evals 2.8.2 → 2.10.0

package/analytics.js

@@ -1,7 +1,7 @@
 /**
- * Anonymous GA4 Measurement Protocol events for the npx evals onboarding funnel.
+ * Anonymous npx evals TUI funnel events → app-server → Pendo Track.
  *
- * No PII — only an anon client id under ~/.arize and step names / agent ids.
+ * No PII — only a stable anon id under ~/.arize and allowlisted event names.
  * Fire-and-forget: never blocks or fails the CLI if tracking is down.
  *
  * Events:
@@ -9,12 +9,6 @@
  *   npx_evals_agent_install_click  — install-docs link when no agent on PATH
  *   npx_evals_skills_installed     — Arize skills/CLI install attempt
  *   npx_evals_auth_opened          — signup/sign-in browser about to open (OAuth)
- *
- * Requires a GA4 Measurement Protocol API secret (Admin → Data stream →
- * Measurement Protocol API secrets). Set via ARIZE_EVALS_GA4_API_SECRET, or
- * bake ARIZE_EVALS_GA4_API_SECRET_DEFAULT at release time.
- *
- * Override measurement id with ARIZE_EVALS_GA4_MEASUREMENT_ID if needed.
  */
 
 import { randomUUID } from 'crypto';
@@ -22,28 +16,28 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
 import { homedir } from 'os';
 import { join } from 'path';
 
-/** arize.com GA4 web stream (same property as site hero_agent_prompt_* events). */
-export const DEFAULT_MEASUREMENT_ID = 'G-QSZ10TDVQM';
+export const DEFAULT_ANALYTICS_URL =
+  'https://app.arize.com/api/analytics/npx-evals';
 
-/**
- * Optional release-time default. Leave empty until Chris/GA4 admin creates a
- * Measurement Protocol API secret for this CLI. Env always wins when set.
- */
-const API_SECRET_DEFAULT = '';
+/** Bound client timeout; server holds the Pendo key. */
+export const TRACK_TIMEOUT_MS = 2500;
 
-function measurementId() {
-  return process.env.ARIZE_EVALS_GA4_MEASUREMENT_ID || DEFAULT_MEASUREMENT_ID;
-}
+export const ALLOWED_EVENTS = new Set([
+  'npx_evals_agent_selected',
+  'npx_evals_agent_install_click',
+  'npx_evals_skills_installed',
+  'npx_evals_auth_opened',
+]);
 
-function apiSecret() {
-  return process.env.ARIZE_EVALS_GA4_API_SECRET || API_SECRET_DEFAULT;
+function analyticsUrl() {
+  return process.env.ARIZE_EVALS_ANALYTICS_URL || DEFAULT_ANALYTICS_URL;
 }
 
 function anonIdPath() {
   return join(homedir(), '.arize', 'anon_client_id');
 }
 
-/** Stable anon id so GA4 can stitch steps for one machine without knowing who. */
+/** Stable anon id so Pendo can stitch steps for one machine without knowing who. */
 export function getAnonClientId() {
   const path = anonIdPath();
   try {
@@ -66,39 +60,22 @@ export function getAnonClientId() {
 }
 
 /**
- * Send one anon event. Resolves quickly; network errors are swallowed.
- * @param {string} name GA4 event name (snake_case, <=40 chars)
- * @param {Record<string, string | number | boolean>} [params]
+ * Send one anon funnel event. Resolves quickly; network errors are swallowed.
+ * @param {string} name allowlisted event name
  * @returns {Promise<void>}
  */
-export async function trackEvent(name, params = {}) {
-  const mid = measurementId();
-  const secret = apiSecret();
-  if (!mid || !secret) return;
-
-  const url =
-    `https://www.google-analytics.com/mp/collect` +
-    `?measurement_id=${encodeURIComponent(mid)}` +
-    `&api_secret=${encodeURIComponent(secret)}`;
+export async function trackEvent(name) {
+  if (!ALLOWED_EVENTS.has(name)) return;
 
   const body = {
-    client_id: getAnonClientId(),
-    events: [
-      {
-        name,
-        params: {
-          ...params,
-          // Required for GA4 to count the event as engaged in some reports
-          engagement_time_msec: 1,
-        },
-      },
-    ],
+    event: name,
+    anonymousId: getAnonClientId(),
   };
 
   try {
     const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), 2500);
-    await fetch(url, {
+    const timer = setTimeout(() => controller.abort(), TRACK_TIMEOUT_MS);
+    await fetch(analyticsUrl(), {
       method: 'POST',
       headers: { 'content-type': 'application/json' },
       body: JSON.stringify(body),
@@ -111,6 +88,6 @@ export async function trackEvent(name, params = {}) {
 }
 
 /** Fire without awaiting — safe to call before launch / exit. */
-export function trackEventBackground(name, params = {}) {
-  void trackEvent(name, params);
+export function trackEventBackground(name) {
+  void trackEvent(name);
 }

package/bin.js

@@ -34,7 +34,7 @@ if (!Number.isInteger(major) || major < MIN_MAJOR) {
   process.exit(1);
 }
 
-// `evals track <event>` — fire-and-forget GA4, no TUI. Used for local/debug;
+// `evals track <event>` — fire-and-forget funnel ping, no TUI. Used for local/debug;
 // the onboarding prompt stages track-event.mjs instead (must not name npx evals).
 const args = process.argv.slice(2);
 if (args[0] === 'track') {

package/cli.js

@@ -60,7 +60,7 @@ const PROMPT_FILE_NAME = 'onboarding-prompt.md';
 // gets cleared at the next launch instead of sitting around holding a live key.
 const ENV_FILE_NAME = 'harness.env';
 
-// Anon GA4 helper staged beside the prompt so the agent can fire auth-opened
+// Anon funnel helper staged beside the prompt so the agent can fire auth-opened
 // before OAuth without naming `npx evals` (prompt contract forbids that).
 const TRACK_FILE_NAME = 'track-event.mjs';
 const ANALYTICS_FILE_NAME = 'analytics.js';
@@ -225,7 +225,6 @@ function prepareSeedPrompt() {
   const { dir, fellBack } = prepareOnboardingDir();
   const promptFile = join(dir, PROMPT_FILE_NAME);
   writeFileSync(promptFile, promptText, 'utf8');
-  // Same dir as the prompt: agent runs this before OAuth opens signup/sign-in.
   copyFileSync(BUNDLED_ANALYTICS_PATH, join(dir, ANALYTICS_FILE_NAME));
   copyFileSync(BUNDLED_TRACK_PATH, join(dir, TRACK_FILE_NAME));
   stageOfflineHarness(dir);
@@ -235,7 +234,7 @@ function prepareSeedPrompt() {
   // No "in this project": the launcher may well be run from a home directory, and
   // Step 4 is what scopes the work — an app here, an app at another path, a starter
   // app, or the coding agent itself. Keep this wording in step with start.{sh,ps1}.
-  const seed = `Read the file '${promptFile}' in full with your file-reading tool, not a shell command, then follow it to set up Arize AX tracing, walking me through each step and asking me questions as needed.`;
+  const seed = `Read the file '${promptFile}' in full before doing anything else. Prefer your file-reading tool. If none is available, use read-only shell commands with bounded line ranges solely to print this exact file, repeating with successive ranges until EOF. Do not inspect or change anything else, and do not invoke a skill until a step tells you to. Then follow its steps in order from Step 0, walking me through each step and asking me questions as needed.`;
   return { seed, dir, fellBack };
 }
 
@@ -560,10 +559,7 @@ function launchAgent(agent) {
     ? '  Done.'
     : '  Skipped — the setup will follow the Arize docs instead.');
 
-  trackEventBackground('npx_evals_skills_installed', {
-    agent: agent.id,
-    success: skillsInstalled ? 'true' : 'false',
-  });
+  trackEventBackground('npx_evals_skills_installed');
 
   console.log(`\nLaunching ${agent.label}…\n`);
 
@@ -673,19 +669,11 @@ export async function main() {
     if (!result) {
       process.exit(0); // user quit / cancelled
     } else if (result.type === 'url') {
-      // Install-doc link when no agent is on PATH (not the arize.com copy event).
-      trackEventBackground('npx_evals_agent_install_click', {
-        agent: result.agentId || 'unknown',
-        url_host: (() => {
-          try { return new URL(result.url).host; } catch { return 'unknown'; }
-        })(),
-      });
+      trackEventBackground('npx_evals_agent_install_click');
       console.log(`\nOpening ${result.url} in your browser...\n`);
       openUrlInBrowser(result.url);
     } else if (result.type === 'launch') {
-      trackEventBackground('npx_evals_agent_selected', {
-        agent: result.agent.id,
-      });
+      trackEventBackground('npx_evals_agent_selected');
       launchAgent(result.agent);
     }
   } catch (error) {

package/onboarding-prompt.md

@@ -4,7 +4,7 @@ Guide the user from zero to their first traces in Arize AX. Use the AX CLI, the
 
 **Read all of this file before you act.** If your tools return only part of it, keep reading to the last line. Rules you need are at the end.
 
-Work through the flow in order. Installing the AX CLI and Arize skills, authenticating, and listing spaces are fine before approval — that is your own tooling. Do not create AX resources (like API keys), edit application files, or install the app's tracing dependencies before the user approves the plan in Step 5.
+Work through the flow in order. Before approval, install the AX CLI and Arize skills, authenticate, list spaces, and create a space if the user asks in Step 3. Create no other AX resource (like an API key), edit no application file, and install no tracing dependency before the user approves the plan in Step 5.
 
 ## How to write to the user
 
@@ -94,7 +94,9 @@ python3 -m pip install --upgrade arize-ax-cli
 
 Try `uv` first, even if `pipx` is installed.
 
-**Check your skill list for `arize-instrumentation` and `arize-link` first.** They are usually installed already. If they are listed, do not run the install — invoke them by name when needed and go to Step 2.
+**Check your skill list for `arize-instrumentation` and `arize-link` first.** They are usually installed already. If they are listed, do not run the install — go to Step 2, and invoke them only where a step says to: `arize-instrumentation` at Step 6, `arize-link` at Step 8.
+
+A skill you loaded before you read this file does not own this flow — this file does. Drop that skill's plan and start at Step 0.
 
 Install them only if they are absent, or you cannot see your skill list, and npx is available:
 
@@ -142,11 +144,11 @@ If a `default` profile exists but the probe failed, it is signed out or expired,
   Immediately before the OAuth command, fire the anon funnel ping (ignore failures; never let it block auth), then open the browser flow:
 
   ```bash
-  node ~/.arize/onboarding/track-event.mjs auth-opened --method=oauth >/dev/null 2>&1 || true
+  node ~/.arize/onboarding/track-event.mjs auth-opened >/dev/null 2>&1 || true
   ax profiles create default --auth-method oauth --utm-params "utm_source=npmevals&utm_medium=cli&utm_campaign=prompt-first-onboarding"
   ```
 
-Pass `--utm-params` verbatim on the two browser OAuth commands (`profiles create --auth-method oauth` and the `ax auth login` fallback) and on no other `ax` command — it tags a new sign-up with onboarding attribution. Always run the matching `track-event.mjs auth-opened` line immediately before each of those two commands (`--method=oauth` or `--method=login`).
+Pass `--utm-params` verbatim on the two browser OAuth commands (`profiles create --auth-method oauth` and the `ax auth login` fallback) and on no other `ax` command — it tags a new sign-up with onboarding attribution. Always run `track-event.mjs auth-opened` immediately before each of those two commands.
 
 Always pass the positional profile name `default`. Without it, the CLI prompts `profile name [default]:`, receives EOF from an agent-run command, and exits with `Goodbye!` without creating a profile.
 
@@ -173,7 +175,7 @@ Then wait for the command to exit. Treat exit code `0`, or success output such a
 Only after the OAuth command completes, re-run the probe from the top of this step. If it succeeds, continue. If the profile already existed and the probe returns an authentication error, it is signed out or expired — run the fallback:
 
 ```bash
-node ~/.arize/onboarding/track-event.mjs auth-opened --method=login >/dev/null 2>&1 || true
+node ~/.arize/onboarding/track-event.mjs auth-opened >/dev/null 2>&1 || true
 ax auth login --utm-params "utm_source=npmevals&utm_medium=cli&utm_campaign=prompt-first-onboarding"
 ```
 
@@ -185,13 +187,41 @@ Run no other remote `ax` command (creating keys, listing all spaces, inspecting
 
 ## Step 3: Select the AX space
 
-List the spaces the authenticated profile can access:
+List every space the authenticated profile can access. The default limit is low, so raise it, and page with `--cursor <cursor>` while the response reports `pagination.has_more` as true:
+
+```bash
+ax spaces list --limit 100 --output json
+```
+
+**No spaces returned** — the account is new. Create a space (see below). Do not ask the user to choose.
+
+**One or more spaces** — ask the user which space to use. Ask this even when the list holds one space. Offer every space by display name, in the order returned, and offer a new space as the last choice:
+
+```text
+Which Arize AX space do you want to use?
+
+1. <space name>
+2. <space name>
+3. Create a new space
+```
+
+If `ARIZE_SPACE_ID` is already set (environment or `.env` / `.env.local`) **and** it appears in that list, mark that space as the one the app uses now and make it the default choice — the list confirms the active profile can reach it, since the app's key and your CLI profile can point at different spaces. If it is set but absent from the list, leave it out of the question.
+
+### Create a new space
+
+Ask the user for a name, and offer `arize-tracing` as the default. A new space needs an organization ID:
+
+```bash
+ax organizations list --output json
+```
+
+One organization, use it; several, ask the user which one. Then create the space:
 
 ```bash
-ax spaces list --output json
+ax spaces create --name "<name>" --organization-id "<organization-id>" --output json
 ```
 
-If `ARIZE_SPACE_ID` is already set (environment or `.env` / `.env.local`), use it **only if it appears in that list** — that confirms the active profile can reach it, since the app's key and your CLI profile may point at different spaces. If it is set but absent from the list, select from the list instead. Otherwise: one space returned, use it; several, ask the user which; none, guide the user to create one in the Arize AX UI (or with an organization ID if available), then re-list.
+A space the user asked for is its own approval — it is the only AX resource you create before Step 5. Take the space **ID** from the command output.
 
 Capture the space's **ID**, not its display name, for `ARIZE_SPACE_ID`. `arize-otel` requires the ID; a name silently fails to route traces.
 
@@ -602,7 +632,7 @@ https://arize.com/docs/ax/integrations/platforms/<agent>/<agent>-tracing
 ## Critical rules
 
 - Keep your task list current if you have one (see "Track progress"): one task per milestone, exactly one in progress, complete only when done, never mentioned in chat.
-- Get the user's approval (Step 5) before creating AX resources, editing files, or installing dependencies.
+- Get the user's approval (Step 5) before creating AX resources, editing files, or installing dependencies — except a space the user asked for in Step 3.
 - Authenticate the CLI (Step 2) before any other `ax` call; env vars alone don't. Never interrupt a waiting OAuth command — no stdin close, Ctrl-C, `pkill`, or probe. A slow wait is not a hang.
 - Never print, log, or summarize secrets in chat — API keys, env-file contents/values, or span bodies (prompts, completions, tool args, user data) — and never read env files into chat. Only report traces a command actually returned.
 - One AX API key, ever: reuse a **validated** `ARIZE_API_KEY`, else a **single** `ax api-keys create --env-file <file>` into an already-git-ignored file.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "evals",
-  "version": "2.8.2",
+  "version": "2.10.0",
   "description": "Arize AX onboarding — instrument your app with tracing via your coding agent",
   "type": "module",
   "main": "cli.js",

package/start.ps1

@@ -26,9 +26,9 @@ $ErrorActionPreference = 'Stop'
 # files over HTTP, so it's fetchable even though the source repo is private.
 # Override with $env:ARIZE_PROMPT_URL if needed.
 $PromptUrl = if ($env:ARIZE_PROMPT_URL) { $env:ARIZE_PROMPT_URL } else { 'https://cdn.jsdelivr.net/npm/evals/onboarding-prompt.md' }
-# Staged beside the prompt for the OAuth signup/sign-in ping (prompt must not name npx evals).
 $TrackUrl = if ($env:ARIZE_TRACK_URL) { $env:ARIZE_TRACK_URL } else { 'https://cdn.jsdelivr.net/npm/evals/track-event.mjs' }
 $AnalyticsUrl = if ($env:ARIZE_ANALYTICS_URL) { $env:ARIZE_ANALYTICS_URL } else { 'https://cdn.jsdelivr.net/npm/evals/analytics.js' }
+$AnalyticsEndpoint = if ($env:ARIZE_EVALS_ANALYTICS_URL) { $env:ARIZE_EVALS_ANALYTICS_URL } else { 'https://app.arize.com/api/analytics/npx-evals' }
 # Where the bundled harness wheels live, same package. Override for testing.
 $VendorUrl = if ($env:ARIZE_VENDOR_URL) { $env:ARIZE_VENDOR_URL } else { 'https://cdn.jsdelivr.net/npm/evals/vendor' }
 
@@ -103,14 +103,9 @@ function Resolve-Agent {
 }
 
 
-function Send-EvalsGa4Event {
-  param([string]$Name, [string]$AgentId = '')
-  $mid = if ($env:ARIZE_EVALS_GA4_MEASUREMENT_ID) { $env:ARIZE_EVALS_GA4_MEASUREMENT_ID } else { 'G-QSZ10TDVQM' }
-  $secret = $env:ARIZE_EVALS_GA4_API_SECRET
-  if (-not $secret) { return }
-
-  $arizeDir = Join-Path $HOME '.arize'
-  $anonFile = Join-Path $arizeDir 'anon_client_id'
+function Send-EvalsFunnelEvent {
+  param([string]$Name)
+  $anonFile = Join-Path $HOME '.arize/anon_client_id'
   $clientId = $null
   if (Test-Path -LiteralPath $anonFile) {
     $clientId = (Get-Content -LiteralPath $anonFile -Raw -ErrorAction SilentlyContinue).Trim()
@@ -118,26 +113,18 @@ function Send-EvalsGa4Event {
   if (-not $clientId) {
     $clientId = [guid]::NewGuid().ToString()
     try {
-      New-Item -ItemType Directory -Force -Path $arizeDir | Out-Null
+      New-Item -ItemType Directory -Force -Path (Join-Path $HOME '.arize') | Out-Null
       Set-Content -LiteralPath $anonFile -Value $clientId -NoNewline
     } catch {}
   }
-
-  $params = @{ engagement_time_msec = 1 }
-  if ($AgentId) { $params.agent = $AgentId }
-  $bodyObj = @{
-    client_id = $clientId
-    events = @(@{ name = $Name; params = $params })
-  }
-  $json = $bodyObj | ConvertTo-Json -Depth 5 -Compress
-  $url = "https://www.google-analytics.com/mp/collect?measurement_id=$mid&api_secret=$secret"
+  $body = @{ event = $Name; anonymousId = $clientId } | ConvertTo-Json -Compress
   try {
     Start-Job -ScriptBlock {
       param($u, $j)
       try {
         Invoke-RestMethod -Method Post -Uri $u -ContentType 'application/json' -Body $j -TimeoutSec 2 | Out-Null
       } catch {}
-    } -ArgumentList $url, $json | Out-Null
+    } -ArgumentList $AnalyticsEndpoint, $body | Out-Null
   } catch {}
 }
 
@@ -158,7 +145,7 @@ if ([Console]::IsOutputRedirected) {
 } else {
   $chosen = Resolve-Agent
   if (-not $chosen) { exit 1 }
-  Send-EvalsGa4Event -Name 'npx_evals_agent_selected' -AgentId $chosen
+  Send-EvalsFunnelEvent -Name 'npx_evals_agent_selected'
 }
 
 # A directory, not a bare temp file: Step 4A looks for the offline bundle *beside*
@@ -288,7 +275,7 @@ try {
 # where embedded double quotes would not.
 # No "in this project": this may well be run from a home directory, and Step 4 is
 # what scopes the work. Keep this wording in step with cli.js and start.sh.
-$seed = "Read the file '$promptFile' in full with your file-reading tool, not a shell command, then follow it to set up Arize AX tracing, walking me through each step and asking me questions as needed."
+$seed = "Read the file '$promptFile' in full before doing anything else. Prefer your file-reading tool. If none is available, use read-only shell commands with bounded line ranges solely to print this exact file, repeating with successive ranges until EOF. Do not inspect or change anything else, and do not invoke a skill until a step tells you to. Then follow its steps in order from Step 0, walking me through each step and asking me questions as needed."
 
 if (-not $chosen) {
   # Addressed to the person, two lines, recommendation first - see the note in cli.js.

package/start.sh

@@ -22,20 +22,14 @@ set -euo pipefail
 # files over HTTP, so it's fetchable even though the source repo is private.
 # Override with ARIZE_PROMPT_URL if needed.
 PROMPT_URL="${ARIZE_PROMPT_URL:-https://cdn.jsdelivr.net/npm/evals/onboarding-prompt.md}"
-# Staged beside the prompt for the OAuth signup/sign-in ping (prompt must not name npx evals).
 TRACK_URL="${ARIZE_TRACK_URL:-https://cdn.jsdelivr.net/npm/evals/track-event.mjs}"
 ANALYTICS_URL="${ARIZE_ANALYTICS_URL:-https://cdn.jsdelivr.net/npm/evals/analytics.js}"
+ANALYTICS_ENDPOINT="${ARIZE_EVALS_ANALYTICS_URL:-https://app.arize.com/api/analytics/npx-evals}"
 
-# Anonymous GA4 step ping (same events as cli.js). No-op without API secret.
-# ARIZE_EVALS_GA4_MEASUREMENT_ID default = arize.com stream; override if needed.
+# Fire-and-forget funnel ping (same events as cli.js). Never blocks the launcher.
 track_evals_event() {
   local name="$1"
-  local agent_id="${2:-}"
-  local mid="${ARIZE_EVALS_GA4_MEASUREMENT_ID:-G-QSZ10TDVQM}"
-  local secret="${ARIZE_EVALS_GA4_API_SECRET:-}"
-  [[ -n "$secret" ]] || return 0
-
-  local anon_file="${HOME}/.arize/anon_client_id"
+  local anon_file="${HOME:-}/.arize/anon_client_id"
   local client_id=""
   if [[ -f "$anon_file" ]]; then
     client_id="$(tr -d '[:space:]' < "$anon_file" 2>/dev/null || true)"
@@ -47,21 +41,14 @@ track_evals_event() {
       client_id="$(od -An -N16 -tx1 /dev/urandom 2>/dev/null | tr -d ' \n')"
       client_id="${client_id:0:8}-${client_id:8:4}-${client_id:12:4}-${client_id:16:4}-${client_id:20:12}"
     fi
-    mkdir -p "${HOME}/.arize" 2>/dev/null || true
-    printf '%s' "$client_id" > "$anon_file" 2>/dev/null || true
-  fi
-
-  local params="\"engagement_time_msec\":1"
-  if [[ -n "$agent_id" ]]; then
-    params="$params,\"agent\":\"$agent_id\""
+    [[ -n "${HOME:-}" ]] && mkdir -p "${HOME}/.arize" 2>/dev/null || true
+    [[ -n "${HOME:-}" ]] && printf '%s' "$client_id" > "$anon_file" 2>/dev/null || true
   fi
-  local body="{\"client_id\":\"$client_id\",\"events\":[{\"name\":\"$name\",\"params\":{$params}}]}"
-  local url="https://www.google-analytics.com/mp/collect?measurement_id=${mid}&api_secret=${secret}"
+  local body="{\"event\":\"$name\",\"anonymousId\":\"$client_id\"}"
   if command -v curl >/dev/null 2>&1; then
-    curl -fsS -m 2 -X POST -H 'content-type: application/json' -d "$body" "$url" >/dev/null 2>&1 &
+    curl -fsS -m 2 -X POST -H 'content-type: application/json' -d "$body" "$ANALYTICS_ENDPOINT" >/dev/null 2>&1 &
   fi
 }
-
 # Where the bundled harness wheels live, same package. Override for testing.
 VENDOR_URL="${ARIZE_VENDOR_URL:-https://cdn.jsdelivr.net/npm/evals/vendor}"
 
@@ -195,7 +182,7 @@ if [[ ! -t 1 ]]; then
   CHOSEN=""
 else
   CHOSEN="$(choose_agent)" || exit 1
-  track_evals_event npx_evals_agent_selected "$CHOSEN"
+  track_evals_event npx_evals_agent_selected
 fi
 
 # A directory, not a bare temp file: Step 4A looks for the offline bundle *beside*
@@ -318,7 +305,7 @@ fi
 
 # No "in this project": this may well be run from a home directory, and Step 4 is
 # what scopes the work. Keep this wording in step with cli.js and start.ps1.
-SEED="Read the file '$PROMPT_FILE' in full with your file-reading tool, not a shell command, then follow it to set up Arize AX tracing, walking me through each step and asking me questions as needed."
+SEED="Read the file '$PROMPT_FILE' in full before doing anything else. Prefer your file-reading tool. If none is available, use read-only shell commands with bounded line ranges solely to print this exact file, repeating with successive ranges until EOF. Do not inspect or change anything else, and do not invoke a skill until a step tells you to. Then follow its steps in order from Step 0, walking me through each step and asking me questions as needed."
 
 if [[ -z "$CHOSEN" ]]; then
   # Addressed to the person, two lines, recommendation first — see the note in cli.js.

package/track-event.mjs

@@ -6,8 +6,7 @@
  * the Arize signup/sign-in browser (OAuth) without naming `npx evals`.
  *
  * Usage:
- *   node ~/.arize/onboarding/track-event.mjs auth-opened --method=oauth
- *   node ~/.arize/onboarding/track-event.mjs auth-opened --method=login
+ *   node ~/.arize/onboarding/track-event.mjs auth-opened
  *
  * Always exits 0 — tracking must never block auth.
  */
@@ -28,18 +27,7 @@ export async function run(argv) {
   const name = EVENTS[key];
   if (!name) return;
 
-  /** @type {Record<string, string>} */
-  const params = {};
-  for (let i = 1; i < argv.length; i++) {
-    const a = argv[i];
-    if (a.startsWith('--method=')) {
-      params.method = a.slice('--method='.length);
-    } else if (a === '--method' && argv[i + 1]) {
-      params.method = argv[++i];
-    }
-  }
-
-  await trackEvent(name, params);
+  await trackEvent(name);
 }
 
 const isDirect =

package/vendor/MANIFEST

@@ -1,6 +1,6 @@
 a9cede65f98d3415b13e1c6a437d0fdee27286bfff0186dd72bb65d9869b7864  LICENSE-coding-harness-tracing
 62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775  certifi-2026.7.22-py3-none-any.whl
-e5060c3fa2807eff7a5816caf2a78eb2cd285b6fbe0a1c3022373cd89a0e46d7  coding_harness_tracing-0.1.0-py3-none-any.whl
+9f44b6e34618b87ab64f6aa48fd300bbfc6122fd4aca195122f68973747cad61  coding_harness_tracing-0.1.0-py3-none-any.whl
 aca14e09ca99c253d2a142e2d5c5c38c8c7cf90840d3cb10b241c29929871fa4  harness-install.bat
 a7ba18a98280e236b20ab4cb9f8a4006068b454586a2af50bf23fb0dbe70583d  harness-install.sh
 b81ee9561e9ca4004139c6cbba3a238c32b03e4894671e181b671e8cb8425d61  python_dotenv-1.2.1-py3-none-any.whl

package/vendor/harness-pin.lock.json

@@ -1,11 +1,11 @@
 {
   "repo": "https://github.com/Arize-ai/coding-harness-tracing",
   "ref": "main",
-  "resolvedSha": "a51baf0a3f45b01b1d23677176c90eb851fb3969",
+  "resolvedSha": "771ad555aab24ea2fd54a41b22936b6521156b26",
   "source": "git",
   "wheel": "coding_harness_tracing-0.1.0-py3-none-any.whl",
   "wheelVersion": "0.1.0",
-  "wheelSha256": "e5060c3fa2807eff7a5816caf2a78eb2cd285b6fbe0a1c3022373cd89a0e46d7",
+  "wheelSha256": "9f44b6e34618b87ab64f6aa48fd300bbfc6122fd4aca195122f68973747cad61",
   "files": [
     "LICENSE-coding-harness-tracing",
     "MANIFEST",