agent-relay 11.1.1 → 11.3.0

package/dist/cli/telemetry/posthog-config.d.ts

@@ -1,22 +1,28 @@
 /**
  * PostHog configuration.
  *
- * Environment variables (read at runtime):
- *   AGENT_RELAY_POSTHOG_KEY - PostHog write key. Set by published-artifact
- *                              builds via GitHub Actions secret. When unset,
- *                              telemetry runs as a no-op so forks, local dev,
- *                              and CI test runs don't pollute the production
- *                              project.
- *   POSTHOG_API_KEY         - Per-process override (mainly for local
- *                              debugging or staging). Wins over
- *                              `AGENT_RELAY_POSTHOG_KEY` when set.
- *   POSTHOG_HOST            - Override host URL. Defaults to the hosted
- *                              Agent Relay ingestion proxy.
- *
  * Key selection order:
- *   1. POSTHOG_API_KEY (process override, any environment)
- *   2. AGENT_RELAY_POSTHOG_KEY (release-time injection)
- *   3. None → returns `null` and `initTelemetry()` becomes a no-op.
+ *   1. `POSTHOG_API_KEY`         — per-process override (local debugging,
+ *                                  staging swaps). Wins everywhere.
+ *   2. `AGENT_RELAY_POSTHOG_KEY` — runtime env, and the name the bun standalone
+ *                                  build substitutes via `--define`.
+ *   3. `BUILD_TIME_POSTHOG_KEY`  — baked into the published npm tarball by
+ *                                  `scripts/inject-posthog-key.mjs`.
+ *   4. None → returns `null` and `initTelemetry()` becomes a no-op, which is
+ *      what forks, local dev, and CI runs get.
+ *
+ * `POSTHOG_HOST` overrides the ingestion host; it defaults to the hosted Agent
+ * Relay proxy.
+ *
+ * ## The env reads must stay literal
+ *
+ * These MUST remain static `process.env.NAME` member expressions. The bun
+ * `--define` used for the standalone binary performs a *syntactic* substitution
+ * of exactly `process.env.AGENT_RELAY_POSTHOG_KEY`; a computed lookup such as
+ * `process.env[name]` is a different expression and is silently left alone. An
+ * earlier `readKey(name: string)` helper did exactly that, so every standalone
+ * binary shipped with telemetry permanently disabled even though the define was
+ * present in the release workflow. Do not refactor these back behind a variable.
  */
 export declare function getPostHogConfig(): {
     apiKey: string;

package/dist/cli/telemetry/posthog-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"posthog-config.d.ts","sourceRoot":"","sources":["../../../src/cli/telemetry/posthog-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAWH,wBAAgB,gBAAgB,IAAI;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAiB1E"}
+{"version":3,"file":"posthog-config.d.ts","sourceRoot":"","sources":["../../../src/cli/telemetry/posthog-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAYH,wBAAgB,gBAAgB,IAAI;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAuB1E"}

package/dist/cli/telemetry/posthog-config.js

@@ -1,26 +1,32 @@
 /**
  * PostHog configuration.
  *
- * Environment variables (read at runtime):
- *   AGENT_RELAY_POSTHOG_KEY - PostHog write key. Set by published-artifact
- *                              builds via GitHub Actions secret. When unset,
- *                              telemetry runs as a no-op so forks, local dev,
- *                              and CI test runs don't pollute the production
- *                              project.
- *   POSTHOG_API_KEY         - Per-process override (mainly for local
- *                              debugging or staging). Wins over
- *                              `AGENT_RELAY_POSTHOG_KEY` when set.
- *   POSTHOG_HOST            - Override host URL. Defaults to the hosted
- *                              Agent Relay ingestion proxy.
- *
  * Key selection order:
- *   1. POSTHOG_API_KEY (process override, any environment)
- *   2. AGENT_RELAY_POSTHOG_KEY (release-time injection)
- *   3. None → returns `null` and `initTelemetry()` becomes a no-op.
+ *   1. `POSTHOG_API_KEY`         — per-process override (local debugging,
+ *                                  staging swaps). Wins everywhere.
+ *   2. `AGENT_RELAY_POSTHOG_KEY` — runtime env, and the name the bun standalone
+ *                                  build substitutes via `--define`.
+ *   3. `BUILD_TIME_POSTHOG_KEY`  — baked into the published npm tarball by
+ *                                  `scripts/inject-posthog-key.mjs`.
+ *   4. None → returns `null` and `initTelemetry()` becomes a no-op, which is
+ *      what forks, local dev, and CI runs get.
+ *
+ * `POSTHOG_HOST` overrides the ingestion host; it defaults to the hosted Agent
+ * Relay proxy.
+ *
+ * ## The env reads must stay literal
+ *
+ * These MUST remain static `process.env.NAME` member expressions. The bun
+ * `--define` used for the standalone binary performs a *syntactic* substitution
+ * of exactly `process.env.AGENT_RELAY_POSTHOG_KEY`; a computed lookup such as
+ * `process.env[name]` is a different expression and is silently left alone. An
+ * earlier `readKey(name: string)` helper did exactly that, so every standalone
+ * binary shipped with telemetry permanently disabled even though the define was
+ * present in the release workflow. Do not refactor these back behind a variable.
  */
+import { BUILD_TIME_POSTHOG_KEY } from './posthog-key.js';
 const HOST = 'https://i.agentrelay.com';
-function readKey(name) {
-    const raw = process.env[name];
+function nonEmpty(raw) {
     if (!raw)
         return null;
     const trimmed = raw.trim();
@@ -29,13 +35,18 @@ function readKey(name) {
 export function getPostHogConfig() {
     const host = process.env.POSTHOG_HOST || HOST;
     // Process-level override wins for local debugging / staging swaps.
-    const override = readKey('POSTHOG_API_KEY');
+    const override = nonEmpty(process.env.POSTHOG_API_KEY);
     if (override) {
         return { apiKey: override, host };
     }
-    // Release-time injection. CI for forks / dev / tests leaves this unset,
-    // which intentionally turns telemetry into a no-op.
-    const baked = readKey('AGENT_RELAY_POSTHOG_KEY');
+    // Runtime env, and the bun standalone's `--define` target. Literal access —
+    // see the module comment.
+    const injected = nonEmpty(process.env.AGENT_RELAY_POSTHOG_KEY);
+    if (injected) {
+        return { apiKey: injected, host };
+    }
+    // Baked into the published npm artifact at release time.
+    const baked = nonEmpty(BUILD_TIME_POSTHOG_KEY);
     if (baked) {
         return { apiKey: baked, host };
     }

package/dist/cli/telemetry/posthog-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"posthog-config.js","sourceRoot":"","sources":["../../../src/cli/telemetry/posthog-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,IAAI,GAAG,0BAA0B,CAAC;AAExC,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC;IAE9C,mEAAmE;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAED,wEAAwE;IACxE,oDAAoD;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACjD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"posthog-config.js","sourceRoot":"","sources":["../../../src/cli/telemetry/posthog-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,IAAI,GAAG,0BAA0B,CAAC;AAExC,SAAS,QAAQ,CAAC,GAAuB;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC;IAE9C,mEAAmE;IACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACvD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAED,4EAA4E;IAC5E,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC/D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAED,yDAAyD;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAC/C,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/telemetry/posthog-key.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Build-time PostHog write key.
+ *
+ * The published npm package is plain `tsc` output — there is no bundler step
+ * that could inline an env var, and `npm publish --ignore-scripts` rules out a
+ * prepublish hook. So the release pipeline rewrites the *compiled* form of this
+ * module (`scripts/inject-posthog-key.mjs`) after `npm run build`, and the value
+ * ships inside the tarball.
+ *
+ * The key is a PostHog project ingest key: write-only and public by design, the
+ * same category as a Sentry DSN. The Rust broker already ships one via
+ * `option_env!`; this is the TypeScript equivalent.
+ *
+ * Empty here is the correct default — forks, local dev, and CI builds that never
+ * run the injection step ship with telemetry disabled.
+ */
+export declare const BUILD_TIME_POSTHOG_KEY = "";
+//# sourceMappingURL=posthog-key.d.ts.map

package/dist/cli/telemetry/posthog-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"posthog-key.d.ts","sourceRoot":"","sources":["../../../src/cli/telemetry/posthog-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,sBAAsB,KAAK,CAAC"}

package/dist/cli/telemetry/posthog-key.js

@@ -0,0 +1,18 @@
+/**
+ * Build-time PostHog write key.
+ *
+ * The published npm package is plain `tsc` output — there is no bundler step
+ * that could inline an env var, and `npm publish --ignore-scripts` rules out a
+ * prepublish hook. So the release pipeline rewrites the *compiled* form of this
+ * module (`scripts/inject-posthog-key.mjs`) after `npm run build`, and the value
+ * ships inside the tarball.
+ *
+ * The key is a PostHog project ingest key: write-only and public by design, the
+ * same category as a Sentry DSN. The Rust broker already ships one via
+ * `option_env!`; this is the TypeScript equivalent.
+ *
+ * Empty here is the correct default — forks, local dev, and CI builds that never
+ * run the injection step ship with telemetry disabled.
+ */
+export const BUILD_TIME_POSTHOG_KEY = 'phc_2uDu01GtnLABJpVkWw4ri1OgScLU90aEmXmDjufGdqr';
+//# sourceMappingURL=posthog-key.js.map

package/dist/cli/telemetry/posthog-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"posthog-key.js","sourceRoot":"","sources":["../../../src/cli/telemetry/posthog-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC"}