@posthog/agent 2.3.259 → 2.3.261

package/dist/server/bin.cjs

@@ -5683,7 +5683,7 @@ var import_hono = require("hono");
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.259",
+  version: "2.3.261",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {
@@ -12612,12 +12612,9 @@ var AgentServer = class _AgentServer {
           prompt,
           ...this.detectedPrUrl && {
             _meta: {
-              prContext: `IMPORTANT \u2014 OVERRIDE PREVIOUS INSTRUCTIONS ABOUT CREATING BRANCHES/PRs.
-You already have an open pull request: ${this.detectedPrUrl}
-You MUST:
-1. Check out the existing PR branch with \`gh pr checkout ${this.detectedPrUrl}\`
-2. Make changes, commit, and push to that branch
-You MUST NOT create a new branch, close the existing PR, or create a new PR.`
+              // Keep the live-session PR override aligned with the startup
+              // prompt policy so non-Slack runs remain review-first.
+              prContext: this.buildDetectedPrContext(this.detectedPrUrl)
             }
           }
         });
@@ -13077,13 +13074,38 @@ ${toolSummary}`);
     }
     return { append: cloudAppend };
   }
+  getCloudInteractionOrigin() {
+    return process.env.POSTHOG_CODE_INTERACTION_ORIGIN ?? process.env.CODE_INTERACTION_ORIGIN ?? process.env.TWIG_INTERACTION_ORIGIN;
+  }
+  /**
+   * Slack-origin cloud runs auto-publish by default. Every other origin is
+   * review-first unless the user explicitly asks, and createPr=false always
+   * disables publishing.
+   */
+  shouldAutoPublishCloudChanges() {
+    return this.getCloudInteractionOrigin() === "slack" && this.config.createPr !== false;
+  }
+  buildDetectedPrContext(prUrl) {
+    if (!this.shouldAutoPublishCloudChanges()) {
+      return `An open pull request already exists: ${prUrl}
+Use that PR as context if it is helpful, but stop with local changes ready for review.
+Do NOT create commits, push to the PR branch, update the pull request, create a new branch, or create a new pull request unless the user explicitly asks.`;
+    }
+    return `IMPORTANT \u2014 OVERRIDE PREVIOUS INSTRUCTIONS ABOUT CREATING BRANCHES/PRs.
+You already have an open pull request: ${prUrl}
+You MUST:
+1. Check out the existing PR branch with \`gh pr checkout ${prUrl}\`
+2. Make changes, commit, and push to that branch
+You MUST NOT create a new branch, close the existing PR, or create a new PR.`;
+  }
   buildCloudSystemPrompt(prUrl) {
     const taskId = this.config.taskId;
+    const shouldAutoCreatePr = this.shouldAutoPublishCloudChanges();
     const attributionInstructions = `
 ## Attribution
 Do NOT use Claude Code's default attribution (no "Co-Authored-By" trailers, no "Generated with [Claude Code]" lines).
 
-Instead, add the following trailers to EVERY commit message (after a blank line at the end):
+If you create a commit, add the following trailers to the commit message (after a blank line at the end):
   Generated-By: PostHog Code
   Task-Id: ${taskId}
 
@@ -13098,6 +13120,20 @@ EOF
 )"
 \`\`\``;
     if (prUrl) {
+      if (!shouldAutoCreatePr) {
+        return `
+# Cloud Task Execution
+
+This task already has an open pull request: ${prUrl}
+
+Do the requested work, but stop with local changes ready for review.
+
+Important:
+- Do NOT create new commits, push to the branch, or update the pull request unless the user explicitly asks.
+- Do NOT create a new branch or a new pull request.
+${attributionInstructions}
+`;
+      }
       return `
 # Cloud Task Execution
 
@@ -13131,6 +13167,17 @@ When the user asks for code changes or software engineering tasks:
 Important:
 - Do NOT create branches, commits, or pull requests in this mode.
 - Prefer using MCP tools to answer questions with real data over giving generic advice.
+`;
+    }
+    if (!shouldAutoCreatePr) {
+      return `
+# Cloud Task Execution
+
+Do the requested work, but stop with local changes ready for review.
+
+Important:
+- Do NOT create a branch, commit, push, or open a pull request unless the user explicitly asks.
+${attributionInstructions}
 `;
     }
     return `
@@ -13239,9 +13286,30 @@ ${attributionInstructions}
       LLM_GATEWAY_URL: gatewayUrl
     });
   }
+  buildSlackQuestionRelayResponse(payload, toolMeta2) {
+    this.relaySlackQuestion(payload, toolMeta2);
+    return {
+      outcome: { outcome: "cancelled" },
+      _meta: {
+        message: "This question has been relayed to the Slack thread where this task originated. The user will reply there. Do NOT re-ask the question or pick an answer yourself. Simply let the user know you are waiting for their reply."
+      }
+    };
+  }
+  shouldBlockPublishPermission(params) {
+    if (this.config.createPr !== false) {
+      return false;
+    }
+    const meta = params.toolCall?._meta && typeof params.toolCall._meta === "object" && !Array.isArray(params.toolCall._meta) ? params.toolCall._meta : null;
+    const rawInput = params.toolCall?.rawInput && typeof params.toolCall.rawInput === "object" && !Array.isArray(params.toolCall.rawInput) ? params.toolCall.rawInput : null;
+    const toolName = typeof meta?.toolName === "string" ? meta.toolName : null;
+    const command = typeof rawInput?.command === "string" ? rawInput.command : null;
+    return Boolean(
+      toolName && (toolName === "Bash" || toolName.includes("bash")) && command && /\bgit\s+push\b|\bgh\s+pr\s+(create|edit|ready|merge)\b/.test(command)
+    );
+  }
   createCloudClient(payload) {
     const mode = this.getEffectiveMode(payload);
-    const interactionOrigin = process.env.CODE_INTERACTION_ORIGIN ?? process.env.TWIG_INTERACTION_ORIGIN;
+    const interactionOrigin = process.env.POSTHOG_CODE_INTERACTION_ORIGIN ?? process.env.CODE_INTERACTION_ORIGIN ?? process.env.TWIG_INTERACTION_ORIGIN;
     return {
       requestPermission: async (params) => {
         this.logger.debug("Permission request", {
@@ -13256,15 +13324,20 @@ ${attributionInstructions}
         if (interactionOrigin === "slack") {
           const codeToolKind = params.toolCall?._meta?.codeToolKind;
           if (codeToolKind === "question") {
-            this.relaySlackQuestion(payload, params.toolCall?._meta);
-            return {
-              outcome: { outcome: "cancelled" },
-              _meta: {
-                message: "This question has been relayed to the Slack thread where this task originated. The user will reply there. Do NOT re-ask the question or pick an answer yourself. Simply let the user know you are waiting for their reply."
-              }
-            };
+            return this.buildSlackQuestionRelayResponse(
+              payload,
+              params.toolCall?._meta
+            );
           }
         }
+        if (this.shouldBlockPublishPermission(params)) {
+          return {
+            outcome: { outcome: "cancelled" },
+            _meta: {
+              message: "This run is configured to stop before publishing. Do not push commits or create/update pull requests unless the user explicitly asks."
+            }
+          };
+        }
         return {
           outcome: {
             outcome: "selected",
@@ -13549,6 +13622,12 @@ var envSchema = import_v42.z.object({
   }).regex(/^\d+$/, "POSTHOG_PROJECT_ID must be a numeric string").transform((val) => parseInt(val, 10))
 });
 var program = new import_commander.Command();
+function parseBooleanOption(raw, flag) {
+  if (raw === void 0) return void 0;
+  if (raw === "true") return true;
+  if (raw === "false") return false;
+  program.error(`${flag} must be either "true" or "false"`);
+}
 function parseJsonOption(raw, schema, flag) {
   if (!raw) return void 0;
   let parsed;
@@ -13572,7 +13651,7 @@ program.name("agent-server").description("PostHog cloud agent server - runs in s
 ).option("--repositoryPath <path>", "Path to the repository").requiredOption("--taskId <id>", "Task ID").requiredOption("--runId <id>", "Task run ID").option(
   "--mcpServers <json>",
   "MCP servers config as JSON array (ACP McpServer[] format)"
-).option("--baseBranch <branch>", "Base branch for PR creation").option(
+).option("--createPr <boolean>", "Whether this run may publish changes").option("--baseBranch <branch>", "Base branch for PR creation").option(
   "--claudeCodeConfig <json>",
   "Claude Code config as JSON (systemPrompt, systemPromptAppend, plugins)"
 ).option(
@@ -13588,6 +13667,7 @@ ${errors}`);
   }
   const env = envResult.data;
   const mode = options.mode === "background" ? "background" : "interactive";
+  const createPr = parseBooleanOption(options.createPr, "--createPr");
   const mcpServers = parseJsonOption(
     options.mcpServers,
     mcpServersSchema,
@@ -13609,6 +13689,7 @@ ${errors}`);
     mode,
     taskId: options.taskId,
     runId: options.runId,
+    createPr,
     mcpServers,
     baseBranch: options.baseBranch,
     claudeCode,