patchwork-os 0.2.0-beta.0 → 0.2.0-beta.10

package/dist/analyticsConfig.d.ts

@@ -0,0 +1,29 @@
+/**
+ * On-disk config for the opt-in telemetry collector (endpoint + shared secret).
+ *
+ * Lives at ~/.claude/ide/analytics-config.json (respects CLAUDE_CONFIG_DIR).
+ * Mode 0600. Atomic writes via temp + rename.
+ *
+ * Resolution order in analyticsSend.ts:
+ *   1. process.env.PATCHWORK_ANALYTICS_ENDPOINT / _KEY  (highest)
+ *   2. this file
+ *   3. upstream default (no key)
+ *
+ * Reason for the file: keeps the shared secret out of launchd plists
+ * (which are Time-Machine backed, iCloud synced, and survive reinstalls
+ * in an inconsistent way) and gives operators a single source of truth
+ * managed by the `patchwork analytics configure` CLI.
+ */
+export interface AnalyticsConfig {
+    endpoint?: string;
+    key?: string;
+}
+export declare function configPath(): string;
+/** Read the config file. Returns empty object on missing/invalid file. */
+export declare function getAnalyticsConfig(): AnalyticsConfig;
+/**
+ * Atomic write with mode 0600. Merges with existing config — pass
+ * `{ endpoint: undefined }` to clear a field explicitly.
+ */
+export declare function setAnalyticsConfig(update: AnalyticsConfig): void;
+export declare function clearAnalyticsConfig(): void;

package/dist/analyticsConfig.js

@@ -0,0 +1,102 @@
+/**
+ * On-disk config for the opt-in telemetry collector (endpoint + shared secret).
+ *
+ * Lives at ~/.claude/ide/analytics-config.json (respects CLAUDE_CONFIG_DIR).
+ * Mode 0600. Atomic writes via temp + rename.
+ *
+ * Resolution order in analyticsSend.ts:
+ *   1. process.env.PATCHWORK_ANALYTICS_ENDPOINT / _KEY  (highest)
+ *   2. this file
+ *   3. upstream default (no key)
+ *
+ * Reason for the file: keeps the shared secret out of launchd plists
+ * (which are Time-Machine backed, iCloud synced, and survive reinstalls
+ * in an inconsistent way) and gives operators a single source of truth
+ * managed by the `patchwork analytics configure` CLI.
+ */
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+export function configPath() {
+    const claudeDir = process.env.CLAUDE_CONFIG_DIR ?? path.join(os.homedir(), ".claude");
+    return path.join(claudeDir, "ide", "analytics-config.json");
+}
+function isValidEndpoint(value) {
+    if (typeof value !== "string" || value.length === 0)
+        return false;
+    try {
+        const u = new URL(value);
+        return u.protocol === "http:" || u.protocol === "https:";
+    }
+    catch {
+        return false;
+    }
+}
+/** Read the config file. Returns empty object on missing/invalid file. */
+export function getAnalyticsConfig() {
+    try {
+        const raw = fs.readFileSync(configPath(), "utf-8");
+        const obj = JSON.parse(raw);
+        if (typeof obj !== "object" || obj === null)
+            return {};
+        const rec = obj;
+        const out = {};
+        if (isValidEndpoint(rec.endpoint))
+            out.endpoint = rec.endpoint;
+        if (typeof rec.key === "string" && rec.key.length > 0)
+            out.key = rec.key;
+        return out;
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Atomic write with mode 0600. Merges with existing config — pass
+ * `{ endpoint: undefined }` to clear a field explicitly.
+ */
+export function setAnalyticsConfig(update) {
+    const current = getAnalyticsConfig();
+    const next = { ...current };
+    if ("endpoint" in update) {
+        if (update.endpoint === undefined)
+            delete next.endpoint;
+        else if (isValidEndpoint(update.endpoint))
+            next.endpoint = update.endpoint;
+        else
+            throw new Error(`invalid endpoint (must be http(s) URL): ${update.endpoint}`);
+    }
+    if ("key" in update) {
+        if (update.key === undefined)
+            delete next.key;
+        else
+            next.key = update.key;
+    }
+    const p = configPath();
+    fs.mkdirSync(path.dirname(p), { recursive: true });
+    const tmp = `${p}.tmp.${process.pid}`;
+    fs.writeFileSync(tmp, JSON.stringify(next, null, 2) + "\n", { mode: 0o600 });
+    // On Windows, renameSync throws EEXIST when target exists; POSIX atomically replaces.
+    try {
+        fs.renameSync(tmp, p);
+    }
+    catch (renameErr) {
+        if (process.platform === "win32" &&
+            renameErr.code === "EEXIST") {
+            fs.unlinkSync(p);
+            fs.renameSync(tmp, p);
+        }
+        else {
+            throw renameErr;
+        }
+    }
+}
+export function clearAnalyticsConfig() {
+    try {
+        fs.unlinkSync(configPath());
+    }
+    catch {
+        /* file may not exist */
+    }
+}
+//# sourceMappingURL=analyticsConfig.js.map

package/dist/analyticsConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyticsConfig.js","sourceRoot":"","sources":["../src/analyticsConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAO7B,MAAM,UAAU,UAAU;IACxB,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,uBAAuB,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,GAA8B,CAAC;QAC3C,MAAM,GAAG,GAAoB,EAAE,CAAC;QAChC,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC/D,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;QACzE,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAuB;IACxD,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAoB,EAAE,GAAG,OAAO,EAAE,CAAC;IAC7C,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;aACnD,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;;YAEzE,MAAM,IAAI,KAAK,CACb,2CAA2C,MAAM,CAAC,QAAQ,EAAE,CAC7D,CAAC;IACN,CAAC;IACD,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;QACpB,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC;;YACzC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IAC7B,CAAC;IACD,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;IACvB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,sFAAsF;IACtF,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,SAAS,EAAE,CAAC;QACnB,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC3B,SAAmC,CAAC,IAAI,KAAK,QAAQ,EACtD,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACjB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC"}

package/dist/analyticsPrefs.d.ts

@@ -1,9 +1,56 @@
 /**
- * Reads and writes the opt-in analytics preference.
+ * Reads and writes the opt-in telemetry preferences.
  * Stored in ~/.claude/ide/analytics.json (respects CLAUDE_CONFIG_DIR).
  * File created with 0o600 permissions (owner read/write only).
  */
+export interface TelemetryPrefs {
+    crashReports: boolean;
+    usageStats: boolean;
+    localDiagnostics: boolean;
+}
+interface PrefsFileV2 {
+    crashReports: boolean;
+    usageStats: boolean;
+    localDiagnostics: boolean;
+    decidedAt: string;
+    lastSentAt?: string;
+}
+/** Public paths for the /telemetry-prefs DELETE handler. */
+export declare function getAnalyticsPrefsPath(): string;
+export declare function getAnalyticsSaltPath(): string;
+/**
+ * Read and migrate the on-disk prefs to the v2 shape.
+ * Old files with only `enabled` map to:
+ *   { crashReports: enabled, usageStats: enabled, localDiagnostics: false }
+ */
+export declare function getTelemetryPrefs(): TelemetryPrefs;
+/** Partial-merge update. Reads current prefs, applies supplied fields, writes back. */
+export declare function setTelemetryPrefs(prefs: Partial<TelemetryPrefs>): void;
+/**
+ * Returns the raw prefs file contents including optional `lastSentAt` timestamp.
+ * Returns null when no prefs file exists yet.
+ */
+export declare function getAnalyticsPrefsAll(): (PrefsFileV2 & {
+    lastSentAt?: string;
+}) | null;
+/**
+ * Records the current time as `lastSentAt` in the prefs file.
+ * No-op if no prefs file exists yet (user never opted in, nothing to record).
+ */
+export declare function recordAnalyticsSent(): void;
 /** Returns the current opt-in state, or null if no preference has been set. */
 export declare function getAnalyticsPref(): boolean | null;
-/** Persists the opt-in preference. Creates file with 0o600 permissions. */
+/** Persists the opt-in preference (legacy single-boolean form). */
 export declare function setAnalyticsPref(enabled: boolean): void;
+/**
+ * Returns the per-install salt used to hash plugin tool names before they're
+ * sent in the opt-in usage summary. Generated lazily on first call and stored
+ * at ~/.claude/ide/analytics-salt (mode 0o600). Never transmitted.
+ *
+ * Why a salt: an unsalted SHA256 of "acme_deploy" produces the same 8-char
+ * prefix on every install, which would let a receiver correlate plugin usage
+ * across users. With a per-install salt, the same plugin hashes differently
+ * on different machines.
+ */
+export declare function getAnalyticsSalt(): string;
+export {};

package/dist/analyticsPrefs.js

@@ -1,26 +1,124 @@
 /**
- * Reads and writes the opt-in analytics preference.
+ * Reads and writes the opt-in telemetry preferences.
  * Stored in ~/.claude/ide/analytics.json (respects CLAUDE_CONFIG_DIR).
  * File created with 0o600 permissions (owner read/write only).
  */
+import crypto from "node:crypto";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
+/**
+ * Atomic rename helper: on Windows `renameSync` throws EEXIST when the target
+ * already exists (unlike POSIX which replaces atomically). Unlink + retry once.
+ */
+function atomicRename(tmp, target) {
+    try {
+        fs.renameSync(tmp, target);
+    }
+    catch (err) {
+        if (process.platform === "win32" &&
+            err.code === "EEXIST") {
+            fs.unlinkSync(target);
+            fs.renameSync(tmp, target);
+        }
+        else {
+            throw err;
+        }
+    }
+}
 function prefsPath() {
     const claudeDir = process.env.CLAUDE_CONFIG_DIR ?? path.join(os.homedir(), ".claude");
     return path.join(claudeDir, "ide", "analytics.json");
 }
-/** Returns the current opt-in state, or null if no preference has been set. */
-export function getAnalyticsPref() {
+function saltPath() {
+    const claudeDir = process.env.CLAUDE_CONFIG_DIR ?? path.join(os.homedir(), ".claude");
+    return path.join(claudeDir, "ide", "analytics-salt");
+}
+/** Public paths for the /telemetry-prefs DELETE handler. */
+export function getAnalyticsPrefsPath() {
+    return prefsPath();
+}
+export function getAnalyticsSaltPath() {
+    return saltPath();
+}
+/**
+ * Read and migrate the on-disk prefs to the v2 shape.
+ * Old files with only `enabled` map to:
+ *   { crashReports: enabled, usageStats: enabled, localDiagnostics: false }
+ */
+export function getTelemetryPrefs() {
     const p = prefsPath();
     try {
         const raw = fs.readFileSync(p, "utf-8");
         const obj = JSON.parse(raw);
-        if (typeof obj === "object" &&
-            obj !== null &&
-            "enabled" in obj &&
-            typeof obj.enabled === "boolean") {
-            return obj.enabled;
+        if (typeof obj !== "object" || obj === null) {
+            return {
+                crashReports: false,
+                usageStats: false,
+                localDiagnostics: false,
+            };
+        }
+        const rec = obj;
+        // v2 shape
+        if (typeof rec.crashReports === "boolean") {
+            return {
+                crashReports: rec.crashReports,
+                usageStats: typeof rec.usageStats === "boolean" ? rec.usageStats : false,
+                localDiagnostics: typeof rec.localDiagnostics === "boolean"
+                    ? rec.localDiagnostics
+                    : false,
+            };
+        }
+        // v1 migration — `enabled` only
+        if (typeof rec.enabled === "boolean") {
+            return {
+                crashReports: rec.enabled,
+                usageStats: rec.enabled,
+                localDiagnostics: false,
+            };
+        }
+        return { crashReports: false, usageStats: false, localDiagnostics: false };
+    }
+    catch (_err) {
+        return { crashReports: false, usageStats: false, localDiagnostics: false };
+    }
+}
+/** Partial-merge update. Reads current prefs, applies supplied fields, writes back. */
+export function setTelemetryPrefs(prefs) {
+    const current = getTelemetryPrefs();
+    const next = {
+        crashReports: prefs.crashReports !== undefined
+            ? prefs.crashReports
+            : current.crashReports,
+        usageStats: prefs.usageStats !== undefined ? prefs.usageStats : current.usageStats,
+        localDiagnostics: prefs.localDiagnostics !== undefined
+            ? prefs.localDiagnostics
+            : current.localDiagnostics,
+        decidedAt: new Date().toISOString(),
+    };
+    writePrefs(next);
+}
+function writePrefs(content) {
+    const p = prefsPath();
+    const dir = path.dirname(p);
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const tmp = `${p}.tmp`;
+    fs.writeFileSync(tmp, `${JSON.stringify(content, null, 2)}\n`, {
+        mode: 0o600,
+    });
+    atomicRename(tmp, p);
+}
+/**
+ * Returns the raw prefs file contents including optional `lastSentAt` timestamp.
+ * Returns null when no prefs file exists yet.
+ */
+export function getAnalyticsPrefsAll() {
+    const p = prefsPath();
+    try {
+        const raw = fs.readFileSync(p, "utf-8");
+        const obj = JSON.parse(raw);
+        if (typeof obj === "object" && obj !== null) {
+            return obj;
         }
         return null;
     }
@@ -31,20 +129,80 @@ export function getAnalyticsPref() {
         return null;
     }
 }
-/** Persists the opt-in preference. Creates file with 0o600 permissions. */
-export function setAnalyticsPref(enabled) {
+/**
+ * Records the current time as `lastSentAt` in the prefs file.
+ * No-op if no prefs file exists yet (user never opted in, nothing to record).
+ */
+export function recordAnalyticsSent() {
+    const p = prefsPath();
+    try {
+        const raw = fs.readFileSync(p, "utf-8");
+        const obj = JSON.parse(raw);
+        if (typeof obj === "object" && obj !== null) {
+            const updated = {
+                ...obj,
+                lastSentAt: new Date().toISOString(),
+            };
+            const dir = path.dirname(p);
+            fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+            const tmp = `${p}.tmp`;
+            fs.writeFileSync(tmp, `${JSON.stringify(updated, null, 2)}\n`, {
+                mode: 0o600,
+            });
+            atomicRename(tmp, p);
+        }
+    }
+    catch {
+        // No prefs file or unreadable — nothing to update
+    }
+}
+// ---------------------------------------------------------------------------
+// Legacy API — kept for callers that predate the three-flag shape.
+// Derived from usageStats so existing analytics collection doesn't change.
+// ---------------------------------------------------------------------------
+/** Returns the current opt-in state, or null if no preference has been set. */
+export function getAnalyticsPref() {
     const p = prefsPath();
+    try {
+        const raw = fs.readFileSync(p, "utf-8");
+        JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    const prefs = getTelemetryPrefs();
+    return prefs.usageStats;
+}
+/** Persists the opt-in preference (legacy single-boolean form). */
+export function setAnalyticsPref(enabled) {
+    setTelemetryPrefs({ usageStats: enabled, crashReports: enabled });
+}
+/**
+ * Returns the per-install salt used to hash plugin tool names before they're
+ * sent in the opt-in usage summary. Generated lazily on first call and stored
+ * at ~/.claude/ide/analytics-salt (mode 0o600). Never transmitted.
+ *
+ * Why a salt: an unsalted SHA256 of "acme_deploy" produces the same 8-char
+ * prefix on every install, which would let a receiver correlate plugin usage
+ * across users. With a per-install salt, the same plugin hashes differently
+ * on different machines.
+ */
+export function getAnalyticsSalt() {
+    const p = saltPath();
+    try {
+        const raw = fs.readFileSync(p, "utf-8").trim();
+        if (raw.length >= 16)
+            return raw;
+    }
+    catch {
+        // fall through to generate
+    }
     const dir = path.dirname(p);
     fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-    const content = {
-        enabled,
-        decidedAt: new Date().toISOString(),
-    };
-    // Write to temp file then rename for atomicity
+    const salt = crypto.randomBytes(16).toString("hex");
     const tmp = `${p}.tmp`;
-    fs.writeFileSync(tmp, `${JSON.stringify(content, null, 2)}\n`, {
-        mode: 0o600,
-    });
-    fs.renameSync(tmp, p);
+    fs.writeFileSync(tmp, `${salt}\n`, { mode: 0o600 });
+    atomicRename(tmp, p);
+    return salt;
 }
 //# sourceMappingURL=analyticsPrefs.js.map

package/dist/analyticsPrefs.js.map

@@ -1 +1 @@
-{"version":3,"file":"analyticsPrefs.js","sourceRoot":"","sources":["../src/analyticsPrefs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAO7B,SAAS,SAAS;IAChB,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;AACvD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB;IAC9B,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACvC,IACE,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,SAAS,IAAI,GAAG;YAChB,OAAQ,GAAiB,CAAC,OAAO,KAAK,SAAS,EAC/C,CAAC;YACD,OAAQ,GAAiB,CAAC,OAAO,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,OAAO,GAAc;QACzB,OAAO;QACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,+CAA+C;IAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACvB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAC7D,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACxB,CAAC"}
+{"version":3,"file":"analyticsPrefs.js","sourceRoot":"","sources":["../src/analyticsPrefs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAW,EAAE,MAAc;IAC/C,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC3B,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAChD,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACtB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC;AAgBD,SAAS,SAAS;IAChB,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;AACvD,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,qBAAqB;IACnC,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC;AACD,MAAM,UAAU,oBAAoB;IAClC,OAAO,QAAQ,EAAE,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO;gBACL,YAAY,EAAE,KAAK;gBACnB,UAAU,EAAE,KAAK;gBACjB,gBAAgB,EAAE,KAAK;aACxB,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,GAA8B,CAAC;QAE3C,WAAW;QACX,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO;gBACL,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,UAAU,EACR,OAAO,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK;gBAC9D,gBAAgB,EACd,OAAO,GAAG,CAAC,gBAAgB,KAAK,SAAS;oBACvC,CAAC,CAAC,GAAG,CAAC,gBAAgB;oBACtB,CAAC,CAAC,KAAK;aACZ,CAAC;QACJ,CAAC;QAED,gCAAgC;QAChC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO;gBACL,YAAY,EAAE,GAAG,CAAC,OAAO;gBACzB,UAAU,EAAE,GAAG,CAAC,OAAO;gBACvB,gBAAgB,EAAE,KAAK;aACxB,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAC7E,CAAC;IAAC,OAAO,IAAI,EAAE,CAAC;QACd,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAAC,KAA8B;IAC9D,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,MAAM,IAAI,GAAgB;QACxB,YAAY,EACV,KAAK,CAAC,YAAY,KAAK,SAAS;YAC9B,CAAC,CAAC,KAAK,CAAC,YAAY;YACpB,CAAC,CAAC,OAAO,CAAC,YAAY;QAC1B,UAAU,EACR,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU;QACxE,gBAAgB,EACd,KAAK,CAAC,gBAAgB,KAAK,SAAS;YAClC,CAAC,CAAC,KAAK,CAAC,gBAAgB;YACxB,CAAC,CAAC,OAAO,CAAC,gBAAgB;QAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,UAAU,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,OAAoB;IACtC,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACvB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAC7D,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAGlC,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,GAA4C,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG;gBACd,GAAI,GAAmB;gBACvB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC;YACF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC5B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;YACvB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;gBAC7D,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,mEAAmE;AACnE,2EAA2E;AAC3E,8EAA8E;AAE9E,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB;IAC9B,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,OAAO,KAAK,CAAC,UAAU,CAAC;AAC1B,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,iBAAiB,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE;YAAE,OAAO,GAAG,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACvB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/analyticsSend.d.ts

@@ -2,9 +2,25 @@
  * Sends an anonymized analytics summary to the usage endpoint.
  * - Fire-and-forget is NOT used: callers must await this with a timeout race.
  * - All errors are caught and swallowed — telemetry must never affect bridge operation.
- * - Endpoint is hardcoded (not runtime-configurable) to prevent redirect attacks.
+ * - Endpoint defaults to the upstream collector. Operators may override via:
+ *     1. env: PATCHWORK_ANALYTICS_ENDPOINT  (highest precedence; for CI/headless)
+ *     2. config file: ~/.claude/ide/analytics-config.json  (preferred — managed by
+ *        `patchwork analytics configure`, keeps secrets out of launchd plists)
+ *     3. default upstream collector
+ *   Endpoint is resolved per-call (cheap fs read) so live config changes take
+ *   effect on the next send without restart. Invalid values fall back through.
+ *   Never read from the network or summary payload — preserves the
+ *   redirect-attack property the original hardcoded constant was protecting.
  */
 import type { AnalyticsSummary } from "./analyticsAggregator.js";
+export declare function resolveAnalyticsTarget(): {
+    endpoint: string;
+    key: string | undefined;
+    source: {
+        endpoint: "env" | "config" | "default";
+        key: "env" | "config" | "none";
+    };
+};
 /**
  * Sends the summary to the analytics endpoint.
  * Resolves (never rejects) — all errors are swallowed silently.

package/dist/analyticsSend.js

@@ -2,10 +2,63 @@
  * Sends an anonymized analytics summary to the usage endpoint.
  * - Fire-and-forget is NOT used: callers must await this with a timeout race.
  * - All errors are caught and swallowed — telemetry must never affect bridge operation.
- * - Endpoint is hardcoded (not runtime-configurable) to prevent redirect attacks.
+ * - Endpoint defaults to the upstream collector. Operators may override via:
+ *     1. env: PATCHWORK_ANALYTICS_ENDPOINT  (highest precedence; for CI/headless)
+ *     2. config file: ~/.claude/ide/analytics-config.json  (preferred — managed by
+ *        `patchwork analytics configure`, keeps secrets out of launchd plists)
+ *     3. default upstream collector
+ *   Endpoint is resolved per-call (cheap fs read) so live config changes take
+ *   effect on the next send without restart. Invalid values fall back through.
+ *   Never read from the network or summary payload — preserves the
+ *   redirect-attack property the original hardcoded constant was protecting.
  */
-/** Hardcoded endpoint — not configurable at runtime. */
-const ANALYTICS_ENDPOINT = "https://analytics.claude-ide-bridge.dev/v1/usage";
+import { getAnalyticsConfig } from "./analyticsConfig.js";
+import { recordAnalyticsSent } from "./analyticsPrefs.js";
+const DEFAULT_ENDPOINT = "https://analytics.claude-ide-bridge.dev/v1/usage";
+function validUrl(value) {
+    if (!value)
+        return undefined;
+    try {
+        const u = new URL(value);
+        if (u.protocol !== "https:" && u.protocol !== "http:")
+            return undefined;
+        return u.toString();
+    }
+    catch {
+        return undefined;
+    }
+}
+export function resolveAnalyticsTarget() {
+    const envEndpoint = validUrl(process.env.PATCHWORK_ANALYTICS_ENDPOINT);
+    const envKey = process.env.PATCHWORK_ANALYTICS_KEY;
+    const cfg = getAnalyticsConfig();
+    const cfgEndpoint = validUrl(cfg.endpoint);
+    let endpoint = DEFAULT_ENDPOINT;
+    let endpointSource = "default";
+    if (envEndpoint) {
+        endpoint = envEndpoint;
+        endpointSource = "env";
+    }
+    else if (cfgEndpoint) {
+        endpoint = cfgEndpoint;
+        endpointSource = "config";
+    }
+    let key;
+    let keySource = "none";
+    if (envKey) {
+        key = envKey;
+        keySource = "env";
+    }
+    else if (cfg.key) {
+        key = cfg.key;
+        keySource = "config";
+    }
+    return {
+        endpoint,
+        key,
+        source: { endpoint: endpointSource, key: keySource },
+    };
+}
 const SEND_TIMEOUT_MS = 3000;
 /**
  * Sends the summary to the analytics endpoint.
@@ -13,15 +66,24 @@ const SEND_TIMEOUT_MS = 3000;
  */
 export async function sendAnalytics(summary) {
     try {
+        const { endpoint, key } = resolveAnalyticsTarget();
         const controller = new AbortController();
         const timer = setTimeout(() => controller.abort(), SEND_TIMEOUT_MS);
         try {
-            await fetch(ANALYTICS_ENDPOINT, {
+            const headers = {
+                "Content-Type": "application/json",
+            };
+            if (key)
+                headers["X-Analytics-Key"] = key;
+            const res = await fetch(endpoint, {
                 method: "POST",
-                headers: { "Content-Type": "application/json" },
+                headers,
                 body: JSON.stringify(summary),
                 signal: controller.signal,
             });
+            if (res.ok) {
+                recordAnalyticsSent();
+            }
         }
         finally {
             clearTimeout(timer);

package/dist/analyticsSend.js.map

@@ -1 +1 @@
-{"version":3,"file":"analyticsSend.js","sourceRoot":"","sources":["../src/analyticsSend.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,wDAAwD;AACxD,MAAM,kBAAkB,GAAG,kDAAkD,CAAC;AAE9E,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAyB;IAC3D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,eAAe,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,kBAAkB,EAAE;gBAC9B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;AACH,CAAC"}
+{"version":3,"file":"analyticsSend.js","sourceRoot":"","sources":["../src/analyticsSend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,gBAAgB,GAAG,kDAAkD,CAAC;AAE5E,SAAS,QAAQ,CAAC,KAAyB;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;QACxE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB;IAQpC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACnD,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE3C,IAAI,QAAQ,GAAG,gBAAgB,CAAC;IAChC,IAAI,cAAc,GAAiC,SAAS,CAAC;IAC7D,IAAI,WAAW,EAAE,CAAC;QAChB,QAAQ,GAAG,WAAW,CAAC;QACvB,cAAc,GAAG,KAAK,CAAC;IACzB,CAAC;SAAM,IAAI,WAAW,EAAE,CAAC;QACvB,QAAQ,GAAG,WAAW,CAAC;QACvB,cAAc,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,IAAI,GAAuB,CAAC;IAC5B,IAAI,SAAS,GAA8B,MAAM,CAAC;IAClD,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,GAAG,MAAM,CAAC;QACb,SAAS,GAAG,KAAK,CAAC;IACpB,CAAC;SAAM,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QACnB,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;QACd,SAAS,GAAG,QAAQ,CAAC;IACvB,CAAC;IAED,OAAO;QACL,QAAQ;QACR,GAAG;QACH,MAAM,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE;KACrD,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAyB;IAC3D,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,sBAAsB,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,eAAe,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,OAAO,GAA2B;gBACtC,cAAc,EAAE,kBAAkB;aACnC,CAAC;YACF,IAAI,GAAG;gBAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,GAAG,CAAC;YAC1C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,mBAAmB,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;AACH,CAAC"}

package/dist/approvalHttp.d.ts

@@ -39,6 +39,20 @@ export interface ApprovalHttpDeps {
     pushServiceToken?: string;
     /** Public base URL of this bridge (e.g. https://mybridge.example.com). Embedded in push payload as callback base. */
     pushServiceBaseUrl?: string;
+    /**
+     * ntfy.sh topic for direct phone-path approvals via action buttons. When set
+     * AND `pushServiceBaseUrl` is set (so the action URLs can reach the bridge),
+     * each queued approval is published to the topic with Approve / Reject HTTP
+     * action buttons that POST back to the bridge with the single-use approval
+     * token. Independent of `pushServiceUrl` — ntfy can be the sole phone path
+     * (no FCM/APNS relay needed) or run alongside it.
+     */
+    ntfyTopic?: string;
+    /**
+     * ntfy server. Defaults to `https://ntfy.sh`. Set to a self-hosted instance
+     * (e.g. `https://ntfy.your-domain.tld`) for auth/private-topic deployments.
+     */
+    ntfyServer?: string;
     /**
      * Optional ActivityLog used to compute passive risk personalization
      * signals (`src/approvalSignals.ts`). When omitted, personalSignals are