brakit 0.9.0 → 0.9.1

package/dist/api.d.ts

@@ -348,10 +348,12 @@ declare function detectProject(rootDir: string): Promise<DetectedProject>;
 declare class AdapterRegistry {
     private adapters;
     private active;
+    private failed;
     register(adapter: BrakitAdapter): void;
     patchAll(emit: (event: TelemetryEvent) => void): void;
     unpatchAll(): void;
     getActive(): readonly BrakitAdapter[];
+    getFailed(): readonly string[];
 }
 
 interface AnalysisUpdate {

package/dist/api.js

@@ -54,6 +54,7 @@ var BASELINE_MIN_SESSIONS = 2;
 var BASELINE_MIN_REQUESTS_PER_SESSION = 3;
 var ISSUES_FILE = "issues.json";
 var ISSUES_FLUSH_INTERVAL_MS = 1e4;
+var DETAIL_PREVIEW_LENGTH = 120;
 
 // src/utils/log.ts
 var PREFIX = "[brakit]";
@@ -429,6 +430,7 @@ var AdapterRegistry = class {
   constructor() {
     this.adapters = [];
     this.active = [];
+    this.failed = [];
   }
   register(adapter) {
     this.adapters.push(adapter);
@@ -441,6 +443,7 @@ var AdapterRegistry = class {
           this.active.push(adapter);
         }
       } catch {
+        this.failed.push(adapter.name);
       }
     }
   }
@@ -456,6 +459,9 @@ var AdapterRegistry = class {
   getActive() {
     return this.active;
   }
+  getFailed() {
+    return this.failed;
+  }
 };
 
 // src/utils/response.ts
@@ -774,7 +780,7 @@ var stackTraceLeakRule = {
           title: "Stack Trace Leaked to Client",
           desc: `${ep} \u2014 response exposes internal stack trace`,
           hint: this.hint,
-          detail: firstLine ? `Stack trace: ${firstLine.slice(0, 120)}` : void 0,
+          detail: firstLine ? `Stack trace: ${firstLine.slice(0, DETAIL_PREVIEW_LENGTH)}` : void 0,
           endpoint: ep,
           count: 1
         }
@@ -1664,7 +1670,7 @@ var n1Rule = {
           title: "N+1 Query Pattern",
           desc: `${endpoint} runs ${shapeGroup.count}x ${info.op} ${info.table} with different params in a single request`,
           hint: "This typically happens when fetching related data in a loop. Use a batch query, JOIN, or include/eager-load to fetch all records at once.",
-          detail: `${shapeGroup.count} queries with ${shapeGroup.distinctSql.size} distinct param variations. Example: ${[...shapeGroup.distinctSql][0]?.slice(0, 100) ?? info.op + " " + info.table}`
+          detail: `${shapeGroup.count} queries with ${shapeGroup.distinctSql.size} distinct param variations. Example: ${[...shapeGroup.distinctSql][0]?.slice(0, DETAIL_PREVIEW_LENGTH) ?? info.op + " " + info.table}`
         });
       }
     }
@@ -1703,7 +1709,7 @@ var redundantQueryRule = {
           title: "Redundant Query",
           desc: `${label} runs ${entry.count}x with identical params in ${endpoint}.`,
           hint: "The exact same query with identical parameters runs multiple times in one request. Cache the first result or lift the query to a shared function.",
-          detail: entry.first.sql ? `Query: ${entry.first.sql.slice(0, 120)}` : void 0
+          detail: entry.first.sql ? `Query: ${entry.first.sql.slice(0, DETAIL_PREVIEW_LENGTH)}` : void 0
         });
       }
     }
@@ -2235,7 +2241,7 @@ var AnalysisEngine = class {
 };
 
 // src/index.ts
-var VERSION = "0.9.0";
+var VERSION = "0.9.1";
 export {
   AdapterRegistry,
   AnalysisEngine,

package/dist/bin/brakit.js

@@ -10,7 +10,7 @@ var __export = (target, all) => {
 };
 
 // src/constants/config.ts
-var PROJECT_HASH_LENGTH, SECRET_SCAN_ARRAY_LIMIT, PII_SCAN_ARRAY_LIMIT, MIN_SECRET_VALUE_LENGTH, FULL_RECORD_MIN_FIELDS, LIST_PII_MIN_ITEMS, MAX_OBJECT_SCAN_DEPTH, ISSUE_PRUNE_TTL_MS, OVERFETCH_UNWRAP_MIN_SIZE, STALE_ISSUE_TTL_MS, METRICS_DIR, PORT_FILE, VALID_ISSUE_STATES, VALID_AI_FIX_STATUSES, VALID_SECURITY_SEVERITIES;
+var PROJECT_HASH_LENGTH, SECRET_SCAN_ARRAY_LIMIT, PII_SCAN_ARRAY_LIMIT, MIN_SECRET_VALUE_LENGTH, FULL_RECORD_MIN_FIELDS, LIST_PII_MIN_ITEMS, MAX_OBJECT_SCAN_DEPTH, ISSUE_PRUNE_TTL_MS, OVERFETCH_UNWRAP_MIN_SIZE, STALE_ISSUE_TTL_MS, METRICS_DIR, PORT_FILE, VALID_ISSUE_STATES, VALID_AI_FIX_STATUSES, VALID_SECURITY_SEVERITIES, TELEMETRY_EVENT_CLI_INVOKED, TELEMETRY_EVENT_CLI_UNINSTALL, DETAIL_PREVIEW_LENGTH;
 var init_config = __esm({
   "src/constants/config.ts"() {
     "use strict";
@@ -29,6 +29,9 @@ var init_config = __esm({
     VALID_ISSUE_STATES = /* @__PURE__ */ new Set(["open", "fixing", "resolved", "stale", "regressed"]);
     VALID_AI_FIX_STATUSES = /* @__PURE__ */ new Set(["fixed", "wont_fix"]);
     VALID_SECURITY_SEVERITIES = /* @__PURE__ */ new Set(["critical", "warning"]);
+    TELEMETRY_EVENT_CLI_INVOKED = "cli_invoked";
+    TELEMETRY_EVENT_CLI_UNINSTALL = "cli_uninstall";
+    DETAIL_PREVIEW_LENGTH = 120;
   }
 });
 
@@ -70,7 +73,7 @@ var init_type_guards = __esm({
 });
 
 // src/constants/labels.ts
-var DASHBOARD_PREFIX, DASHBOARD_API_REQUESTS, DASHBOARD_API_EVENTS, DASHBOARD_API_FLOWS, DASHBOARD_API_CLEAR, DASHBOARD_API_LOGS, DASHBOARD_API_FETCHES, DASHBOARD_API_ERRORS, DASHBOARD_API_QUERIES, DASHBOARD_API_INGEST, DASHBOARD_API_METRICS, DASHBOARD_API_ACTIVITY, DASHBOARD_API_METRICS_LIVE, DASHBOARD_API_INSIGHTS, DASHBOARD_API_SECURITY, DASHBOARD_API_TAB, DASHBOARD_API_FINDINGS, DASHBOARD_API_FINDINGS_REPORT, VALID_TABS_TUPLE, VALID_TABS;
+var DASHBOARD_PREFIX, DASHBOARD_API_REQUESTS, DASHBOARD_API_EVENTS, DASHBOARD_API_FLOWS, DASHBOARD_API_CLEAR, DASHBOARD_API_LOGS, DASHBOARD_API_FETCHES, DASHBOARD_API_ERRORS, DASHBOARD_API_QUERIES, DASHBOARD_API_INGEST, DASHBOARD_API_METRICS, DASHBOARD_API_ACTIVITY, DASHBOARD_API_METRICS_LIVE, DASHBOARD_API_INSIGHTS, DASHBOARD_API_SECURITY, DASHBOARD_API_TAB, DASHBOARD_API_FINDINGS, DASHBOARD_API_FINDINGS_REPORT, VALID_TABS_TUPLE, VALID_TABS, POSTHOG_HOST, POSTHOG_CAPTURE_PATH, POSTHOG_REQUEST_TIMEOUT_MS;
 var init_labels = __esm({
   "src/constants/labels.ts"() {
     "use strict";
@@ -104,11 +107,14 @@ var init_labels = __esm({
       "security"
     ];
     VALID_TABS = new Set(VALID_TABS_TUPLE);
+    POSTHOG_HOST = "https://us.i.posthog.com";
+    POSTHOG_CAPTURE_PATH = "/i/v0/e/";
+    POSTHOG_REQUEST_TIMEOUT_MS = 3e3;
   }
 });
 
 // src/constants/features.ts
-var SUPPORTED_SOURCE_EXTENSIONS, BUILD_CACHE_DIRS, FALLBACK_SCAN_DIRS, MCP_SERVER_NAME, INITIAL_DISCOVERY_TIMEOUT_MS, LAZY_DISCOVERY_TIMEOUT_MS, CLIENT_FETCH_TIMEOUT_MS, HEALTH_CHECK_TIMEOUT_MS, DISCOVERY_POLL_INTERVAL_MS, MAX_DISCOVERY_DEPTH, MAX_TIMELINE_EVENTS, MAX_RESOLVED_DISPLAY, ENRICHMENT_SEVERITY_FILTER, MCP_SERVER_VERSION, RECOVERY_WINDOW_MS, PORT_MIN, PORT_MAX;
+var SUPPORTED_SOURCE_EXTENSIONS, BUILD_CACHE_DIRS, FALLBACK_SCAN_DIRS, MCP_SERVER_NAME, INITIAL_DISCOVERY_TIMEOUT_MS, LAZY_DISCOVERY_TIMEOUT_MS, CLIENT_FETCH_TIMEOUT_MS, HEALTH_CHECK_TIMEOUT_MS, DISCOVERY_POLL_INTERVAL_MS, MAX_DISCOVERY_DEPTH, MAX_TIMELINE_EVENTS, MAX_RESOLVED_DISPLAY, ENRICHMENT_SEVERITY_FILTER, MCP_SERVER_VERSION, RECOVERY_WINDOW_MS, PORT_MIN, PORT_MAX, DIR_MODE_OWNER_ONLY, FILE_MODE_OWNER_ONLY;
 var init_features = __esm({
   "src/constants/features.ts"() {
     "use strict";
@@ -132,10 +138,12 @@ var init_features = __esm({
     MAX_TIMELINE_EVENTS = 20;
     MAX_RESOLVED_DISPLAY = 5;
     ENRICHMENT_SEVERITY_FILTER = ["critical", "warning"];
-    MCP_SERVER_VERSION = "0.9.0";
+    MCP_SERVER_VERSION = "0.9.1";
     RECOVERY_WINDOW_MS = 5 * 60 * 1e3;
     PORT_MIN = 1;
     PORT_MAX = 65535;
+    DIR_MODE_OWNER_ONLY = 448;
+    FILE_MODE_OWNER_ONLY = 384;
   }
 });
 
@@ -307,8 +315,8 @@ async function searchForPort(startDir) {
   }
   return null;
 }
-async function discoverBrakitPort(cwd) {
-  const port = await searchForPort(cwd ?? process.cwd());
+async function discoverBrakitPort(cwd2) {
+  const port = await searchForPort(cwd2 ?? process.cwd());
   if (!port) {
     throw new Error(
       "Brakit is not running. Start your app with brakit enabled first."
@@ -316,11 +324,11 @@ async function discoverBrakitPort(cwd) {
   }
   return { port, baseUrl: `http://localhost:${port}` };
 }
-async function waitForBrakit(cwd, timeoutMs = 1e4, pollMs = DISCOVERY_POLL_INTERVAL_MS) {
+async function waitForBrakit(cwd2, timeoutMs = 1e4, pollMs = DISCOVERY_POLL_INTERVAL_MS) {
   const deadline = Date.now() + timeoutMs;
   while (Date.now() < deadline) {
     try {
-      const result = await discoverBrakitPort(cwd);
+      const result = await discoverBrakitPort(cwd2);
       const res = await fetch(`${result.baseUrl}${DASHBOARD_API_REQUESTS}?limit=1`);
       if (res.ok) return result;
     } catch {
@@ -1047,6 +1055,8 @@ var init_server = __esm({
 
 // bin/brakit.ts
 import { runMain } from "citty";
+import { existsSync as existsSync7 } from "fs";
+import { resolve as resolve6 } from "path";
 
 // src/cli/commands/install.ts
 import { defineCommand } from "citty";
@@ -1563,7 +1573,7 @@ var stackTraceLeakRule = {
           title: "Stack Trace Leaked to Client",
           desc: `${ep} \u2014 response exposes internal stack trace`,
           hint: this.hint,
-          detail: firstLine ? `Stack trace: ${firstLine.slice(0, 120)}` : void 0,
+          detail: firstLine ? `Stack trace: ${firstLine.slice(0, DETAIL_PREVIEW_LENGTH)}` : void 0,
           endpoint: ep,
           count: 1
         }
@@ -1802,7 +1812,7 @@ init_constants();
 init_endpoint();
 
 // src/index.ts
-var VERSION = "0.9.0";
+var VERSION = "0.9.1";
 
 // src/cli/commands/install.ts
 init_constants();
@@ -2014,8 +2024,8 @@ async function setupNuxt(rootDir) {
   }
   const content = BRAKIT_TEMPLATES.nuxt + "\n";
   const dir = join3(rootDir, "server/plugins");
-  const { mkdirSync: mkdirSync3 } = await import("fs");
-  mkdirSync3(dir, { recursive: true });
+  const { mkdirSync: mkdirSync4 } = await import("fs");
+  mkdirSync4(dir, { recursive: true });
   await writeFile3(absPath, content);
   return { action: "created", file: relPath, content };
 }
@@ -2114,13 +2124,118 @@ function printManualInstructions(framework) {
 
 // src/cli/commands/uninstall.ts
 import { defineCommand as defineCommand2 } from "citty";
-import { resolve as resolve4, join as join4, relative as relative2 } from "path";
+import { resolve as resolve4, join as join5, relative as relative2 } from "path";
 import { readFile as readFile5, writeFile as writeFile4, unlink, rm, readdir as readdir2 } from "fs/promises";
 import { execSync as execSync2 } from "child_process";
 import pc2 from "picocolors";
 init_constants();
 init_log();
 init_type_guards();
+
+// src/telemetry/index.ts
+import { platform as platform2, release, arch } from "os";
+import { spawn } from "child_process";
+
+// src/telemetry/config.ts
+init_features();
+import { homedir as homedir2, platform } from "os";
+import { join as join4 } from "path";
+import { existsSync as existsSync6, readFileSync as readFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync3 } from "fs";
+import { randomUUID as randomUUID2 } from "crypto";
+var IS_WINDOWS = platform() === "win32";
+var CONFIG_DIR = join4(homedir2(), ".brakit");
+var CONFIG_PATH = join4(CONFIG_DIR, "config.json");
+function readConfig() {
+  try {
+    if (!existsSync6(CONFIG_PATH)) return null;
+    return JSON.parse(readFileSync3(CONFIG_PATH, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function writeConfig(config) {
+  try {
+    if (!existsSync6(CONFIG_DIR))
+      mkdirSync3(CONFIG_DIR, { recursive: true, ...IS_WINDOWS ? {} : { mode: DIR_MODE_OWNER_ONLY } });
+    writeFileSync3(
+      CONFIG_PATH,
+      JSON.stringify(config, null, 2) + "\n",
+      IS_WINDOWS ? {} : { mode: FILE_MODE_OWNER_ONLY }
+    );
+  } catch (err) {
+    if (process.env.BRAKIT_DEBUG) {
+      process.stderr.write(`[brakit] config write failed: ${err?.message ?? err}
+`);
+    }
+  }
+}
+function getOrCreateConfig() {
+  const existing = readConfig();
+  if (existing && typeof existing.telemetry === "boolean" && existing.anonymousId) {
+    return existing;
+  }
+  const config = { telemetry: true, anonymousId: randomUUID2() };
+  writeConfig(config);
+  return config;
+}
+var cachedEnabled = null;
+function isTelemetryEnabled() {
+  if (cachedEnabled !== null) return cachedEnabled;
+  const env = process.env.BRAKIT_TELEMETRY;
+  if (env !== void 0) {
+    cachedEnabled = env !== "false" && env !== "0" && env !== "off";
+    return cachedEnabled;
+  }
+  cachedEnabled = readConfig()?.telemetry ?? true;
+  return cachedEnabled;
+}
+
+// src/telemetry/index.ts
+init_labels();
+init_config();
+var POSTHOG_KEY = "phc_E9TwydCGnSfPLIUhNxChpeg32TSowjk31KiPhnLPP0x";
+function commonProperties() {
+  return {
+    brakit_version: VERSION,
+    node_version: process.version,
+    os: `${platform2()}-${release()}`,
+    arch: arch(),
+    $lib: "brakit",
+    $process_person_profile: false,
+    $geoip_disable: true
+  };
+}
+function sendToPosthog(event, properties) {
+  if (!isTelemetryEnabled()) return;
+  const config = getOrCreateConfig();
+  const payload = {
+    api_key: POSTHOG_KEY,
+    event,
+    distinct_id: config.anonymousId,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    properties: { ...commonProperties(), ...properties }
+  };
+  try {
+    const body = JSON.stringify(payload);
+    const url = `${POSTHOG_HOST}${POSTHOG_CAPTURE_PATH}`;
+    const child = spawn(
+      process.execPath,
+      [
+        "-e",
+        `fetch(${JSON.stringify(url)},{method:"POST",headers:{"content-type":"application/json"},body:${JSON.stringify(body)},signal:AbortSignal.timeout(${POSTHOG_REQUEST_TIMEOUT_MS})}).catch(()=>{})`
+      ],
+      { detached: true, stdio: "ignore" }
+    );
+    child.unref();
+  } catch {
+  }
+}
+function trackEvent(event, properties) {
+  sendToPosthog(event, { sdk: "node", ...properties });
+}
+
+// src/cli/commands/uninstall.ts
+init_config();
 var PREPENDED_FILES = [
   "app/entry.server.tsx",
   "app/entry.server.ts",
@@ -2155,16 +2270,20 @@ var uninstall_default = defineCommand2({
     console.log();
     console.log(pc2.bold("  \u25C6 brakit uninstall"));
     console.log();
+    let anyInstrumentationRemoved = false;
+    let anyPackageRemoved = false;
     for (const project of projects) {
       const suffix = projects.length > 1 ? ` in ${relative2(rootDir, project.dir) || "."}` : "";
       const removed = await removeInstrumentation(project.dir);
       if (removed) {
+        anyInstrumentationRemoved = true;
         console.log(pc2.green(`  \u2713 ${removed}${suffix}`));
       } else {
         console.log(pc2.dim(`  No brakit instrumentation files found${suffix}.`));
       }
       const uninstalled = await uninstallPackage(project.dir, project.pm);
       if (uninstalled === true) {
+        anyPackageRemoved = true;
         console.log(pc2.green(`  \u2713 Removed brakit from devDependencies${suffix}`));
       } else if (uninstalled === "failed") {
       }
@@ -2185,6 +2304,12 @@ var uninstall_default = defineCommand2({
     if (cacheCleared) {
       console.log(pc2.green("  \u2713 Cleared build cache"));
     }
+    trackEvent(TELEMETRY_EVENT_CLI_UNINSTALL, {
+      instrumentation_removed: anyInstrumentationRemoved,
+      package_removed: anyPackageRemoved,
+      mcp_removed: mcpRemoved,
+      data_removed: dataRemoved
+    });
     console.log();
   }
 });
@@ -2195,7 +2320,7 @@ async function removeInstrumentation(projectDir) {
   }
   const candidates = [...PREPENDED_FILES];
   try {
-    const pkgRaw = await readFile5(join4(projectDir, "package.json"), "utf-8");
+    const pkgRaw = await readFile5(join5(projectDir, "package.json"), "utf-8");
     const pkg = JSON.parse(pkgRaw);
     if (pkg.main) candidates.unshift(pkg.main);
   } catch (err) {
@@ -2210,7 +2335,7 @@ async function removeInstrumentation(projectDir) {
   return null;
 }
 async function tryRemoveBrakitFromFile(projectDir, relPath) {
-  const absPath = join4(projectDir, relPath);
+  const absPath = join5(projectDir, relPath);
   if (!await fileExists(absPath)) return null;
   const content = await readFile5(absPath, "utf-8");
   if (!content.includes("brakit")) return null;
@@ -2227,7 +2352,7 @@ async function tryRemoveBrakitFromFile(projectDir, relPath) {
   return null;
 }
 async function tryRemoveImportLine(projectDir, relPath) {
-  const absPath = join4(projectDir, relPath);
+  const absPath = join5(projectDir, relPath);
   if (!await fileExists(absPath)) return null;
   const content = await readFile5(absPath, "utf-8");
   if (!content.includes(IMPORT_LINE)) return null;
@@ -2238,7 +2363,7 @@ async function tryRemoveImportLine(projectDir, relPath) {
 async function fallbackSearchAndRemove(projectDir) {
   const dirsToScan = FALLBACK_SCAN_DIRS;
   for (const dir of dirsToScan) {
-    const absDir = join4(projectDir, dir);
+    const absDir = join5(projectDir, dir);
     if (!await fileExists(absDir)) continue;
     let entries;
     try {
@@ -2251,7 +2376,7 @@ async function fallbackSearchAndRemove(projectDir) {
       const ext = entry.slice(entry.lastIndexOf("."));
       if (!SUPPORTED_SOURCE_EXTENSIONS.has(ext)) continue;
       const relPath = dir === "." ? entry : `${dir}/${entry}`;
-      const absPath = join4(projectDir, relPath);
+      const absPath = join5(projectDir, relPath);
       try {
         const content = await readFile5(absPath, "utf-8");
         if (!containsBrakitImport(content)) continue;
@@ -2274,7 +2399,7 @@ async function fallbackSearchAndRemove(projectDir) {
   return null;
 }
 async function removeMcpConfig(rootDir) {
-  const mcpPath = join4(rootDir, ".mcp.json");
+  const mcpPath = join5(rootDir, ".mcp.json");
   if (!await fileExists(mcpPath)) return false;
   try {
     const raw = await readFile5(mcpPath, "utf-8");
@@ -2294,7 +2419,7 @@ async function removeMcpConfig(rootDir) {
 }
 async function uninstallPackage(rootDir, pm) {
   try {
-    const pkgRaw = await readFile5(join4(rootDir, "package.json"), "utf-8");
+    const pkgRaw = await readFile5(join5(rootDir, "package.json"), "utf-8");
     const pkg = JSON.parse(pkgRaw);
     if (!pkg.devDependencies?.brakit && !pkg.dependencies?.brakit) return false;
   } catch (err) {
@@ -2318,7 +2443,7 @@ async function uninstallPackage(rootDir, pm) {
 }
 async function removeBrakitData(rootDir) {
   let removed = false;
-  const projectDir = join4(rootDir, METRICS_DIR);
+  const projectDir = join5(rootDir, METRICS_DIR);
   if (await fileExists(projectDir)) {
     try {
       await rm(projectDir, { recursive: true, force: true });
@@ -2339,7 +2464,7 @@ async function removeBrakitData(rootDir) {
   return removed;
 }
 async function cleanGitignore(rootDir) {
-  const gitignorePath = join4(rootDir, ".gitignore");
+  const gitignorePath = join5(rootDir, ".gitignore");
   if (!await fileExists(gitignorePath)) return false;
   try {
     const content = await readFile5(gitignorePath, "utf-8");
@@ -2356,7 +2481,7 @@ async function cleanGitignore(rootDir) {
 async function clearBuildCaches(rootDir) {
   let cleared = false;
   for (const dir of BUILD_CACHE_DIRS) {
-    const absDir = join4(rootDir, dir);
+    const absDir = join5(rootDir, dir);
     if (!await fileExists(absDir)) continue;
     try {
       await rm(absDir, { recursive: true, force: true });
@@ -2369,7 +2494,15 @@ async function clearBuildCaches(rootDir) {
 }
 
 // bin/brakit.ts
+init_config();
 var sub = process.argv[2];
+var command = sub === "uninstall" ? "uninstall" : sub === "mcp" ? "mcp" : "install";
+var cwd = process.cwd();
+trackEvent(TELEMETRY_EVENT_CLI_INVOKED, {
+  command,
+  has_package_json: existsSync7(resolve6(cwd, "package.json")),
+  cwd_has_node_modules: existsSync7(resolve6(cwd, "node_modules"))
+});
 if (sub === "uninstall") {
   process.argv.splice(2, 1);
   runMain(uninstall_default);