create-factory 0.1.6 → 0.1.7-alpha.0

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # create-factory
 
+## 0.1.7-alpha.0
+
+### Patch Changes
+
+- Use the same PostHog analytics as create-mastra in the create-factory CLI, including the MASTRA_TELEMETRY_DISABLED opt-out and shared anonymous distinct id. ([#20073](https://github.com/mastra-ai/mastra/pull/20073))
+
+- Updated dependencies [[`ed5d606`](https://github.com/mastra-ai/mastra/commit/ed5d606739c5e3fbdfa9f272df7809aa5ab43b1d)]:
+  - mastra@1.23.1-alpha.0
+
 ## 0.1.6
 
 ### Patch Changes

package/dist/index.js

@@ -1,85 +1,14 @@
 #! /usr/bin/env node
-import fs, { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import fs, { readFileSync } from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { Command } from "commander";
-import { randomUUID } from "node:crypto";
-import os from "node:os";
-import { PostHog } from "posthog-node";
+import { PosthogAnalytics, setAnalytics } from "mastra/dist/analytics/index.js";
 import * as p from "@clack/prompts";
 import { LoginCancelledError, MASTRA_PLATFORM_API_URL, authHeaders, extractApiErrorDetail, fetchOrgs, getToken, loadCredentials, platformFetch, resolveCurrentOrg } from "mastra/internal/auth";
 import color from "picocolors";
 import { x } from "tinyexec";
 import fs$1 from "node:fs/promises";
-//#region src/analytics.ts
-/**
-* Minimal PostHog analytics for create-factory, mirroring the
-* create-mastra pattern (same project key, same opt-out env var, same
-* ~/.mastra/analytics.json distinct-id store).
-*/
-const ANALYTICS_CONFIG_PATH = path.join(os.homedir(), ".mastra", "analytics.json");
-const POSTHOG_API_KEY = "phc_SBLpZVAB6jmHOct9CABq3PF0Yn5FU3G2FgT4xUr2XrT";
-const POSTHOG_HOST = "https://us.posthog.com";
-function isTelemetryEnabled() {
-	const value = process.env.MASTRA_TELEMETRY_DISABLED;
-	return !(value && value !== "0" && value.toLowerCase() !== "false");
-}
-function getOrCreateDistinctId() {
-	try {
-		if (existsSync(ANALYTICS_CONFIG_PATH)) {
-			const { distinctId } = JSON.parse(readFileSync(ANALYTICS_CONFIG_PATH, "utf-8"));
-			if (distinctId) return distinctId;
-		}
-	} catch {}
-	const distinctId = randomUUID();
-	try {
-		mkdirSync(path.dirname(ANALYTICS_CONFIG_PATH), { recursive: true });
-		writeFileSync(ANALYTICS_CONFIG_PATH, JSON.stringify({
-			distinctId,
-			sessionId: randomUUID()
-		}, null, 2));
-	} catch {}
-	return distinctId;
-}
-var Analytics = class {
-	version;
-	client;
-	distinctId = "";
-	constructor(version) {
-		this.version = version;
-		if (!isTelemetryEnabled()) return;
-		try {
-			this.distinctId = getOrCreateDistinctId();
-			this.client = new PostHog(POSTHOG_API_KEY, {
-				host: POSTHOG_HOST,
-				flushAt: 1,
-				flushInterval: 100
-			});
-		} catch {
-			this.client = void 0;
-		}
-	}
-	trackEvent(event, properties = {}) {
-		try {
-			this.client?.capture({
-				distinctId: this.distinctId,
-				event,
-				properties: {
-					...properties,
-					cli: "create-factory",
-					version: this.version
-				}
-			});
-		} catch {}
-	}
-	async shutdown(timeoutMs = 1e3) {
-		if (!this.client) return;
-		try {
-			await Promise.race([this.client.shutdown(), new Promise((resolve) => setTimeout(resolve, timeoutMs))]);
-		} catch {}
-	}
-};
-//#endregion
 //#region src/env.ts
 /**
 * Idempotently update a `.env` file.
@@ -653,19 +582,101 @@ function ensureEnvGitignored(projectPath) {
 	fs.writeFileSync(gitignorePath, `${existing}${prefix}\n# Added by create-factory to protect platform credentials\n.env\n`);
 }
 //#endregion
+//#region src/utils/redact.ts
+/**
+* Sanitizes error messages before they are sent to analytics.
+*
+* Failure telemetry reports `error.message`, and several failure paths embed
+* user-supplied input in their messages: a clone failure includes the full
+* `git clone <url>` command (a custom template URL can identify a private repo
+* and may carry embedded credentials), and `--region`/`--org` validation
+* errors echo the raw flag value back. The user still sees the original
+* message on stderr — only the analytics copy is redacted.
+*/
+const REDACTED = "[redacted]";
+/** Strips `user:password@` credentials from any URL in the message. */
+function stripUrlCredentials(message) {
+	return message.replace(/\/\/[^\s/@]+@/g, `//${REDACTED}@`);
+}
+/**
+* A value can surface in messages in derived forms: without embedded
+* credentials (git may omit them when echoing the URL) or with the
+* `https://github.com/` prefix stripped (degit's repo shorthand).
+*/
+function variantsOf(value) {
+	const variants = /* @__PURE__ */ new Set([value, value.replace(/\/\/[^\s/@]+@/g, "//")]);
+	for (const variant of [...variants]) if (variant.startsWith("https://github.com/")) variants.add(variant.slice(19));
+	return [...variants];
+}
+/**
+* Redacts every literal occurrence (and derived variant) of the provided
+* user-supplied values, any URL credentials, and the org list echoed by
+* `--org` mismatch errors.
+*/
+function redactErrorMessage(message, sensitiveValues = []) {
+	let redacted = message;
+	for (const value of sensitiveValues) {
+		if (!value) continue;
+		for (const variant of variantsOf(value)) redacted = redacted.split(variant).join(REDACTED);
+	}
+	redacted = stripUrlCredentials(redacted);
+	redacted = redacted.replace(/Available: .*$/s, `Available: ${REDACTED}.`);
+	return redacted;
+}
+/** Returns a copy of `error` safe to report to analytics. */
+function redactError(error, sensitiveValues = []) {
+	const message = error instanceof Error ? error.message : String(error);
+	return new Error(redactErrorMessage(message, sensitiveValues));
+}
+//#endregion
 //#region src/index.ts
 const pkg = JSON.parse(readFileSync(path.join(path.dirname(fileURLToPath(import.meta.url)), "..", "package.json"), "utf8"));
-const analytics = new Analytics(pkg.version);
+const analytics = new PosthogAnalytics({
+	apiKey: "phc_SBLpZVAB6jmHOct9CABq3PF0Yn5FU3G2FgT4xUr2XrT",
+	host: "https://us.posthog.com",
+	version: pkg.version
+});
+setAnalytics(analytics);
 const program = new Command();
-program.name("create-factory").description("Create a new Mastra Factory project").argument("[project-name]", "Directory name of the project").option("--template <template-name>", "Create a project from a template (public GitHub URL)", "https://github.com/mastra-ai/softwarefactory-template").option("--no-platform", "Skip Mastra platform sign-in, project, and Neon provisioning").option("--org <org>", "Mastra organization id or name — skips the interactive org picker").option("--region <region>", "Platform project region (eu or us); prompts when omitted").version(pkg.version, "-v, --version").action(async (projectNameArg, args) => {
-	await create({
-		projectName: projectNameArg,
-		template: args.template,
-		noPlatform: args.platform === false,
-		org: args.org ? String(args.org) : void 0,
-		region: args.region ? String(args.region) : void 0,
-		analytics
-	});
+const DEFAULT_TEMPLATE_REPO = "https://github.com/mastra-ai/softwarefactory-template";
+program.name("create-factory").description("Create a new Mastra Factory project").argument("[project-name]", "Directory name of the project").option("--template <template-name>", "Create a project from a template (public GitHub URL)", DEFAULT_TEMPLATE_REPO).option("--no-platform", "Skip Mastra platform sign-in, project, and Neon provisioning").option("--org <org>", "Mastra organization id or name — skips the interactive org picker").option("--region <region>", "Platform project region (eu or us); prompts when omitted").version(pkg.version, "-v, --version").action(async (projectNameArg, args) => {
+	const region = args.region ? String(args.region) : void 0;
+	const validRegion = region === "eu" || region === "us" ? region : void 0;
+	const sensitiveValues = [
+		args.template === DEFAULT_TEMPLATE_REPO ? void 0 : args.template,
+		args.org ? String(args.org) : void 0,
+		validRegion ? void 0 : region,
+		projectNameArg
+	];
+	let rawError;
+	try {
+		await analytics.trackCommandExecution({
+			command: "create-factory",
+			args: {
+				default_template: args.template === DEFAULT_TEMPLATE_REPO,
+				no_platform: args.platform === false,
+				has_org: Boolean(args.org),
+				region: validRegion ?? (region ? "invalid" : void 0)
+			},
+			execution: async () => {
+				try {
+					await create({
+						projectName: projectNameArg,
+						template: args.template,
+						noPlatform: args.platform === false,
+						org: args.org ? String(args.org) : void 0,
+						region,
+						analytics
+					});
+				} catch (err) {
+					rawError = err;
+					throw redactError(err, sensitiveValues);
+				}
+			}
+		});
+	} catch (err) {
+		throw rawError ?? err;
+	}
 });
 try {
 	await program.parseAsync(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-factory",
-  "version": "0.1.6",
+  "version": "0.1.7-alpha.0",
   "description": "Create a Mastra Factory project: an agent-powered software delivery environment built on Mastra. Run `npm create factory` to scaffold and get started.",
   "type": "module",
   "license": "Apache-2.0",
@@ -36,9 +36,8 @@
     "@clack/prompts": "^1.7.0",
     "commander": "^14.0.3",
     "picocolors": "^1.1.1",
-    "posthog-node": "^5.37.0",
     "tinyexec": "^1.2.4",
-    "mastra": "1.23.0"
+    "mastra": "1.23.1-alpha.0"
   },
   "devDependencies": {
     "@types/node": "22.20.1",