@userreason/wizard 0.3.0 → 0.3.2

package/README.md

@@ -36,21 +36,12 @@ terminal. The [first survey guide](https://docs.userreason.com/get-started/first
 walks through creating and publishing a survey. Installing the SDK does not
 publish a survey.
 
-In development mode (`--dev`), an interactive installation continues into a
-guided first-survey flow. Choose an improvement, workflow-friction or satisfaction
-goal and immediately review a ready-to-edit question. You can save that starter
-without AI or skip the step. Optional AI personalization runs while you review
-the starter and never replaces your edits automatically.
-
-Local source preparation starts after sign-in and stays in memory. It does not
-upload code, read Git history or make a model call. Personalization requires a
-separate review and approval of the exact source packet. Changed files are
-rechecked before upload and before using a source-based suggestion.
-
-Saving creates an unpublished draft. Choose a verified completion event or
-configure audience and timing in the editor; the latter leaves the draft unable
-to match anyone. No survey is published automatically. This development flow
-does not change the production wizard or require an SDK release.
+Onboarding opens in the browser by default in production and development (`--dev`).
+Survey suggestions and the Agent test step are paused in production and development.
+Setup does not prepare or upload application source for recommendations, and it
+neither offers nor creates suggested drafts. The terminal flow skips the
+first-survey offer too. You can create surveys in the dashboard after setup.
+Use `--terminal-setup` to choose terminal onboarding explicitly.
 
 For a different application directory:
 
@@ -178,9 +169,17 @@ send and store no analytics. The bounded queue stays outside the project,
 expires after seven days, and retries best-effort uploads with short deadlines.
 Measurement failures never fail an installation.
 
-### Browser-guided setup (explicit opt-in)
+### Browser-guided setup
 
-Prepared compatible builds support:
+Development onboarding uses the browser by default, including local development
+package builds. With a published package, select the development API:
+
+```sh
+npx -y @userreason/wizard@latest --dev
+```
+
+Production and development both use browser setup by default. `--browser-setup`
+remains an optional explicit alias. Compatible builds also support:
 
 ```sh
 npx -y @userreason/wizard@latest --browser-setup
@@ -188,28 +187,27 @@ npx -y @userreason/wizard@latest --resume-setup SETUP_UUID
 ```
 
 Run from the same project and use the same `--api-url` or `--api-environment`
-on resume. A custom API also needs its trusted `--browser-origin`. Ordinary
-startup keeps the existing terminal wizard. If a server has not enabled browser
-setup, a new connection falls back before creating a session or local effects.
+on resume. A custom API also needs its trusted `--browser-origin`.
+Use `--terminal-setup` to choose terminal onboarding explicitly. Scripted runs
+with `--yes` or `--json`, package refresh, dry runs, and explicit terminal
+installation/resource flags retain their existing behavior; an explicit
+`--browser-setup` still rejects incompatible terminal options.
+If a server has not enabled browser setup, a new connection falls back before
+creating a session or local effects.
 Malformed protocol data and already-started setups never fall back silently.
 Server rollout flags remain off by default; publication is a separate release.
 
 The browser owns workspace/site selection, optional choices, local-plan approval,
-source/provider consent, candidate selection, inactive draft saves, sample skip,
-finish and cancellation. The local runner executes only approved typed effects
+finish and cancellation. Source analysis, suggested drafts and the Agent test
+remain implemented but are hidden and skipped while their rollout flags are off. The local runner executes only approved typed effects
 using the separate owner-only setup capability. It does not read or replace
 normal CLI credentials. Stopping the local process leaves the setup resumable;
 cancelling in the browser does not undo completed edits or delete created drafts.
 Terminal results list verified, failed and manual outcomes separately.
 
-Source analysis starts only when the server advertises availability. Before
-consent, the terminal displays the exact bounded excerpts, hashes and line ranges;
-the browser receives metadata only. No Git history is collected. Approving the
-source packet and providers is separate from approving installation. Immediately
-before upload, the runner revalidates full files and installed package versions.
-Changed source requires fresh browser review. Raw source stays in memory and is
-not written to setup receipts. A lost analysis response is polled rather than
-repeated; browser retry starts a fresh preparation and consent.
+Source analysis starts only when the server advertises availability. It is
+currently disabled for production and development onboarding, including resumed
+setups. No onboarding recommendation providers are called.
 
 The optional footer choice defaults to No. `planFooter` preserves the reachable
 host footer and adds a plain `Powered by UserReason` link when placement is
@@ -218,25 +216,20 @@ Package managers use fixed allowlisted arguments, disabled scripts and exact
 versions. Lockfiles are declared generated outputs and verified by recorded hashes.
 Interrupted commands reconcile local receipts instead of blindly reinstalling.
 
-At the optional agent test, the terminal prints a setup-scoped command and the
-prompt “What do UserReason dummy respondents think?”. It reads only the static
-sample and records its receipt; it does not read production responses. Installing
-the agent skill and reading that sample never grant ongoing CLI access. Authorize
-continuing access separately with `userreason login --open` when wanted.
-
-### Optional first survey
-
-After a successful interactive installation, choose Review suggestions, Continue
-with my coding agent, or Finish setup. `--yes`, JSON and diff modes never approve
-source analysis. Suggestions reuse the CLI's bounded collector, explicit provider
-consent and per-candidate draft review; failures leave installation intact. An
-ongoing site-read/survey-write connection is required, not the installation grant.
-No automatic source edits or publication. Resume/cancel/delete with the CLI's
-`first-survey` group. See the CLI README and installed skill for privacy, retention,
-hash-guarded manual instrumentation and separate publication authorization.
-
-The production profile for wizard 0.3.0 selects `@userreason/js@0.5.0` and
-`@userreason/cli@0.2.0`. New installs use those exact versions; an installed
+The Agent test and terminal first-survey offer are paused. Installing the agent
+skill never grants ongoing CLI access. Authorize continuing access separately
+with `userreason login --open` when wanted. Standalone CLI survey tools remain
+available outside onboarding.
+
+The production profile for wizard 0.3.2 selects `@userreason/js@0.5.3` and
+`@userreason/cli@0.2.1`. New installs use those exact versions; an installed
 stable patch in the same release line is reused. Earlier SDK 0.4 and CLI 0.1
-releases are upgraded when installation is selected. Browser setup still
-requires explicit `--browser-setup` and a server advertising the capability.
+releases are upgraded when installation is selected. Browser setup is the default and requires a server advertising the capability.
+Use `--terminal-setup` for the terminal flow.
+
+Browser-guided installation prints package-manager failures in the connected
+terminal, including failed registry requests when npm provides them. Diagnostic
+text is redacted and retained in the private local setup receipt for resume.
+A finished browser session with failed local steps is reported as incomplete and
+the wizard exits unsuccessfully. Project `.npmrc` comments and authentication
+references are preserved; registry configuration only adds the UserReason scope.

package/dist/agent-note.js

@@ -3,12 +3,13 @@ import {
   applyAgentNote,
   offerAgentNote,
   planAgentNote
-} from "./chunk-Z6ZY7X2K.js";
-import "./chunk-GOYBYAUH.js";
-import "./chunk-5IO5LY22.js";
-import "./chunk-CADA5WZ3.js";
+} from "./chunk-7O7H3PIM.js";
+import "./chunk-LEJFE4U5.js";
+import "./chunk-TOID3NYP.js";
+import "./chunk-PJQOSDYS.js";
 import "./chunk-NMHTFC5Q.js";
-import "./chunk-77SK7TKZ.js";
+import "./chunk-EVNEX5N5.js";
+import "./chunk-7AAH6C4L.js";
 import "./chunk-WL3NOIM6.js";
 export {
   applyAgentNote,

package/dist/agent-skill.js

@@ -3,11 +3,12 @@ import {
   applyAgentSkill,
   offerAgentSkill,
   planAgentSkill
-} from "./chunk-NZ65XDNL.js";
-import "./chunk-GOYBYAUH.js";
-import "./chunk-CADA5WZ3.js";
+} from "./chunk-SB3AYQWG.js";
+import "./chunk-TOID3NYP.js";
+import "./chunk-PJQOSDYS.js";
 import "./chunk-NMHTFC5Q.js";
-import "./chunk-77SK7TKZ.js";
+import "./chunk-EVNEX5N5.js";
+import "./chunk-7AAH6C4L.js";
 import "./chunk-WL3NOIM6.js";
 export {
   applyAgentSkill,

package/dist/analytics.js

@@ -1,8 +1,8 @@
 import { createRequire as createWizardRequire } from 'node:module'; import { fileURLToPath as wizardFileURLToPath } from 'node:url'; import { dirname as wizardDirname } from 'node:path'; const require = createWizardRequire(import.meta.url); const __filename = wizardFileURLToPath(import.meta.url); const __dirname = wizardDirname(__filename);
 import {
   WizardAnalytics
-} from "./chunk-UN24JFV2.js";
-import "./chunk-77SK7TKZ.js";
+} from "./chunk-KF37D5WL.js";
+import "./chunk-7AAH6C4L.js";
 import "./chunk-WL3NOIM6.js";
 export {
   WizardAnalytics

package/dist/bin.js

@@ -1,62 +1,48 @@
 #!/usr/bin/env node
 import { createRequire as createWizardRequire } from 'node:module'; import { fileURLToPath as wizardFileURLToPath } from 'node:url'; import { dirname as wizardDirname } from 'node:path'; const require = createWizardRequire(import.meta.url); const __filename = wizardFileURLToPath(import.meta.url); const __dirname = wizardDirname(__filename);
+import {
+  runBrowserWizard
+} from "./chunk-CSZW2ULJ.js";
+import {
+  clearInstallation,
+  resolveInstallation,
+  saveInstallation,
+  savedInstallation
+} from "./chunk-XASPGFYK.js";
 import {
   offerAgentNote,
   planAgentNote
-} from "./chunk-Z6ZY7X2K.js";
+} from "./chunk-7O7H3PIM.js";
 import {
   offerCliAccess
-} from "./chunk-F4FKAUQN.js";
+} from "./chunk-XPFKXLIZ.js";
 import {
   offerGlobalCli
-} from "./chunk-ZHHIHHLU.js";
+} from "./chunk-TRBSH5G7.js";
 import {
   WizardAnalytics
-} from "./chunk-UN24JFV2.js";
+} from "./chunk-KF37D5WL.js";
 import {
   beginFirstSurveyPreparation,
   offerFirstSurvey
-} from "./chunk-HIF6NUNK.js";
-import {
-  runBrowserWizard
-} from "./chunk-VXWLSQYK.js";
-import "./chunk-YYFC7TM2.js";
-import "./chunk-SFODN2YB.js";
+} from "./chunk-ZHJV247H.js";
+import "./chunk-Q5U5UOQN.js";
+import "./chunk-4INLEQE2.js";
 import {
   offerAgentSkill,
   planAgentSkill
-} from "./chunk-NZ65XDNL.js";
+} from "./chunk-SB3AYQWG.js";
 import {
   ensureCurrentWizard,
   wizardVersion
-} from "./chunk-MFGJ2KPT.js";
-import {
-  Cancelled,
-  Terminal,
-  approvalStatus,
-  clean,
-  normalizeOrigin,
-  openBrowser
-} from "./chunk-GOYBYAUH.js";
-import {
-  BrowserConnectionUnavailable,
-  compatibilityCredentials,
-  connectInstallation,
-  memoryCredentials
-} from "./chunk-P6DOSGRZ.js";
-import {
-  clearInstallation,
-  resolveInstallation,
-  saveInstallation,
-  savedInstallation
-} from "./chunk-2UEUVLCB.js";
+} from "./chunk-NNPYUATH.js";
 import {
   applyIntegration,
   detectInstallation,
   integrationAdditions,
   integrationPreview,
   planIntegration
-} from "./chunk-5IO5LY22.js";
+} from "./chunk-LEJFE4U5.js";
 import {
   SdkInstallError,
   cliCommand,
@@ -70,8 +56,23 @@ import {
   sdkInstallCommand,
   verifyConfiguration,
   writeIntegration
-} from "./chunk-CADA5WZ3.js";
+} from "./chunk-TOID3NYP.js";
+import "./chunk-PJQOSDYS.js";
 import "./chunk-NMHTFC5Q.js";
+import {
+  Cancelled,
+  Terminal,
+  approvalStatus,
+  clean,
+  normalizeOrigin,
+  openBrowser
+} from "./chunk-EVNEX5N5.js";
+import {
+  BrowserConnectionUnavailable,
+  compatibilityCredentials,
+  connectInstallation,
+  memoryCredentials
+} from "./chunk-DMXUXEQI.js";
 import {
   ApiError,
   AuthenticationError,
@@ -86,7 +87,7 @@ import {
   resolveCredentials,
   saveConfig,
   uuid
-} from "./chunk-77SK7TKZ.js";
+} from "./chunk-7AAH6C4L.js";
 import "./chunk-WL3NOIM6.js";
 
 // src/bin.ts
@@ -96,7 +97,8 @@ var help = `UserReason installation wizard
 
 userreason-wizard [--directory PATH] [--origin URL]
 
---browser-setup (explicit browser-guided setup; falls back when unavailable)
+--browser-setup (browser-guided setup; default for onboarding)
+--terminal-setup (use terminal onboarding instead)
 --resume-setup UUID (resume this project's saved browser setup)
 --browser-origin ORIGIN (trusted dashboard origin for a custom API)
 --workspace UUID / --workspace-name NAME
@@ -149,6 +151,7 @@ async function main() {
       version: { type: "boolean", short: "v" },
       dev: { type: "boolean" },
       "browser-setup": { type: "boolean" },
+      "terminal-setup": { type: "boolean" },
       "resume-setup": { type: "string" },
       "browser-origin": { type: "string" },
       "api-environment": { type: "string" },
@@ -198,18 +201,6 @@ async function main() {
     process.stdout.write(help);
     return;
   }
-  const browserMode = Boolean(values["browser-setup"] || values["resume-setup"]);
-  if (values["browser-setup"] && values["resume-setup"]) throw new Error("Choose --browser-setup or --resume-setup");
-  if (values["resume-setup"]) uuid(values["resume-setup"], "Setup ID");
-  if (values["browser-origin"]) {
-    if (!browserMode) throw new Error("--browser-origin requires browser setup");
-    apiUrl(values["browser-origin"], "Browser origin");
-  }
-  if (browserMode) {
-    const conflicts = ["refresh", "dry-run", "install", "skip-install", "integrate", "skip-integrate", "agent-note", "skip-agent-note", "agent-skill", "skip-agent-skill", "global-cli", "skip-global-cli", "cli-access", "skip-cli-access", "workspace", "workspace-name", "site", "site-name", "origin", "environment", "force", "diff", "session-only", "client-id", "credential-store"];
-    if (conflicts.some((key) => values[key] !== void 0 && values[key] !== false)) throw new Error("Browser setup choices are reviewed in the browser. Omit terminal installation/resource flags; ongoing CLI access is a separate login.");
-  }
-  if (values["credential-store"] !== void 0) credentialStoreKind(values["credential-store"]);
   if (values["api-environment"] !== void 0 && !["production", "development"].includes(values["api-environment"]))
     throw new Error("API environment must be development or production");
   if (values.dev && values["api-environment"] === "production")
@@ -217,6 +208,20 @@ async function main() {
   const embeddedProfile = packageProfile();
   const apiEnvironment = values["api-environment"] ?? (values.dev ? "development" : embeddedProfile.apiEnvironment);
   const developmentApi = apiEnvironment === "development";
+  const explicitBrowserMode = Boolean(values["browser-setup"] || values["resume-setup"]);
+  if (values["browser-setup"] && values["resume-setup"]) throw new Error("Choose --browser-setup or --resume-setup");
+  if (values["terminal-setup"] && explicitBrowserMode) throw new Error("Choose --terminal-setup or browser setup");
+  if (values["resume-setup"]) uuid(values["resume-setup"], "Setup ID");
+  const terminalFlags = ["refresh", "dry-run", "install", "skip-install", "integrate", "skip-integrate", "agent-note", "skip-agent-note", "agent-skill", "skip-agent-skill", "global-cli", "skip-global-cli", "cli-access", "skip-cli-access", "workspace", "workspace-name", "site", "site-name", "origin", "environment", "force", "diff", "session-only", "client-id", "credential-store"];
+  const hasTerminalFlags = terminalFlags.some((key) => values[key] !== void 0 && values[key] !== false);
+  const browserMode = explicitBrowserMode || !values["terminal-setup"] && !hasTerminalFlags && !values.yes && !values.json;
+  if (values["browser-origin"]) {
+    if (!browserMode) throw new Error("--browser-origin requires browser setup");
+    apiUrl(values["browser-origin"], "Browser origin");
+  }
+  if (browserMode && hasTerminalFlags)
+    throw new Error("Browser setup choices are reviewed in the browser. Omit terminal installation/resource flags; ongoing CLI access is a separate login.");
+  if (values["credential-store"] !== void 0) credentialStoreKind(values["credential-store"]);
   const newSiteEnvironment = values.environment ?? apiEnvironment;
   if (values["global-cli"] && values["skip-global-cli"]) throw new Error("Choose --global-cli or --skip-global-cli");
   if (values["global-cli"] && values["skip-install"]) throw new Error("--global-cli requires project package installation; omit --skip-install");
@@ -302,7 +307,7 @@ async function main() {
     terminal.cancelState = "the local runner stopped; browser approvals, applied changes and saved drafts remain available when you resume";
     let handled;
     try {
-      handled = await runBrowserWizard({ project, apiOrigin: apiUrl(values["api-url"] ?? (developmentApi ? "https://api-dev.userreason.com" : "https://api.userreason.com")), browserOrigin: values["browser-origin"], resumeId: values["resume-setup"], profile, version, terminal, noOpen: Boolean(values["no-open"]), json: Boolean(values.json), signal: surveyAbort.signal, measurementDisabled: values["no-telemetry"] });
+      handled = await runBrowserWizard({ project, apiOrigin: apiUrl(values["api-url"] ?? (developmentApi ? "https://api-dev.userreason.com" : "https://api.userreason.com")), browserOrigin: values["browser-origin"], resumeId: values["resume-setup"], profile, version, terminal, development: developmentApi, noOpen: Boolean(values["no-open"]), json: Boolean(values.json), signal: surveyAbort.signal, measurementDisabled: values["no-telemetry"] });
     } finally {
       process.off("SIGINT", interrupted);
       process.off("SIGTERM", interrupted);
@@ -695,7 +700,6 @@ async function main() {
     ]);
   } else terminal.block("Changes", [reviewed?.status === "integrated" && !packages.length ? c.muted(`nothing to edit${dot}@userreason/js and @userreason/cli are current`) : installRow]);
   const extras = [];
-  if (developmentApi && interactive && !values.diff) extras.push({ value: "surveys", label: "Recommend surveys (share selected app code with Cerebras and OpenAI)", hint: "Optional. Suggestions first; drafts only when selected. No publishing or event edits.", initial: true });
   if (reviewed?.status === "ready" && additions) extras.push({ value: "edit", label: `${additions.created ? "Create" : "Edit"} ${additions.path}`, hint: "add UserReason.init", initial: true });
   if (noteProbe && "path" in noteProbe) extras.push({ value: "note", label: `${noteProbe.file} ${noteProbe.replacement ? "note update" : "note"}`, hint: "user-feedback guidance", initial: true });
   if (skillProbe && "files" in skillProbe) extras.push({ value: "skill", label: skillProbe.update ? "Agent skill update" : "Agent skill", hint: ".agents/skills/userreason", initial: true });
@@ -853,7 +857,7 @@ Then rerun the wizard. Your saved workspace and site will be reused.`, failure.t
   const globalCli = await measured("global_cli", () => offerGlobalCli(project, terminal, { installed: cliInstalled && !installFailed, ...globalChoice, force: values.install, verbose: values.debug, profile, preview: Boolean(values.diff) }));
   currentStep = "Offering ongoing CLI access";
   const cliAccess = await measured("cli_access", () => offerCliAccess(config, terminal, { installed: cliInstalled && !installFailed, ...accessChoice, noOpen: values["no-open"], development: developmentApi, preview: Boolean(values.diff) }));
-  if (completed && terminal.interactive && !values.yes && !values.json && !values.diff) {
+  if (!developmentApi && completed && terminal.interactive && !values.yes && !values.json && !values.diff) {
     try {
       currentStep = "Creating the first survey";
       await offerFirstSurvey(new UserReasonClient(config, resolveCredentials(config)), project.directory, selectedWorkspace.id, selectedSite.id, {

package/dist/{chunk-SFODN2YB.js → chunk-4INLEQE2.js}

@@ -1,10 +1,10 @@
 import { createRequire as createWizardRequire } from 'node:module'; import { fileURLToPath as wizardFileURLToPath } from 'node:url'; import { dirname as wizardDirname } from 'node:path'; const require = createWizardRequire(import.meta.url); const __filename = wizardFileURLToPath(import.meta.url); const __dirname = wizardDirname(__filename);
 import {
   applyIntegration
-} from "./chunk-5IO5LY22.js";
+} from "./chunk-LEJFE4U5.js";
 import {
   require_typescript
-} from "./chunk-77SK7TKZ.js";
+} from "./chunk-7AAH6C4L.js";
 import {
   __toESM
 } from "./chunk-WL3NOIM6.js";