@posthog/agent 2.3.171 → 2.3.172

package/dist/server/bin.cjs

@@ -904,7 +904,7 @@ var import_hono = require("hono");
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.171",
+  version: "2.3.172",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {
@@ -3006,6 +3006,26 @@ var CODE_EXECUTION_MODES = [
 function getAvailableModes() {
   return IS_ROOT ? availableModes.filter((m) => m.id !== "bypassPermissions") : availableModes;
 }
+var CODEX_NATIVE_MODES = ["auto", "read-only", "full-access"];
+var codexModes = [
+  {
+    id: "read-only",
+    name: "Read Only",
+    description: "Read-only access, no file modifications"
+  },
+  {
+    id: "auto",
+    name: "Auto",
+    description: "Standard behavior, prompts for dangerous operations"
+  }
+];
+if (ALLOW_BYPASS) {
+  codexModes.push({
+    id: "full-access",
+    name: "Full Access",
+    description: "Auto-accept all permission requests"
+  });
+}
 
 // src/adapters/claude/tools.ts
 var READ_TOOLS = /* @__PURE__ */ new Set(["Read", "NotebookRead"]);
@@ -5005,13 +5025,48 @@ var ClaudeAcpAgent = class extends BaseAcpAgent {
 var import_sdk3 = require("@agentclientprotocol/sdk");
 
 // src/adapters/codex/codex-client.ts
+var AUTO_APPROVED_KINDS = {
+  auto: /* @__PURE__ */ new Set(["read", "search", "fetch", "think"]),
+  "read-only": /* @__PURE__ */ new Set(["read", "search", "fetch", "think"]),
+  "full-access": /* @__PURE__ */ new Set([
+    "read",
+    "edit",
+    "delete",
+    "move",
+    "search",
+    "execute",
+    "think",
+    "fetch",
+    "switch_mode",
+    "other"
+  ])
+};
+function shouldAutoApprove(mode, kind) {
+  if (mode === "full-access") return true;
+  if (!kind) return false;
+  return AUTO_APPROVED_KINDS[mode]?.has(kind) ?? false;
+}
 function createCodexClient(upstreamClient, logger, sessionState, callbacks) {
   const terminalHandles = /* @__PURE__ */ new Map();
   return {
     async requestPermission(params) {
-      logger.debug("Relaying permission request to upstream", {
-        sessionId: params.sessionId
-      });
+      const kind = params.toolCall?.kind;
+      if (shouldAutoApprove(sessionState.permissionMode, kind)) {
+        logger.debug("Auto-approving permission", {
+          mode: sessionState.permissionMode,
+          kind,
+          toolCallId: params.toolCall?.toolCallId
+        });
+        const allowOption = params.options?.find(
+          (o) => o.kind === "allow_once" || o.kind === "allow_always"
+        );
+        return {
+          outcome: {
+            outcome: "selected",
+            optionId: allowOption?.optionId ?? "allow"
+          }
+        };
+      }
       return upstreamClient.requestPermission(params);
     },
     async sessionUpdate(params) {
@@ -5094,7 +5149,7 @@ function createSessionState(sessionId, cwd, opts) {
   return {
     sessionId,
     cwd,
-    modeId: opts?.modeId ?? "default",
+    modeId: opts?.modeId ?? "auto",
     modelId: opts?.modelId,
     configOptions: [],
     accumulatedUsage: {
@@ -5103,6 +5158,7 @@ function createSessionState(sessionId, cwd, opts) {
       cachedReadTokens: 0,
       cachedWriteTokens: 0
     },
+    permissionMode: opts?.permissionMode ?? "auto",
     cancelled: false,
     taskRunId: opts?.taskRunId,
     taskId: opts?.taskId
@@ -5297,6 +5353,12 @@ function spawnCodexProcess(options) {
 }
 
 // src/adapters/codex/codex-agent.ts
+function toPermissionMode(mode) {
+  if (mode && CODEX_NATIVE_MODES.includes(mode)) {
+    return mode;
+  }
+  return "auto";
+}
 var CodexAcpAgent = class extends BaseAcpAgent {
   adapterName = "codex";
   codexProcess;
@@ -5329,7 +5391,7 @@ var CodexAcpAgent = class extends BaseAcpAgent {
         this.sessionState ?? {
           sessionId: "",
           cwd: "",
-          modeId: "default",
+          modeId: "auto",
           configOptions: [],
           accumulatedUsage: {
             inputTokens: 0,
@@ -5337,6 +5399,7 @@ var CodexAcpAgent = class extends BaseAcpAgent {
             cachedReadTokens: 0,
             cachedWriteTokens: 0
           },
+          permissionMode: "auto",
           cancelled: false
         }
       ),
@@ -5375,7 +5438,8 @@ var CodexAcpAgent = class extends BaseAcpAgent {
       taskRunId: meta?.taskRunId,
       taskId: meta?.taskId ?? meta?.persistence?.taskId,
       modeId: response.modes?.currentModeId ?? "default",
-      modelId: response.models?.currentModelId
+      modelId: response.models?.currentModelId,
+      permissionMode: toPermissionMode(meta?.permissionMode)
     });
     this.sessionId = response.sessionId;
     this.sessionState.configOptions = response.configOptions ?? [];
@@ -5499,9 +5563,14 @@ var CodexAcpAgent = class extends BaseAcpAgent {
     await this.codexConnection.cancel(params);
   }
   async setSessionMode(params) {
-    const response = await this.codexConnection.setSessionMode(params);
+    const permissionMode = toPermissionMode(params.modeId);
+    const response = await this.codexConnection.setSessionMode({
+      ...params,
+      modeId: permissionMode
+    });
     if (this.sessionState) {
-      this.sessionState.modeId = params.modeId;
+      this.sessionState.modeId = permissionMode;
+      this.sessionState.permissionMode = permissionMode;
     }
     return response ?? {};
   }