agent-relay 4.0.29 → 4.0.31

package/node_modules/@agent-relay/telemetry/dist/events.d.ts

@@ -5,23 +5,69 @@
  * - snake_case for events and properties
  * - Present tense verbs (spawn, not spawned)
  * - object_action pattern
+ *
+ * Privacy rules for authors:
+ * - Never capture argument values (file paths, run IDs, task text, tokens, URLs).
+ * - Flag NAMES are fine; flag VALUES are not.
+ * - When an event can fail, prefer `error_class` over `error_message` so we
+ *   don't leak user content or paths. `error_class` is typically the Error
+ *   constructor name (`errorClassName(err)`), but it may also be a stable
+ *   synthetic category tag at non-throw failure sites — for example,
+ *   `'WorkflowNotCompleted'` when a workflow returns `status !== 'completed'`
+ *   without throwing. Stick to PascalCase tags so real Error names and
+ *   synthetic categories share one namespace.
  */
 /** Source of spawn/release action */
 export type ActionSource = 'human_cli' | 'human_dashboard' | 'agent' | 'protocol';
-/** Reason for agent release */
-export type ReleaseReason = 'explicit' | 'crash' | 'timeout' | 'shutdown';
+/**
+ * Reason for agent release.
+ *
+ * This is a loose `string` on purpose — the broker emits both product-level
+ * reasons (`'explicit' | 'crash' | 'timeout' | 'shutdown'`) and broker-local
+ * categories that describe *how* the release arrived (`'ws_command'`,
+ * `'relaycast_release'`, etc.). Keeping the type open lets the schema stay
+ * honest about what actually shows up in PostHog without forcing every new
+ * broker category to be a breaking TS change.
+ *
+ * Known values (non-exhaustive):
+ *   - Canonical: `'explicit'`, `'crash'`, `'timeout'`, `'shutdown'`
+ *   - Broker-local: `'ws_command'`, `'relaycast_release'`
+ */
+export type ReleaseReason = string;
 /**
  * Common properties attached to every event.
+ *
+ * Version identification:
+ *   - `cli_version` — version of the `agent-relay` CLI, when the event was
+ *     emitted from the CLI process
+ *   - `sdk_version` — version of `@agent-relay/sdk` resolved/bundled with the
+ *     emitter. Populated when the CLI or broker can discover it.
+ *   - `broker_version` — version of the Rust broker binary. Populated when
+ *     emitted from the broker, or when the CLI is propagating broker info.
+ *   - `agent_relay_version` — kept for backward compatibility with existing
+ *     PostHog dashboards. Mirrors whichever component actually emitted the
+ *     event: `cli_version` on CLI-originated events, `broker_version` on
+ *     broker-originated events.
  */
 export interface CommonProperties {
-    /** Agent Relay version */
+    /** Back-compat alias — same value as the emitter's primary version. */
     agent_relay_version: string;
+    /** `agent-relay` CLI version, if known to the emitter. */
+    cli_version?: string;
+    /** `@agent-relay/sdk` version, if resolvable. */
+    sdk_version?: string;
+    /** `agent-relay-broker` Rust binary version, if known. */
+    broker_version?: string;
     /** Operating system (e.g., darwin, linux, win32) */
     os: string;
-    /** OS release version */
-    os_version: string;
-    /** Node.js version (without 'v' prefix) */
-    node_version: string;
+    /**
+     * OS release version (e.g. `uname -r` output on unix).
+     * Optional — the broker omits this when detection fails on unusual
+     * platforms, and callers should treat its absence as "unknown".
+     */
+    os_version?: string;
+    /** Node.js version (without 'v' prefix). Absent on broker-originated events. */
+    node_version?: string;
     /** CPU architecture (e.g., arm64, x64) */
     arch: string;
 }
@@ -40,6 +86,17 @@ export interface BrokerStopEvent {
     /** Total agents spawned during this session */
     agent_spawn_count: number;
 }
+/**
+ * broker_start_failed - Emitted when the CLI fails to start or connect to a broker.
+ * Captures the stage so we can tell config problems from port conflicts from
+ * binary-not-found, without leaking paths or args.
+ */
+export interface BrokerStartFailedEvent {
+    /** Coarse phase where we gave up — e.g., 'resolve_binary', 'spawn', 'connect', 'handshake' */
+    stage: string;
+    /** Error constructor name (e.g., 'ENOENT', 'ECONNREFUSED', 'Error') */
+    error_class: string;
+}
 /**
  * agent_spawn - Emitted when an agent is created.
  */
@@ -87,20 +144,170 @@ export interface MessageSendEvent {
     has_thread: boolean;
 }
 /**
- * cli_command_run - Emitted when a CLI command is executed.
+ * cli_command_run - Emitted before a CLI command's action runs.
+ * Now fires for every command (not just interactive), via a global Commander hook.
  */
 export interface CliCommandRunEvent {
-    /** Name of the command (e.g., 'up', 'spawn', 'who') */
+    /** Full command path — e.g., 'up', 'cloud login', 'workflows list' */
     command_name: string;
+    /** Names (not values) of flags/options the user explicitly passed on the CLI */
+    flags_used?: string[];
+    /** True when stdin is a TTY — helps tell interactive vs scripted runs apart */
+    is_tty?: boolean;
+    /** Whether this process appears to be running inside CI */
+    is_ci?: boolean;
+}
+/**
+ * cli_command_complete - Emitted after a CLI command finishes (success or failure).
+ * Pairs with cli_command_run by command_name + same session.
+ */
+export interface CliCommandCompleteEvent {
+    /** Full command path — e.g., 'up', 'cloud login' */
+    command_name: string;
+    /** True if the command ran to completion without throwing / without exit(non-zero) */
+    success: boolean;
+    /** Wall-clock duration in milliseconds */
+    duration_ms: number;
+    /** Exit code if the command or top-level handler requested one */
+    exit_code?: number;
+    /** Error constructor name when success=false (e.g., 'Error', 'CommanderError') */
+    error_class?: string;
+}
+export type WorkflowFileType = 'yaml' | 'ts' | 'py' | 'unknown';
+/**
+ * workflow_run - Emitted when `agent-relay run <file>` finishes (success or failure).
+ * Covers the primary product surface — workflow execution from a local file.
+ */
+export interface WorkflowRunEvent {
+    /** Detected workflow file type */
+    file_type: WorkflowFileType;
+    /** True if --dry-run was passed */
+    is_dry_run: boolean;
+    /** True if --resume was passed */
+    is_resume: boolean;
+    /** True if --start-from was passed */
+    is_start_from: boolean;
+    /** True for .ts/.tsx/.py scripts (as opposed to YAML) */
+    is_script: boolean;
+    /** True if the command completed successfully */
+    success: boolean;
+    /** Wall-clock duration in milliseconds */
+    duration_ms: number;
+    /** Error constructor name on failure */
+    error_class?: string;
+}
+/**
+ * cloud_auth - Emitted for cloud account auth flows (login/logout/whoami/connect).
+ * `action` distinguishes the flow; `provider` is only present for `connect`.
+ */
+export interface CloudAuthEvent {
+    /** Which cloud-auth flow ran */
+    action: 'login' | 'logout' | 'whoami' | 'connect';
+    /** True if the flow completed without throwing */
+    success: boolean;
+    /** Wall-clock duration in milliseconds */
+    duration_ms: number;
+    /** Provider id for `connect` flows (e.g., 'anthropic', 'openai') */
+    provider?: string;
+    /** Error constructor name on failure */
+    error_class?: string;
+}
+/**
+ * cloud_workflow_run - Emitted when `agent-relay cloud run` submits a workflow.
+ */
+export interface CloudWorkflowRunEvent {
+    /** Whether --file-type was explicitly set by the user */
+    has_explicit_file_type: boolean;
+    /** Whether --sync-code was enabled (user or default) */
+    sync_code: boolean;
+    /** True if --json output mode was requested */
+    json_output: boolean;
+    /** True if the run was submitted successfully */
+    success: boolean;
+    /** Wall-clock duration in milliseconds */
+    duration_ms: number;
+    /** Error constructor name on failure */
+    error_class?: string;
+}
+/**
+ * provider_auth - Emitted for `agent-relay auth <provider>` (SSH-based provider login).
+ */
+export interface ProviderAuthEvent {
+    /** Normalized provider id (e.g., 'anthropic', 'openai', 'google') */
+    provider: string;
+    /** True if auth completed without throwing */
+    success: boolean;
+    /** Wall-clock duration in milliseconds */
+    duration_ms: number;
+    /** Whether the --use-auth-broker flag was set */
+    use_auth_broker: boolean;
+    /** Whether a one-time --token was provided */
+    used_token: boolean;
+    /** Error constructor name on failure */
+    error_class?: string;
+}
+/**
+ * setup_init - Emitted when the first-run init wizard runs.
+ */
+export interface SetupInitEvent {
+    /** True if running inside a cloud workspace (WORKSPACE_ID set) */
+    is_cloud: boolean;
+    /** True if a broker was already running when init started */
+    broker_was_running: boolean;
+    /** True if the user accepted the prompt to start the broker */
+    user_started_broker: boolean;
+    /** True if --yes was passed (non-interactive) */
+    yes_flag: boolean;
+    /** True if --skip-broker was passed */
+    skip_broker: boolean;
+}
+/**
+ * swarm_run - Emitted when an ad-hoc swarm run finishes.
+ */
+export interface SwarmRunEvent {
+    /** Swarm pattern (e.g., 'fan-out', 'competitive', 'pipeline') */
+    pattern: string;
+    /** Number of teams/stages requested */
+    teams: number;
+    /** CLI tool used for workers */
+    cli: string;
+    /** True if --list was passed */
+    is_list: boolean;
+    /** True if --dry-run was passed */
+    is_dry_run: boolean;
+    /** Exit code from the broker process */
+    exit_code: number;
+    /** Wall-clock duration in milliseconds */
+    duration_ms: number;
+}
+/**
+ * bridge_spawn - Emitted when the multi-project bridge is launched.
+ */
+export interface BridgeSpawnEvent {
+    /** Number of projects being bridged */
+    project_count: number;
+    /** CLI tool override if provided (else 'default') */
+    cli: string;
+    /** True if an architect agent was requested */
+    has_architect: boolean;
 }
-export type TelemetryEventName = 'broker_start' | 'broker_stop' | 'agent_spawn' | 'agent_release' | 'agent_crash' | 'message_send' | 'cli_command_run';
+export type TelemetryEventName = 'broker_start' | 'broker_stop' | 'broker_start_failed' | 'agent_spawn' | 'agent_release' | 'agent_crash' | 'message_send' | 'cli_command_run' | 'cli_command_complete' | 'workflow_run' | 'cloud_auth' | 'cloud_workflow_run' | 'provider_auth' | 'setup_init' | 'swarm_run' | 'bridge_spawn';
 export interface TelemetryEventMap {
     broker_start: BrokerStartEvent;
     broker_stop: BrokerStopEvent;
+    broker_start_failed: BrokerStartFailedEvent;
     agent_spawn: AgentSpawnEvent;
     agent_release: AgentReleaseEvent;
     agent_crash: AgentCrashEvent;
     message_send: MessageSendEvent;
     cli_command_run: CliCommandRunEvent;
+    cli_command_complete: CliCommandCompleteEvent;
+    workflow_run: WorkflowRunEvent;
+    cloud_auth: CloudAuthEvent;
+    cloud_workflow_run: CloudWorkflowRunEvent;
+    provider_auth: ProviderAuthEvent;
+    setup_init: SetupInitEvent;
+    swarm_run: SwarmRunEvent;
+    bridge_spawn: BridgeSpawnEvent;
 }
 //# sourceMappingURL=events.d.ts.map

package/node_modules/@agent-relay/telemetry/dist/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qCAAqC;AACrC,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,iBAAiB,GAAG,OAAO,GAAG,UAAU,CAAC;AAElF,+BAA+B;AAC/B,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0BAA0B;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oDAAoD;IACpD,EAAE,EAAE,MAAM,CAAC;IACX,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;CACd;AAMD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;CAEhC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kDAAkD;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,+CAA+C;IAC/C,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,iCAAiC;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,kCAAkC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,qCAAqC;IACrC,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,iCAAiC;IACjC,cAAc,EAAE,aAAa,CAAC;IAC9B,+CAA+C;IAC/C,gBAAgB,EAAE,MAAM,CAAC;IACzB,mCAAmC;IACnC,cAAc,EAAE,YAAY,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,gBAAgB,EAAE,MAAM,CAAC;IACzB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,YAAY,EAAE,OAAO,CAAC;IACtB,+CAA+C;IAC/C,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,uDAAuD;IACvD,YAAY,EAAE,MAAM,CAAC;CACtB;AAMD,MAAM,MAAM,kBAAkB,GAC1B,cAAc,GACd,aAAa,GACb,aAAa,GACb,eAAe,GACf,aAAa,GACb,cAAc,GACd,iBAAiB,CAAC;AAEtB,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,gBAAgB,CAAC;IAC/B,WAAW,EAAE,eAAe,CAAC;IAC7B,WAAW,EAAE,eAAe,CAAC;IAC7B,aAAa,EAAE,iBAAiB,CAAC;IACjC,WAAW,EAAE,eAAe,CAAC;IAC7B,YAAY,EAAE,gBAAgB,CAAC;IAC/B,eAAe,EAAE,kBAAkB,CAAC;CACrC"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,qCAAqC;AACrC,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,iBAAiB,GAAG,OAAO,GAAG,UAAU,CAAC;AAElF;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AAEnC;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,gBAAgB;IAC/B,uEAAuE;IACvE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,EAAE,EAAE,MAAM,CAAC;IACX;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;CACd;AAMD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;CAEhC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kDAAkD;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,+CAA+C;IAC/C,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,8FAA8F;IAC9F,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,iCAAiC;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,kCAAkC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,qCAAqC;IACrC,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,iCAAiC;IACjC,cAAc,EAAE,aAAa,CAAC;IAC9B,+CAA+C;IAC/C,gBAAgB,EAAE,MAAM,CAAC;IACzB,mCAAmC;IACnC,cAAc,EAAE,YAAY,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,gBAAgB,EAAE,MAAM,CAAC;IACzB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,YAAY,EAAE,OAAO,CAAC;IACtB,+CAA+C;IAC/C,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,YAAY,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,sFAAsF;IACtF,OAAO,EAAE,OAAO,CAAC;IACjB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,SAAS,CAAC;AAEhE;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,mCAAmC;IACnC,UAAU,EAAE,OAAO,CAAC;IACpB,kCAAkC;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,sCAAsC;IACtC,aAAa,EAAE,OAAO,CAAC;IACvB,yDAAyD;IACzD,SAAS,EAAE,OAAO,CAAC;IACnB,iDAAiD;IACjD,OAAO,EAAE,OAAO,CAAC;IACjB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,gCAAgC;IAChC,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClD,kDAAkD;IAClD,OAAO,EAAE,OAAO,CAAC;IACjB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,yDAAyD;IACzD,sBAAsB,EAAE,OAAO,CAAC;IAChC,wDAAwD;IACxD,SAAS,EAAE,OAAO,CAAC;IACnB,+CAA+C;IAC/C,WAAW,EAAE,OAAO,CAAC;IACrB,iDAAiD;IACjD,OAAO,EAAE,OAAO,CAAC;IACjB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,eAAe,EAAE,OAAO,CAAC;IACzB,8CAA8C;IAC9C,UAAU,EAAE,OAAO,CAAC;IACpB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,QAAQ,EAAE,OAAO,CAAC;IAClB,6DAA6D;IAC7D,kBAAkB,EAAE,OAAO,CAAC;IAC5B,+DAA+D;IAC/D,mBAAmB,EAAE,OAAO,CAAC;IAC7B,iDAAiD;IACjD,QAAQ,EAAE,OAAO,CAAC;IAClB,uCAAuC;IACvC,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,gCAAgC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,mCAAmC;IACnC,UAAU,EAAE,OAAO,CAAC;IACpB,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,uCAAuC;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,aAAa,EAAE,OAAO,CAAC;CACxB;AAMD,MAAM,MAAM,kBAAkB,GAC1B,cAAc,GACd,aAAa,GACb,qBAAqB,GACrB,aAAa,GACb,eAAe,GACf,aAAa,GACb,cAAc,GACd,iBAAiB,GACjB,sBAAsB,GACtB,cAAc,GACd,YAAY,GACZ,oBAAoB,GACpB,eAAe,GACf,YAAY,GACZ,WAAW,GACX,cAAc,CAAC;AAEnB,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,gBAAgB,CAAC;IAC/B,WAAW,EAAE,eAAe,CAAC;IAC7B,mBAAmB,EAAE,sBAAsB,CAAC;IAC5C,WAAW,EAAE,eAAe,CAAC;IAC7B,aAAa,EAAE,iBAAiB,CAAC;IACjC,WAAW,EAAE,eAAe,CAAC;IAC7B,YAAY,EAAE,gBAAgB,CAAC;IAC/B,eAAe,EAAE,kBAAkB,CAAC;IACpC,oBAAoB,EAAE,uBAAuB,CAAC;IAC9C,YAAY,EAAE,gBAAgB,CAAC;IAC/B,UAAU,EAAE,cAAc,CAAC;IAC3B,kBAAkB,EAAE,qBAAqB,CAAC;IAC1C,aAAa,EAAE,iBAAiB,CAAC;IACjC,UAAU,EAAE,cAAc,CAAC;IAC3B,SAAS,EAAE,aAAa,CAAC;IACzB,YAAY,EAAE,gBAAgB,CAAC;CAChC"}

package/node_modules/@agent-relay/telemetry/dist/events.js

@@ -5,6 +5,17 @@
  * - snake_case for events and properties
  * - Present tense verbs (spawn, not spawned)
  * - object_action pattern
+ *
+ * Privacy rules for authors:
+ * - Never capture argument values (file paths, run IDs, task text, tokens, URLs).
+ * - Flag NAMES are fine; flag VALUES are not.
+ * - When an event can fail, prefer `error_class` over `error_message` so we
+ *   don't leak user content or paths. `error_class` is typically the Error
+ *   constructor name (`errorClassName(err)`), but it may also be a stable
+ *   synthetic category tag at non-throw failure sites — for example,
+ *   `'WorkflowNotCompleted'` when a workflow returns `status !== 'completed'`
+ *   without throwing. Stick to PascalCase tags so real Error names and
+ *   synthetic categories share one namespace.
  */
 export {};
 //# sourceMappingURL=events.js.map

package/node_modules/@agent-relay/telemetry/dist/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG"}

package/node_modules/@agent-relay/telemetry/dist/index.d.ts

@@ -1,8 +1,8 @@
 /**
  * @agent-relay/telemetry - Anonymous usage analytics (opt-out via env or CLI)
  */
-export { initTelemetry, track, shutdown, isEnabled, getAnonymousId, getStatus, } from './client.js';
+export { initTelemetry, track, shutdown, isEnabled, getAnonymousId, getStatus, type InitTelemetryOptions, } from './client.js';
 export { isTelemetryEnabled, enableTelemetry, disableTelemetry, wasNotified, markNotified, loadPrefs, savePrefs, getPrefsPath, isDisabledByEnv, type TelemetryPrefs, } from './config.js';
-export type { CommonProperties, ActionSource, ReleaseReason, BrokerStartEvent, BrokerStopEvent, AgentSpawnEvent, AgentReleaseEvent, AgentCrashEvent, MessageSendEvent, CliCommandRunEvent, TelemetryEventName, TelemetryEventMap, } from './events.js';
+export type { CommonProperties, ActionSource, ReleaseReason, WorkflowFileType, BrokerStartEvent, BrokerStopEvent, BrokerStartFailedEvent, AgentSpawnEvent, AgentReleaseEvent, AgentCrashEvent, MessageSendEvent, CliCommandRunEvent, CliCommandCompleteEvent, WorkflowRunEvent, CloudAuthEvent, CloudWorkflowRunEvent, ProviderAuthEvent, SetupInitEvent, SwarmRunEvent, BridgeSpawnEvent, TelemetryEventName, TelemetryEventMap, } from './events.js';
 export { loadMachineId, createAnonymousId, getMachineIdPath, } from './machine-id.js';
 //# sourceMappingURL=index.d.ts.map

package/node_modules/@agent-relay/telemetry/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,aAAa,EACb,KAAK,EACL,QAAQ,EACR,SAAS,EACT,cAAc,EACd,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,SAAS,EACT,SAAS,EACT,YAAY,EACZ,eAAe,EACf,KAAK,cAAc,GACpB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,aAAa,EACb,KAAK,EACL,QAAQ,EACR,SAAS,EACT,cAAc,EACd,SAAS,EACT,KAAK,oBAAoB,GAC1B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,SAAS,EACT,SAAS,EACT,YAAY,EACZ,eAAe,EACf,KAAK,cAAc,GACpB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC"}

package/node_modules/@agent-relay/telemetry/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,aAAa,EACb,KAAK,EACL,QAAQ,EACR,SAAS,EACT,cAAc,EACd,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,SAAS,EACT,SAAS,EACT,YAAY,EACZ,eAAe,GAEhB,MAAM,aAAa,CAAC;AAiBrB,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,aAAa,EACb,KAAK,EACL,QAAQ,EACR,SAAS,EACT,cAAc,EACd,SAAS,GAEV,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,SAAS,EACT,SAAS,EACT,YAAY,EACZ,eAAe,GAEhB,MAAM,aAAa,CAAC;AA2BrB,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC"}

package/node_modules/@agent-relay/telemetry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/telemetry",
-  "version": "4.0.29",
+  "version": "4.0.31",
   "description": "Anonymous telemetry for Agent Relay usage analytics",
   "type": "module",
   "main": "dist/index.js",
@@ -23,7 +23,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "posthog-node": "^4.0.1"
+    "posthog-node": "^5.29.2"
   },
   "devDependencies": {
     "@types/node": "^22.19.3",

package/node_modules/@agent-relay/trajectory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/trajectory",
-  "version": "4.0.29",
+  "version": "4.0.31",
   "description": "Trajectory integration utilities (trail/PDERO) for Relay",
   "type": "module",
   "main": "dist/index.js",
@@ -22,7 +22,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@agent-relay/config": "4.0.29"
+    "@agent-relay/config": "4.0.31"
   },
   "devDependencies": {
     "@types/node": "^22.19.3",

package/node_modules/@agent-relay/user-directory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/user-directory",
-  "version": "4.0.29",
+  "version": "4.0.31",
   "description": "User directory service for agent-relay (per-user credential storage)",
   "type": "module",
   "main": "dist/index.js",
@@ -22,7 +22,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@agent-relay/utils": "4.0.29"
+    "@agent-relay/utils": "4.0.31"
   },
   "devDependencies": {
     "@types/node": "^22.19.3",

package/node_modules/@agent-relay/utils/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/utils",
-  "version": "4.0.29",
+  "version": "4.0.31",
   "description": "Shared utilities for agent-relay: logging, name generation, command resolution, update checking",
   "type": "module",
   "main": "dist/cjs/index.js",
@@ -111,7 +111,7 @@
     "vitest": "^3.2.4"
   },
   "dependencies": {
-    "@agent-relay/config": "4.0.29",
+    "@agent-relay/config": "4.0.31",
     "compare-versions": "^6.1.1"
   },
   "publishConfig": {

package/node_modules/@relaycast/sdk/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const SDK_VERSION: "1.1.2";
+export declare const SDK_VERSION: "1.1.3";
 //# sourceMappingURL=version.d.ts.map

package/node_modules/@relaycast/sdk/dist/version.js

@@ -1,2 +1,2 @@
-export const SDK_VERSION = "1.1.2";
+export const SDK_VERSION = "1.1.3";
 //# sourceMappingURL=version.js.map

package/node_modules/@relaycast/sdk/node_modules/@relaycast/types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@relaycast/types",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/node_modules/@relaycast/sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@relaycast/sdk",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -22,7 +22,7 @@
     "lint": "eslint src/"
   },
   "dependencies": {
-    "@relaycast/types": "1.1.2",
+    "@relaycast/types": "1.1.3",
     "zod": "^4.3.6"
   },
   "devDependencies": {

package/node_modules/axios/CHANGELOG.md

@@ -1,5 +1,171 @@
 # Changelog
 
+## v1.15.0 — April 7, 2026
+
+This release delivers two critical security patches targeting header injection and SSRF via proxy bypass, adds official runtime support for Deno and Bun, and includes significant CI security hardening.
+
+## 🔒 Security Fixes
+
+* **Header Injection (CRLF):** Rejects any header value containing `\r` or `\n` characters to block CRLF injection chains that could be used to exfiltrate cloud metadata (IMDS). Behavior change: headers with CR/LF now throw `"Invalid character in header content"`. (__#10660__)
+
+* **SSRF via `no_proxy` Bypass:** Introduces a `shouldBypassProxy` helper that normalises hostnames (strips trailing dots, handles bracketed IPv6) before evaluating `no_proxy`/`NO_PROXY` rules, closing a gap that could cause loopback or internal hosts to be inadvertently proxied. (__#10661__)
+
+## 🚀 New Features
+
+* **Deno & Bun Runtime Support:** Added full smoke test suites for Deno and Bun, with CI workflows that run both runtimes before any release is cut. (__#10652__)
+
+## 🐛 Bug Fixes
+
+* **Node.js v22 Compatibility:** Replaced deprecated `url.parse()` calls with the WHATWG `URL`/`URLSearchParams` API across examples, sandbox, and tests, eliminating `DEP0169` deprecation warnings on Node.js v22+. (__#10625__)
+
+## 🔧 Maintenance & Chores
+
+* **CI Security Hardening:** Added [zizmor](https://github.com/zizmorcore/zizmor) GitHub Actions security scanner; switched npm publish to OIDC Trusted Publishing (removing the long-lived `NODE_AUTH_TOKEN`); pinned all action references to full commit SHAs; narrowed workflow permissions to least privilege; gated the publish step behind a dedicated `npm-publish` environment; and blocked the sponsor-block workflow from running on forks. (__#10618__, __#10619__, __#10627__, __#10637__, __#10641__, __#10666__)
+
+* **Docs:** Clarified HTTP/2 support and the unsupported `httpVersion` option; added documentation for header case preservation; improved the `beforeRedirect` example to prevent accidental credential leakage. (__#10644__, __#10654__, __#10624__)
+
+* **Dependencies:** Bumped `picomatch`, `handlebars`, `serialize-javascript`, `vite` (×3), `denoland/setup-deno`, and 4 additional dev dependencies to latest versions. (__#10564__, __#10565__, __#10567__, __#10568__, __#10572__, __#10574__, __#10663__, __#10664__, __#10665__, __#10669__, __#10670__)
+
+## 🌟 New Contributors
+
+We are thrilled to welcome our new contributors. Thank you for helping improve axios:
+
+* **@Kilros0817** (__#10625__)
+* **@shaanmajid** (__#10616__, __#10617__, __#10618__, __#10619__, __#10637__, __#10641__, __#10666__)
+* **@ashstrc** (__#10624__, __#10644__)
+* **@Abhi3975** (__#10589__)
+* **@raashish1601** (__#10573__)
+
+[Full Changelog](https://github.com/axios/axios/compare/v1.14.0...v1.15.0)
+
+---
+
+## v1.14.0 — March 27, 2026
+
+This release fixes a security vulnerability in the `formidable` dependency, resolves a CommonJS compatibility regression, hardens proxy and HTTP/2 handling, and modernises the build and test toolchain.
+
+## 🔒 Security Fixes
+
+* **Formidable Vulnerability:** Upgraded `formidable` from v2 to v3 to address a reported arbitrary-file vulnerability. Updated test server and assertions to align with the v3 API. (__#7533__)
+
+## 🐛 Bug Fixes
+
+* **CommonJS Compatibility:** Restored `require('axios')` in Node.js by correcting the `main` field in `package.json` to point to the built CJS bundle. (__#7532__)
+
+* **Fetch Adapter:** Cancel the `ReadableStream` body after the request stream capability probe to prevent resource leaks. (__#7515__)
+
+* **Proxy:** Upgraded `proxy-from-env` to v2 and switched to the named `getProxyForUrl` export, fixing proxy detection from environment variables and resolving CJS bundling errors. (__#7499__)
+
+* **HTTP/2:** Close detached HTTP/2 sessions on timeout to free resources when no new requests arrive. (__#7457__)
+
+* **Headers:** Trim trailing CRLF characters from normalised header values. (__#7456__)
+
+## 🔧 Maintenance & Chores
+
+* **Toolchain Modernisation:** Migrated test suite to Vitest, updated ESLint to v10, upgraded Rollup and `@rollup/plugin-babel`, migrated to Husky 9, upgraded TypeScript to latest, and modernised the Express test harness. (__#7484__, __#7489__, __#7498__, __#7505__, __#7506__, __#7507__, __#7508__, __#7509__, __#7510__, __#7516__, __#7522__)
+
+* **Dependencies:** Bumped `multer` to v2, `minimatch`, `tar`, `pacote`, `@babel/preset-env`, and additional dev dependencies. (__#7453__, __#7480__, __#7491__, __#7504__, __#7517__, __#7531__)
+
+## 🌟 New Contributors
+
+We are thrilled to welcome our new contributors. Thank you for helping improve axios:
+
+* **@penkzhou** (__#7515__)
+* **@aviu16** (__#7456__)
+* **@fedotov** (__#7457__)
+
+[Full Changelog](https://github.com/axios/axios/compare/v1.13.6...v1.14.0)
+
+---
+
+## v1.13.6 — February 27, 2026
+
+This release adds React Native Blob support, fixes several enumeration and export regressions, and patches FormData detection for WeChat Mini Program environments.
+
+## 🚀 New Features
+
+* **React Native Blob Support:** Axios now correctly handles native Blob objects in React Native environments. (__#5764__)
+
+## 🐛 Bug Fixes
+
+* **AxiosError:** Fixed `AxiosError.from` not copying the `status` field from the source error. (__#7403__)
+
+* **AxiosError:** Made the `message` property enumerable so it appears in `JSON.stringify` output and `Object.keys`. (__#7392__)
+
+* **FormData Detection:** Corrected safe FormData detection for WeChat Mini Program environments. (__#7324__)
+
+* **React Native / Browserify Export:** Fixed broken module export that caused import failures in React Native and Browserify. (__#7386__)
+
+## 🔧 Maintenance & Chores
+
+* **Dependencies:** Migrated `@rollup/plugin-babel` from v5 to v6 and bumped the development dependencies group. (__#7424__, __#7432__)
+
+## 🌟 New Contributors
+
+We are thrilled to welcome our new contributors. Thank you for helping improve axios:
+
+* **@moh3n9595** (__#5764__)
+* **@skrtheboss** (__#7403__)
+* **@ybbus** (__#7392__)
+* **@Shiwaangee** (__#7324__)
+* **@Gudahtt** (__#7386__)
+
+[Full Changelog](https://github.com/axios/axios/compare/v1.13.5...v1.13.6)
+
+---
+
+## v1.13.5 — February 8, 2026
+
+This release patches a prototype pollution denial-of-service vulnerability, fixes a missing `status` field regression in `AxiosError`, adds interceptor ordering control, and introduces URL validation for `isAbsoluteURL`.
+
+## 🔒 Security Fixes
+
+* **Prototype Pollution (DoS):** Hardened `mergeConfig` to ignore `__proto__`, `constructor`, and `prototype` keys, preventing denial-of-service via prototype pollution when merging user-supplied config. (__#7369__)
+
+## 🚀 New Features
+
+* **`isAbsoluteURL` Validation:** Added input validation to `isAbsoluteURL` to handle malformed or unexpected input gracefully. (__#7326__)
+
+## 🐛 Bug Fixes
+
+* **AxiosError `status`:** Restored the `status` field on `AxiosError` instances, which was missing in v1.13.3 and later. (__#7368__)
+
+* **Interceptor Ordering:** Added a `useLegacyInterceptorOrder` option to restore pre-v1.13 interceptor execution order for applications relying on the previous behaviour. ([569f028](https://github.com/axios/axios/commit/569f028a5878faaec8d7d138ba686aac407bda4c))
+
+## 🔧 Maintenance & Chores
+
+* **CI:** Fixed run conditions and updated workflow YAMLs. (__#7372__, __#7373__)
+
+* **Dependencies:** Bumped `karma-sourcemap-loader` and minor package versions. (__#7356__, __#7360__)
+
+## 🌟 New Contributors
+
+We are thrilled to welcome our new contributors. Thank you for helping improve axios:
+
+* **@asmitha-16** (__#7326__)
+
+[Full Changelog](https://github.com/axios/axios/compare/v1.13.4...v1.13.5)
+
+---
+
+## v1.13.4 — January 27, 2026
+
+Patch release fixing regressions introduced in v1.13.3, including TypeScript export compatibility and CI/build stability.
+
+## 🐛 Bug Fixes
+
+* **v1.13.3 Regressions:** Fixed multiple issues introduced by the v1.13.3 release, including broken merge configs. (__#7352__)
+
+* **TypeScript Exports:** Corrected TypeScript export declarations to restore proper type resolution. (__#4884__)
+
+## 🔧 Maintenance & Chores
+
+* **CI & Build:** Refactored CI pipeline and build configuration for stability. (__#7340__)
+
+[Full Changelog](https://github.com/axios/axios/compare/v1.13.3...v1.13.4)
+
+---
+
 ## [1.13.3](https://github.com/axios/axios/compare/v1.13.2...v1.13.3) (2026-01-20)
 
 ### Bug Fixes