projscan 4.7.0 → 4.9.1

package/dist/core/telemetryConfig.js

@@ -0,0 +1,171 @@
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+export const DEFAULT_TELEMETRY_ENDPOINT = 'https://www.baseframelabs.com/api/projscan/telemetry';
+export const TELEMETRY_HOME_ENV = 'PROJSCAN_TELEMETRY_HOME';
+export const TELEMETRY_ENDPOINT_ENV = 'PROJSCAN_TELEMETRY_ENDPOINT';
+export const TELEMETRY_SCHEMA_VERSION = 1;
+const CONFIG_FILE = 'telemetry.json';
+const QUEUE_FILE = 'telemetry-queue.jsonl';
+export const TELEMETRY_COLLECTED = [
+    'command_category',
+    'command_name',
+    'success_or_failure',
+    'duration_bucket',
+    'projscan_version',
+    'node_major',
+    'platform',
+    'ci_boolean',
+    'setup_booleans',
+    'repeat_use_buckets',
+    'optional_feedback_buckets',
+];
+export const TELEMETRY_NEVER_COLLECTED = [
+    'source_code',
+    'file_paths',
+    'repo_names',
+    'branch_names',
+    'package_names',
+    'usernames',
+    'emails',
+    'raw_findings',
+    'secrets',
+    'environment_variables',
+];
+export function buildTelemetryStatus(paths, config, queueLength, enabledOverride) {
+    const enabled = enabledOverride && config.enabled === true;
+    return {
+        schemaVersion: TELEMETRY_SCHEMA_VERSION,
+        enabled,
+        mode: enabled ? 'enabled' : 'disabled',
+        anonymousId: enabled ? (config.anonymousId ?? null) : null,
+        endpoint: config.endpoint,
+        configPath: paths.configPath,
+        queuePath: paths.queuePath,
+        queueLength: enabled ? queueLength : 0,
+        collected: [...TELEMETRY_COLLECTED],
+        neverCollected: [...TELEMETRY_NEVER_COLLECTED],
+        controls: [
+            'projscan telemetry status',
+            'projscan telemetry enable',
+            'projscan telemetry disable',
+            'projscan telemetry explain',
+        ],
+        nextCommands: enabled
+            ? ['projscan telemetry disable', 'projscan telemetry explain']
+            : ['projscan telemetry explain', 'projscan telemetry enable'],
+    };
+}
+export function resolveTelemetryPaths(options) {
+    const configDir = options.configDir ?? defaultTelemetryConfigDir();
+    return {
+        configDir,
+        configPath: path.join(configDir, CONFIG_FILE),
+        queuePath: path.join(configDir, QUEUE_FILE),
+    };
+}
+export function getDefaultEndpoint() {
+    return process.env[TELEMETRY_ENDPOINT_ENV] || DEFAULT_TELEMETRY_ENDPOINT;
+}
+export async function readTelemetryConfig(configPath, nowValue) {
+    try {
+        const raw = await fs.readFile(configPath, 'utf-8');
+        const parsed = JSON.parse(raw);
+        return { exists: true, config: normalizeTelemetryConfig(parsed, nowValue) };
+    }
+    catch {
+        return { exists: false, config: defaultTelemetryConfig(nowValue) };
+    }
+}
+export function normalizeTelemetryConfig(value, nowValue) {
+    const fallback = defaultTelemetryConfig(nowValue);
+    return {
+        schemaVersion: TELEMETRY_SCHEMA_VERSION,
+        enabled: value.enabled === true,
+        anonymousId: typeof value.anonymousId === 'string' ? value.anonymousId : undefined,
+        endpoint: typeof value.endpoint === 'string' ? value.endpoint : getDefaultEndpoint(),
+        createdAt: typeof value.createdAt === 'string' ? value.createdAt : fallback.createdAt,
+        updatedAt: typeof value.updatedAt === 'string' ? value.updatedAt : fallback.updatedAt,
+        usage: {
+            firstSeenDay: typeof value.usage?.firstSeenDay === 'string' ? value.usage.firstSeenDay : undefined,
+            lastSeenDay: typeof value.usage?.lastSeenDay === 'string' ? value.usage.lastSeenDay : undefined,
+            runCount: Number.isFinite(value.usage?.runCount) ? Number(value.usage?.runCount) : 0,
+            activeDays: Array.isArray(value.usage?.activeDays)
+                ? value.usage.activeDays.filter((item) => typeof item === 'string')
+                : [],
+        },
+    };
+}
+export function defaultTelemetryConfig(nowValue) {
+    const now = toIso(nowValue);
+    return {
+        schemaVersion: TELEMETRY_SCHEMA_VERSION,
+        enabled: false,
+        endpoint: getDefaultEndpoint(),
+        createdAt: now,
+        updatedAt: now,
+        usage: { runCount: 0, activeDays: [] },
+    };
+}
+export function updateTelemetryUsage(config, nowValue) {
+    const day = toDay(nowValue);
+    const activeDays = new Set(config.usage.activeDays ?? []);
+    activeDays.add(day);
+    return {
+        ...config,
+        updatedAt: toIso(nowValue),
+        usage: {
+            firstSeenDay: config.usage.firstSeenDay ?? day,
+            lastSeenDay: day,
+            runCount: (config.usage.runCount ?? 0) + 1,
+            activeDays: [...activeDays].sort(),
+        },
+    };
+}
+export async function writeTelemetryConfig(configPath, config) {
+    await fs.mkdir(path.dirname(configPath), { recursive: true });
+    await fs.writeFile(configPath, JSON.stringify(config, null, 2) + '\n', 'utf-8');
+}
+export async function appendTelemetryQueue(queuePath, event) {
+    await fs.mkdir(path.dirname(queuePath), { recursive: true });
+    await fs.appendFile(queuePath, JSON.stringify(event) + '\n', 'utf-8');
+}
+export async function readTelemetryQueue(queuePath) {
+    try {
+        const raw = await fs.readFile(queuePath, 'utf-8');
+        return raw
+            .split('\n')
+            .map((line) => line.trim())
+            .filter(Boolean)
+            .map((line) => JSON.parse(line));
+    }
+    catch {
+        return [];
+    }
+}
+export async function countTelemetryQueue(queuePath) {
+    try {
+        const raw = await fs.readFile(queuePath, 'utf-8');
+        return raw.split('\n').filter((line) => line.trim().length > 0).length;
+    }
+    catch {
+        return 0;
+    }
+}
+export async function clearTelemetryQueue(queuePath) {
+    await fs.rm(queuePath, { force: true });
+}
+export function toIso(value) {
+    return (value ?? new Date()).toISOString();
+}
+function defaultTelemetryConfigDir() {
+    if (process.env[TELEMETRY_HOME_ENV])
+        return path.resolve(process.env[TELEMETRY_HOME_ENV]);
+    if (process.env.XDG_CONFIG_HOME)
+        return path.join(process.env.XDG_CONFIG_HOME, 'projscan');
+    return path.join(os.homedir(), '.config', 'projscan');
+}
+function toDay(value) {
+    return toIso(value).slice(0, 10);
+}
+//# sourceMappingURL=telemetryConfig.js.map

package/dist/core/telemetryConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetryConfig.js","sourceRoot":"","sources":["../../src/core/telemetryConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,0BAA0B,GAAG,sDAAsD,CAAC;AACjG,MAAM,CAAC,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAC5D,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AACpE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,MAAM,WAAW,GAAG,gBAAgB,CAAC;AACrC,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAE3C,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,kBAAkB;IAClB,cAAc;IACd,oBAAoB;IACpB,iBAAiB;IACjB,kBAAkB;IAClB,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,gBAAgB;IAChB,oBAAoB;IACpB,2BAA2B;CACnB,CAAC;AAEX,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,cAAc;IACd,eAAe;IACf,WAAW;IACX,QAAQ;IACR,cAAc;IACd,SAAS;IACT,uBAAuB;CACf,CAAC;AA0CX,MAAM,UAAU,oBAAoB,CAClC,KAAqB,EACrB,MAA6B,EAC7B,WAAmB,EACnB,eAAwB;IAExB,MAAM,OAAO,GAAG,eAAe,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IAC3D,OAAO;QACL,aAAa,EAAE,wBAAwB;QACvC,OAAO;QACP,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;QACtC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QAC1D,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACtC,SAAS,EAAE,CAAC,GAAG,mBAAmB,CAAC;QACnC,cAAc,EAAE,CAAC,GAAG,yBAAyB,CAAC;QAC9C,QAAQ,EAAE;YACR,2BAA2B;YAC3B,2BAA2B;YAC3B,4BAA4B;YAC5B,4BAA4B;SAC7B;QACD,YAAY,EAAE,OAAO;YACnB,CAAC,CAAC,CAAC,4BAA4B,EAAE,4BAA4B,CAAC;YAC9D,CAAC,CAAC,CAAC,4BAA4B,EAAE,2BAA2B,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA6B;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,yBAAyB,EAAE,CAAC;IACnE,OAAO;QACL,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;QAC7C,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,0BAA0B,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAkB,EAClB,QAA0B;IAE1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmC,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACrE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAqC,EACrC,QAA0B;IAE1B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAClD,OAAO;QACL,aAAa,EAAE,wBAAwB;QACvC,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;QAC/B,WAAW,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QAClF,QAAQ,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,EAAE;QACpF,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS;QACrF,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS;QACrF,KAAK,EAAE;YACL,YAAY,EACV,OAAO,KAAK,CAAC,KAAK,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YACtF,WAAW,EACT,OAAO,KAAK,CAAC,KAAK,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YACpF,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACpF,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC;gBAChD,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;gBACnF,CAAC,CAAC,EAAE;SACP;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAA0B;IAC/D,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5B,OAAO;QACL,aAAa,EAAE,wBAAwB;QACvC,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,kBAAkB,EAAE;QAC9B,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAA6B,EAC7B,QAA0B;IAE1B,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC1D,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO;QACL,GAAG,MAAM;QACT,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC;QAC1B,KAAK,EAAE;YACL,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,GAAG;YAC9C,WAAW,EAAE,GAAG;YAChB,QAAQ,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;YAC1C,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE;SACnC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAkB,EAClB,MAA6B;IAE7B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAI,SAAiB,EAAE,KAAQ;IACvE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAI,SAAiB;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,GAAG;aACP,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB;IACzD,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAuB;IAC3C,OAAO,CAAC,KAAK,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,yBAAyB;IAChC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAW,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,KAAK,CAAC,KAAuB;IACpC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/dist/core/telemetryEvents.d.ts

@@ -0,0 +1,57 @@
+import { type StoredTelemetryConfig } from './telemetryConfig.js';
+export type TelemetryCommandCategory = 'doctor' | 'review' | 'preflight' | 'dogfood' | 'feedback' | 'trial' | 'init' | 'mcp' | 'evidence' | 'start' | 'other';
+export type TelemetryEventStatus = 'success' | 'failure';
+export type DurationBucket = '<1s' | '1-5s' | '5-30s' | '30s-2m' | '2m+';
+export type CountBucket = '0' | '1' | '2-5' | '6-20' | '21-100' | '100+';
+export type MinutesSavedBucket = '0' | '1-5' | '6-10' | '10-20' | '20+';
+export interface TelemetryFeedbackInput {
+    repo?: unknown;
+    pr?: unknown;
+    reviewer?: unknown;
+    useful?: boolean;
+    minutesSaved?: number;
+    preventedBadEdit?: boolean;
+    falsePositiveRules?: unknown[];
+    falsePositiveReported?: boolean;
+}
+export interface TelemetryFeedbackSummary {
+    useful?: boolean;
+    minutesSavedBucket?: MinutesSavedBucket;
+    preventedBadEdit?: boolean;
+    falsePositiveReported?: boolean;
+}
+export interface CommandTelemetryInput {
+    commandName: string;
+    status: TelemetryEventStatus;
+    durationMs: number;
+    rootPath?: string;
+    version?: string;
+    feedback?: TelemetryFeedbackSummary;
+}
+export interface TelemetryEvent {
+    schemaVersion: 1;
+    eventId: string;
+    eventType: 'command_run' | 'feedback_outcome';
+    anonymousId: string;
+    occurredAt: string;
+    commandCategory: TelemetryCommandCategory;
+    commandName: string;
+    status: TelemetryEventStatus;
+    durationBucket: DurationBucket;
+    version: string;
+    nodeMajor: number;
+    platform: NodeJS.Platform;
+    ci: boolean;
+    setup: {
+        githubActionConfigured: boolean;
+        mcpConfigured: boolean;
+        teamInitConfigured: boolean;
+    };
+    repeatUse: {
+        runCountBucket: CountBucket;
+        activeDaysBucket: CountBucket;
+    };
+    feedback?: TelemetryFeedbackSummary;
+}
+export declare function buildFeedbackTelemetry(input: TelemetryFeedbackInput): TelemetryFeedbackSummary;
+export declare function buildTelemetryCommandEvent(input: CommandTelemetryInput, config: StoredTelemetryConfig, nowValue: Date | undefined): Promise<TelemetryEvent>;

package/dist/core/telemetryEvents.js

@@ -0,0 +1,143 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { TELEMETRY_SCHEMA_VERSION, toIso, } from './telemetryConfig.js';
+const TELEMETRY_COMMAND_CATEGORY_BY_COMMAND = {
+    doctor: 'doctor',
+    review: 'review',
+    preflight: 'preflight',
+    dogfood: 'dogfood',
+    feedback: 'feedback',
+    trial: 'trial',
+    init: 'init',
+    mcp: 'mcp',
+    'evidence-pack': 'evidence',
+    start: 'start',
+    'first-run': 'start',
+    recipes: 'start',
+};
+export function buildFeedbackTelemetry(input) {
+    const result = {};
+    if (typeof input.useful === 'boolean')
+        result.useful = input.useful;
+    if (typeof input.minutesSaved === 'number' && Number.isFinite(input.minutesSaved)) {
+        result.minutesSavedBucket = bucketTelemetryMinutes(input.minutesSaved);
+    }
+    if (typeof input.preventedBadEdit === 'boolean')
+        result.preventedBadEdit = input.preventedBadEdit;
+    const ruleCount = Array.isArray(input.falsePositiveRules) ? input.falsePositiveRules.length : 0;
+    if (typeof input.falsePositiveReported === 'boolean' || ruleCount > 0) {
+        result.falsePositiveReported = input.falsePositiveReported === true || ruleCount > 0;
+    }
+    return result;
+}
+export async function buildTelemetryCommandEvent(input, config, nowValue) {
+    const now = nowValue ?? new Date();
+    const rootPath = input.rootPath ?? process.cwd();
+    return {
+        schemaVersion: TELEMETRY_SCHEMA_VERSION,
+        eventId: 'evt_' + crypto.randomUUID(),
+        eventType: input.feedback ? 'feedback_outcome' : 'command_run',
+        anonymousId: config.anonymousId ?? generateTelemetryAnonymousId(),
+        occurredAt: toIso(now),
+        commandCategory: categorizeTelemetryCommand(input.commandName),
+        commandName: sanitizeTelemetryCommandName(input.commandName),
+        status: input.status,
+        durationBucket: bucketTelemetryDuration(input.durationMs),
+        version: sanitizeTelemetryVersion(input.version),
+        nodeMajor: Number.parseInt(process.versions.node.split('.')[0] ?? '0', 10) || 0,
+        platform: process.platform,
+        ci: process.env.CI === 'true' || process.env.GITHUB_ACTIONS === 'true',
+        setup: await detectTelemetrySetup(rootPath),
+        repeatUse: {
+            runCountBucket: bucketTelemetryCount(config.usage.runCount),
+            activeDaysBucket: bucketTelemetryCount(config.usage.activeDays.length),
+        },
+        ...(input.feedback ? { feedback: input.feedback } : {}),
+    };
+}
+function categorizeTelemetryCommand(commandName) {
+    const name = sanitizeTelemetryCommandName(commandName);
+    const first = name.split(' ')[0] ?? 'other';
+    return TELEMETRY_COMMAND_CATEGORY_BY_COMMAND[first] ?? 'other';
+}
+function sanitizeTelemetryCommandName(commandName) {
+    return (commandName
+        .toLowerCase()
+        .replace(/[^a-z0-9:_-]+/g, ' ')
+        .trim()
+        .split(/\s+/)
+        .slice(0, 3)
+        .join(' ') || 'unknown');
+}
+function sanitizeTelemetryVersion(value) {
+    if (!value)
+        return 'unknown';
+    return /^\d+\.\d+\.\d+(?:[-+][a-zA-Z0-9.-]+)?$/.test(value) ? value : 'unknown';
+}
+function bucketTelemetryDuration(durationMs) {
+    if (!Number.isFinite(durationMs) || durationMs < 1000)
+        return '<1s';
+    if (durationMs < 5000)
+        return '1-5s';
+    if (durationMs < 30000)
+        return '5-30s';
+    if (durationMs < 120000)
+        return '30s-2m';
+    return '2m+';
+}
+function bucketTelemetryMinutes(value) {
+    if (value <= 0)
+        return '0';
+    if (value <= 5)
+        return '1-5';
+    if (value <= 10)
+        return '6-10';
+    if (value <= 20)
+        return '10-20';
+    return '20+';
+}
+function bucketTelemetryCount(value) {
+    if (value <= 0)
+        return '0';
+    if (value === 1)
+        return '1';
+    if (value <= 5)
+        return '2-5';
+    if (value <= 20)
+        return '6-20';
+    if (value <= 100)
+        return '21-100';
+    return '100+';
+}
+async function detectTelemetrySetup(rootPath) {
+    const githubActionConfigured = await telemetryFileExists(path.join(rootPath, '.github', 'workflows', 'projscan.yml'));
+    const teamInitConfigured = (await telemetryFileExists(path.join(rootPath, '.projscan-baseline.json'))) ||
+        (await telemetryFileExists(path.join(rootPath, '.github', 'CODEOWNERS')));
+    const mcpConfigured = await anyTelemetryFileExists([
+        path.join(rootPath, '.codex', 'config.toml'),
+        path.join(rootPath, '.cursor', 'mcp.json'),
+        path.join(rootPath, '.continue', 'config.json'),
+    ]);
+    return { githubActionConfigured, mcpConfigured, teamInitConfigured };
+}
+async function anyTelemetryFileExists(paths) {
+    for (const candidate of paths) {
+        if (await telemetryFileExists(candidate))
+            return true;
+    }
+    return false;
+}
+async function telemetryFileExists(file) {
+    try {
+        await fs.access(file);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function generateTelemetryAnonymousId() {
+    return 'psn_' + crypto.randomUUID();
+}
+//# sourceMappingURL=telemetryEvents.js.map

package/dist/core/telemetryEvents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetryEvents.js","sourceRoot":"","sources":["../../src/core/telemetryEvents.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,wBAAwB,EACxB,KAAK,GAEN,MAAM,sBAAsB,CAAC;AAe9B,MAAM,qCAAqC,GAEvC;IACF,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,eAAe,EAAE,UAAU;IAC3B,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,OAAO;IACpB,OAAO,EAAE,OAAO;CACjB,CAAC;AA4DF,MAAM,UAAU,sBAAsB,CAAC,KAA6B;IAClE,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACpE,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAClF,MAAM,CAAC,kBAAkB,GAAG,sBAAsB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAAE,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAClG,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,IAAI,OAAO,KAAK,CAAC,qBAAqB,KAAK,SAAS,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,qBAAqB,GAAG,KAAK,CAAC,qBAAqB,KAAK,IAAI,IAAI,SAAS,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAA4B,EAC5B,MAA6B,EAC7B,QAA0B;IAE1B,MAAM,GAAG,GAAG,QAAQ,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACjD,OAAO;QACL,aAAa,EAAE,wBAAwB;QACvC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE;QACrC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa;QAC9D,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,4BAA4B,EAAE;QACjE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC;QACtB,eAAe,EAAE,0BAA0B,CAAC,KAAK,CAAC,WAAW,CAAC;QAC9D,WAAW,EAAE,4BAA4B,CAAC,KAAK,CAAC,WAAW,CAAC;QAC5D,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC;QACzD,OAAO,EAAE,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC;QAChD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC;QAC/E,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM;QACtE,KAAK,EAAE,MAAM,oBAAoB,CAAC,QAAQ,CAAC;QAC3C,SAAS,EAAE;YACT,cAAc,EAAE,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC3D,gBAAgB,EAAE,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;SACvE;QACD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,WAAmB;IACrD,MAAM,IAAI,GAAG,4BAA4B,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IAC5C,OAAO,qCAAqC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC;AACjE,CAAC;AAED,SAAS,4BAA4B,CAAC,WAAmB;IACvD,OAAO,CACL,WAAW;SACR,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,IAAI,EAAE;SACN,KAAK,CAAC,KAAK,CAAC;SACZ,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAyB;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAClF,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,UAAU,GAAG,IAAI;QAAE,OAAO,MAAM,CAAC;IACrC,IAAI,UAAU,GAAG,KAAK;QAAE,OAAO,OAAO,CAAC;IACvC,IAAI,UAAU,GAAG,MAAM;QAAE,OAAO,QAAQ,CAAC;IACzC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IAC3B,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IAC3B,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAC5B,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IAClD,MAAM,sBAAsB,GAAG,MAAM,mBAAmB,CACtD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,CAAC,CAC5D,CAAC;IACF,MAAM,kBAAkB,GACtB,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC,CAAC;QAC3E,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC;KAChD,CAAC,CAAC;IACH,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAAe;IACnD,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,IAAI,MAAM,mBAAmB,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B;IACnC,OAAO,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;AACtC,CAAC"}

package/dist/core/telemetryFlushing.d.ts

@@ -0,0 +1,10 @@
+import type { RecordTelemetryResult, TelemetryOptions } from './telemetryRecording.js';
+export interface TelemetryFlushRuntime {
+    isOfflineMode: () => boolean;
+    isRuntimeTelemetryDisabled: () => boolean;
+    isTelemetryNetworkDisabled: () => boolean;
+    offlineReason: string;
+    disabledReason: string;
+    noNetworkReason: string;
+}
+export declare function flushTelemetry(options: TelemetryOptions, runtime: TelemetryFlushRuntime): Promise<RecordTelemetryResult>;

package/dist/core/telemetryFlushing.js

@@ -0,0 +1,42 @@
+import { clearTelemetryQueue, readTelemetryConfig, readTelemetryQueue, resolveTelemetryPaths, } from './telemetryConfig.js';
+import { defaultTelemetrySender } from './telemetrySender.js';
+export async function flushTelemetry(options, runtime) {
+    const blocked = flushBlockedResult(runtime);
+    if (blocked)
+        return blocked;
+    const paths = resolveTelemetryPaths(options);
+    const loaded = await readTelemetryConfig(paths.configPath, options.now);
+    if (!loaded.config.enabled || !loaded.config.anonymousId)
+        return { status: 'skipped', reason: 'disabled' };
+    const events = await readTelemetryQueue(paths.queuePath);
+    if (events.length === 0)
+        return { status: 'skipped', reason: 'empty' };
+    const sender = options.sender ?? defaultTelemetrySender;
+    return sendQueuedTelemetry(events, loaded.config.endpoint, sender, paths.queuePath);
+}
+function flushBlockedResult(runtime) {
+    if (runtime.isOfflineMode())
+        return { status: 'skipped', reason: runtime.offlineReason };
+    if (runtime.isRuntimeTelemetryDisabled())
+        return { status: 'skipped', reason: runtime.disabledReason };
+    if (runtime.isTelemetryNetworkDisabled())
+        return { status: 'queued', reason: runtime.noNetworkReason };
+    return null;
+}
+async function sendQueuedTelemetry(events, endpoint, sender, queuePath) {
+    try {
+        const result = await sender(events, endpoint);
+        if (!result.ok)
+            return { status: 'failed', reason: 'http_' + result.status, queued: events.length };
+        await clearTelemetryQueue(queuePath);
+        return { status: 'sent', queued: 0 };
+    }
+    catch (error) {
+        return {
+            status: 'failed',
+            reason: error instanceof Error ? error.message : String(error),
+            queued: events.length,
+        };
+    }
+}
+//# sourceMappingURL=telemetryFlushing.js.map

package/dist/core/telemetryFlushing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetryFlushing.js","sourceRoot":"","sources":["../../src/core/telemetryFlushing.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,sBAAsB,EAAwB,MAAM,sBAAsB,CAAC;AAWpF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAyB,EACzB,OAA8B;IAE9B,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW;QACtD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAiB,KAAK,CAAC,SAAS,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACvE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,sBAAsB,CAAC;IACxD,OAAO,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA8B;IACxD,IAAI,OAAO,CAAC,aAAa,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;IACzF,IAAI,OAAO,CAAC,0BAA0B,EAAE;QACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;IAC/D,IAAI,OAAO,CAAC,0BAA0B,EAAE;QACtC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,MAAwB,EACxB,QAAgB,EAChB,MAAuB,EACvB,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,EAAE;YACZ,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACtF,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC9D,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/core/telemetryRecording.d.ts

@@ -0,0 +1,26 @@
+import { type CommandTelemetryInput, type TelemetryFeedbackInput } from './telemetryEvents.js';
+import type { TelemetrySender } from './telemetrySender.js';
+export interface TelemetryOptions {
+    configDir?: string;
+    now?: Date;
+    sender?: TelemetrySender;
+    flush?: boolean;
+}
+export interface RecordTelemetryResult {
+    status: 'skipped' | 'queued' | 'sent' | 'failed';
+    reason?: string;
+    queued?: number;
+}
+export interface TelemetryRecordingRuntime {
+    flushTelemetry: (options?: TelemetryOptions) => Promise<RecordTelemetryResult>;
+    isOfflineMode: () => boolean;
+    isRuntimeTelemetryDisabled: () => boolean;
+    isTelemetryNetworkDisabled: () => boolean;
+    offlineReason: string;
+    disabledReason: string;
+}
+export declare function recordCommandTelemetry(input: CommandTelemetryInput, options: TelemetryOptions, runtime: TelemetryRecordingRuntime): Promise<RecordTelemetryResult>;
+export declare function recordFeedbackTelemetry(input: TelemetryFeedbackInput, options: TelemetryOptions & {
+    rootPath?: string;
+    version?: string;
+}, runtime: TelemetryRecordingRuntime): Promise<RecordTelemetryResult>;

package/dist/core/telemetryRecording.js

@@ -0,0 +1,38 @@
+import { appendTelemetryQueue, countTelemetryQueue, readTelemetryConfig, resolveTelemetryPaths, updateTelemetryUsage, writeTelemetryConfig, } from './telemetryConfig.js';
+import { buildFeedbackTelemetry, buildTelemetryCommandEvent, } from './telemetryEvents.js';
+export async function recordCommandTelemetry(input, options, runtime) {
+    if (runtime.isOfflineMode())
+        return { status: 'skipped', reason: runtime.offlineReason };
+    if (runtime.isRuntimeTelemetryDisabled())
+        return { status: 'skipped', reason: runtime.disabledReason };
+    const paths = resolveTelemetryPaths(options);
+    const loaded = await readTelemetryConfig(paths.configPath, options.now);
+    if (!loaded.config.enabled || !loaded.config.anonymousId)
+        return { status: 'skipped', reason: 'disabled' };
+    const config = updateTelemetryUsage(loaded.config, options.now);
+    await writeTelemetryConfig(paths.configPath, config);
+    const event = await buildTelemetryCommandEvent(input, config, options.now);
+    await appendTelemetryQueue(paths.queuePath, event);
+    if (options.flush === false || runtime.isTelemetryNetworkDisabled()) {
+        return { status: 'queued', queued: await countTelemetryQueue(paths.queuePath) };
+    }
+    const flushed = await runtime.flushTelemetry({ ...options, configDir: paths.configDir });
+    if (flushed.status === 'sent')
+        return flushed;
+    return {
+        status: 'queued',
+        reason: flushed.reason,
+        queued: await countTelemetryQueue(paths.queuePath),
+    };
+}
+export async function recordFeedbackTelemetry(input, options, runtime) {
+    return recordCommandTelemetry({
+        commandName: 'feedback add',
+        status: 'success',
+        durationMs: 0,
+        rootPath: options.rootPath,
+        version: options.version,
+        feedback: buildFeedbackTelemetry(input),
+    }, options, runtime);
+}
+//# sourceMappingURL=telemetryRecording.js.map

package/dist/core/telemetryRecording.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetryRecording.js","sourceRoot":"","sources":["../../src/core/telemetryRecording.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAG3B,MAAM,sBAAsB,CAAC;AAyB9B,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAA4B,EAC5B,OAAyB,EACzB,OAAkC;IAElC,IAAI,OAAO,CAAC,aAAa,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;IACzF,IAAI,OAAO,CAAC,0BAA0B,EAAE;QACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW;QACtD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAEnD,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAErD,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3E,MAAM,oBAAoB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAEnD,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;IAClF,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACzF,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IAC9C,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAA6B,EAC7B,OAAmE,EACnE,OAAkC;IAElC,OAAO,sBAAsB,CAC3B;QACE,WAAW,EAAE,cAAc;QAC3B,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,CAAC;QACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,sBAAsB,CAAC,KAAK,CAAC;KACxC,EACD,OAAO,EACP,OAAO,CACR,CAAC;AACJ,CAAC"}

package/dist/core/telemetrySender.d.ts

@@ -0,0 +1,9 @@
+import type { TelemetryEvent } from './telemetryEvents.js';
+export type TelemetrySender = (batch: TelemetryEvent[], endpoint: string) => Promise<{
+    ok: boolean;
+    status: number;
+}>;
+export declare function defaultTelemetrySender(batch: TelemetryEvent[], endpoint: string): Promise<{
+    ok: boolean;
+    status: number;
+}>;

package/dist/core/telemetrySender.js

@@ -0,0 +1,22 @@
+import { TELEMETRY_SCHEMA_VERSION } from './telemetryConfig.js';
+const REQUEST_TIMEOUT_MS = 750;
+export async function defaultTelemetrySender(batch, endpoint) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+    try {
+        const response = await fetch(endpoint, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                'user-agent': 'projscan-telemetry',
+            },
+            body: JSON.stringify({ schemaVersion: TELEMETRY_SCHEMA_VERSION, events: batch }),
+            signal: controller.signal,
+        });
+        return { ok: response.ok, status: response.status };
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+//# sourceMappingURL=telemetrySender.js.map

package/dist/core/telemetrySender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetrySender.js","sourceRoot":"","sources":["../../src/core/telemetrySender.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAGhE,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAO/B,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAuB,EACvB,QAAgB;IAEhB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YACrC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,oBAAoB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAChF,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACtD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/core/workplan.js

@@ -322,18 +322,18 @@ function modeTasks(mode, verdict, touchedFiles) {
         tasks.push(makeTask({
             id: 'wp-release-website',
             priority: 'p2',
-            title: 'Prepare the website update handoff',
-            why: 'The website pins the release manifest and must be updated after the package, GitHub Release assets, and MCP Registry agree on the same version.',
+            title: 'Prepare the local website update prompt',
+            why: 'The website update starts as local handoff text; package, GitHub Release, and MCP Registry checks wait until release approval.',
             evidence: [
                 {
                     source: 'release',
-                    message: 'website follow-up consumes GitHub Release assets and registry metadata',
+                    message: 'website follow-up starts from local evidence-pack prompt text',
                 },
             ],
             files: ['docs/WEBSITE-UPDATE-PROMPT.md'],
-            suggestedTools: ['GitHub Release assets', 'MCP Registry', 'npm view'],
-            commands: ['npm view projscan version', 'gh release view vX.Y.Z --json assets'],
-            expected: 'Website prompt references the shipped tag, manifest asset, SBOM asset, npm version, and MCP Registry latest version.',
+            suggestedTools: ['projscan_evidence_pack', 'website prompt'],
+            commands: ['projscan evidence-pack --website-prompt --format json'],
+            expected: 'Website prompt is generated as local handoff text; final website update waits for release approval and shipped assets.',
         }));
     }
     if (mode === 'refactor') {
@@ -552,11 +552,23 @@ function summarizeWorkplan(mode, verdict, tasks, risks) {
     return `${verdict}: ${mode} workplan has ${tasks.length} task(s), starting with ${tasks[0]?.title}; ${riskText}`;
 }
 function taskToSuggestedActions(task) {
-    return task.suggestedTools.slice(0, 3).map((tool) => ({
-        label: `Use ${tool} for ${task.title}`,
-        tool: tool.startsWith('projscan_') ? tool : undefined,
-        command: task.verification.commands[0],
-    }));
+    return task.suggestedTools.slice(0, 3).map((tool) => {
+        const command = commandForSuggestedTool(tool, task);
+        return {
+            label: `Use ${tool} for ${task.title}`,
+            tool: tool.startsWith('projscan_') ? tool : undefined,
+            ...(command ? { command } : {}),
+        };
+    });
+}
+function commandForSuggestedTool(tool, task) {
+    if (!tool.startsWith('projscan_'))
+        return task.verification.commands[0];
+    if (tool === 'projscan_file' && task.files[0]) {
+        return `projscan file ${JSON.stringify(task.files[0])} --format json`;
+    }
+    const prefix = `projscan ${tool.slice('projscan_'.length).replace(/_/g, '-')}`;
+    return task.verification.commands.find((command) => command.startsWith(prefix));
 }
 function dedupeActions(actions) {
     const seen = new Set();