@posthog/agent 2.3.256 → 2.3.261

package/dist/server/bin.cjs

@@ -5683,7 +5683,7 @@ var import_hono = require("hono");
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.256",
+  version: "2.3.261",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {
@@ -5779,6 +5779,7 @@ var package_default = {
   },
   dependencies: {
     "@agentclientprotocol/sdk": "0.16.1",
+    ajv: "^8.17.1",
     "@anthropic-ai/claude-agent-sdk": "0.2.76",
     "@anthropic-ai/sdk": "^0.78.0",
     "@hono/node-server": "^1.19.9",
@@ -8630,6 +8631,7 @@ function buildSessionOptions(params) {
       params.settingsManager,
       params.logger
     ),
+    outputFormat: params.outputFormat,
     abortController: getAbortController(
       params.userProvidedOptions?.abortController
     ),
@@ -9217,6 +9219,11 @@ var ClaudeAcpAgent = class extends BaseAcpAgent {
             };
             const result = handleResultMessage(message);
             if (result.error) throw result.error;
+            if (message.subtype === "success" && message.structured_output != null && this.options?.onStructuredOutput) {
+              await this.options.onStructuredOutput(
+                message.structured_output
+              );
+            }
             if (isLocalOnlyCommand && message.subtype === "success" && message.result) {
               await this.client.sessionUpdate({
                 sessionId: params.sessionId,
@@ -9442,6 +9449,7 @@ var ClaudeAcpAgent = class extends BaseAcpAgent {
     const earlyModelId = settingsManager.getSettings().model || meta?.model || "";
     const mcpServers = supportsMcpInjection(earlyModelId) ? parseMcpServers(params) : {};
     const systemPrompt = buildSystemPrompt(meta?.systemPrompt);
+    const outputFormat = meta?.jsonSchema && this.options?.onStructuredOutput ? { type: "json_schema", schema: meta.jsonSchema } : void 0;
     this.logger.info(isResume ? "Resuming session" : "Creating new session", {
       sessionId,
       taskId,
@@ -9465,6 +9473,7 @@ var ClaudeAcpAgent = class extends BaseAcpAgent {
         ...meta?.additionalRoots ?? []
       ],
       disableBuiltInTools: meta?.disableBuiltInTools,
+      outputFormat,
       settingsManager,
       onModeChange: this.createOnModeChange(),
       onProcessSpawned: this.options?.onProcessSpawned,
@@ -10424,7 +10433,10 @@ function createClaudeConnection(config) {
   const agentStream = (0, import_sdk4.ndJsonStream)(agentWritable, streams.agent.readable);
   let agent = null;
   const agentConnection = new import_sdk4.AgentSideConnection((client) => {
-    agent = new ClaudeAcpAgent(client, config.processCallbacks);
+    agent = new ClaudeAcpAgent(client, {
+      ...config.processCallbacks,
+      onStructuredOutput: config.onStructuredOutput
+    });
     logger.info(`Created ${agent.adapterName} agent`);
     return agent;
   }, agentStream);
@@ -10656,6 +10668,15 @@ var PostHogAPIClient = class {
       }
     );
   }
+  async setTaskRunOutput(taskId, runId, output) {
+    return this.apiRequest(
+      `/api/projects/${this.getTeamId()}/tasks/${taskId}/runs/${runId}/set_output/`,
+      {
+        method: "PATCH",
+        body: JSON.stringify(output)
+      }
+    );
+  }
   async appendTaskRunLog(taskId, runId, entries) {
     const teamId = this.getTeamId();
     return this.apiRequest(
@@ -12591,12 +12612,9 @@ var AgentServer = class _AgentServer {
           prompt,
           ...this.detectedPrUrl && {
             _meta: {
-              prContext: `IMPORTANT \u2014 OVERRIDE PREVIOUS INSTRUCTIONS ABOUT CREATING BRANCHES/PRs.
-You already have an open pull request: ${this.detectedPrUrl}
-You MUST:
-1. Check out the existing PR branch with \`gh pr checkout ${this.detectedPrUrl}\`
-2. Make changes, commit, and push to that branch
-You MUST NOT create a new branch, close the existing PR, or create a new PR.`
+              // Keep the live-session PR override aligned with the startup
+              // prompt policy so non-Slack runs remain review-first.
+              prContext: this.buildDetectedPrContext(this.detectedPrUrl)
             }
           }
         });
@@ -12704,7 +12722,16 @@ You MUST NOT create a new branch, close the existing PR, or create a new PR.`
       taskRunId: payload.run_id,
       taskId: payload.task_id,
       deviceType: deviceInfo.type,
-      logWriter
+      logWriter,
+      onStructuredOutput: async (output) => {
+        await this.posthogAPI.setTaskRunOutput(
+          payload.task_id,
+          payload.run_id,
+          {
+            output
+          }
+        );
+      }
     });
     const onAcpMessage = (message) => {
       this.broadcastEvent({
@@ -12732,18 +12759,23 @@ You MUST NOT create a new branch, close the existing PR, or create a new PR.`
       protocolVersion: import_sdk5.PROTOCOL_VERSION,
       clientCapabilities: {}
     });
-    let preTaskRun = null;
-    try {
-      preTaskRun = await this.posthogAPI.getTaskRun(
-        payload.task_id,
-        payload.run_id
-      );
-    } catch {
-      this.logger.warn("Failed to fetch task run for session context", {
-        taskId: payload.task_id,
-        runId: payload.run_id
-      });
-    }
+    const [preTaskRun, preTask] = await Promise.all([
+      this.posthogAPI.getTaskRun(payload.task_id, payload.run_id).catch((err) => {
+        this.logger.warn("Failed to fetch task run for session context", {
+          taskId: payload.task_id,
+          runId: payload.run_id,
+          error: err
+        });
+        return null;
+      }),
+      this.posthogAPI.getTask(payload.task_id).catch((err) => {
+        this.logger.warn("Failed to fetch task for session context", {
+          taskId: payload.task_id,
+          error: err
+        });
+        return null;
+      })
+    ]);
     const prUrl = typeof preTaskRun?.state?.slack_notified_pr_url === "string" ? (preTaskRun?.state).slack_notified_pr_url : null;
     if (prUrl) {
       this.detectedPrUrl = prUrl;
@@ -12756,6 +12788,7 @@ You MUST NOT create a new branch, close the existing PR, or create a new PR.`
         taskRunId: payload.run_id,
         systemPrompt: this.buildSessionSystemPrompt(prUrl),
         allowedDomains: this.config.allowedDomains,
+        jsonSchema: preTask?.json_schema ?? null,
         ...this.config.claudeCode?.plugins?.length && {
           claudeCode: {
             options: {
@@ -13041,13 +13074,38 @@ ${toolSummary}`);
     }
     return { append: cloudAppend };
   }
+  getCloudInteractionOrigin() {
+    return process.env.POSTHOG_CODE_INTERACTION_ORIGIN ?? process.env.CODE_INTERACTION_ORIGIN ?? process.env.TWIG_INTERACTION_ORIGIN;
+  }
+  /**
+   * Slack-origin cloud runs auto-publish by default. Every other origin is
+   * review-first unless the user explicitly asks, and createPr=false always
+   * disables publishing.
+   */
+  shouldAutoPublishCloudChanges() {
+    return this.getCloudInteractionOrigin() === "slack" && this.config.createPr !== false;
+  }
+  buildDetectedPrContext(prUrl) {
+    if (!this.shouldAutoPublishCloudChanges()) {
+      return `An open pull request already exists: ${prUrl}
+Use that PR as context if it is helpful, but stop with local changes ready for review.
+Do NOT create commits, push to the PR branch, update the pull request, create a new branch, or create a new pull request unless the user explicitly asks.`;
+    }
+    return `IMPORTANT \u2014 OVERRIDE PREVIOUS INSTRUCTIONS ABOUT CREATING BRANCHES/PRs.
+You already have an open pull request: ${prUrl}
+You MUST:
+1. Check out the existing PR branch with \`gh pr checkout ${prUrl}\`
+2. Make changes, commit, and push to that branch
+You MUST NOT create a new branch, close the existing PR, or create a new PR.`;
+  }
   buildCloudSystemPrompt(prUrl) {
     const taskId = this.config.taskId;
+    const shouldAutoCreatePr = this.shouldAutoPublishCloudChanges();
     const attributionInstructions = `
 ## Attribution
 Do NOT use Claude Code's default attribution (no "Co-Authored-By" trailers, no "Generated with [Claude Code]" lines).
 
-Instead, add the following trailers to EVERY commit message (after a blank line at the end):
+If you create a commit, add the following trailers to the commit message (after a blank line at the end):
   Generated-By: PostHog Code
   Task-Id: ${taskId}
 
@@ -13062,6 +13120,20 @@ EOF
 )"
 \`\`\``;
     if (prUrl) {
+      if (!shouldAutoCreatePr) {
+        return `
+# Cloud Task Execution
+
+This task already has an open pull request: ${prUrl}
+
+Do the requested work, but stop with local changes ready for review.
+
+Important:
+- Do NOT create new commits, push to the branch, or update the pull request unless the user explicitly asks.
+- Do NOT create a new branch or a new pull request.
+${attributionInstructions}
+`;
+      }
       return `
 # Cloud Task Execution
 
@@ -13095,6 +13167,17 @@ When the user asks for code changes or software engineering tasks:
 Important:
 - Do NOT create branches, commits, or pull requests in this mode.
 - Prefer using MCP tools to answer questions with real data over giving generic advice.
+`;
+    }
+    if (!shouldAutoCreatePr) {
+      return `
+# Cloud Task Execution
+
+Do the requested work, but stop with local changes ready for review.
+
+Important:
+- Do NOT create a branch, commit, push, or open a pull request unless the user explicitly asks.
+${attributionInstructions}
 `;
     }
     return `
@@ -13203,9 +13286,30 @@ ${attributionInstructions}
       LLM_GATEWAY_URL: gatewayUrl
     });
   }
+  buildSlackQuestionRelayResponse(payload, toolMeta2) {
+    this.relaySlackQuestion(payload, toolMeta2);
+    return {
+      outcome: { outcome: "cancelled" },
+      _meta: {
+        message: "This question has been relayed to the Slack thread where this task originated. The user will reply there. Do NOT re-ask the question or pick an answer yourself. Simply let the user know you are waiting for their reply."
+      }
+    };
+  }
+  shouldBlockPublishPermission(params) {
+    if (this.config.createPr !== false) {
+      return false;
+    }
+    const meta = params.toolCall?._meta && typeof params.toolCall._meta === "object" && !Array.isArray(params.toolCall._meta) ? params.toolCall._meta : null;
+    const rawInput = params.toolCall?.rawInput && typeof params.toolCall.rawInput === "object" && !Array.isArray(params.toolCall.rawInput) ? params.toolCall.rawInput : null;
+    const toolName = typeof meta?.toolName === "string" ? meta.toolName : null;
+    const command = typeof rawInput?.command === "string" ? rawInput.command : null;
+    return Boolean(
+      toolName && (toolName === "Bash" || toolName.includes("bash")) && command && /\bgit\s+push\b|\bgh\s+pr\s+(create|edit|ready|merge)\b/.test(command)
+    );
+  }
   createCloudClient(payload) {
     const mode = this.getEffectiveMode(payload);
-    const interactionOrigin = process.env.CODE_INTERACTION_ORIGIN ?? process.env.TWIG_INTERACTION_ORIGIN;
+    const interactionOrigin = process.env.POSTHOG_CODE_INTERACTION_ORIGIN ?? process.env.CODE_INTERACTION_ORIGIN ?? process.env.TWIG_INTERACTION_ORIGIN;
     return {
       requestPermission: async (params) => {
         this.logger.debug("Permission request", {
@@ -13220,15 +13324,20 @@ ${attributionInstructions}
         if (interactionOrigin === "slack") {
           const codeToolKind = params.toolCall?._meta?.codeToolKind;
           if (codeToolKind === "question") {
-            this.relaySlackQuestion(payload, params.toolCall?._meta);
-            return {
-              outcome: { outcome: "cancelled" },
-              _meta: {
-                message: "This question has been relayed to the Slack thread where this task originated. The user will reply there. Do NOT re-ask the question or pick an answer yourself. Simply let the user know you are waiting for their reply."
-              }
-            };
+            return this.buildSlackQuestionRelayResponse(
+              payload,
+              params.toolCall?._meta
+            );
           }
         }
+        if (this.shouldBlockPublishPermission(params)) {
+          return {
+            outcome: { outcome: "cancelled" },
+            _meta: {
+              message: "This run is configured to stop before publishing. Do not push commits or create/update pull requests unless the user explicitly asks."
+            }
+          };
+        }
         return {
           outcome: {
             outcome: "selected",
@@ -13513,6 +13622,12 @@ var envSchema = import_v42.z.object({
   }).regex(/^\d+$/, "POSTHOG_PROJECT_ID must be a numeric string").transform((val) => parseInt(val, 10))
 });
 var program = new import_commander.Command();
+function parseBooleanOption(raw, flag) {
+  if (raw === void 0) return void 0;
+  if (raw === "true") return true;
+  if (raw === "false") return false;
+  program.error(`${flag} must be either "true" or "false"`);
+}
 function parseJsonOption(raw, schema, flag) {
   if (!raw) return void 0;
   let parsed;
@@ -13536,7 +13651,7 @@ program.name("agent-server").description("PostHog cloud agent server - runs in s
 ).option("--repositoryPath <path>", "Path to the repository").requiredOption("--taskId <id>", "Task ID").requiredOption("--runId <id>", "Task run ID").option(
   "--mcpServers <json>",
   "MCP servers config as JSON array (ACP McpServer[] format)"
-).option("--baseBranch <branch>", "Base branch for PR creation").option(
+).option("--createPr <boolean>", "Whether this run may publish changes").option("--baseBranch <branch>", "Base branch for PR creation").option(
   "--claudeCodeConfig <json>",
   "Claude Code config as JSON (systemPrompt, systemPromptAppend, plugins)"
 ).option(
@@ -13552,6 +13667,7 @@ ${errors}`);
   }
   const env = envResult.data;
   const mode = options.mode === "background" ? "background" : "interactive";
+  const createPr = parseBooleanOption(options.createPr, "--createPr");
   const mcpServers = parseJsonOption(
     options.mcpServers,
     mcpServersSchema,
@@ -13573,6 +13689,7 @@ ${errors}`);
     mode,
     taskId: options.taskId,
     runId: options.runId,
+    createPr,
     mcpServers,
     baseBranch: options.baseBranch,
     claudeCode,