if(!isFileMissingError(error)){return false}}try{mkdirSync(path.dirname(lockPath),{recursive:true});mkdirSync(lockPath);return true}catch{return false}}function acquireTelemetryFlushSpawnGate(globalPmRoot){if(isFreshDirectoryLock(flushLockPath(globalPmRoot),TELEMETRY_FLUSH_LOCK_STALE_MS)){return false}const lockPath=flushSpawnLockPath(globalPmRoot);try{if(Date.now()-statSync(lockPath).mtimeMs<TELEMETRY_FLUSH_SPAWN_LOCK_STALE_MS){return false}removeDirectoryLockBestEffort(lockPath)}catch(error){if(!isFileMissingError(error)){return false}}return createDirectoryLock(lockPath)}function releaseTelemetryFlushSpawnGate(globalPmRoot){removeDirectoryLockBestEffort(flushSpawnLockPath(globalPmRoot))}const _testOnly={acquireTelemetryFlushSpawnGate,acquireTelemetryFlushLock,buildAuthorContextPayloadFields,buildCommandErrorPayload,buildCommandFinishPayload,buildCommandStartPayload,buildOtelSpanRequest,createDirectoryLock,enqueuePendingOtelSpan,enqueueTelemetryEvent,errorCode,flushPendingOtelSpans,flushQueue,flushQueueWithProcessLock,flushTelemetryArtifacts,hashTelemetryErrorFingerprint,hashTelemetryValue,isEmailDomainCharacter,isEmailLocalCharacter,isExpiredPendingOtelSpan,isExpiredQueueEntry,isFreshDirectoryLock,isDueForRetry,isDueForRetryAt,isRetryableQueueRewriteError,looksLikeEmailToken,otelSpansQueuePath,parseBooleanTrueLike,postTelemetryJson,parsePendingOtelSpanLines,prunePendingOtelSpans,reconcilePendingOtelSpansAfterFlush,retentionCutoffMs,resolveOtelTracesEndpoint,resolveTelemetryHttpTimeoutMs,rewritePendingOtelSpans,normalizeForHash,normalizeCaptureLevel,normalizePmVersion,normalizeTelemetryErrorCategory,normalizeTelemetryErrorCode,normalizeTelemetryExitCode,parseQueueLines,pruneExpiredQueueEntries,readRuntimeState,readCurrentQueueEntries,releaseTelemetryFlushSpawnGate,removeFlushedEntriesFromCurrentQueue,removeDirectoryLockBestEffort,resolveTelemetrySourceContext,rewriteQueue,sanitizeCommandArgs,sanitizeStringMax,sanitizeStringRedacted,sanitizeValue,scheduleTelemetryFlush,shouldFlushInline,sleep,summarizeResult,telemetryFlushRunnerPath,withQueueMutation,flushLockPath,flushSpawnLockPath,runtimeStatePath,writeRuntimeState};async function flushQueueWithProcessLock(globalPmRoot,endpoint,retentionDays){const acquired=await acquireTelemetryFlushLock(globalPmRoot);releaseTelemetryFlushSpawnGate(globalPmRoot);if(!acquired){return}try{await flushTelemetryArtifacts(globalPmRoot,endpoint,retentionDays)}finally{try{await rm(flushLockPath(globalPmRoot),{recursive:true,force:true})}catch{}}}function scheduleTelemetryFlush(globalPmRoot,endpoint,retentionDays){if(shouldFlushInline()){const previousFlush=_lastFlushPromise;const nextFlush=flushTelemetryArtifacts(globalPmRoot,endpoint,retentionDays);_lastFlushPromise=Promise.allSettled([previousFlush,nextFlush]).then(()=>{});return}try{const acquiredSpawnGate=acquireTelemetryFlushSpawnGate(globalPmRoot);if(!acquiredSpawnGate){return}const child=spawn(process.execPath,[telemetryFlushRunnerPath()],{detached:true,stdio:"ignore",cwd:os.tmpdir(),env:{...process.env,PM_GLOBAL_PATH:globalPmRoot,[PM_TELEMETRY_FLUSH_CHILD_ENV]:"1"}});child.on("error",()=>{releaseTelemetryFlushSpawnGate(globalPmRoot)});child.unref()}catch{releaseTelemetryFlushSpawnGate(globalPmRoot)}}async function flushTelemetryQueueNow(globalPmRoot=resolveGlobalPmRoot(process.cwd())){if(telemetryDisabledByEnvironment()){return}try{const settings=await readSettings(globalPmRoot);if(!settings.telemetry.enabled){return}const{endpoint,retentionDays}=await ensureInstallationId(globalPmRoot);await flushQueueWithProcessLock(globalPmRoot,endpoint,retentionDays)}catch{}}async function startTelemetryCommand(context){if(telemetryDisabledByEnvironment()){return null}if(context.command==="telemetry"&&context.args.some(token=>token.trim().toLowerCase()==="clear")){return null}try{const globalPmRoot=resolveGlobalPmRoot(process.cwd());const settings=await readSettings(globalPmRoot);if(!settings.telemetry.enabled){return null}const captureLevel=normalizeCaptureLevel(settings.telemetry.capture_level);const{installationId,endpoint,retentionDays}=await ensureInstallationId(globalPmRoot);const pmVersion=normalizePmVersion(context.pm_version);const sourceContext=resolveTelemetrySourceContext(context.global);const pmRootHash=hashWithInstallationId(installationId,context.pm_root);const cwdHash=hashWithInstallationId(installationId,process.cwd());const otelTracesEndpoint=resolveOtelTracesEndpoint();const occurredAt=nowIso();const event={schema_version:TELEMETRY_SCHEMA_VERSION,event_id:crypto.randomUUID(),event_type:"command_start",occurred_at:occurredAt,installation_id:installationId,session_id:PROCESS_SESSION_ID,command:context.command,payload:buildCommandStartPayload({captureLevel,context,pmVersion,sourceContext,pmRootHash,cwdHash,installationId})};await enqueueTelemetryEvent(globalPmRoot,event);scheduleTelemetryFlush(globalPmRoot,endpoint,retentionDays);const commandTaxonomy=deriveTelemetryCommandTaxonomy(context.command);return{started_at:occurredAt,started_at_ms:Date.now(),command:context.command,command_taxonomy:commandTaxonomy,pm_version:pmVersion,source_context:sourceContext.source_context,source_context_source:sourceContext.source_context_source,installation_id:installationId,pm_root_hash:pmRootHash,cwd_hash:cwdHash,endpoint,retention_days:retentionDays,global_pm_root:globalPmRoot,capture_level:captureLevel,otel_traces_endpoint:otelTracesEndpoint??void 0,otel_trace_id:otelTracesEndpoint?crypto.randomBytes(16).toString("hex"):void 0,otel_span_id:otelTracesEndpoint?crypto.randomBytes(8).toString("hex"):void 0}}catch{return null}}async function finishTelemetryCommand(activeCommand,outcome){if(!activeCommand){return}try{const finishedAt=nowIso();const durationMs=Math.max(0,Date.now()-activeCommand.started_at_ms);const normalizedErrorCode=normalizeTelemetryErrorCode(inferTelemetryErrorCode({ok:outcome.ok,errorCode:outcome.error_code,errorMessage:outcome.error,exitCode:outcome.exit_code}));const normalizedErrorCategory=normalizeTelemetryErrorCategory({ok:outcome.ok,errorCode:normalizedErrorCode,errorCategory:outcome.error_category});const normalizedExitCode=normalizeTelemetryExitCode(outcome.exit_code,outcome.ok);const commandResolution=outcome.command_resolution??deriveTelemetryCommandResolution({ok:outcome.ok,errorCode:normalizedErrorCode,errorCategory:normalizedErrorCategory});const resolutionStage=outcome.resolution_stage??"execute";const event={schema_version:TELEMETRY_SCHEMA_VERSION,event_id:crypto.randomUUID(),event_type:"command_finish",occurred_at:finishedAt,installation_id:activeCommand.installation_id,session_id:PROCESS_SESSION_ID,command:activeCommand.command,payload:buildCommandFinishPayload({captureLevel:activeCommand.capture_level,pmVersion:activeCommand.pm_version,sourceContext:{source_context:activeCommand.source_context,source_context_source:activeCommand.source_context_source},outcome,durationMs,startedAt:activeCommand.started_at,command:activeCommand.command,installationId:activeCommand.installation_id,commandTaxonomy:activeCommand.command_taxonomy,exitCode:normalizedExitCode,errorCode:normalizedErrorCode,errorCategory:normalizedErrorCategory,commandResolution,resolutionStage})};await enqueueTelemetryEvent(activeCommand.global_pm_root,event);const otelRequest=buildOtelSpanRequest(activeCommand,{...outcome,exit_code:normalizedExitCode,error_code:normalizedErrorCode,error_category:normalizedErrorCategory},finishedAt,durationMs);if(otelRequest){await enqueuePendingOtelSpan(activeCommand.global_pm_root,otelRequest)}scheduleTelemetryFlush(activeCommand.global_pm_root,activeCommand.endpoint,activeCommand.retention_days)}catch{}}async function emitTelemetryErrorEvent(context){if(telemetryDisabledByEnvironment()){return}try{const globalPmRoot=resolveGlobalPmRoot(process.cwd());const settings=await readSettings(globalPmRoot);if(!settings.telemetry.enabled){return}const captureLevel=normalizeCaptureLevel(settings.telemetry.capture_level);const{installationId,endpoint,retentionDays}=await ensureInstallationId(globalPmRoot);const pmVersion=normalizePmVersion(context.pm_version);const sourceContext=resolveTelemetrySourceContext(context.global);const pmRootHash=hashWithInstallationId(installationId,context.pm_root);const cwdHash=hashWithInstallationId(installationId,process.cwd());const occurredAt=nowIso();const normalizedErrorCode=normalizeTelemetryErrorCode(inferTelemetryErrorCode({ok:false,errorCode:context.error_code,errorMessage:context.error_message,exitCode:context.exit_code}));const normalizedErrorCategory=context.error_category??resolveTelemetryErrorCategory(normalizedErrorCode);const normalizedExitCode=normalizeTelemetryExitCode(context.exit_code,false);const normalizedCommand=context.command.trim().length>0?context.command:"<unknown>";const commandTaxonomy=deriveTelemetryCommandTaxonomy(normalizedCommand);const commandResolution=context.command_resolution??deriveTelemetryCommandResolution({ok:false,errorCode:normalizedErrorCode,errorCategory:normalizedErrorCategory});const resolutionStage=context.resolution_stage??"unknown";const event={schema_version:TELEMETRY_SCHEMA_VERSION,event_id:crypto.randomUUID(),event_type:"command_error",occurred_at:occurredAt,installation_id:installationId,session_id:PROCESS_SESSION_ID,command:sanitizeString(normalizedCommand,"redacted"),payload:buildCommandErrorPayload({captureLevel,pmVersion,sourceContext,command:normalizedCommand,commandTaxonomy,commandResolution,resolutionStage,args:context.args,options:context.options,pmRootHash,cwdHash,installationId,errorCode:normalizedErrorCode,errorCategory:normalizedErrorCategory,exitCode:normalizedExitCode,errorMessage:context.error_message})};await enqueueTelemetryEvent(globalPmRoot,event);scheduleTelemetryFlush(globalPmRoot,endpoint,retentionDays)}catch{}}export{PM_TELEMETRY_SOURCE_CONTEXT_VALUES,TELEMETRY_MAX_QUEUE_ENTRY_ATTEMPTS,TELEMETRY_SCHEMA_VERSION,_testOnly,emitTelemetryErrorEvent,finishTelemetryCommand,flushTelemetryQueueNow,startTelemetryCommand,waitForPendingFlush};
 //# sourceMappingURL=runtime.js.map
-//# debugId=26ea62d9-874d-5826-9822-83c5523b673b