Skip to content

feat: explain the source maps key prompt and that secret answers stay hidden - #1496

Merged
ablaszkiewicz merged 1 commit into
mainfrom
feat/explain-sensitive-asks
Oct 27, 2026
Merged

ablaszkiewicz merged 1 commit into
mainfrom
feat/explain-sensitive-asks

Conversation

@ablaszkiewicz

Copy link
Copy Markdown
Contributor

Problem

The source maps API key screen asks the user to paste a personal API key without saying why. It doesn't say the key is for source map upload or what source maps do, so at a glance it reads like an error. Secret questions in general don't tell the user how their answer is handled.

Changes

  • upload-source-maps STEP 1 wizard_ask prompt says why the key is needed and links the key page with the right permissions selected. It matches the error-tracking flow's prompt in fix(error-tracking): explain the source maps key prompt and link the key page context-mill#442.
  • WizardAskScreen: a sensitive text question shows "Hidden as you type. The AI agent never sees it." on the row with ENTER submit. The answer is vaulted and the agent only receives a secretRef, so this holds for every program's secret asks.
  • New frame snapshots, wizard-ask-sensitive-{80x28,120x40}, pin the layout. At 80x28:
◆ error-tracking

Uploading source maps needs a PostHog personal API key. Source
maps let PostHog show your original code in error stack traces,
not minified code.

Create a key with the right permissions here:
https://us.posthog.com/source-maps-key

Then paste it below.

Type your answer

Hidden as you type. The AI agent never sees it.     ENTER submit

ESC skip

Test plan

  • pnpm typecheck
  • vitest run --project tui --project programs --project harness (1335 passing)
  • prettier and eslint on the changed files

🤖 Generated with Claude Code

https://claude.ai/code/session_01NtZv9mtG8rfgdcXoNSceHN

… hidden

The upload-source-maps API key prompt says why source map upload needs a
personal API key and what source maps do. The ask overlay labels every
sensitive text answer as hidden and never seen by the AI agent.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NtZv9mtG8rfgdcXoNSceHN
@ablaszkiewicz
ablaszkiewicz requested review from a team as code owners October 27, 2026 12:22
@ablaszkiewicz
ablaszkiewicz requested review from JamesPatrickGill and hpouillot and a balanced review from Copilot October 27, 2026 12:22

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota.

@github-actions

Copy link
Copy Markdown

🧙 Wizard CI

Run the Wizard CI and test your changes against wizard-workbench example apps by replying with a GitHub comment using one of the following commands:

Test all apps:

  • /wizard-ci all

Test all apps in a directory:

  • /wizard-ci ai-observability
  • /wizard-ci basic-integration
  • /wizard-ci feature-flags
  • /wizard-ci mcp-analytics
  • /wizard-ci replay-vision
  • /wizard-ci revenue
  • /wizard-ci self-driving
  • /wizard-ci warehouse
  • /wizard-ci warehouse-seeded

Test an individual app:

  • /wizard-ci ai-observability/anthropic
  • /wizard-ci ai-observability/google-adk
  • /wizard-ci ai-observability/groq
Show more apps
  • /wizard-ci ai-observability/manual-capture
  • /wizard-ci ai-observability/openai
  • /wizard-ci ai-observability/openai-agents
  • /wizard-ci ai-observability/opentelemetry
  • /wizard-ci ai-observability/vercel-ai
  • /wizard-ci basic-integration/android
  • /wizard-ci basic-integration/angular
  • /wizard-ci basic-integration/astro
  • /wizard-ci basic-integration/django
  • /wizard-ci basic-integration/fastapi
  • /wizard-ci basic-integration/flask
  • /wizard-ci basic-integration/flutter
  • /wizard-ci basic-integration/javascript-node
  • /wizard-ci basic-integration/javascript-web
  • /wizard-ci basic-integration/laravel
  • /wizard-ci basic-integration/next-js
  • /wizard-ci basic-integration/nuxt
  • /wizard-ci basic-integration/python
  • /wizard-ci basic-integration/rails
  • /wizard-ci basic-integration/react-native
  • /wizard-ci basic-integration/react-router
  • /wizard-ci basic-integration/sveltekit
  • /wizard-ci basic-integration/swift
  • /wizard-ci basic-integration/tanstack-router
  • /wizard-ci basic-integration/tanstack-start
  • /wizard-ci basic-integration/vue
  • /wizard-ci feature-flags/django
  • /wizard-ci feature-flags/next-js
  • /wizard-ci mcp-analytics/custom-dispatcher
  • /wizard-ci mcp-analytics/typescript-sdk
  • /wizard-ci replay-vision/javascript-node
  • /wizard-ci replay-vision/next-js
  • /wizard-ci replay-vision/react-vite
  • /wizard-ci revenue/stripe
  • /wizard-ci self-driving/astro
  • /wizard-ci self-driving/fastapi
  • /wizard-ci self-driving/nuxt
  • /wizard-ci self-driving/react-router
  • /wizard-ci self-driving/sveltekit
  • /wizard-ci warehouse/monorepo-env
  • /wizard-ci warehouse/multi-source-next
  • /wizard-ci warehouse/stripe-node
  • /wizard-ci warehouse/zero-source
  • /wizard-ci warehouse-seeded/next-stripe
  • /wizard-ci warehouse-seeded/next-stripe-declined

Test against a Context Mill branch:

  • /wizard-ci all context-mill:my-branch

Add context-mill:<branch> to any command above to pin the Context Mill branch. It defaults to main.

Results will be posted here when complete.

@ablaszkiewicz
ablaszkiewicz merged commit 6560d68 into main Oct 27, 2026
21 checks passed
@ablaszkiewicz
ablaszkiewicz deleted the feat/explain-sensitive-asks branch October 27, 2026 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants