hacklab 0.7.5 → 0.8.5

package/dist/org-fields.js

@@ -0,0 +1,167 @@
+import { ensureScheme, FALSE_WORDS, TRUE_WORDS } from './field-normalize.js';
+export const ORG_FIELDS = [
+    { key: 'name', name: 'name', label: 'Name', type: 'text' },
+    { key: 'slug', name: 'slug', label: 'Slug (URL handle)', type: 'text' },
+    { key: 'logoUrl', name: 'logo', label: 'Logo URL', type: 'url' },
+    { key: 'website', name: 'website', label: 'Website', type: 'url' },
+    {
+        key: 'description',
+        name: 'description',
+        label: 'Short description',
+        type: 'text',
+    },
+    {
+        key: 'longDescription',
+        name: 'long-description',
+        label: 'Long description',
+        type: 'text',
+    },
+    { key: 'ycBatch', name: 'yc-batch', label: 'YC batch', type: 'text' },
+    { key: 'ycSlug', name: 'yc-slug', label: 'YC slug', type: 'text' },
+    { key: 'ycUrl', name: 'yc-url', label: 'YC URL', type: 'url' },
+    { key: 'waasUrl', name: 'waas', label: 'WaaS URL', type: 'url' },
+    { key: 'teamSize', name: 'team-size', label: 'Team size', type: 'number' },
+    { key: 'status', name: 'status', label: 'Status', type: 'text' },
+    { key: 'stage', name: 'stage', label: 'Stage', type: 'text' },
+    { key: 'isHiring', name: 'hiring', label: 'Hiring?', type: 'boolean' },
+    { key: 'industries', name: 'industries', label: 'Industries', type: 'list' },
+    { key: 'tags', name: 'tags', label: 'Tags', type: 'list' },
+    { key: 'locations', name: 'locations', label: 'Locations', type: 'list' },
+];
+export const ORG_FIELD_NAMES = ORG_FIELDS.map((f) => f.name);
+// name and slug are notNull columns — a blank must fail loudly, not clear.
+const REQUIRED_KEYS = new Set(['name', 'slug']);
+function splitList(raw) {
+    return raw
+        .split(',')
+        .map((s) => s.trim())
+        .filter(Boolean);
+}
+/**
+ * Shape one raw CLI string into the value the API expects. Empty clears the
+ * field (except name/slug, which are required). URLs get https:// prepended
+ * when the scheme is missing; lists split on commas. Real validation (slug
+ * pattern, lengths, URL syntax) stays server-side.
+ */
+export function normalizeOrgFieldValue(spec, raw) {
+    const trimmed = raw.trim();
+    if (!trimmed) {
+        if (REQUIRED_KEYS.has(spec.key)) {
+            return { ok: false, error: `${spec.name} can't be empty` };
+        }
+        return { ok: true, value: null };
+    }
+    if (spec.type === 'boolean') {
+        const word = trimmed.toLowerCase();
+        if (TRUE_WORDS.has(word))
+            return { ok: true, value: true };
+        if (FALSE_WORDS.has(word))
+            return { ok: true, value: false };
+        return { ok: false, error: `${spec.name} must be yes or no` };
+    }
+    if (spec.type === 'number') {
+        if (!/^\d+$/.test(trimmed)) {
+            return { ok: false, error: `${spec.name} must be a whole number` };
+        }
+        return { ok: true, value: Number(trimmed) };
+    }
+    if (spec.type === 'list') {
+        const items = splitList(trimmed);
+        return { ok: true, value: items.length ? items : null };
+    }
+    if (spec.type === 'url')
+        return { ok: true, value: ensureScheme(trimmed) };
+    return { ok: true, value: trimmed };
+}
+/**
+ * Map a parsed yaml/json document to API fields for `org apply`. Keys may be
+ * CLI names (`long-description`, `hiring`) or API keys (`longDescription`,
+ * `isHiring`); unknown keys fail loudly so a typo can't silently drop a field.
+ * Lists accept real arrays or comma-separated strings.
+ */
+export function parseOrgDocument(doc) {
+    if (typeof doc !== 'object' || doc === null || Array.isArray(doc)) {
+        return { ok: false, error: 'expected a mapping of fields to values' };
+    }
+    const fields = {};
+    for (const [rawKey, rawValue] of Object.entries(doc)) {
+        const spec = ORG_FIELDS.find((f) => f.name === rawKey || f.key === rawKey);
+        if (!spec) {
+            return {
+                ok: false,
+                error: `unknown field "${rawKey}" (fields: ${ORG_FIELD_NAMES.join(', ')})`,
+            };
+        }
+        if (rawValue === null) {
+            if (REQUIRED_KEYS.has(spec.key)) {
+                return { ok: false, error: `${spec.name} can't be empty` };
+            }
+            fields[spec.key] = null;
+            continue;
+        }
+        if (typeof rawValue === 'boolean') {
+            if (spec.type !== 'boolean') {
+                return { ok: false, error: `${spec.name}: expected a string value` };
+            }
+            fields[spec.key] = rawValue;
+            continue;
+        }
+        if (Array.isArray(rawValue)) {
+            if (spec.type !== 'list') {
+                return { ok: false, error: `${spec.name}: expected a single value` };
+            }
+            const items = rawValue.map((v) => String(v).trim()).filter(Boolean);
+            fields[spec.key] = items.length ? items : null;
+            continue;
+        }
+        if (typeof rawValue !== 'string' && typeof rawValue !== 'number') {
+            return { ok: false, error: `${spec.name}: expected a string value` };
+        }
+        const normalized = normalizeOrgFieldValue(spec, String(rawValue));
+        if (!normalized.ok)
+            return normalized;
+        fields[spec.key] = normalized.value;
+    }
+    if (Object.keys(fields).length === 0) {
+        return { ok: false, error: 'no fields to apply' };
+    }
+    return { ok: true, fields };
+}
+/**
+ * Pick the org a view/set/apply targets. `--org <slug>` wins; with no flag,
+ * exactly one managed org is the target, zero or several is a typed error the
+ * caller renders (JSON gets the code, humans get the message — which always
+ * names the way out).
+ */
+export function resolveTargetOrg(organizations, slugFlag) {
+    if (slugFlag) {
+        const found = organizations.find((o) => o.slug === slugFlag);
+        if (found)
+            return { ok: true, org: found };
+        const yours = organizations.map((o) => o.slug).join(', ');
+        return {
+            ok: false,
+            code: 'not_found',
+            error: organizations.length
+                ? `you don't manage "${slugFlag}" (you manage: ${yours})`
+                : `you don't manage "${slugFlag}" — claim or create it first`,
+        };
+    }
+    if (organizations.length === 0) {
+        return {
+            ok: false,
+            code: 'no_org',
+            error: "you don't manage a company yet — run `hacklab org claim <slug>` or `hacklab org create`",
+        };
+    }
+    if (organizations.length > 1) {
+        const slugs = organizations.map((o) => o.slug).join(', ');
+        return {
+            ok: false,
+            code: 'ambiguous_org',
+            error: `you manage ${organizations.length} companies — pass --org <slug> (${slugs})`,
+        };
+    }
+    return { ok: true, org: organizations[0] };
+}
+//# sourceMappingURL=org-fields.js.map

package/dist/org-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-fields.js","sourceRoot":"","sources":["../src/org-fields.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAmB5E,MAAM,CAAC,MAAM,UAAU,GAAmB;IACxC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;IAC1D,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE;IACvE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE;IAChE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE;IAClE;QACE,GAAG,EAAE,aAAa;QAClB,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,MAAM;KACb;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,kBAAkB;QACzB,IAAI,EAAE,MAAM;KACb;IACD,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IACrE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;IAClE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE;IAC9D,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE;IAChE,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC1E,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE;IAChE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE;IAC7D,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACtE,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE;IAC5E,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;IAC1D,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE;CAC1E,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAE5D,2EAA2E;AAC3E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAQ/C,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAA;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAkB,EAClB,GAAW;IAEX,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,iBAAiB,EAAE,CAAA;QAC5D,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAClC,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAA;QAClC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;QAC1D,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,oBAAoB,EAAE,CAAA;IAC/D,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,yBAAyB,EAAE,CAAA;QACpE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;IAC7C,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;QAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACzD,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;IAE1E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAM3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAA;IACvE,CAAC;IAED,MAAM,MAAM,GAA6B,EAAE,CAAA;IAC3C,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAA;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,kBAAkB,MAAM,cAAc,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aAC3E,CAAA;QACH,CAAC;QAED,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,iBAAiB,EAAE,CAAA;YAC5D,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;YACvB,SAAQ;QACV,CAAC;QAED,IAAI,OAAO,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,2BAA2B,EAAE,CAAA;YACtE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAA;YAC3B,SAAQ;QACV,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,2BAA2B,EAAE,CAAA;YACtE,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACnE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;YAC9C,SAAQ;QACV,CAAC;QAED,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,2BAA2B,EAAE,CAAA;QACtE,CAAC;QAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;QACjE,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAA;IACrC,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAA;IACnD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,aAAkB,EAClB,QAA4B;IAQ5B,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;QAC5D,IAAI,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAA;QAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,aAAa,CAAC,MAAM;gBACzB,CAAC,CAAC,qBAAqB,QAAQ,kBAAkB,KAAK,GAAG;gBACzD,CAAC,CAAC,qBAAqB,QAAQ,8BAA8B;SAChE,CAAA;IACH,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,QAAQ;YACd,KAAK,EACH,yFAAyF;SAC5F,CAAA;IACH,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,cAAc,aAAa,CAAC,MAAM,mCAAmC,KAAK,GAAG;SACrF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAE,EAAE,CAAA;AAC7C,CAAC"}

package/dist/posthog.d.ts

@@ -1,9 +1,38 @@
-import { PostHog } from 'posthog-node';
-export declare const posthog: PostHog;
 /**
- * Capture an event and immediately flush it to PostHog. Since the CLI is a
- * short-lived process, flushing after every capture ensures the event is sent
- * before the process exits. No-ops silently if distinctId is absent.
+ * Telemetry is opt-OUT. It's off when the user sets `HACKLAB_NO_TELEMETRY`
+ * (mirrors `HACKLAB_NO_UPDATE_CHECK`) or the cross-tool `DO_NOT_TRACK` standard
+ * (https://consoledonottrack.com). Checked at every entry point, so a disabled
+ * CLI never constructs a client, phones home, or installs exception handlers.
+ */
+export declare function isTelemetryDisabled(): boolean;
+/**
+ * Capture an event and flush it. Falls back to the anonymous device id when no
+ * handle is given, so pre-auth usage is still counted (and later stitched onto
+ * the user via `identifyUser`). Fire-and-forget: gated on opt-out, wrapped so it
+ * can never slow down or break the command that called it.
  */
 export declare function captureEvent(distinctId: string | undefined, event: string, properties?: Record<string, unknown>): Promise<void>;
+/**
+ * Identify the logged-in user and merge any anonymous pre-login history onto
+ * them. `properties` is passed straight through (callers set `$set` /
+ * `$set_once`). Opt-out gated and fully wrapped.
+ */
+export declare function identifyUser(handle: string, properties: Record<string, unknown>): Promise<void>;
+/** Report an unhandled error to PostHog. Opt-out gated and wrapped. */
+export declare function captureException(error: unknown, distinctId?: string): Promise<void>;
+/**
+ * Final drain before the process exits. No-op if telemetry never initialized.
+ * Uses flush(), not shutdown(): shutdown() routes a failed flush to a hardcoded
+ * console.error (a network stack trace in the user's terminal), whereas flush()
+ * rejects into our own catch and stays silent. There are no background timers to
+ * clear (flushInterval is 0), so flush() is a complete drain here.
+ */
+export declare function shutdownTelemetry(): Promise<void>;
+/**
+ * One-time, one-line notice that the CLI collects anonymous usage, with the
+ * opt-out. Interactive only (never in pipes / CI / the quiet daily run), shown
+ * once per machine (flagged in telemetry.json). Mirrors the update-check nudge:
+ * stderr, TTY-gated, and wrapped so it can never break or delay a command.
+ */
+export declare function maybePrintTelemetryNotice(): Promise<void>;
 //# sourceMappingURL=posthog.d.ts.map

package/dist/posthog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"posthog.d.ts","sourceRoot":"","sources":["../src/posthog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,eAAO,MAAM,OAAO,SASnB,CAAA;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,OAAO,CAAC,IAAI,CAAC,CAIf"}
+{"version":3,"file":"posthog.d.ts","sourceRoot":"","sources":["../src/posthog.ts"],"names":[],"mappings":"AAkCA;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAI7C;AAgGD;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,OAAO,CAAC,IAAI,CAAC,CAcf;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,uEAAuE;AACvE,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,OAAO,EACd,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAOvD;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAmB/D"}

package/dist/posthog.js

@@ -1,20 +1,224 @@
+import { randomUUID } from 'node:crypto';
+import { promises as fs } from 'node:fs';
+import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
 import { PostHog } from 'posthog-node';
-export const posthog = new PostHog(process.env.POSTHOG_API_KEY ??
-    'phc_CT4u3J62yYaAHUcnYKjmnpAGXTrWqv7ZbmvYQcUTEACK', {
-    host: process.env.POSTHOG_HOST ?? 'https://eu.i.posthog.com',
-    flushAt: 1,
-    flushInterval: 0,
-    enableExceptionAutocapture: true,
-});
+import { envNameForUrl, getSessionPath, resolveAppUrl } from './session.js';
+import { dim } from './ui.js';
+// Single source of the published version (one level up from this module in both
+// `dist/` and `src/`), tagged onto every event so we can slice by CLI version.
+const require = createRequire(import.meta.url);
+const { version: CLI_VERSION } = require('../package.json');
+// The PostHog *project* API key for the CLI's own project (id 226792, separate
+// from the web app's project 226288). It's a publishable client key (phc_…,
+// write-only) that ships inside the published npm package regardless, so
+// committing it here is fine. `POSTHOG_API_KEY` overrides it for dev/testing.
+// The CLI never reads Vercel env (it runs on users' machines), so its key lives
+// here, not in Vercel.
+const PROJECT_API_KEY = process.env.POSTHOG_API_KEY ??
+    'phc_oCCCCjjTXkmknHh5gjEhsqJNuJ77BqsZUU96MRtAHoYQ';
+const HOST = process.env.POSTHOG_HOST ?? 'https://eu.i.posthog.com';
+// Telemetry state (anon id + one-time-notice flag) lives next to the session
+// file, so it honors HACKLAB_SESSION_PATH exactly like the update-check cache.
+function telemetryPath() {
+    return join(dirname(getSessionPath()), 'telemetry.json');
+}
+/**
+ * Telemetry is opt-OUT. It's off when the user sets `HACKLAB_NO_TELEMETRY`
+ * (mirrors `HACKLAB_NO_UPDATE_CHECK`) or the cross-tool `DO_NOT_TRACK` standard
+ * (https://consoledonottrack.com). Checked at every entry point, so a disabled
+ * CLI never constructs a client, phones home, or installs exception handlers.
+ */
+export function isTelemetryDisabled() {
+    if (process.env.HACKLAB_NO_TELEMETRY)
+        return true;
+    const dnt = process.env.DO_NOT_TRACK;
+    return dnt === '1' || dnt === 'true';
+}
+async function readState() {
+    try {
+        return JSON.parse(await fs.readFile(telemetryPath(), 'utf8'));
+    }
+    catch {
+        return {};
+    }
+}
+async function writeState(state) {
+    try {
+        await fs.mkdir(dirname(telemetryPath()), { recursive: true });
+        await fs.writeFile(telemetryPath(), `${JSON.stringify(state, null, 2)}\n`, 'utf8');
+    }
+    catch {
+        // Best-effort: a failed write just means a fresh anon id / re-shown notice.
+    }
+}
+/**
+ * A stable anonymous device id for events that fire before (or without) login.
+ * Generated once and persisted; on login we `alias` it to the real handle so
+ * PostHog stitches the anonymous history onto the identified user.
+ */
+async function getAnonymousId() {
+    const state = await readState();
+    if (state.anonymousId)
+        return state.anonymousId;
+    const anonymousId = `anon_${randomUUID()}`;
+    await writeState({ ...state, anonymousId });
+    return anonymousId;
+}
+let client = null;
+function getClient() {
+    if (!client) {
+        client = new PostHog(PROJECT_API_KEY, {
+            host: HOST,
+            // We flush explicitly after every capture (and on shutdown), so disable
+            // both of posthog-node's background-flush triggers: the count trigger
+            // (flushAt — set high enough that a single CLI run never hits it) and the
+            // timer (flushInterval: 0). This matters because a background flush routes
+            // its failure to a hardcoded console.error we can't intercept — it would
+            // dump a network stack trace into the user's terminal on a flaky
+            // connection. Our explicit flush rejects into our own try/catch instead,
+            // so a telemetry failure stays silent.
+            flushAt: 1000,
+            flushInterval: 0,
+            // Best-effort telemetry: don't retry a failed send. The default is 3
+            // retries with a 3s backoff, and that backoff timer is what keeps a
+            // one-shot CLI alive for ~10s after the command visibly finished when the
+            // network is down. No retries → fail fast → the process exits promptly.
+            fetchRetryCount: 0,
+            // Tighter than the 10s default so a black-holed connection gives up fast.
+            requestTimeout: 3000,
+            enableExceptionAutocapture: true,
+        });
+    }
+    return client;
+}
+/**
+ * Properties attached to every CLI event. CLI and web now live in separate
+ * PostHog projects, but we still tag `source: 'cli'` as a cheap, explicit
+ * discriminator — handy if the two datasets are ever combined, and it costs
+ * nothing to keep.
+ */
+function defaultProperties() {
+    return {
+        source: 'cli',
+        cli_version: CLI_VERSION,
+        os: process.platform,
+        arch: process.arch,
+        node_version: process.versions.node,
+        environment: envNameForUrl(resolveAppUrl()) ?? 'unknown',
+    };
+}
+// Never let a stuck network hold up the CLI: cap any send at a couple seconds
+// and move on. The timer is unref'd so it can't by itself keep the process
+// alive after the real work is done.
+async function withTimeout(p, ms = 2000) {
+    await Promise.race([
+        p.catch(() => undefined),
+        new Promise((resolve) => {
+            const t = setTimeout(resolve, ms);
+            t.unref?.();
+        }),
+    ]);
+}
 /**
- * Capture an event and immediately flush it to PostHog. Since the CLI is a
- * short-lived process, flushing after every capture ensures the event is sent
- * before the process exits. No-ops silently if distinctId is absent.
+ * Capture an event and flush it. Falls back to the anonymous device id when no
+ * handle is given, so pre-auth usage is still counted (and later stitched onto
+ * the user via `identifyUser`). Fire-and-forget: gated on opt-out, wrapped so it
+ * can never slow down or break the command that called it.
  */
 export async function captureEvent(distinctId, event, properties) {
-    if (!distinctId)
+    if (isTelemetryDisabled())
         return;
-    posthog.capture({ distinctId, event, properties });
-    await posthog.flush();
+    try {
+        const id = distinctId ?? (await getAnonymousId());
+        const ph = getClient();
+        ph.capture({
+            distinctId: id,
+            event,
+            properties: { ...defaultProperties(), ...properties },
+        });
+        await withTimeout(ph.flush());
+    }
+    catch {
+        // Telemetry must never break a command. Swallow everything.
+    }
+}
+/**
+ * Identify the logged-in user and merge any anonymous pre-login history onto
+ * them. `properties` is passed straight through (callers set `$set` /
+ * `$set_once`). Opt-out gated and fully wrapped.
+ */
+export async function identifyUser(handle, properties) {
+    if (isTelemetryDisabled())
+        return;
+    try {
+        const ph = getClient();
+        const { anonymousId } = await readState();
+        if (anonymousId && anonymousId !== handle) {
+            ph.alias({ distinctId: handle, alias: anonymousId });
+        }
+        ph.identify({ distinctId: handle, properties });
+        await withTimeout(ph.flush());
+    }
+    catch {
+        // Identification is best-effort — never break login/join over it.
+    }
+}
+/** Report an unhandled error to PostHog. Opt-out gated and wrapped. */
+export async function captureException(error, distinctId) {
+    if (isTelemetryDisabled())
+        return;
+    try {
+        const ph = getClient();
+        const id = distinctId ?? (await getAnonymousId());
+        ph.captureException(error, id, defaultProperties());
+        await withTimeout(ph.flush());
+    }
+    catch {
+        // Swallow — a telemetry failure must not mask the original error.
+    }
+}
+/**
+ * Final drain before the process exits. No-op if telemetry never initialized.
+ * Uses flush(), not shutdown(): shutdown() routes a failed flush to a hardcoded
+ * console.error (a network stack trace in the user's terminal), whereas flush()
+ * rejects into our own catch and stays silent. There are no background timers to
+ * clear (flushInterval is 0), so flush() is a complete drain here.
+ */
+export async function shutdownTelemetry() {
+    if (!client)
+        return;
+    try {
+        await withTimeout(client.flush());
+    }
+    catch {
+        // Best-effort final flush.
+    }
+}
+/**
+ * One-time, one-line notice that the CLI collects anonymous usage, with the
+ * opt-out. Interactive only (never in pipes / CI / the quiet daily run), shown
+ * once per machine (flagged in telemetry.json). Mirrors the update-check nudge:
+ * stderr, TTY-gated, and wrapped so it can never break or delay a command.
+ */
+export async function maybePrintTelemetryNotice() {
+    try {
+        if (isTelemetryDisabled())
+            return;
+        if (!process.stdout.isTTY)
+            return;
+        const state = await readState();
+        if (state.noticeShownAt)
+            return;
+        await writeState({
+            ...state,
+            anonymousId: state.anonymousId ?? `anon_${randomUUID()}`,
+            noticeShownAt: new Date().toISOString(),
+        });
+        process.stderr.write(`${dim('hacklab collects anonymous usage analytics to improve the CLI — opt out with HACKLAB_NO_TELEMETRY=1 (or DO_NOT_TRACK=1).')}\n`);
+    }
+    catch {
+        // A notice must never break or delay the actual command.
+    }
 }
 //# sourceMappingURL=posthog.js.map

package/dist/posthog.js.map

@@ -1 +1 @@
-{"version":3,"file":"posthog.js","sourceRoot":"","sources":["../src/posthog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,OAAO,CAChC,OAAO,CAAC,GAAG,CAAC,eAAe;IACzB,kDAAkD,EACpD;IACE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,0BAA0B;IAC5D,OAAO,EAAE,CAAC;IACV,aAAa,EAAE,CAAC;IAChB,0BAA0B,EAAE,IAAI;CACjC,CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAA8B,EAC9B,KAAa,EACb,UAAoC;IAEpC,IAAI,CAAC,UAAU;QAAE,OAAM;IACvB,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAA;IAClD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;AACvB,CAAC"}
+{"version":3,"file":"posthog.js","sourceRoot":"","sources":["../src/posthog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC3E,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAA;AAE7B,gFAAgF;AAChF,+EAA+E;AAC/E,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC9C,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAEzD,CAAA;AAED,+EAA+E;AAC/E,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,gFAAgF;AAChF,uBAAuB;AACvB,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,eAAe;IAC3B,kDAAkD,CAAA;AACpD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,0BAA0B,CAAA;AAInE,6EAA6E;AAC7E,+EAA+E;AAC/E,SAAS,aAAa;IACpB,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAA;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAAE,OAAO,IAAI,CAAA;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IACpC,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,MAAM,CAAA;AACtC,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CACf,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,CACzB,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAqB;IAC7C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7D,MAAM,EAAE,CAAC,SAAS,CAChB,aAAa,EAAE,EACf,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACrC,MAAM,CACP,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc;IAC3B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAA;IAC/B,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC,WAAW,CAAA;IAC/C,MAAM,WAAW,GAAG,QAAQ,UAAU,EAAE,EAAE,CAAA;IAC1C,MAAM,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;IAC3C,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,IAAI,MAAM,GAAmB,IAAI,CAAA;AACjC,SAAS,SAAS;IAChB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,IAAI,OAAO,CAAC,eAAe,EAAE;YACpC,IAAI,EAAE,IAAI;YACV,wEAAwE;YACxE,sEAAsE;YACtE,0EAA0E;YAC1E,2EAA2E;YAC3E,yEAAyE;YACzE,iEAAiE;YACjE,yEAAyE;YACzE,uCAAuC;YACvC,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,CAAC;YAChB,qEAAqE;YACrE,oEAAoE;YACpE,0EAA0E;YAC1E,wEAAwE;YACxE,eAAe,EAAE,CAAC;YAClB,0EAA0E;YAC1E,cAAc,EAAE,IAAI;YACpB,0BAA0B,EAAE,IAAI;SACjC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB;IACxB,OAAO;QACL,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,WAAW;QACxB,EAAE,EAAE,OAAO,CAAC,QAAQ;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;QACnC,WAAW,EAAE,aAAa,CAAC,aAAa,EAAE,CAAC,IAAI,SAAS;KACzD,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,qCAAqC;AACrC,KAAK,UAAU,WAAW,CAAC,CAAmB,EAAE,EAAE,GAAG,IAAI;IACvD,MAAM,OAAO,CAAC,IAAI,CAAC;QACjB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QACxB,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5B,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;YACjC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;QACb,CAAC,CAAC;KACH,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAA8B,EAC9B,KAAa,EACb,UAAoC;IAEpC,IAAI,mBAAmB,EAAE;QAAE,OAAM;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,UAAU,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,CAAA;QACjD,MAAM,EAAE,GAAG,SAAS,EAAE,CAAA;QACtB,EAAE,CAAC,OAAO,CAAC;YACT,UAAU,EAAE,EAAE;YACd,KAAK;YACL,UAAU,EAAE,EAAE,GAAG,iBAAiB,EAAE,EAAE,GAAG,UAAU,EAAE;SACtD,CAAC,CAAA;QACF,MAAM,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,UAAmC;IAEnC,IAAI,mBAAmB,EAAE;QAAE,OAAM;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,EAAE,CAAA;QACtB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,SAAS,EAAE,CAAA;QACzC,IAAI,WAAW,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YAC1C,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;QACtD,CAAC;QACD,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;QAC/C,MAAM,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAc,EACd,UAAmB;IAEnB,IAAI,mBAAmB,EAAE;QAAE,OAAM;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,EAAE,CAAA;QACtB,MAAM,EAAE,GAAG,UAAU,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,CAAA;QACjD,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAA;QACnD,MAAM,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC,MAAM;QAAE,OAAM;IACnB,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,IAAI,CAAC;QACH,IAAI,mBAAmB,EAAE;YAAE,OAAM;QACjC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;YAAE,OAAM;QACjC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAA;QAC/B,IAAI,KAAK,CAAC,aAAa;YAAE,OAAM;QAC/B,MAAM,UAAU,CAAC;YACf,GAAG,KAAK;YACR,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,QAAQ,UAAU,EAAE,EAAE;YACxD,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACxC,CAAC,CAAA;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,GAAG,CACJ,0HAA0H,CAC3H,IAAI,CACN,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;AACH,CAAC"}

package/dist/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAmBA,MAAM,MAAM,WAAW,GAAG;IACxB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAA;IACZ,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAA;IACf,0FAA0F;IAC1F,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CAC9C,CAAA;AAED,eAAO,MAAM,QAAQ,EAAE,WAAW,EAsFjC,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,aAAa,UAA8B,CAAA;AAExD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAEjE"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAsBA,MAAM,MAAM,WAAW,GAAG;IACxB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAA;IACZ,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAA;IACf,0FAA0F;IAC1F,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CAC9C,CAAA;AAED,eAAO,MAAM,QAAQ,EAAE,WAAW,EAyGjC,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,aAAa,UAA8B,CAAA;AAExD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAEjE"}

package/dist/registry.js

@@ -1,14 +1,17 @@
+import { book, parseBookArgs } from './commands/book.js';
 import { chat } from './commands/chat.js';
 import { configCommand } from './commands/config.js';
 import { drop, parseDropArgs } from './commands/drop.js';
 import { essay } from './commands/essay.js';
 import { hacker } from './commands/hacker.js';
 import { join } from './commands/join.js';
+import { keys } from './commands/keys.js';
 import { login } from './commands/login.js';
 import { logout } from './commands/logout.js';
 import { org } from './commands/org.js';
 import { profile } from './commands/profile.js';
 import { project } from './commands/project.js';
+import { scout } from './commands/scout.js';
 import { sync } from './commands/sync.js';
 import { update } from './commands/update.js';
 import { whoami } from './commands/whoami.js';
@@ -62,10 +65,16 @@ export const COMMANDS = [
         summary: 'publish this repo as a project (--json for agents)',
         run: (args) => project(args),
     },
+    {
+        name: 'book',
+        args: '"Title" --author "Name"',
+        summary: 'shelve a book you have read (--takeaways "…")',
+        run: (args) => book(parseBookArgs(args)),
+    },
     {
         name: 'org',
-        args: '[claim|create]',
-        summary: 'claim, create, or edit your organization',
+        args: '[list|view|set|apply|claim|create]',
+        summary: 'claim, create, or edit your organization (--json for agents)',
         run: (args) => org(args),
     },
     {
@@ -82,16 +91,28 @@ export const COMMANDS = [
     },
     {
         name: 'hacker',
-        args: 'view <handle>',
-        summary: "view another hacker's profile (--json for agents)",
+        args: 'view [handle]',
+        summary: 'view a hacker profile — yours by default (--json for agents)',
         run: (args) => hacker(args),
     },
+    {
+        name: 'scout',
+        args: 'search|picks [flags]',
+        summary: 'talent scouting for partners: search the pool, or our curated picks (invite-only)',
+        run: (args) => scout(args),
+    },
     {
         name: 'profile',
         args: '[view|set|edit|apply]',
         summary: 'view and edit your own profile (--json for agents)',
         run: (args) => profile(args),
     },
+    {
+        name: 'keys',
+        args: '[create|list|revoke]',
+        summary: 'manage API keys for your agent profile endpoint',
+        run: (args) => keys(args),
+    },
     {
         name: 'update',
         summary: 'update the hacklab CLI to the latest version',

package/dist/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAiB7C,MAAM,CAAC,MAAM,QAAQ,GAAkB;IACrC;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,iCAAiC;QAC1C,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;KAC7D;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,qCAAqC;QAC9C,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;KAC1B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,+BAA+B;QACxC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE;KACpB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,0BAA0B;QACnC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;YACzC,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACxB,CAAC;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,aAAa;QACnB,OAAO,EACL,oEAAoE;QACtE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;KAC9D;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,0CAA0C;QACnD,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE;KACpB;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,2CAA2C;QACpD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC;KACnC;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,oDAAoD;QAC7D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC7B;IACD;QACE,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,0CAA0C;QACnD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;KACzB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,8DAA8D;QACvE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;KAC1B;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,uDAAuD;QAChE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;KAC3B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,mDAAmD;QAC5D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;KAC5B;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,oDAAoD;QAC7D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC7B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,8CAA8C;QACvD,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE;KACpB;CACF,CAAA;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAExD,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAC9C,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAiB7C,MAAM,CAAC,MAAM,QAAQ,GAAkB;IACrC;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,iCAAiC;QAC1C,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;KAC7D;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,qCAAqC;QAC9C,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;KAC1B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,+BAA+B;QACxC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE;KACpB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,0BAA0B;QACnC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;YACzC,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACxB,CAAC;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,aAAa;QACnB,OAAO,EACL,oEAAoE;QACtE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;KAC9D;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,0CAA0C;QACnD,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE;KACpB;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,2CAA2C;QACpD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC;KACnC;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,oDAAoD;QAC7D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC7B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,+CAA+C;QACxD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;KACzC;IACD;QACE,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,8DAA8D;QACvE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;KACzB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,8DAA8D;QACvE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;KAC1B;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,uDAAuD;QAChE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;KAC3B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,8DAA8D;QACvE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;KAC5B;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EACL,mFAAmF;QACrF,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;KAC3B;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,oDAAoD;QAC7D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC7B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,iDAAiD;QAC1D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;KAC1B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,8CAA8C;QACvD,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE;KACpB;CACF,CAAA;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAExD,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAC9C,CAAC"}

package/dist/sync.d.ts

@@ -47,6 +47,9 @@ export declare function syncGithubRepos(session: Session): Promise<{
  * 401 so callers can tell an expired session apart from a transient failure.
  * Pass `timeoutMs` to hard-cap a slow upload (join uses this so the ritual can
  * never hang); omit it for an unbounded one-shot.
+ *
+ * Tags the upload with this machine's stable id so the backend can sum usage
+ * across the user's machines while keeping each machine's re-sync idempotent.
  */
 export declare function uploadTokenScan(session: Session, scan: AggregateScan, opts?: {
     timeoutMs?: number;

package/dist/sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,WAAW,EACX,YAAY,EAEb,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAGL,KAAK,OAAO,EAEb,MAAM,cAAc,CAAA;AAGrB,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,EAAE,CAAA;AAK7D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAA;AAEpC,MAAM,MAAM,UAAU,GAAG;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,cAAc,EAAE,CAAA;IAC5B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAA;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC/C,gBAAgB,EAAE,gBAAgB,CAAA;CACnC,CAAA;AAED,eAAO,MAAM,qBAAqB,2CAA2C,CAAA;AAE7E,KAAK,YAAY,GACb;IAAE,MAAM,EAAE,IAAI,CAAA;CAAE,GAChB;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,GAC1B;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAwCzC,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC,CAMnB;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAgC1E;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAWrD;AAoBD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,aAAa,EACnB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA2BlC;AAMD;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAyBzB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAK3E;AAED,wBAAsB,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAyBnE"}
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,WAAW,EACX,YAAY,EAEb,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAGL,KAAK,OAAO,EAEb,MAAM,cAAc,CAAA;AAGrB,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,EAAE,CAAA;AAK7D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAA;AAEpC,MAAM,MAAM,UAAU,GAAG;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,cAAc,EAAE,CAAA;IAC5B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAA;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC/C,gBAAgB,EAAE,gBAAgB,CAAA;CACnC,CAAA;AAED,eAAO,MAAM,qBAAqB,2CAA2C,CAAA;AAE7E,KAAK,YAAY,GACb;IAAE,MAAM,EAAE,IAAI,CAAA;CAAE,GAChB;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,GAC1B;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAwCzC,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC,CAMnB;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAgC1E;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAWrD;AAoBD;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,aAAa,EACnB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA8BlC;AAMD;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAyBzB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAK3E;AAED,wBAAsB,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAyBnE"}

package/dist/sync.js

@@ -1,3 +1,4 @@
+import { getMachineIdentity } from './machine.js';
 import { formatBytes, formatTokens, scanAllTools, } from './scanners/index.js';
 import { getSessionExpiresAt, resolveAppUrl, saveSession, } from './session.js';
 import { dim } from './ui.js';
@@ -126,8 +127,12 @@ function toolTotalsRecord(scan) {
  * 401 so callers can tell an expired session apart from a transient failure.
  * Pass `timeoutMs` to hard-cap a slow upload (join uses this so the ritual can
  * never hang); omit it for an unbounded one-shot.
+ *
+ * Tags the upload with this machine's stable id so the backend can sum usage
+ * across the user's machines while keeping each machine's re-sync idempotent.
  */
 export async function uploadTokenScan(session, scan, opts = {}) {
+    const { machineId, machineName } = await getMachineIdentity();
     const res = await fetchApi(session, '/api/claim/sync', {
         method: 'POST',
         headers: {
@@ -135,6 +140,8 @@ export async function uploadTokenScan(session, scan, opts = {}) {
             Authorization: `Bearer ${session.token}`,
         },
         body: JSON.stringify({
+            machineId,
+            machineName,
             dailyTotals: scan.dailyTotals,
             toolTotals: toolTotalsRecord(scan),
             modelTotals: scan.modelTotals,