@posthog/agent 2.3.171 → 2.3.172

package/dist/execution-mode.d.ts

@@ -1,10 +1,15 @@
 interface ModeInfo {
-    id: CodeExecutionMode;
+    id: string;
     name: string;
     description: string;
 }
 declare const CODE_EXECUTION_MODES: readonly ["default", "acceptEdits", "plan", "bypassPermissions"];
 type CodeExecutionMode = (typeof CODE_EXECUTION_MODES)[number];
 declare function getAvailableModes(): ModeInfo[];
+declare const CODEX_NATIVE_MODES: readonly ["auto", "read-only", "full-access"];
+type CodexNativeMode = (typeof CODEX_NATIVE_MODES)[number];
+/** Union of all permission mode IDs across adapters */
+type PermissionMode = CodeExecutionMode | CodexNativeMode;
+declare function getAvailableCodexModes(): ModeInfo[];
 
-export { CODE_EXECUTION_MODES, type CodeExecutionMode, type ModeInfo, getAvailableModes };
+export { CODEX_NATIVE_MODES, CODE_EXECUTION_MODES, type CodeExecutionMode, type CodexNativeMode, type ModeInfo, type PermissionMode, getAvailableCodexModes, getAvailableModes };

package/dist/execution-mode.js

@@ -42,8 +42,33 @@ var CODE_EXECUTION_MODES = [
 function getAvailableModes() {
   return IS_ROOT ? availableModes.filter((m) => m.id !== "bypassPermissions") : availableModes;
 }
+var CODEX_NATIVE_MODES = ["auto", "read-only", "full-access"];
+var codexModes = [
+  {
+    id: "read-only",
+    name: "Read Only",
+    description: "Read-only access, no file modifications"
+  },
+  {
+    id: "auto",
+    name: "Auto",
+    description: "Standard behavior, prompts for dangerous operations"
+  }
+];
+if (ALLOW_BYPASS) {
+  codexModes.push({
+    id: "full-access",
+    name: "Full Access",
+    description: "Auto-accept all permission requests"
+  });
+}
+function getAvailableCodexModes() {
+  return IS_ROOT ? codexModes.filter((m) => m.id !== "full-access") : codexModes;
+}
 export {
+  CODEX_NATIVE_MODES,
   CODE_EXECUTION_MODES,
+  getAvailableCodexModes,
   getAvailableModes
 };
 //# sourceMappingURL=execution-mode.js.map

package/dist/execution-mode.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/utils/common.ts","../src/execution-mode.ts"],"sourcesContent":["import type { Logger } from \"./logger\";\n\n/**\n * Races an operation against a timeout.\n * Returns success with the value if the operation completes in time,\n * or timeout if the operation takes longer than the specified duration.\n */\nexport async function withTimeout<T>(\n  operation: Promise<T>,\n  timeoutMs: number,\n): Promise<{ result: \"success\"; value: T } | { result: \"timeout\" }> {\n  const timeoutPromise = new Promise<{ result: \"timeout\" }>((resolve) =>\n    setTimeout(() => resolve({ result: \"timeout\" }), timeoutMs),\n  );\n  const operationPromise = operation.then((value) => ({\n    result: \"success\" as const,\n    value,\n  }));\n  return Promise.race([operationPromise, timeoutPromise]);\n}\n\nexport const IS_ROOT =\n  typeof process !== \"undefined\" &&\n  (process.geteuid?.() ?? process.getuid?.()) === 0;\n\nexport function unreachable(value: never, logger: Logger): void {\n  let valueAsString: string;\n  try {\n    valueAsString = JSON.stringify(value);\n  } catch {\n    valueAsString = String(value);\n  }\n  logger.error(`Unexpected case: ${valueAsString}`);\n}\n","import { IS_ROOT } from \"./utils/common\";\n\nexport interface ModeInfo {\n  id: CodeExecutionMode;\n  name: string;\n  description: string;\n}\n\n// Helper constant that can easily be toggled for env/feature flag/etc\nconst ALLOW_BYPASS = !IS_ROOT;\n\nconst availableModes: ModeInfo[] = [\n  {\n    id: \"default\",\n    name: \"Default\",\n    description: \"Standard behavior, prompts for dangerous operations\",\n  },\n  {\n    id: \"acceptEdits\",\n    name: \"Accept Edits\",\n    description: \"Auto-accept file edit operations\",\n  },\n  {\n    id: \"plan\",\n    name: \"Plan Mode\",\n    description: \"Planning mode, no actual tool execution\",\n  },\n  // {\n  //   id: \"dontAsk\",\n  //   name: \"Don't Ask\",\n  //   description: \"Don't prompt for permissions, deny if not pre-approved\",\n  // },\n];\n\nif (ALLOW_BYPASS) {\n  availableModes.push({\n    id: \"bypassPermissions\",\n    name: \"Auto-accept Permissions\",\n    description: \"Auto-accept all permission requests\",\n  });\n}\n\n// Expose execution mode IDs in type-safe order for type checks\nexport const CODE_EXECUTION_MODES = [\n  \"default\",\n  \"acceptEdits\",\n  \"plan\",\n  // \"dontAsk\",\n  \"bypassPermissions\",\n] as const;\n\nexport type CodeExecutionMode = (typeof CODE_EXECUTION_MODES)[number];\n\nexport function getAvailableModes(): ModeInfo[] {\n  // When IS_ROOT, do not allow bypassPermissions\n  return IS_ROOT\n    ? availableModes.filter((m) => m.id !== \"bypassPermissions\")\n    : availableModes;\n}\n"],"mappings":";AAqBO,IAAM,UACX,OAAO,YAAY,gBAClB,QAAQ,UAAU,KAAK,QAAQ,SAAS,OAAO;;;ACdlD,IAAM,eAAe,CAAC;AAEtB,IAAM,iBAA6B;AAAA,EACjC;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAMF;AAEA,IAAI,cAAc;AAChB,iBAAe,KAAK;AAAA,IAClB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf,CAAC;AACH;AAGO,IAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AACF;AAIO,SAAS,oBAAgC;AAE9C,SAAO,UACH,eAAe,OAAO,CAAC,MAAM,EAAE,OAAO,mBAAmB,IACzD;AACN;","names":[]}
+{"version":3,"sources":["../src/utils/common.ts","../src/execution-mode.ts"],"sourcesContent":["import type { Logger } from \"./logger\";\n\n/**\n * Races an operation against a timeout.\n * Returns success with the value if the operation completes in time,\n * or timeout if the operation takes longer than the specified duration.\n */\nexport async function withTimeout<T>(\n  operation: Promise<T>,\n  timeoutMs: number,\n): Promise<{ result: \"success\"; value: T } | { result: \"timeout\" }> {\n  const timeoutPromise = new Promise<{ result: \"timeout\" }>((resolve) =>\n    setTimeout(() => resolve({ result: \"timeout\" }), timeoutMs),\n  );\n  const operationPromise = operation.then((value) => ({\n    result: \"success\" as const,\n    value,\n  }));\n  return Promise.race([operationPromise, timeoutPromise]);\n}\n\nexport const IS_ROOT =\n  typeof process !== \"undefined\" &&\n  (process.geteuid?.() ?? process.getuid?.()) === 0;\n\nexport function unreachable(value: never, logger: Logger): void {\n  let valueAsString: string;\n  try {\n    valueAsString = JSON.stringify(value);\n  } catch {\n    valueAsString = String(value);\n  }\n  logger.error(`Unexpected case: ${valueAsString}`);\n}\n","import { IS_ROOT } from \"./utils/common\";\n\nexport interface ModeInfo {\n  id: string;\n  name: string;\n  description: string;\n}\n\n// Helper constant that can easily be toggled for env/feature flag/etc\nconst ALLOW_BYPASS = !IS_ROOT;\n\nconst availableModes: ModeInfo[] = [\n  {\n    id: \"default\",\n    name: \"Default\",\n    description: \"Standard behavior, prompts for dangerous operations\",\n  },\n  {\n    id: \"acceptEdits\",\n    name: \"Accept Edits\",\n    description: \"Auto-accept file edit operations\",\n  },\n  {\n    id: \"plan\",\n    name: \"Plan Mode\",\n    description: \"Planning mode, no actual tool execution\",\n  },\n  // {\n  //   id: \"dontAsk\",\n  //   name: \"Don't Ask\",\n  //   description: \"Don't prompt for permissions, deny if not pre-approved\",\n  // },\n];\n\nif (ALLOW_BYPASS) {\n  availableModes.push({\n    id: \"bypassPermissions\",\n    name: \"Auto-accept Permissions\",\n    description: \"Auto-accept all permission requests\",\n  });\n}\n\n// Expose execution mode IDs in type-safe order for type checks\nexport const CODE_EXECUTION_MODES = [\n  \"default\",\n  \"acceptEdits\",\n  \"plan\",\n  // \"dontAsk\",\n  \"bypassPermissions\",\n] as const;\n\nexport type CodeExecutionMode = (typeof CODE_EXECUTION_MODES)[number];\n\nexport function getAvailableModes(): ModeInfo[] {\n  // When IS_ROOT, do not allow bypassPermissions\n  return IS_ROOT\n    ? availableModes.filter((m) => m.id !== \"bypassPermissions\")\n    : availableModes;\n}\n\n// --- Codex-native modes ---\n\nexport const CODEX_NATIVE_MODES = [\"auto\", \"read-only\", \"full-access\"] as const;\n\nexport type CodexNativeMode = (typeof CODEX_NATIVE_MODES)[number];\n\n/** Union of all permission mode IDs across adapters */\nexport type PermissionMode = CodeExecutionMode | CodexNativeMode;\n\nconst codexModes: ModeInfo[] = [\n  {\n    id: \"read-only\",\n    name: \"Read Only\",\n    description: \"Read-only access, no file modifications\",\n  },\n  {\n    id: \"auto\",\n    name: \"Auto\",\n    description: \"Standard behavior, prompts for dangerous operations\",\n  },\n];\n\nif (ALLOW_BYPASS) {\n  codexModes.push({\n    id: \"full-access\",\n    name: \"Full Access\",\n    description: \"Auto-accept all permission requests\",\n  });\n}\n\nexport function getAvailableCodexModes(): ModeInfo[] {\n  return IS_ROOT\n    ? codexModes.filter((m) => m.id !== \"full-access\")\n    : codexModes;\n}\n"],"mappings":";AAqBO,IAAM,UACX,OAAO,YAAY,gBAClB,QAAQ,UAAU,KAAK,QAAQ,SAAS,OAAO;;;ACdlD,IAAM,eAAe,CAAC;AAEtB,IAAM,iBAA6B;AAAA,EACjC;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAMF;AAEA,IAAI,cAAc;AAChB,iBAAe,KAAK;AAAA,IAClB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf,CAAC;AACH;AAGO,IAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AACF;AAIO,SAAS,oBAAgC;AAE9C,SAAO,UACH,eAAe,OAAO,CAAC,MAAM,EAAE,OAAO,mBAAmB,IACzD;AACN;AAIO,IAAM,qBAAqB,CAAC,QAAQ,aAAa,aAAa;AAOrE,IAAM,aAAyB;AAAA,EAC7B;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AACF;AAEA,IAAI,cAAc;AAChB,aAAW,KAAK;AAAA,IACd,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf,CAAC;AACH;AAEO,SAAS,yBAAqC;AACnD,SAAO,UACH,WAAW,OAAO,CAAC,MAAM,EAAE,OAAO,aAAa,IAC/C;AACN;","names":[]}

package/dist/posthog-api.js

@@ -1,7 +1,7 @@
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.171",
+  version: "2.3.172",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {

package/dist/posthog-api.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../package.json","../src/utils/gateway.ts","../src/posthog-api.ts"],"sourcesContent":["{\n  \"name\": \"@posthog/agent\",\n  \"version\": \"2.3.171\",\n  \"repository\": \"https://github.com/PostHog/code\",\n  \"description\": \"TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\"\n    },\n    \"./agent\": {\n      \"types\": \"./dist/agent.d.ts\",\n      \"import\": \"./dist/agent.js\"\n    },\n    \"./gateway-models\": {\n      \"types\": \"./dist/gateway-models.d.ts\",\n      \"import\": \"./dist/gateway-models.js\"\n    },\n    \"./posthog-api\": {\n      \"types\": \"./dist/posthog-api.d.ts\",\n      \"import\": \"./dist/posthog-api.js\"\n    },\n    \"./types\": {\n      \"types\": \"./dist/types.d.ts\",\n      \"import\": \"./dist/types.js\"\n    },\n    \"./adapters/claude/questions/utils\": {\n      \"types\": \"./dist/adapters/claude/questions/utils.d.ts\",\n      \"import\": \"./dist/adapters/claude/questions/utils.js\"\n    },\n    \"./adapters/claude/permissions/permission-options\": {\n      \"types\": \"./dist/adapters/claude/permissions/permission-options.d.ts\",\n      \"import\": \"./dist/adapters/claude/permissions/permission-options.js\"\n    },\n    \"./adapters/claude/tools\": {\n      \"types\": \"./dist/adapters/claude/tools.d.ts\",\n      \"import\": \"./dist/adapters/claude/tools.js\"\n    },\n    \"./adapters/claude/conversion/tool-use-to-acp\": {\n      \"types\": \"./dist/adapters/claude/conversion/tool-use-to-acp.d.ts\",\n      \"import\": \"./dist/adapters/claude/conversion/tool-use-to-acp.js\"\n    },\n    \"./adapters/claude/session/jsonl-hydration\": {\n      \"types\": \"./dist/adapters/claude/session/jsonl-hydration.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/jsonl-hydration.js\"\n    },\n    \"./adapters/claude/session/models\": {\n      \"types\": \"./dist/adapters/claude/session/models.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/models.js\"\n    },\n    \"./execution-mode\": {\n      \"types\": \"./dist/execution-mode.d.ts\",\n      \"import\": \"./dist/execution-mode.js\"\n    },\n    \"./server\": {\n      \"types\": \"./dist/server/agent-server.d.ts\",\n      \"import\": \"./dist/server/agent-server.js\"\n    }\n  },\n  \"bin\": {\n    \"agent-server\": \"./dist/server/bin.cjs\"\n  },\n  \"type\": \"module\",\n  \"keywords\": [\n    \"posthog\",\n    \"claude\",\n    \"agent\",\n    \"ai\",\n    \"git\",\n    \"typescript\"\n  ],\n  \"author\": \"PostHog\",\n  \"license\": \"SEE LICENSE IN LICENSE\",\n  \"scripts\": {\n    \"build\": \"node ../../scripts/rimraf.mjs dist && tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"pnpm exec tsc --noEmit\",\n    \"prepublishOnly\": \"pnpm run build\",\n    \"clean\": \"node ../../scripts/rimraf.mjs dist .turbo\"\n  },\n  \"engines\": {\n    \"node\": \">=20.0.0\"\n  },\n  \"devDependencies\": {\n    \"@posthog/shared\": \"workspace:*\",\n    \"@posthog/git\": \"workspace:*\",\n    \"@types/bun\": \"latest\",\n    \"@types/tar\": \"^6.1.13\",\n    \"msw\": \"^2.12.7\",\n    \"tsup\": \"^8.5.1\",\n    \"tsx\": \"^4.20.6\",\n    \"typescript\": \"^5.5.0\",\n    \"vitest\": \"^2.1.8\"\n  },\n  \"dependencies\": {\n    \"@agentclientprotocol/sdk\": \"0.16.1\",\n    \"@anthropic-ai/claude-agent-sdk\": \"0.2.76\",\n    \"@anthropic-ai/sdk\": \"^0.78.0\",\n    \"@hono/node-server\": \"^1.19.9\",\n    \"@opentelemetry/api-logs\": \"^0.208.0\",\n    \"@opentelemetry/exporter-logs-otlp-http\": \"^0.208.0\",\n    \"@opentelemetry/resources\": \"^2.0.0\",\n    \"@opentelemetry/sdk-logs\": \"^0.208.0\",\n    \"@opentelemetry/semantic-conventions\": \"^1.28.0\",\n    \"@types/jsonwebtoken\": \"^9.0.10\",\n    \"commander\": \"^14.0.2\",\n    \"hono\": \"^4.11.7\",\n    \"jsonwebtoken\": \"^9.0.2\",\n    \"minimatch\": \"^10.0.3\",\n    \"tar\": \"^7.5.0\",\n    \"uuid\": \"13.0.0\",\n    \"yoga-wasm-web\": \"^0.3.3\",\n    \"zod\": \"^4.2.0\"\n  },\n  \"files\": [\n    \"dist/**/*\",\n    \"src/**/*\",\n    \"README.md\",\n    \"CLAUDE.md\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\"\n  }\n}\n","export type GatewayProduct = \"posthog_code\" | \"background_agents\";\n\nexport function getLlmGatewayUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  const url = new URL(posthogHost);\n  const hostname = url.hostname;\n\n  // Local development (normalize 127.0.0.1 to localhost)\n  if (hostname === \"localhost\" || hostname === \"127.0.0.1\") {\n    return `${url.protocol}//localhost:3308/${product}`;\n  }\n\n  // Docker containers accessing host\n  if (hostname === \"host.docker.internal\") {\n    return `${url.protocol}//host.docker.internal:3308/${product}`;\n  }\n\n  // Production - extract region from hostname, default to US\n  const region = hostname.match(/^(us|eu)\\.posthog\\.com$/)?.[1] ?? \"us\";\n  return `https://gateway.${region}.posthog.com/${product}`;\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\nimport type {\n  ArtifactType,\n  PostHogAPIConfig,\n  StoredEntry,\n  Task,\n  TaskRun,\n  TaskRunArtifact,\n} from \"./types\";\nimport { getLlmGatewayUrl } from \"./utils/gateway\";\n\nexport { getLlmGatewayUrl };\n\nconst DEFAULT_USER_AGENT = `posthog/agent.hog.dev; version: ${packageJson.version}`;\n\nexport interface TaskArtifactUploadPayload {\n  name: string;\n  type: ArtifactType;\n  content: string;\n  content_type?: string;\n}\n\nexport type TaskRunUpdate = Partial<\n  Pick<\n    TaskRun,\n    | \"status\"\n    | \"branch\"\n    | \"stage\"\n    | \"error_message\"\n    | \"output\"\n    | \"state\"\n    | \"environment\"\n  >\n>;\n\nexport class PostHogAPIClient {\n  private config: PostHogAPIConfig;\n\n  constructor(config: PostHogAPIConfig) {\n    this.config = config;\n  }\n\n  private get baseUrl(): string {\n    const host = this.config.apiUrl.endsWith(\"/\")\n      ? this.config.apiUrl.slice(0, -1)\n      : this.config.apiUrl;\n    return host;\n  }\n\n  private isAuthFailure(status: number): boolean {\n    return status === 401 || status === 403;\n  }\n\n  private async resolveApiKey(forceRefresh = false): Promise<string> {\n    if (forceRefresh && this.config.refreshApiKey) {\n      return this.config.refreshApiKey();\n    }\n\n    return this.config.getApiKey();\n  }\n\n  private async buildHeaders(\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Headers> {\n    const headers = new Headers(options.headers);\n    headers.set(\n      \"Authorization\",\n      `Bearer ${await this.resolveApiKey(forceRefresh)}`,\n    );\n    headers.set(\"Content-Type\", \"application/json\");\n    headers.set(\"User-Agent\", this.config.userAgent ?? DEFAULT_USER_AGENT);\n    return headers;\n  }\n\n  private async performRequest(\n    endpoint: string,\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Response> {\n    const url = `${this.baseUrl}${endpoint}`;\n\n    return fetch(url, {\n      ...options,\n      headers: await this.buildHeaders(options, forceRefresh),\n    });\n  }\n\n  private async performRequestWithRetry(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<Response> {\n    let response = await this.performRequest(endpoint, options);\n\n    if (!response.ok && this.isAuthFailure(response.status)) {\n      response = await this.performRequest(endpoint, options, true);\n    }\n\n    return response;\n  }\n\n  private async apiRequest<T>(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<T> {\n    const response = await this.performRequestWithRetry(endpoint, options);\n\n    if (!response.ok) {\n      let errorMessage: string;\n      try {\n        const errorResponse = await response.json();\n        errorMessage = `Failed request: [${response.status}] ${JSON.stringify(errorResponse)}`;\n      } catch {\n        errorMessage = `Failed request: [${response.status}] ${response.statusText}`;\n      }\n      throw new Error(errorMessage);\n    }\n\n    return response.json();\n  }\n\n  private getTeamId(): number {\n    return this.config.projectId;\n  }\n\n  async getApiKey(forceRefresh = false): Promise<string> {\n    return this.resolveApiKey(forceRefresh);\n  }\n\n  getLlmGatewayUrl(): string {\n    return getLlmGatewayUrl(this.baseUrl);\n  }\n\n  async getTask(taskId: string): Promise<Task> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<Task>(`/api/projects/${teamId}/tasks/${taskId}/`);\n  }\n\n  async getTaskRun(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n    );\n  }\n\n  async updateTaskRun(\n    taskId: string,\n    runId: string,\n    payload: TaskRunUpdate,\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(payload),\n      },\n    );\n  }\n\n  async appendTaskRunLog(\n    taskId: string,\n    runId: string,\n    entries: StoredEntry[],\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/append_log/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ entries }),\n      },\n    );\n  }\n\n  async relayMessage(\n    taskId: string,\n    runId: string,\n    text: string,\n  ): Promise<void> {\n    const teamId = this.getTeamId();\n    await this.apiRequest<{ status: string }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/relay_message/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ text }),\n      },\n    );\n  }\n\n  async uploadTaskArtifacts(\n    taskId: string,\n    runId: string,\n    artifacts: TaskArtifactUploadPayload[],\n  ): Promise<TaskRunArtifact[]> {\n    if (!artifacts.length) {\n      return [];\n    }\n\n    const teamId = this.getTeamId();\n    const response = await this.apiRequest<{ artifacts: TaskRunArtifact[] }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ artifacts }),\n      },\n    );\n\n    return response.artifacts ?? [];\n  }\n\n  async getArtifactPresignedUrl(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<string | null> {\n    const teamId = this.getTeamId();\n    try {\n      const response = await this.apiRequest<{\n        url: string;\n        expires_in: number;\n      }>(\n        `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/presign/`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ storage_path: storagePath }),\n        },\n      );\n      return response.url;\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Download artifact content by storage path\n   * Gets a presigned URL and fetches the content\n   */\n  async downloadArtifact(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<ArrayBuffer | null> {\n    const url = await this.getArtifactPresignedUrl(taskId, runId, storagePath);\n    if (!url) {\n      return null;\n    }\n\n    try {\n      const response = await fetch(url);\n      if (!response.ok) {\n        throw new Error(`Failed to download artifact: ${response.status}`);\n      }\n      return response.arrayBuffer();\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Fetch logs for a task run via the logs API endpoint\n   * @param taskRun - The task run to fetch logs for\n   * @returns Array of stored entries, or empty array if no logs available\n   */\n  async fetchTaskRunLogs(taskRun: TaskRun): Promise<StoredEntry[]> {\n    const teamId = this.getTeamId();\n    const endpoint = `/api/projects/${teamId}/tasks/${taskRun.task}/runs/${taskRun.id}/logs`;\n\n    try {\n      const response = await this.performRequestWithRetry(endpoint);\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          return [];\n        }\n        throw new Error(\n          `Failed to fetch logs: ${response.status} ${response.statusText}`,\n        );\n      }\n\n      const content = await response.text();\n\n      if (!content.trim()) {\n        return [];\n      }\n\n      // Parse newline-delimited JSON\n      return content\n        .trim()\n        .split(\"\\n\")\n        .map((line) => JSON.parse(line) as StoredEntry);\n    } catch (error) {\n      throw new Error(\n        `Failed to fetch task run logs: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n}\n"],"mappings":";AAAA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,YAAc;AAAA,EACd,aAAe;AAAA,EACf,SAAW;AAAA,IACT,KAAK;AAAA,MACH,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,iBAAiB;AAAA,MACf,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,qCAAqC;AAAA,MACnC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oDAAoD;AAAA,MAClD,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,2BAA2B;AAAA,MACzB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,gDAAgD;AAAA,MAC9C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,6CAA6C;AAAA,MAC3C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oCAAoC;AAAA,MAClC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,KAAO;AAAA,IACL,gBAAgB;AAAA,EAClB;AAAA,EACA,MAAQ;AAAA,EACR,UAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,QAAU;AAAA,EACV,SAAW;AAAA,EACX,SAAW;AAAA,IACT,OAAS;AAAA,IACT,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,cAAc;AAAA,IACd,WAAa;AAAA,IACb,gBAAkB;AAAA,IAClB,OAAS;AAAA,EACX;AAAA,EACA,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,iBAAmB;AAAA,IACjB,mBAAmB;AAAA,IACnB,gBAAgB;AAAA,IAChB,cAAc;AAAA,IACd,cAAc;AAAA,IACd,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,KAAO;AAAA,IACP,YAAc;AAAA,IACd,QAAU;AAAA,EACZ;AAAA,EACA,cAAgB;AAAA,IACd,4BAA4B;AAAA,IAC5B,kCAAkC;AAAA,IAClC,qBAAqB;AAAA,IACrB,qBAAqB;AAAA,IACrB,2BAA2B;AAAA,IAC3B,0CAA0C;AAAA,IAC1C,4BAA4B;AAAA,IAC5B,2BAA2B;AAAA,IAC3B,uCAAuC;AAAA,IACvC,uBAAuB;AAAA,IACvB,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,cAAgB;AAAA,IAChB,WAAa;AAAA,IACb,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,iBAAiB;AAAA,IACjB,KAAO;AAAA,EACT;AAAA,EACA,OAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,eAAiB;AAAA,IACf,QAAU;AAAA,EACZ;AACF;;;AC3HO,SAAS,iBACd,aACA,UAA0B,gBAClB;AACR,QAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,QAAM,WAAW,IAAI;AAGrB,MAAI,aAAa,eAAe,aAAa,aAAa;AACxD,WAAO,GAAG,IAAI,QAAQ,oBAAoB,OAAO;AAAA,EACnD;AAGA,MAAI,aAAa,wBAAwB;AACvC,WAAO,GAAG,IAAI,QAAQ,+BAA+B,OAAO;AAAA,EAC9D;AAGA,QAAM,SAAS,SAAS,MAAM,yBAAyB,IAAI,CAAC,KAAK;AACjE,SAAO,mBAAmB,MAAM,gBAAgB,OAAO;AACzD;;;ACTA,IAAM,qBAAqB,mCAAmC,gBAAY,OAAO;AAsB1E,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EAER,YAAY,QAA0B;AACpC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAY,UAAkB;AAC5B,UAAM,OAAO,KAAK,OAAO,OAAO,SAAS,GAAG,IACxC,KAAK,OAAO,OAAO,MAAM,GAAG,EAAE,IAC9B,KAAK,OAAO;AAChB,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc,QAAyB;AAC7C,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAAA,EAEA,MAAc,cAAc,eAAe,OAAwB;AACjE,QAAI,gBAAgB,KAAK,OAAO,eAAe;AAC7C,aAAO,KAAK,OAAO,cAAc;AAAA,IACnC;AAEA,WAAO,KAAK,OAAO,UAAU;AAAA,EAC/B;AAAA,EAEA,MAAc,aACZ,SACA,eAAe,OACG;AAClB,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,YAAQ;AAAA,MACN;AAAA,MACA,UAAU,MAAM,KAAK,cAAc,YAAY,CAAC;AAAA,IAClD;AACA,YAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,YAAQ,IAAI,cAAc,KAAK,OAAO,aAAa,kBAAkB;AACrE,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,eACZ,UACA,SACA,eAAe,OACI;AACnB,UAAM,MAAM,GAAG,KAAK,OAAO,GAAG,QAAQ;AAEtC,WAAO,MAAM,KAAK;AAAA,MAChB,GAAG;AAAA,MACH,SAAS,MAAM,KAAK,aAAa,SAAS,YAAY;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,wBACZ,UACA,UAAuB,CAAC,GACL;AACnB,QAAI,WAAW,MAAM,KAAK,eAAe,UAAU,OAAO;AAE1D,QAAI,CAAC,SAAS,MAAM,KAAK,cAAc,SAAS,MAAM,GAAG;AACvD,iBAAW,MAAM,KAAK,eAAe,UAAU,SAAS,IAAI;AAAA,IAC9D;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,WACZ,UACA,UAAuB,CAAC,GACZ;AACZ,UAAM,WAAW,MAAM,KAAK,wBAAwB,UAAU,OAAO;AAErE,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI;AACJ,UAAI;AACF,cAAM,gBAAgB,MAAM,SAAS,KAAK;AAC1C,uBAAe,oBAAoB,SAAS,MAAM,KAAK,KAAK,UAAU,aAAa,CAAC;AAAA,MACtF,QAAQ;AACN,uBAAe,oBAAoB,SAAS,MAAM,KAAK,SAAS,UAAU;AAAA,MAC5E;AACA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAEQ,YAAoB;AAC1B,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAM,UAAU,eAAe,OAAwB;AACrD,WAAO,KAAK,cAAc,YAAY;AAAA,EACxC;AAAA,EAEA,mBAA2B;AACzB,WAAO,iBAAiB,KAAK,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,QAAQ,QAA+B;AAC3C,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK,WAAiB,iBAAiB,MAAM,UAAU,MAAM,GAAG;AAAA,EACzE;AAAA,EAEA,MAAM,WAAW,QAAgB,OAAiC;AAChE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,IACvD;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,OAAO;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,QACA,OACA,MACe;AACf,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,KAAK;AAAA,MACT,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,QACA,OACA,WAC4B;AAC5B,QAAI,CAAC,UAAU,QAAQ;AACrB,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC;AAAA,MACpC;AAAA,IACF;AAEA,WAAO,SAAS,aAAa,CAAC;AAAA,EAChC;AAAA,EAEA,MAAM,wBACJ,QACA,OACA,aACwB;AACxB,UAAM,SAAS,KAAK,UAAU;AAC9B,QAAI;AACF,YAAM,WAAW,MAAM,KAAK;AAAA,QAI1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,QACrD;AAAA,UACE,QAAQ;AAAA,UACR,MAAM,KAAK,UAAU,EAAE,cAAc,YAAY,CAAC;AAAA,QACpD;AAAA,MACF;AACA,aAAO,SAAS;AAAA,IAClB,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,iBACJ,QACA,OACA,aAC6B;AAC7B,UAAM,MAAM,MAAM,KAAK,wBAAwB,QAAQ,OAAO,WAAW;AACzE,QAAI,CAAC,KAAK;AACR,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,GAAG;AAChC,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,EAAE;AAAA,MACnE;AACA,aAAO,SAAS,YAAY;AAAA,IAC9B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBAAiB,SAA0C;AAC/D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,iBAAiB,MAAM,UAAU,QAAQ,IAAI,SAAS,QAAQ,EAAE;AAEjF,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,wBAAwB,QAAQ;AAE5D,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,iBAAO,CAAC;AAAA,QACV;AACA,cAAM,IAAI;AAAA,UACR,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,eAAO,CAAC;AAAA,MACV;AAGA,aAAO,QACJ,KAAK,EACL,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,CAAgB;AAAA,IAClD,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../package.json","../src/utils/gateway.ts","../src/posthog-api.ts"],"sourcesContent":["{\n  \"name\": \"@posthog/agent\",\n  \"version\": \"2.3.172\",\n  \"repository\": \"https://github.com/PostHog/code\",\n  \"description\": \"TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\"\n    },\n    \"./agent\": {\n      \"types\": \"./dist/agent.d.ts\",\n      \"import\": \"./dist/agent.js\"\n    },\n    \"./gateway-models\": {\n      \"types\": \"./dist/gateway-models.d.ts\",\n      \"import\": \"./dist/gateway-models.js\"\n    },\n    \"./posthog-api\": {\n      \"types\": \"./dist/posthog-api.d.ts\",\n      \"import\": \"./dist/posthog-api.js\"\n    },\n    \"./types\": {\n      \"types\": \"./dist/types.d.ts\",\n      \"import\": \"./dist/types.js\"\n    },\n    \"./adapters/claude/questions/utils\": {\n      \"types\": \"./dist/adapters/claude/questions/utils.d.ts\",\n      \"import\": \"./dist/adapters/claude/questions/utils.js\"\n    },\n    \"./adapters/claude/permissions/permission-options\": {\n      \"types\": \"./dist/adapters/claude/permissions/permission-options.d.ts\",\n      \"import\": \"./dist/adapters/claude/permissions/permission-options.js\"\n    },\n    \"./adapters/claude/tools\": {\n      \"types\": \"./dist/adapters/claude/tools.d.ts\",\n      \"import\": \"./dist/adapters/claude/tools.js\"\n    },\n    \"./adapters/claude/conversion/tool-use-to-acp\": {\n      \"types\": \"./dist/adapters/claude/conversion/tool-use-to-acp.d.ts\",\n      \"import\": \"./dist/adapters/claude/conversion/tool-use-to-acp.js\"\n    },\n    \"./adapters/claude/session/jsonl-hydration\": {\n      \"types\": \"./dist/adapters/claude/session/jsonl-hydration.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/jsonl-hydration.js\"\n    },\n    \"./adapters/claude/session/models\": {\n      \"types\": \"./dist/adapters/claude/session/models.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/models.js\"\n    },\n    \"./execution-mode\": {\n      \"types\": \"./dist/execution-mode.d.ts\",\n      \"import\": \"./dist/execution-mode.js\"\n    },\n    \"./server\": {\n      \"types\": \"./dist/server/agent-server.d.ts\",\n      \"import\": \"./dist/server/agent-server.js\"\n    }\n  },\n  \"bin\": {\n    \"agent-server\": \"./dist/server/bin.cjs\"\n  },\n  \"type\": \"module\",\n  \"keywords\": [\n    \"posthog\",\n    \"claude\",\n    \"agent\",\n    \"ai\",\n    \"git\",\n    \"typescript\"\n  ],\n  \"author\": \"PostHog\",\n  \"license\": \"SEE LICENSE IN LICENSE\",\n  \"scripts\": {\n    \"build\": \"node ../../scripts/rimraf.mjs dist && tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"pnpm exec tsc --noEmit\",\n    \"prepublishOnly\": \"pnpm run build\",\n    \"clean\": \"node ../../scripts/rimraf.mjs dist .turbo\"\n  },\n  \"engines\": {\n    \"node\": \">=20.0.0\"\n  },\n  \"devDependencies\": {\n    \"@posthog/shared\": \"workspace:*\",\n    \"@posthog/git\": \"workspace:*\",\n    \"@types/bun\": \"latest\",\n    \"@types/tar\": \"^6.1.13\",\n    \"msw\": \"^2.12.7\",\n    \"tsup\": \"^8.5.1\",\n    \"tsx\": \"^4.20.6\",\n    \"typescript\": \"^5.5.0\",\n    \"vitest\": \"^2.1.8\"\n  },\n  \"dependencies\": {\n    \"@agentclientprotocol/sdk\": \"0.16.1\",\n    \"@anthropic-ai/claude-agent-sdk\": \"0.2.76\",\n    \"@anthropic-ai/sdk\": \"^0.78.0\",\n    \"@hono/node-server\": \"^1.19.9\",\n    \"@opentelemetry/api-logs\": \"^0.208.0\",\n    \"@opentelemetry/exporter-logs-otlp-http\": \"^0.208.0\",\n    \"@opentelemetry/resources\": \"^2.0.0\",\n    \"@opentelemetry/sdk-logs\": \"^0.208.0\",\n    \"@opentelemetry/semantic-conventions\": \"^1.28.0\",\n    \"@types/jsonwebtoken\": \"^9.0.10\",\n    \"commander\": \"^14.0.2\",\n    \"hono\": \"^4.11.7\",\n    \"jsonwebtoken\": \"^9.0.2\",\n    \"minimatch\": \"^10.0.3\",\n    \"tar\": \"^7.5.0\",\n    \"uuid\": \"13.0.0\",\n    \"yoga-wasm-web\": \"^0.3.3\",\n    \"zod\": \"^4.2.0\"\n  },\n  \"files\": [\n    \"dist/**/*\",\n    \"src/**/*\",\n    \"README.md\",\n    \"CLAUDE.md\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\"\n  }\n}\n","export type GatewayProduct = \"posthog_code\" | \"background_agents\";\n\nexport function getLlmGatewayUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  const url = new URL(posthogHost);\n  const hostname = url.hostname;\n\n  // Local development (normalize 127.0.0.1 to localhost)\n  if (hostname === \"localhost\" || hostname === \"127.0.0.1\") {\n    return `${url.protocol}//localhost:3308/${product}`;\n  }\n\n  // Docker containers accessing host\n  if (hostname === \"host.docker.internal\") {\n    return `${url.protocol}//host.docker.internal:3308/${product}`;\n  }\n\n  // Production - extract region from hostname, default to US\n  const region = hostname.match(/^(us|eu)\\.posthog\\.com$/)?.[1] ?? \"us\";\n  return `https://gateway.${region}.posthog.com/${product}`;\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\nimport type {\n  ArtifactType,\n  PostHogAPIConfig,\n  StoredEntry,\n  Task,\n  TaskRun,\n  TaskRunArtifact,\n} from \"./types\";\nimport { getLlmGatewayUrl } from \"./utils/gateway\";\n\nexport { getLlmGatewayUrl };\n\nconst DEFAULT_USER_AGENT = `posthog/agent.hog.dev; version: ${packageJson.version}`;\n\nexport interface TaskArtifactUploadPayload {\n  name: string;\n  type: ArtifactType;\n  content: string;\n  content_type?: string;\n}\n\nexport type TaskRunUpdate = Partial<\n  Pick<\n    TaskRun,\n    | \"status\"\n    | \"branch\"\n    | \"stage\"\n    | \"error_message\"\n    | \"output\"\n    | \"state\"\n    | \"environment\"\n  >\n>;\n\nexport class PostHogAPIClient {\n  private config: PostHogAPIConfig;\n\n  constructor(config: PostHogAPIConfig) {\n    this.config = config;\n  }\n\n  private get baseUrl(): string {\n    const host = this.config.apiUrl.endsWith(\"/\")\n      ? this.config.apiUrl.slice(0, -1)\n      : this.config.apiUrl;\n    return host;\n  }\n\n  private isAuthFailure(status: number): boolean {\n    return status === 401 || status === 403;\n  }\n\n  private async resolveApiKey(forceRefresh = false): Promise<string> {\n    if (forceRefresh && this.config.refreshApiKey) {\n      return this.config.refreshApiKey();\n    }\n\n    return this.config.getApiKey();\n  }\n\n  private async buildHeaders(\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Headers> {\n    const headers = new Headers(options.headers);\n    headers.set(\n      \"Authorization\",\n      `Bearer ${await this.resolveApiKey(forceRefresh)}`,\n    );\n    headers.set(\"Content-Type\", \"application/json\");\n    headers.set(\"User-Agent\", this.config.userAgent ?? DEFAULT_USER_AGENT);\n    return headers;\n  }\n\n  private async performRequest(\n    endpoint: string,\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Response> {\n    const url = `${this.baseUrl}${endpoint}`;\n\n    return fetch(url, {\n      ...options,\n      headers: await this.buildHeaders(options, forceRefresh),\n    });\n  }\n\n  private async performRequestWithRetry(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<Response> {\n    let response = await this.performRequest(endpoint, options);\n\n    if (!response.ok && this.isAuthFailure(response.status)) {\n      response = await this.performRequest(endpoint, options, true);\n    }\n\n    return response;\n  }\n\n  private async apiRequest<T>(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<T> {\n    const response = await this.performRequestWithRetry(endpoint, options);\n\n    if (!response.ok) {\n      let errorMessage: string;\n      try {\n        const errorResponse = await response.json();\n        errorMessage = `Failed request: [${response.status}] ${JSON.stringify(errorResponse)}`;\n      } catch {\n        errorMessage = `Failed request: [${response.status}] ${response.statusText}`;\n      }\n      throw new Error(errorMessage);\n    }\n\n    return response.json();\n  }\n\n  private getTeamId(): number {\n    return this.config.projectId;\n  }\n\n  async getApiKey(forceRefresh = false): Promise<string> {\n    return this.resolveApiKey(forceRefresh);\n  }\n\n  getLlmGatewayUrl(): string {\n    return getLlmGatewayUrl(this.baseUrl);\n  }\n\n  async getTask(taskId: string): Promise<Task> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<Task>(`/api/projects/${teamId}/tasks/${taskId}/`);\n  }\n\n  async getTaskRun(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n    );\n  }\n\n  async updateTaskRun(\n    taskId: string,\n    runId: string,\n    payload: TaskRunUpdate,\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(payload),\n      },\n    );\n  }\n\n  async appendTaskRunLog(\n    taskId: string,\n    runId: string,\n    entries: StoredEntry[],\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/append_log/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ entries }),\n      },\n    );\n  }\n\n  async relayMessage(\n    taskId: string,\n    runId: string,\n    text: string,\n  ): Promise<void> {\n    const teamId = this.getTeamId();\n    await this.apiRequest<{ status: string }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/relay_message/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ text }),\n      },\n    );\n  }\n\n  async uploadTaskArtifacts(\n    taskId: string,\n    runId: string,\n    artifacts: TaskArtifactUploadPayload[],\n  ): Promise<TaskRunArtifact[]> {\n    if (!artifacts.length) {\n      return [];\n    }\n\n    const teamId = this.getTeamId();\n    const response = await this.apiRequest<{ artifacts: TaskRunArtifact[] }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ artifacts }),\n      },\n    );\n\n    return response.artifacts ?? [];\n  }\n\n  async getArtifactPresignedUrl(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<string | null> {\n    const teamId = this.getTeamId();\n    try {\n      const response = await this.apiRequest<{\n        url: string;\n        expires_in: number;\n      }>(\n        `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/presign/`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ storage_path: storagePath }),\n        },\n      );\n      return response.url;\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Download artifact content by storage path\n   * Gets a presigned URL and fetches the content\n   */\n  async downloadArtifact(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<ArrayBuffer | null> {\n    const url = await this.getArtifactPresignedUrl(taskId, runId, storagePath);\n    if (!url) {\n      return null;\n    }\n\n    try {\n      const response = await fetch(url);\n      if (!response.ok) {\n        throw new Error(`Failed to download artifact: ${response.status}`);\n      }\n      return response.arrayBuffer();\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Fetch logs for a task run via the logs API endpoint\n   * @param taskRun - The task run to fetch logs for\n   * @returns Array of stored entries, or empty array if no logs available\n   */\n  async fetchTaskRunLogs(taskRun: TaskRun): Promise<StoredEntry[]> {\n    const teamId = this.getTeamId();\n    const endpoint = `/api/projects/${teamId}/tasks/${taskRun.task}/runs/${taskRun.id}/logs`;\n\n    try {\n      const response = await this.performRequestWithRetry(endpoint);\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          return [];\n        }\n        throw new Error(\n          `Failed to fetch logs: ${response.status} ${response.statusText}`,\n        );\n      }\n\n      const content = await response.text();\n\n      if (!content.trim()) {\n        return [];\n      }\n\n      // Parse newline-delimited JSON\n      return content\n        .trim()\n        .split(\"\\n\")\n        .map((line) => JSON.parse(line) as StoredEntry);\n    } catch (error) {\n      throw new Error(\n        `Failed to fetch task run logs: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n}\n"],"mappings":";AAAA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,YAAc;AAAA,EACd,aAAe;AAAA,EACf,SAAW;AAAA,IACT,KAAK;AAAA,MACH,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,iBAAiB;AAAA,MACf,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,qCAAqC;AAAA,MACnC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oDAAoD;AAAA,MAClD,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,2BAA2B;AAAA,MACzB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,gDAAgD;AAAA,MAC9C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,6CAA6C;AAAA,MAC3C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oCAAoC;AAAA,MAClC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,KAAO;AAAA,IACL,gBAAgB;AAAA,EAClB;AAAA,EACA,MAAQ;AAAA,EACR,UAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,QAAU;AAAA,EACV,SAAW;AAAA,EACX,SAAW;AAAA,IACT,OAAS;AAAA,IACT,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,cAAc;AAAA,IACd,WAAa;AAAA,IACb,gBAAkB;AAAA,IAClB,OAAS;AAAA,EACX;AAAA,EACA,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,iBAAmB;AAAA,IACjB,mBAAmB;AAAA,IACnB,gBAAgB;AAAA,IAChB,cAAc;AAAA,IACd,cAAc;AAAA,IACd,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,KAAO;AAAA,IACP,YAAc;AAAA,IACd,QAAU;AAAA,EACZ;AAAA,EACA,cAAgB;AAAA,IACd,4BAA4B;AAAA,IAC5B,kCAAkC;AAAA,IAClC,qBAAqB;AAAA,IACrB,qBAAqB;AAAA,IACrB,2BAA2B;AAAA,IAC3B,0CAA0C;AAAA,IAC1C,4BAA4B;AAAA,IAC5B,2BAA2B;AAAA,IAC3B,uCAAuC;AAAA,IACvC,uBAAuB;AAAA,IACvB,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,cAAgB;AAAA,IAChB,WAAa;AAAA,IACb,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,iBAAiB;AAAA,IACjB,KAAO;AAAA,EACT;AAAA,EACA,OAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,eAAiB;AAAA,IACf,QAAU;AAAA,EACZ;AACF;;;AC3HO,SAAS,iBACd,aACA,UAA0B,gBAClB;AACR,QAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,QAAM,WAAW,IAAI;AAGrB,MAAI,aAAa,eAAe,aAAa,aAAa;AACxD,WAAO,GAAG,IAAI,QAAQ,oBAAoB,OAAO;AAAA,EACnD;AAGA,MAAI,aAAa,wBAAwB;AACvC,WAAO,GAAG,IAAI,QAAQ,+BAA+B,OAAO;AAAA,EAC9D;AAGA,QAAM,SAAS,SAAS,MAAM,yBAAyB,IAAI,CAAC,KAAK;AACjE,SAAO,mBAAmB,MAAM,gBAAgB,OAAO;AACzD;;;ACTA,IAAM,qBAAqB,mCAAmC,gBAAY,OAAO;AAsB1E,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EAER,YAAY,QAA0B;AACpC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAY,UAAkB;AAC5B,UAAM,OAAO,KAAK,OAAO,OAAO,SAAS,GAAG,IACxC,KAAK,OAAO,OAAO,MAAM,GAAG,EAAE,IAC9B,KAAK,OAAO;AAChB,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc,QAAyB;AAC7C,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAAA,EAEA,MAAc,cAAc,eAAe,OAAwB;AACjE,QAAI,gBAAgB,KAAK,OAAO,eAAe;AAC7C,aAAO,KAAK,OAAO,cAAc;AAAA,IACnC;AAEA,WAAO,KAAK,OAAO,UAAU;AAAA,EAC/B;AAAA,EAEA,MAAc,aACZ,SACA,eAAe,OACG;AAClB,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,YAAQ;AAAA,MACN;AAAA,MACA,UAAU,MAAM,KAAK,cAAc,YAAY,CAAC;AAAA,IAClD;AACA,YAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,YAAQ,IAAI,cAAc,KAAK,OAAO,aAAa,kBAAkB;AACrE,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,eACZ,UACA,SACA,eAAe,OACI;AACnB,UAAM,MAAM,GAAG,KAAK,OAAO,GAAG,QAAQ;AAEtC,WAAO,MAAM,KAAK;AAAA,MAChB,GAAG;AAAA,MACH,SAAS,MAAM,KAAK,aAAa,SAAS,YAAY;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,wBACZ,UACA,UAAuB,CAAC,GACL;AACnB,QAAI,WAAW,MAAM,KAAK,eAAe,UAAU,OAAO;AAE1D,QAAI,CAAC,SAAS,MAAM,KAAK,cAAc,SAAS,MAAM,GAAG;AACvD,iBAAW,MAAM,KAAK,eAAe,UAAU,SAAS,IAAI;AAAA,IAC9D;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,WACZ,UACA,UAAuB,CAAC,GACZ;AACZ,UAAM,WAAW,MAAM,KAAK,wBAAwB,UAAU,OAAO;AAErE,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI;AACJ,UAAI;AACF,cAAM,gBAAgB,MAAM,SAAS,KAAK;AAC1C,uBAAe,oBAAoB,SAAS,MAAM,KAAK,KAAK,UAAU,aAAa,CAAC;AAAA,MACtF,QAAQ;AACN,uBAAe,oBAAoB,SAAS,MAAM,KAAK,SAAS,UAAU;AAAA,MAC5E;AACA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAEQ,YAAoB;AAC1B,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAM,UAAU,eAAe,OAAwB;AACrD,WAAO,KAAK,cAAc,YAAY;AAAA,EACxC;AAAA,EAEA,mBAA2B;AACzB,WAAO,iBAAiB,KAAK,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,QAAQ,QAA+B;AAC3C,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK,WAAiB,iBAAiB,MAAM,UAAU,MAAM,GAAG;AAAA,EACzE;AAAA,EAEA,MAAM,WAAW,QAAgB,OAAiC;AAChE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,IACvD;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,OAAO;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,QACA,OACA,MACe;AACf,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,KAAK;AAAA,MACT,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,QACA,OACA,WAC4B;AAC5B,QAAI,CAAC,UAAU,QAAQ;AACrB,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC;AAAA,MACpC;AAAA,IACF;AAEA,WAAO,SAAS,aAAa,CAAC;AAAA,EAChC;AAAA,EAEA,MAAM,wBACJ,QACA,OACA,aACwB;AACxB,UAAM,SAAS,KAAK,UAAU;AAC9B,QAAI;AACF,YAAM,WAAW,MAAM,KAAK;AAAA,QAI1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,QACrD;AAAA,UACE,QAAQ;AAAA,UACR,MAAM,KAAK,UAAU,EAAE,cAAc,YAAY,CAAC;AAAA,QACpD;AAAA,MACF;AACA,aAAO,SAAS;AAAA,IAClB,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,iBACJ,QACA,OACA,aAC6B;AAC7B,UAAM,MAAM,MAAM,KAAK,wBAAwB,QAAQ,OAAO,WAAW;AACzE,QAAI,CAAC,KAAK;AACR,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,GAAG;AAChC,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,EAAE;AAAA,MACnE;AACA,aAAO,SAAS,YAAY;AAAA,IAC9B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBAAiB,SAA0C;AAC/D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,iBAAiB,MAAM,UAAU,QAAQ,IAAI,SAAS,QAAQ,EAAE;AAEjF,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,wBAAwB,QAAQ;AAE5D,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,iBAAO,CAAC;AAAA,QACV;AACA,cAAM,IAAI;AAAA,UACR,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,eAAO,CAAC;AAAA,MACV;AAGA,aAAO,QACJ,KAAK,EACL,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,CAAgB;AAAA,IAClD,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/server/agent-server.js

@@ -908,7 +908,7 @@ import { Hono } from "hono";
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.171",
+  version: "2.3.172",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {
@@ -3016,6 +3016,26 @@ var CODE_EXECUTION_MODES = [
 function getAvailableModes() {
   return IS_ROOT ? availableModes.filter((m) => m.id !== "bypassPermissions") : availableModes;
 }
+var CODEX_NATIVE_MODES = ["auto", "read-only", "full-access"];
+var codexModes = [
+  {
+    id: "read-only",
+    name: "Read Only",
+    description: "Read-only access, no file modifications"
+  },
+  {
+    id: "auto",
+    name: "Auto",
+    description: "Standard behavior, prompts for dangerous operations"
+  }
+];
+if (ALLOW_BYPASS) {
+  codexModes.push({
+    id: "full-access",
+    name: "Full Access",
+    description: "Auto-accept all permission requests"
+  });
+}
 
 // src/adapters/claude/tools.ts
 var READ_TOOLS = /* @__PURE__ */ new Set(["Read", "NotebookRead"]);
@@ -5018,13 +5038,48 @@ import {
 } from "@agentclientprotocol/sdk";
 
 // src/adapters/codex/codex-client.ts
+var AUTO_APPROVED_KINDS = {
+  auto: /* @__PURE__ */ new Set(["read", "search", "fetch", "think"]),
+  "read-only": /* @__PURE__ */ new Set(["read", "search", "fetch", "think"]),
+  "full-access": /* @__PURE__ */ new Set([
+    "read",
+    "edit",
+    "delete",
+    "move",
+    "search",
+    "execute",
+    "think",
+    "fetch",
+    "switch_mode",
+    "other"
+  ])
+};
+function shouldAutoApprove(mode, kind) {
+  if (mode === "full-access") return true;
+  if (!kind) return false;
+  return AUTO_APPROVED_KINDS[mode]?.has(kind) ?? false;
+}
 function createCodexClient(upstreamClient, logger, sessionState, callbacks) {
   const terminalHandles = /* @__PURE__ */ new Map();
   return {
     async requestPermission(params) {
-      logger.debug("Relaying permission request to upstream", {
-        sessionId: params.sessionId
-      });
+      const kind = params.toolCall?.kind;
+      if (shouldAutoApprove(sessionState.permissionMode, kind)) {
+        logger.debug("Auto-approving permission", {
+          mode: sessionState.permissionMode,
+          kind,
+          toolCallId: params.toolCall?.toolCallId
+        });
+        const allowOption = params.options?.find(
+          (o) => o.kind === "allow_once" || o.kind === "allow_always"
+        );
+        return {
+          outcome: {
+            outcome: "selected",
+            optionId: allowOption?.optionId ?? "allow"
+          }
+        };
+      }
       return upstreamClient.requestPermission(params);
     },
     async sessionUpdate(params) {
@@ -5107,7 +5162,7 @@ function createSessionState(sessionId, cwd, opts) {
   return {
     sessionId,
     cwd,
-    modeId: opts?.modeId ?? "default",
+    modeId: opts?.modeId ?? "auto",
     modelId: opts?.modelId,
     configOptions: [],
     accumulatedUsage: {
@@ -5116,6 +5171,7 @@ function createSessionState(sessionId, cwd, opts) {
       cachedReadTokens: 0,
       cachedWriteTokens: 0
     },
+    permissionMode: opts?.permissionMode ?? "auto",
     cancelled: false,
     taskRunId: opts?.taskRunId,
     taskId: opts?.taskId
@@ -5310,6 +5366,12 @@ function spawnCodexProcess(options) {
 }
 
 // src/adapters/codex/codex-agent.ts
+function toPermissionMode(mode) {
+  if (mode && CODEX_NATIVE_MODES.includes(mode)) {
+    return mode;
+  }
+  return "auto";
+}
 var CodexAcpAgent = class extends BaseAcpAgent {
   adapterName = "codex";
   codexProcess;
@@ -5342,7 +5404,7 @@ var CodexAcpAgent = class extends BaseAcpAgent {
         this.sessionState ?? {
           sessionId: "",
           cwd: "",
-          modeId: "default",
+          modeId: "auto",
           configOptions: [],
           accumulatedUsage: {
             inputTokens: 0,
@@ -5350,6 +5412,7 @@ var CodexAcpAgent = class extends BaseAcpAgent {
             cachedReadTokens: 0,
             cachedWriteTokens: 0
           },
+          permissionMode: "auto",
           cancelled: false
         }
       ),
@@ -5388,7 +5451,8 @@ var CodexAcpAgent = class extends BaseAcpAgent {
       taskRunId: meta?.taskRunId,
       taskId: meta?.taskId ?? meta?.persistence?.taskId,
       modeId: response.modes?.currentModeId ?? "default",
-      modelId: response.models?.currentModelId
+      modelId: response.models?.currentModelId,
+      permissionMode: toPermissionMode(meta?.permissionMode)
     });
     this.sessionId = response.sessionId;
     this.sessionState.configOptions = response.configOptions ?? [];
@@ -5512,9 +5576,14 @@ var CodexAcpAgent = class extends BaseAcpAgent {
     await this.codexConnection.cancel(params);
   }
   async setSessionMode(params) {
-    const response = await this.codexConnection.setSessionMode(params);
+    const permissionMode = toPermissionMode(params.modeId);
+    const response = await this.codexConnection.setSessionMode({
+      ...params,
+      modeId: permissionMode
+    });
     if (this.sessionState) {
-      this.sessionState.modeId = params.modeId;
+      this.sessionState.modeId = permissionMode;
+      this.sessionState.permissionMode = permissionMode;
     }
     return response ?? {};
   }