@posthog/agent 2.3.259 → 2.3.263

package/dist/index.d.ts

@@ -46,6 +46,8 @@ declare const POSTHOG_NOTIFICATIONS: {
     readonly COMPACT_BOUNDARY: "_posthog/compact_boundary";
     /** Token usage update for a session turn */
     readonly USAGE_UPDATE: "_posthog/usage_update";
+    /** Response to a relayed permission request (plan approval, question) */
+    readonly PERMISSION_RESPONSE: "_posthog/permission_response";
 };
 type NotificationMethod = (typeof POSTHOG_NOTIFICATIONS)[keyof typeof POSTHOG_NOTIFICATIONS];
 /**

package/dist/index.js

@@ -33,7 +33,9 @@ var POSTHOG_NOTIFICATIONS = {
   /** Marks a boundary for log compaction */
   COMPACT_BOUNDARY: "_posthog/compact_boundary",
   /** Token usage update for a session turn */
-  USAGE_UPDATE: "_posthog/usage_update"
+  USAGE_UPDATE: "_posthog/usage_update",
+  /** Response to a relayed permission request (plan approval, question) */
+  PERMISSION_RESPONSE: "_posthog/permission_response"
 };
 function isNotification(method, notification) {
   if (!method) return false;

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/acp-extensions.ts","../src/adapters/claude/mcp/tool-metadata.ts"],"sourcesContent":["/**\n * PostHog-specific ACP extensions.\n *\n * These follow the ACP extensibility model:\n * - Custom notification methods are prefixed with `_posthog/`\n * - Custom data can be attached via `_meta` fields\n *\n * See: https://agentclientprotocol.com/docs/extensibility\n */\n\n/**\n * Custom notification methods for PostHog-specific events.\n * Used with AgentSideConnection.extNotification() or Client.extNotification()\n */\nexport const POSTHOG_NOTIFICATIONS = {\n  /** Git branch was created for a task */\n  BRANCH_CREATED: \"_posthog/branch_created\",\n\n  /** Task run has started execution */\n  RUN_STARTED: \"_posthog/run_started\",\n\n  /** Task has completed (success or failure) */\n  TASK_COMPLETE: \"_posthog/task_complete\",\n\n  /** Agent finished processing a turn (prompt returned, waiting for next input) */\n  TURN_COMPLETE: \"_posthog/turn_complete\",\n\n  /** Error occurred during task execution */\n  ERROR: \"_posthog/error\",\n\n  /** Console/log output from the agent */\n  CONSOLE: \"_posthog/console\",\n\n  /** Maps taskRunId to agent's sessionId and adapter type (for resumption) */\n  SDK_SESSION: \"_posthog/sdk_session\",\n\n  /** Tree state snapshot captured (git tree hash + file archive) */\n  TREE_SNAPSHOT: \"_posthog/tree_snapshot\",\n\n  /** Agent mode changed (interactive/background) */\n  MODE_CHANGE: \"_posthog/mode_change\",\n\n  /** Request to resume a session from previous state */\n  SESSION_RESUME: \"_posthog/session/resume\",\n\n  /** User message sent from client to agent */\n  USER_MESSAGE: \"_posthog/user_message\",\n\n  /** Request to cancel current operation */\n  CANCEL: \"_posthog/cancel\",\n\n  /** Request to close the session */\n  CLOSE: \"_posthog/close\",\n\n  /** Agent status update (thinking, working, etc.) */\n  STATUS: \"_posthog/status\",\n\n  /** Task-level notification (progress, milestones) */\n  TASK_NOTIFICATION: \"_posthog/task_notification\",\n\n  /** Marks a boundary for log compaction */\n  COMPACT_BOUNDARY: \"_posthog/compact_boundary\",\n\n  /** Token usage update for a session turn */\n  USAGE_UPDATE: \"_posthog/usage_update\",\n} as const;\n\ntype NotificationMethod =\n  (typeof POSTHOG_NOTIFICATIONS)[keyof typeof POSTHOG_NOTIFICATIONS];\n\n/**\n * Check if an ACP method matches a PostHog notification, handling the\n * possible `__posthog/` double-prefix from extNotification().\n */\nexport function isNotification(\n  method: string | undefined,\n  notification: NotificationMethod,\n): boolean {\n  if (!method) return false;\n  return method === notification || method === `_${notification}`;\n}\n","import type { McpServerStatus, Query } from \"@anthropic-ai/claude-agent-sdk\";\nimport { Logger } from \"../../../utils/logger\";\n\nexport interface McpToolMetadata {\n  readOnly: boolean;\n  name: string;\n  description?: string;\n}\n\nconst mcpToolMetadataCache: Map<string, McpToolMetadata> = new Map();\n\nconst PENDING_RETRY_INTERVAL_MS = 1_000;\nconst PENDING_MAX_RETRIES = 10;\n\nfunction buildToolKey(serverName: string, toolName: string): string {\n  return `mcp__${serverName}__${toolName}`;\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nexport async function fetchMcpToolMetadata(\n  q: Query,\n  logger: Logger = new Logger({ debug: false, prefix: \"[McpToolMetadata]\" }),\n): Promise<void> {\n  let retries = 0;\n\n  while (retries <= PENDING_MAX_RETRIES) {\n    let statuses: McpServerStatus[];\n    try {\n      statuses = await q.mcpServerStatus();\n    } catch (error) {\n      logger.error(\"Failed to fetch MCP server status\", {\n        error: error instanceof Error ? error.message : String(error),\n      });\n      return;\n    }\n\n    const pendingServers = statuses.filter((s) => s.status === \"pending\");\n\n    for (const server of statuses) {\n      if (server.status !== \"connected\" || !server.tools) {\n        continue;\n      }\n\n      let readOnlyCount = 0;\n      for (const tool of server.tools) {\n        const toolKey = buildToolKey(server.name, tool.name);\n        const readOnly = tool.annotations?.readOnly === true;\n\n        mcpToolMetadataCache.set(toolKey, {\n          readOnly,\n          name: tool.name,\n          description: tool.description,\n        });\n        if (readOnly) readOnlyCount++;\n      }\n\n      logger.info(\"Fetched MCP tool metadata\", {\n        serverName: server.name,\n        toolCount: server.tools.length,\n        readOnlyCount,\n      });\n    }\n\n    if (pendingServers.length === 0) {\n      return;\n    }\n\n    retries++;\n    if (retries > PENDING_MAX_RETRIES) {\n      logger.warn(\"Gave up waiting for pending MCP servers\", {\n        pendingServers: pendingServers.map((s) => s.name),\n      });\n      return;\n    }\n\n    logger.info(\"Waiting for pending MCP servers\", {\n      pendingServers: pendingServers.map((s) => s.name),\n      retry: retries,\n    });\n    await delay(PENDING_RETRY_INTERVAL_MS);\n  }\n}\n\nexport function getMcpToolMetadata(\n  toolName: string,\n): McpToolMetadata | undefined {\n  return mcpToolMetadataCache.get(toolName);\n}\n\nexport function isMcpToolReadOnly(toolName: string): boolean {\n  const metadata = mcpToolMetadataCache.get(toolName);\n  return metadata?.readOnly === true;\n}\n\nexport function getConnectedMcpServerNames(): string[] {\n  const names = new Set<string>();\n  for (const key of mcpToolMetadataCache.keys()) {\n    const parts = key.split(\"__\");\n    if (parts.length >= 3) names.add(parts[1]);\n  }\n  return [...names];\n}\n\nexport function clearMcpToolMetadataCache(): void {\n  mcpToolMetadataCache.clear();\n}\n"],"mappings":";AAcO,IAAM,wBAAwB;AAAA;AAAA,EAEnC,gBAAgB;AAAA;AAAA,EAGhB,aAAa;AAAA;AAAA,EAGb,eAAe;AAAA;AAAA,EAGf,eAAe;AAAA;AAAA,EAGf,OAAO;AAAA;AAAA,EAGP,SAAS;AAAA;AAAA,EAGT,aAAa;AAAA;AAAA,EAGb,eAAe;AAAA;AAAA,EAGf,aAAa;AAAA;AAAA,EAGb,gBAAgB;AAAA;AAAA,EAGhB,cAAc;AAAA;AAAA,EAGd,QAAQ;AAAA;AAAA,EAGR,OAAO;AAAA;AAAA,EAGP,QAAQ;AAAA;AAAA,EAGR,mBAAmB;AAAA;AAAA,EAGnB,kBAAkB;AAAA;AAAA,EAGlB,cAAc;AAChB;AASO,SAAS,eACd,QACA,cACS;AACT,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,WAAW,gBAAgB,WAAW,IAAI,YAAY;AAC/D;;;ACvEA,IAAM,uBAAqD,oBAAI,IAAI;AA6E5D,SAAS,mBACd,UAC6B;AAC7B,SAAO,qBAAqB,IAAI,QAAQ;AAC1C;AAEO,SAAS,kBAAkB,UAA2B;AAC3D,QAAM,WAAW,qBAAqB,IAAI,QAAQ;AAClD,SAAO,UAAU,aAAa;AAChC;","names":[]}
+{"version":3,"sources":["../src/acp-extensions.ts","../src/adapters/claude/mcp/tool-metadata.ts"],"sourcesContent":["/**\n * PostHog-specific ACP extensions.\n *\n * These follow the ACP extensibility model:\n * - Custom notification methods are prefixed with `_posthog/`\n * - Custom data can be attached via `_meta` fields\n *\n * See: https://agentclientprotocol.com/docs/extensibility\n */\n\n/**\n * Custom notification methods for PostHog-specific events.\n * Used with AgentSideConnection.extNotification() or Client.extNotification()\n */\nexport const POSTHOG_NOTIFICATIONS = {\n  /** Git branch was created for a task */\n  BRANCH_CREATED: \"_posthog/branch_created\",\n\n  /** Task run has started execution */\n  RUN_STARTED: \"_posthog/run_started\",\n\n  /** Task has completed (success or failure) */\n  TASK_COMPLETE: \"_posthog/task_complete\",\n\n  /** Agent finished processing a turn (prompt returned, waiting for next input) */\n  TURN_COMPLETE: \"_posthog/turn_complete\",\n\n  /** Error occurred during task execution */\n  ERROR: \"_posthog/error\",\n\n  /** Console/log output from the agent */\n  CONSOLE: \"_posthog/console\",\n\n  /** Maps taskRunId to agent's sessionId and adapter type (for resumption) */\n  SDK_SESSION: \"_posthog/sdk_session\",\n\n  /** Tree state snapshot captured (git tree hash + file archive) */\n  TREE_SNAPSHOT: \"_posthog/tree_snapshot\",\n\n  /** Agent mode changed (interactive/background) */\n  MODE_CHANGE: \"_posthog/mode_change\",\n\n  /** Request to resume a session from previous state */\n  SESSION_RESUME: \"_posthog/session/resume\",\n\n  /** User message sent from client to agent */\n  USER_MESSAGE: \"_posthog/user_message\",\n\n  /** Request to cancel current operation */\n  CANCEL: \"_posthog/cancel\",\n\n  /** Request to close the session */\n  CLOSE: \"_posthog/close\",\n\n  /** Agent status update (thinking, working, etc.) */\n  STATUS: \"_posthog/status\",\n\n  /** Task-level notification (progress, milestones) */\n  TASK_NOTIFICATION: \"_posthog/task_notification\",\n\n  /** Marks a boundary for log compaction */\n  COMPACT_BOUNDARY: \"_posthog/compact_boundary\",\n\n  /** Token usage update for a session turn */\n  USAGE_UPDATE: \"_posthog/usage_update\",\n\n  /** Response to a relayed permission request (plan approval, question) */\n  PERMISSION_RESPONSE: \"_posthog/permission_response\",\n} as const;\n\ntype NotificationMethod =\n  (typeof POSTHOG_NOTIFICATIONS)[keyof typeof POSTHOG_NOTIFICATIONS];\n\n/**\n * Check if an ACP method matches a PostHog notification, handling the\n * possible `__posthog/` double-prefix from extNotification().\n */\nexport function isNotification(\n  method: string | undefined,\n  notification: NotificationMethod,\n): boolean {\n  if (!method) return false;\n  return method === notification || method === `_${notification}`;\n}\n","import type { McpServerStatus, Query } from \"@anthropic-ai/claude-agent-sdk\";\nimport { Logger } from \"../../../utils/logger\";\n\nexport interface McpToolMetadata {\n  readOnly: boolean;\n  name: string;\n  description?: string;\n}\n\nconst mcpToolMetadataCache: Map<string, McpToolMetadata> = new Map();\n\nconst PENDING_RETRY_INTERVAL_MS = 1_000;\nconst PENDING_MAX_RETRIES = 10;\n\nfunction buildToolKey(serverName: string, toolName: string): string {\n  return `mcp__${serverName}__${toolName}`;\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nexport async function fetchMcpToolMetadata(\n  q: Query,\n  logger: Logger = new Logger({ debug: false, prefix: \"[McpToolMetadata]\" }),\n): Promise<void> {\n  let retries = 0;\n\n  while (retries <= PENDING_MAX_RETRIES) {\n    let statuses: McpServerStatus[];\n    try {\n      statuses = await q.mcpServerStatus();\n    } catch (error) {\n      logger.error(\"Failed to fetch MCP server status\", {\n        error: error instanceof Error ? error.message : String(error),\n      });\n      return;\n    }\n\n    const pendingServers = statuses.filter((s) => s.status === \"pending\");\n\n    for (const server of statuses) {\n      if (server.status !== \"connected\" || !server.tools) {\n        continue;\n      }\n\n      let readOnlyCount = 0;\n      for (const tool of server.tools) {\n        const toolKey = buildToolKey(server.name, tool.name);\n        const readOnly = tool.annotations?.readOnly === true;\n\n        mcpToolMetadataCache.set(toolKey, {\n          readOnly,\n          name: tool.name,\n          description: tool.description,\n        });\n        if (readOnly) readOnlyCount++;\n      }\n\n      logger.info(\"Fetched MCP tool metadata\", {\n        serverName: server.name,\n        toolCount: server.tools.length,\n        readOnlyCount,\n      });\n    }\n\n    if (pendingServers.length === 0) {\n      return;\n    }\n\n    retries++;\n    if (retries > PENDING_MAX_RETRIES) {\n      logger.warn(\"Gave up waiting for pending MCP servers\", {\n        pendingServers: pendingServers.map((s) => s.name),\n      });\n      return;\n    }\n\n    logger.info(\"Waiting for pending MCP servers\", {\n      pendingServers: pendingServers.map((s) => s.name),\n      retry: retries,\n    });\n    await delay(PENDING_RETRY_INTERVAL_MS);\n  }\n}\n\nexport function getMcpToolMetadata(\n  toolName: string,\n): McpToolMetadata | undefined {\n  return mcpToolMetadataCache.get(toolName);\n}\n\nexport function isMcpToolReadOnly(toolName: string): boolean {\n  const metadata = mcpToolMetadataCache.get(toolName);\n  return metadata?.readOnly === true;\n}\n\nexport function getConnectedMcpServerNames(): string[] {\n  const names = new Set<string>();\n  for (const key of mcpToolMetadataCache.keys()) {\n    const parts = key.split(\"__\");\n    if (parts.length >= 3) names.add(parts[1]);\n  }\n  return [...names];\n}\n\nexport function clearMcpToolMetadataCache(): void {\n  mcpToolMetadataCache.clear();\n}\n"],"mappings":";AAcO,IAAM,wBAAwB;AAAA;AAAA,EAEnC,gBAAgB;AAAA;AAAA,EAGhB,aAAa;AAAA;AAAA,EAGb,eAAe;AAAA;AAAA,EAGf,eAAe;AAAA;AAAA,EAGf,OAAO;AAAA;AAAA,EAGP,SAAS;AAAA;AAAA,EAGT,aAAa;AAAA;AAAA,EAGb,eAAe;AAAA;AAAA,EAGf,aAAa;AAAA;AAAA,EAGb,gBAAgB;AAAA;AAAA,EAGhB,cAAc;AAAA;AAAA,EAGd,QAAQ;AAAA;AAAA,EAGR,OAAO;AAAA;AAAA,EAGP,QAAQ;AAAA;AAAA,EAGR,mBAAmB;AAAA;AAAA,EAGnB,kBAAkB;AAAA;AAAA,EAGlB,cAAc;AAAA;AAAA,EAGd,qBAAqB;AACvB;AASO,SAAS,eACd,QACA,cACS;AACT,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,WAAW,gBAAgB,WAAW,IAAI,YAAY;AAC/D;;;AC1EA,IAAM,uBAAqD,oBAAI,IAAI;AA6E5D,SAAS,mBACd,UAC6B;AAC7B,SAAO,qBAAqB,IAAI,QAAQ;AAC1C;AAEO,SAAS,kBAAkB,UAA2B;AAC3D,QAAM,WAAW,qBAAqB,IAAI,QAAQ;AAClD,SAAO,UAAU,aAAa;AAChC;","names":[]}

package/dist/posthog-api.js

@@ -1,7 +1,7 @@
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.259",
+  version: "2.3.263",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {

package/dist/posthog-api.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../package.json","../src/utils/gateway.ts","../src/posthog-api.ts"],"sourcesContent":["{\n  \"name\": \"@posthog/agent\",\n  \"version\": \"2.3.259\",\n  \"repository\": \"https://github.com/PostHog/code\",\n  \"description\": \"TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\"\n    },\n    \"./agent\": {\n      \"types\": \"./dist/agent.d.ts\",\n      \"import\": \"./dist/agent.js\"\n    },\n    \"./gateway-models\": {\n      \"types\": \"./dist/gateway-models.d.ts\",\n      \"import\": \"./dist/gateway-models.js\"\n    },\n    \"./posthog-api\": {\n      \"types\": \"./dist/posthog-api.d.ts\",\n      \"import\": \"./dist/posthog-api.js\"\n    },\n    \"./types\": {\n      \"types\": \"./dist/types.d.ts\",\n      \"import\": \"./dist/types.js\"\n    },\n    \"./adapters/claude/questions/utils\": {\n      \"types\": \"./dist/adapters/claude/questions/utils.d.ts\",\n      \"import\": \"./dist/adapters/claude/questions/utils.js\"\n    },\n    \"./adapters/claude/permissions/permission-options\": {\n      \"types\": \"./dist/adapters/claude/permissions/permission-options.d.ts\",\n      \"import\": \"./dist/adapters/claude/permissions/permission-options.js\"\n    },\n    \"./adapters/claude/tools\": {\n      \"types\": \"./dist/adapters/claude/tools.d.ts\",\n      \"import\": \"./dist/adapters/claude/tools.js\"\n    },\n    \"./adapters/claude/conversion/tool-use-to-acp\": {\n      \"types\": \"./dist/adapters/claude/conversion/tool-use-to-acp.d.ts\",\n      \"import\": \"./dist/adapters/claude/conversion/tool-use-to-acp.js\"\n    },\n    \"./adapters/claude/session/jsonl-hydration\": {\n      \"types\": \"./dist/adapters/claude/session/jsonl-hydration.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/jsonl-hydration.js\"\n    },\n    \"./adapters/claude/session/models\": {\n      \"types\": \"./dist/adapters/claude/session/models.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/models.js\"\n    },\n    \"./execution-mode\": {\n      \"types\": \"./dist/execution-mode.d.ts\",\n      \"import\": \"./dist/execution-mode.js\"\n    },\n    \"./server\": {\n      \"types\": \"./dist/server/agent-server.d.ts\",\n      \"import\": \"./dist/server/agent-server.js\"\n    }\n  },\n  \"bin\": {\n    \"agent-server\": \"./dist/server/bin.cjs\"\n  },\n  \"type\": \"module\",\n  \"keywords\": [\n    \"posthog\",\n    \"claude\",\n    \"agent\",\n    \"ai\",\n    \"git\",\n    \"typescript\"\n  ],\n  \"author\": \"PostHog\",\n  \"license\": \"SEE LICENSE IN LICENSE\",\n  \"scripts\": {\n    \"build\": \"node ../../scripts/rimraf.mjs dist && tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"pnpm exec tsc --noEmit\",\n    \"prepublishOnly\": \"pnpm run build\",\n    \"clean\": \"node ../../scripts/rimraf.mjs dist .turbo\"\n  },\n  \"engines\": {\n    \"node\": \">=20.0.0\"\n  },\n  \"devDependencies\": {\n    \"@posthog/shared\": \"workspace:*\",\n    \"@posthog/git\": \"workspace:*\",\n    \"@types/bun\": \"latest\",\n    \"@types/tar\": \"^6.1.13\",\n    \"msw\": \"^2.12.7\",\n    \"tsup\": \"^8.5.1\",\n    \"tsx\": \"^4.20.6\",\n    \"typescript\": \"^5.5.0\",\n    \"vitest\": \"^2.1.8\"\n  },\n  \"dependencies\": {\n    \"@agentclientprotocol/sdk\": \"0.16.1\",\n    \"ajv\": \"^8.17.1\",\n    \"@anthropic-ai/claude-agent-sdk\": \"0.2.76\",\n    \"@anthropic-ai/sdk\": \"^0.78.0\",\n    \"@hono/node-server\": \"^1.19.9\",\n    \"@opentelemetry/api-logs\": \"^0.208.0\",\n    \"@opentelemetry/exporter-logs-otlp-http\": \"^0.208.0\",\n    \"@opentelemetry/resources\": \"^2.0.0\",\n    \"@opentelemetry/sdk-logs\": \"^0.208.0\",\n    \"@opentelemetry/semantic-conventions\": \"^1.28.0\",\n    \"@types/jsonwebtoken\": \"^9.0.10\",\n    \"commander\": \"^14.0.2\",\n    \"hono\": \"^4.11.7\",\n    \"jsonwebtoken\": \"^9.0.2\",\n    \"minimatch\": \"^10.0.3\",\n    \"tar\": \"^7.5.0\",\n    \"uuid\": \"13.0.0\",\n    \"yoga-wasm-web\": \"^0.3.3\",\n    \"zod\": \"^4.2.0\"\n  },\n  \"files\": [\n    \"dist/**/*\",\n    \"src/**/*\",\n    \"README.md\",\n    \"CLAUDE.md\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\"\n  }\n}\n","export type GatewayProduct = \"posthog_code\" | \"background_agents\";\n\nexport function getLlmGatewayUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  const url = new URL(posthogHost);\n  const hostname = url.hostname;\n\n  // Local development (normalize 127.0.0.1 to localhost)\n  if (hostname === \"localhost\" || hostname === \"127.0.0.1\") {\n    return `${url.protocol}//localhost:3308/${product}`;\n  }\n\n  // Docker containers accessing host\n  if (hostname === \"host.docker.internal\") {\n    return `${url.protocol}//host.docker.internal:3308/${product}`;\n  }\n\n  // Production - extract region from hostname, default to US\n  const region = hostname.match(/^(us|eu)\\.posthog\\.com$/)?.[1] ?? \"us\";\n  return `https://gateway.${region}.posthog.com/${product}`;\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\nimport type {\n  ArtifactType,\n  PostHogAPIConfig,\n  StoredEntry,\n  Task,\n  TaskRun,\n  TaskRunArtifact,\n} from \"./types\";\nimport { getLlmGatewayUrl } from \"./utils/gateway\";\n\nexport { getLlmGatewayUrl };\n\nconst DEFAULT_USER_AGENT = `posthog/agent.hog.dev; version: ${packageJson.version}`;\n\nexport interface TaskArtifactUploadPayload {\n  name: string;\n  type: ArtifactType;\n  content: string;\n  content_type?: string;\n}\n\nexport type TaskRunUpdate = Partial<\n  Pick<\n    TaskRun,\n    | \"status\"\n    | \"branch\"\n    | \"stage\"\n    | \"error_message\"\n    | \"output\"\n    | \"state\"\n    | \"environment\"\n  >\n>;\n\nexport class PostHogAPIClient {\n  private config: PostHogAPIConfig;\n\n  constructor(config: PostHogAPIConfig) {\n    this.config = config;\n  }\n\n  private get baseUrl(): string {\n    const host = this.config.apiUrl.endsWith(\"/\")\n      ? this.config.apiUrl.slice(0, -1)\n      : this.config.apiUrl;\n    return host;\n  }\n\n  private isAuthFailure(status: number): boolean {\n    return status === 401 || status === 403;\n  }\n\n  private async resolveApiKey(forceRefresh = false): Promise<string> {\n    if (forceRefresh && this.config.refreshApiKey) {\n      return this.config.refreshApiKey();\n    }\n\n    return this.config.getApiKey();\n  }\n\n  private async buildHeaders(\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Headers> {\n    const headers = new Headers(options.headers);\n    headers.set(\n      \"Authorization\",\n      `Bearer ${await this.resolveApiKey(forceRefresh)}`,\n    );\n    headers.set(\"Content-Type\", \"application/json\");\n    headers.set(\"User-Agent\", this.config.userAgent ?? DEFAULT_USER_AGENT);\n    return headers;\n  }\n\n  private async performRequest(\n    endpoint: string,\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Response> {\n    const url = `${this.baseUrl}${endpoint}`;\n\n    return fetch(url, {\n      ...options,\n      headers: await this.buildHeaders(options, forceRefresh),\n    });\n  }\n\n  private async performRequestWithRetry(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<Response> {\n    let response = await this.performRequest(endpoint, options);\n\n    if (!response.ok && this.isAuthFailure(response.status)) {\n      response = await this.performRequest(endpoint, options, true);\n    }\n\n    return response;\n  }\n\n  private async apiRequest<T>(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<T> {\n    const response = await this.performRequestWithRetry(endpoint, options);\n\n    if (!response.ok) {\n      let errorMessage: string;\n      try {\n        const errorResponse = await response.json();\n        errorMessage = `Failed request: [${response.status}] ${JSON.stringify(errorResponse)}`;\n      } catch {\n        errorMessage = `Failed request: [${response.status}] ${response.statusText}`;\n      }\n      throw new Error(errorMessage);\n    }\n\n    return response.json();\n  }\n\n  private getTeamId(): number {\n    return this.config.projectId;\n  }\n\n  async getApiKey(forceRefresh = false): Promise<string> {\n    return this.resolveApiKey(forceRefresh);\n  }\n\n  getLlmGatewayUrl(): string {\n    return getLlmGatewayUrl(this.baseUrl);\n  }\n\n  async getTask(taskId: string): Promise<Task> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<Task>(`/api/projects/${teamId}/tasks/${taskId}/`);\n  }\n\n  async getTaskRun(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n    );\n  }\n\n  async updateTaskRun(\n    taskId: string,\n    runId: string,\n    payload: TaskRunUpdate,\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(payload),\n      },\n    );\n  }\n\n  async setTaskRunOutput(\n    taskId: string,\n    runId: string,\n    output: Record<string, unknown>,\n  ): Promise<TaskRun> {\n    return this.apiRequest(\n      `/api/projects/${this.getTeamId()}/tasks/${taskId}/runs/${runId}/set_output/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(output),\n      },\n    );\n  }\n\n  async appendTaskRunLog(\n    taskId: string,\n    runId: string,\n    entries: StoredEntry[],\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/append_log/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ entries }),\n      },\n    );\n  }\n\n  async relayMessage(\n    taskId: string,\n    runId: string,\n    text: string,\n  ): Promise<void> {\n    const teamId = this.getTeamId();\n    await this.apiRequest<{ status: string }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/relay_message/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ text }),\n      },\n    );\n  }\n\n  async uploadTaskArtifacts(\n    taskId: string,\n    runId: string,\n    artifacts: TaskArtifactUploadPayload[],\n  ): Promise<TaskRunArtifact[]> {\n    if (!artifacts.length) {\n      return [];\n    }\n\n    const teamId = this.getTeamId();\n    const response = await this.apiRequest<{ artifacts: TaskRunArtifact[] }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ artifacts }),\n      },\n    );\n\n    return response.artifacts ?? [];\n  }\n\n  async getArtifactPresignedUrl(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<string | null> {\n    const teamId = this.getTeamId();\n    try {\n      const response = await this.apiRequest<{\n        url: string;\n        expires_in: number;\n      }>(\n        `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/presign/`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ storage_path: storagePath }),\n        },\n      );\n      return response.url;\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Download artifact content by storage path\n   * Gets a presigned URL and fetches the content\n   */\n  async downloadArtifact(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<ArrayBuffer | null> {\n    const url = await this.getArtifactPresignedUrl(taskId, runId, storagePath);\n    if (!url) {\n      return null;\n    }\n\n    try {\n      const response = await fetch(url);\n      if (!response.ok) {\n        throw new Error(`Failed to download artifact: ${response.status}`);\n      }\n      return response.arrayBuffer();\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Fetch logs for a task run via the logs API endpoint\n   * @param taskRun - The task run to fetch logs for\n   * @returns Array of stored entries, or empty array if no logs available\n   */\n  async fetchTaskRunLogs(taskRun: TaskRun): Promise<StoredEntry[]> {\n    const teamId = this.getTeamId();\n    const endpoint = `/api/projects/${teamId}/tasks/${taskRun.task}/runs/${taskRun.id}/logs`;\n\n    try {\n      const response = await this.performRequestWithRetry(endpoint);\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          return [];\n        }\n        throw new Error(\n          `Failed to fetch logs: ${response.status} ${response.statusText}`,\n        );\n      }\n\n      const content = await response.text();\n\n      if (!content.trim()) {\n        return [];\n      }\n\n      // Parse newline-delimited JSON\n      return content\n        .trim()\n        .split(\"\\n\")\n        .map((line) => JSON.parse(line) as StoredEntry);\n    } catch (error) {\n      throw new Error(\n        `Failed to fetch task run logs: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n}\n"],"mappings":";AAAA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,YAAc;AAAA,EACd,aAAe;AAAA,EACf,SAAW;AAAA,IACT,KAAK;AAAA,MACH,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,iBAAiB;AAAA,MACf,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,qCAAqC;AAAA,MACnC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oDAAoD;AAAA,MAClD,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,2BAA2B;AAAA,MACzB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,gDAAgD;AAAA,MAC9C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,6CAA6C;AAAA,MAC3C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oCAAoC;AAAA,MAClC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,KAAO;AAAA,IACL,gBAAgB;AAAA,EAClB;AAAA,EACA,MAAQ;AAAA,EACR,UAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,QAAU;AAAA,EACV,SAAW;AAAA,EACX,SAAW;AAAA,IACT,OAAS;AAAA,IACT,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,cAAc;AAAA,IACd,WAAa;AAAA,IACb,gBAAkB;AAAA,IAClB,OAAS;AAAA,EACX;AAAA,EACA,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,iBAAmB;AAAA,IACjB,mBAAmB;AAAA,IACnB,gBAAgB;AAAA,IAChB,cAAc;AAAA,IACd,cAAc;AAAA,IACd,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,KAAO;AAAA,IACP,YAAc;AAAA,IACd,QAAU;AAAA,EACZ;AAAA,EACA,cAAgB;AAAA,IACd,4BAA4B;AAAA,IAC5B,KAAO;AAAA,IACP,kCAAkC;AAAA,IAClC,qBAAqB;AAAA,IACrB,qBAAqB;AAAA,IACrB,2BAA2B;AAAA,IAC3B,0CAA0C;AAAA,IAC1C,4BAA4B;AAAA,IAC5B,2BAA2B;AAAA,IAC3B,uCAAuC;AAAA,IACvC,uBAAuB;AAAA,IACvB,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,cAAgB;AAAA,IAChB,WAAa;AAAA,IACb,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,iBAAiB;AAAA,IACjB,KAAO;AAAA,EACT;AAAA,EACA,OAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,eAAiB;AAAA,IACf,QAAU;AAAA,EACZ;AACF;;;AC5HO,SAAS,iBACd,aACA,UAA0B,gBAClB;AACR,QAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,QAAM,WAAW,IAAI;AAGrB,MAAI,aAAa,eAAe,aAAa,aAAa;AACxD,WAAO,GAAG,IAAI,QAAQ,oBAAoB,OAAO;AAAA,EACnD;AAGA,MAAI,aAAa,wBAAwB;AACvC,WAAO,GAAG,IAAI,QAAQ,+BAA+B,OAAO;AAAA,EAC9D;AAGA,QAAM,SAAS,SAAS,MAAM,yBAAyB,IAAI,CAAC,KAAK;AACjE,SAAO,mBAAmB,MAAM,gBAAgB,OAAO;AACzD;;;ACTA,IAAM,qBAAqB,mCAAmC,gBAAY,OAAO;AAsB1E,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EAER,YAAY,QAA0B;AACpC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAY,UAAkB;AAC5B,UAAM,OAAO,KAAK,OAAO,OAAO,SAAS,GAAG,IACxC,KAAK,OAAO,OAAO,MAAM,GAAG,EAAE,IAC9B,KAAK,OAAO;AAChB,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc,QAAyB;AAC7C,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAAA,EAEA,MAAc,cAAc,eAAe,OAAwB;AACjE,QAAI,gBAAgB,KAAK,OAAO,eAAe;AAC7C,aAAO,KAAK,OAAO,cAAc;AAAA,IACnC;AAEA,WAAO,KAAK,OAAO,UAAU;AAAA,EAC/B;AAAA,EAEA,MAAc,aACZ,SACA,eAAe,OACG;AAClB,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,YAAQ;AAAA,MACN;AAAA,MACA,UAAU,MAAM,KAAK,cAAc,YAAY,CAAC;AAAA,IAClD;AACA,YAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,YAAQ,IAAI,cAAc,KAAK,OAAO,aAAa,kBAAkB;AACrE,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,eACZ,UACA,SACA,eAAe,OACI;AACnB,UAAM,MAAM,GAAG,KAAK,OAAO,GAAG,QAAQ;AAEtC,WAAO,MAAM,KAAK;AAAA,MAChB,GAAG;AAAA,MACH,SAAS,MAAM,KAAK,aAAa,SAAS,YAAY;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,wBACZ,UACA,UAAuB,CAAC,GACL;AACnB,QAAI,WAAW,MAAM,KAAK,eAAe,UAAU,OAAO;AAE1D,QAAI,CAAC,SAAS,MAAM,KAAK,cAAc,SAAS,MAAM,GAAG;AACvD,iBAAW,MAAM,KAAK,eAAe,UAAU,SAAS,IAAI;AAAA,IAC9D;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,WACZ,UACA,UAAuB,CAAC,GACZ;AACZ,UAAM,WAAW,MAAM,KAAK,wBAAwB,UAAU,OAAO;AAErE,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI;AACJ,UAAI;AACF,cAAM,gBAAgB,MAAM,SAAS,KAAK;AAC1C,uBAAe,oBAAoB,SAAS,MAAM,KAAK,KAAK,UAAU,aAAa,CAAC;AAAA,MACtF,QAAQ;AACN,uBAAe,oBAAoB,SAAS,MAAM,KAAK,SAAS,UAAU;AAAA,MAC5E;AACA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAEQ,YAAoB;AAC1B,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAM,UAAU,eAAe,OAAwB;AACrD,WAAO,KAAK,cAAc,YAAY;AAAA,EACxC;AAAA,EAEA,mBAA2B;AACzB,WAAO,iBAAiB,KAAK,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,QAAQ,QAA+B;AAC3C,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK,WAAiB,iBAAiB,MAAM,UAAU,MAAM,GAAG;AAAA,EACzE;AAAA,EAEA,MAAM,WAAW,QAAgB,OAAiC;AAChE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,IACvD;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,OAAO;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,QACkB;AAClB,WAAO,KAAK;AAAA,MACV,iBAAiB,KAAK,UAAU,CAAC,UAAU,MAAM,SAAS,KAAK;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,MAAM;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,QACA,OACA,MACe;AACf,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,KAAK;AAAA,MACT,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,QACA,OACA,WAC4B;AAC5B,QAAI,CAAC,UAAU,QAAQ;AACrB,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC;AAAA,MACpC;AAAA,IACF;AAEA,WAAO,SAAS,aAAa,CAAC;AAAA,EAChC;AAAA,EAEA,MAAM,wBACJ,QACA,OACA,aACwB;AACxB,UAAM,SAAS,KAAK,UAAU;AAC9B,QAAI;AACF,YAAM,WAAW,MAAM,KAAK;AAAA,QAI1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,QACrD;AAAA,UACE,QAAQ;AAAA,UACR,MAAM,KAAK,UAAU,EAAE,cAAc,YAAY,CAAC;AAAA,QACpD;AAAA,MACF;AACA,aAAO,SAAS;AAAA,IAClB,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,iBACJ,QACA,OACA,aAC6B;AAC7B,UAAM,MAAM,MAAM,KAAK,wBAAwB,QAAQ,OAAO,WAAW;AACzE,QAAI,CAAC,KAAK;AACR,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,GAAG;AAChC,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,EAAE;AAAA,MACnE;AACA,aAAO,SAAS,YAAY;AAAA,IAC9B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBAAiB,SAA0C;AAC/D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,iBAAiB,MAAM,UAAU,QAAQ,IAAI,SAAS,QAAQ,EAAE;AAEjF,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,wBAAwB,QAAQ;AAE5D,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,iBAAO,CAAC;AAAA,QACV;AACA,cAAM,IAAI;AAAA,UACR,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,eAAO,CAAC;AAAA,MACV;AAGA,aAAO,QACJ,KAAK,EACL,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,CAAgB;AAAA,IAClD,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../package.json","../src/utils/gateway.ts","../src/posthog-api.ts"],"sourcesContent":["{\n  \"name\": \"@posthog/agent\",\n  \"version\": \"2.3.263\",\n  \"repository\": \"https://github.com/PostHog/code\",\n  \"description\": \"TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\"\n    },\n    \"./agent\": {\n      \"types\": \"./dist/agent.d.ts\",\n      \"import\": \"./dist/agent.js\"\n    },\n    \"./gateway-models\": {\n      \"types\": \"./dist/gateway-models.d.ts\",\n      \"import\": \"./dist/gateway-models.js\"\n    },\n    \"./posthog-api\": {\n      \"types\": \"./dist/posthog-api.d.ts\",\n      \"import\": \"./dist/posthog-api.js\"\n    },\n    \"./types\": {\n      \"types\": \"./dist/types.d.ts\",\n      \"import\": \"./dist/types.js\"\n    },\n    \"./adapters/claude/questions/utils\": {\n      \"types\": \"./dist/adapters/claude/questions/utils.d.ts\",\n      \"import\": \"./dist/adapters/claude/questions/utils.js\"\n    },\n    \"./adapters/claude/permissions/permission-options\": {\n      \"types\": \"./dist/adapters/claude/permissions/permission-options.d.ts\",\n      \"import\": \"./dist/adapters/claude/permissions/permission-options.js\"\n    },\n    \"./adapters/claude/tools\": {\n      \"types\": \"./dist/adapters/claude/tools.d.ts\",\n      \"import\": \"./dist/adapters/claude/tools.js\"\n    },\n    \"./adapters/claude/conversion/tool-use-to-acp\": {\n      \"types\": \"./dist/adapters/claude/conversion/tool-use-to-acp.d.ts\",\n      \"import\": \"./dist/adapters/claude/conversion/tool-use-to-acp.js\"\n    },\n    \"./adapters/claude/session/jsonl-hydration\": {\n      \"types\": \"./dist/adapters/claude/session/jsonl-hydration.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/jsonl-hydration.js\"\n    },\n    \"./adapters/claude/session/models\": {\n      \"types\": \"./dist/adapters/claude/session/models.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/models.js\"\n    },\n    \"./execution-mode\": {\n      \"types\": \"./dist/execution-mode.d.ts\",\n      \"import\": \"./dist/execution-mode.js\"\n    },\n    \"./server\": {\n      \"types\": \"./dist/server/agent-server.d.ts\",\n      \"import\": \"./dist/server/agent-server.js\"\n    }\n  },\n  \"bin\": {\n    \"agent-server\": \"./dist/server/bin.cjs\"\n  },\n  \"type\": \"module\",\n  \"keywords\": [\n    \"posthog\",\n    \"claude\",\n    \"agent\",\n    \"ai\",\n    \"git\",\n    \"typescript\"\n  ],\n  \"author\": \"PostHog\",\n  \"license\": \"SEE LICENSE IN LICENSE\",\n  \"scripts\": {\n    \"build\": \"node ../../scripts/rimraf.mjs dist && tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"pnpm exec tsc --noEmit\",\n    \"prepublishOnly\": \"pnpm run build\",\n    \"clean\": \"node ../../scripts/rimraf.mjs dist .turbo\"\n  },\n  \"engines\": {\n    \"node\": \">=20.0.0\"\n  },\n  \"devDependencies\": {\n    \"@posthog/shared\": \"workspace:*\",\n    \"@posthog/git\": \"workspace:*\",\n    \"@types/bun\": \"latest\",\n    \"@types/tar\": \"^6.1.13\",\n    \"msw\": \"^2.12.7\",\n    \"tsup\": \"^8.5.1\",\n    \"tsx\": \"^4.20.6\",\n    \"typescript\": \"^5.5.0\",\n    \"vitest\": \"^2.1.8\"\n  },\n  \"dependencies\": {\n    \"@agentclientprotocol/sdk\": \"0.16.1\",\n    \"ajv\": \"^8.17.1\",\n    \"@anthropic-ai/claude-agent-sdk\": \"0.2.76\",\n    \"@anthropic-ai/sdk\": \"^0.78.0\",\n    \"@hono/node-server\": \"^1.19.9\",\n    \"@opentelemetry/api-logs\": \"^0.208.0\",\n    \"@opentelemetry/exporter-logs-otlp-http\": \"^0.208.0\",\n    \"@opentelemetry/resources\": \"^2.0.0\",\n    \"@opentelemetry/sdk-logs\": \"^0.208.0\",\n    \"@opentelemetry/semantic-conventions\": \"^1.28.0\",\n    \"@types/jsonwebtoken\": \"^9.0.10\",\n    \"commander\": \"^14.0.2\",\n    \"hono\": \"^4.11.7\",\n    \"jsonwebtoken\": \"^9.0.2\",\n    \"minimatch\": \"^10.0.3\",\n    \"tar\": \"^7.5.0\",\n    \"uuid\": \"13.0.0\",\n    \"yoga-wasm-web\": \"^0.3.3\",\n    \"zod\": \"^4.2.0\"\n  },\n  \"files\": [\n    \"dist/**/*\",\n    \"src/**/*\",\n    \"README.md\",\n    \"CLAUDE.md\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\"\n  }\n}\n","export type GatewayProduct = \"posthog_code\" | \"background_agents\";\n\nexport function getLlmGatewayUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  const url = new URL(posthogHost);\n  const hostname = url.hostname;\n\n  // Local development (normalize 127.0.0.1 to localhost)\n  if (hostname === \"localhost\" || hostname === \"127.0.0.1\") {\n    return `${url.protocol}//localhost:3308/${product}`;\n  }\n\n  // Docker containers accessing host\n  if (hostname === \"host.docker.internal\") {\n    return `${url.protocol}//host.docker.internal:3308/${product}`;\n  }\n\n  // Production - extract region from hostname, default to US\n  const region = hostname.match(/^(us|eu)\\.posthog\\.com$/)?.[1] ?? \"us\";\n  return `https://gateway.${region}.posthog.com/${product}`;\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\nimport type {\n  ArtifactType,\n  PostHogAPIConfig,\n  StoredEntry,\n  Task,\n  TaskRun,\n  TaskRunArtifact,\n} from \"./types\";\nimport { getLlmGatewayUrl } from \"./utils/gateway\";\n\nexport { getLlmGatewayUrl };\n\nconst DEFAULT_USER_AGENT = `posthog/agent.hog.dev; version: ${packageJson.version}`;\n\nexport interface TaskArtifactUploadPayload {\n  name: string;\n  type: ArtifactType;\n  content: string;\n  content_type?: string;\n}\n\nexport type TaskRunUpdate = Partial<\n  Pick<\n    TaskRun,\n    | \"status\"\n    | \"branch\"\n    | \"stage\"\n    | \"error_message\"\n    | \"output\"\n    | \"state\"\n    | \"environment\"\n  >\n>;\n\nexport class PostHogAPIClient {\n  private config: PostHogAPIConfig;\n\n  constructor(config: PostHogAPIConfig) {\n    this.config = config;\n  }\n\n  private get baseUrl(): string {\n    const host = this.config.apiUrl.endsWith(\"/\")\n      ? this.config.apiUrl.slice(0, -1)\n      : this.config.apiUrl;\n    return host;\n  }\n\n  private isAuthFailure(status: number): boolean {\n    return status === 401 || status === 403;\n  }\n\n  private async resolveApiKey(forceRefresh = false): Promise<string> {\n    if (forceRefresh && this.config.refreshApiKey) {\n      return this.config.refreshApiKey();\n    }\n\n    return this.config.getApiKey();\n  }\n\n  private async buildHeaders(\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Headers> {\n    const headers = new Headers(options.headers);\n    headers.set(\n      \"Authorization\",\n      `Bearer ${await this.resolveApiKey(forceRefresh)}`,\n    );\n    headers.set(\"Content-Type\", \"application/json\");\n    headers.set(\"User-Agent\", this.config.userAgent ?? DEFAULT_USER_AGENT);\n    return headers;\n  }\n\n  private async performRequest(\n    endpoint: string,\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Response> {\n    const url = `${this.baseUrl}${endpoint}`;\n\n    return fetch(url, {\n      ...options,\n      headers: await this.buildHeaders(options, forceRefresh),\n    });\n  }\n\n  private async performRequestWithRetry(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<Response> {\n    let response = await this.performRequest(endpoint, options);\n\n    if (!response.ok && this.isAuthFailure(response.status)) {\n      response = await this.performRequest(endpoint, options, true);\n    }\n\n    return response;\n  }\n\n  private async apiRequest<T>(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<T> {\n    const response = await this.performRequestWithRetry(endpoint, options);\n\n    if (!response.ok) {\n      let errorMessage: string;\n      try {\n        const errorResponse = await response.json();\n        errorMessage = `Failed request: [${response.status}] ${JSON.stringify(errorResponse)}`;\n      } catch {\n        errorMessage = `Failed request: [${response.status}] ${response.statusText}`;\n      }\n      throw new Error(errorMessage);\n    }\n\n    return response.json();\n  }\n\n  private getTeamId(): number {\n    return this.config.projectId;\n  }\n\n  async getApiKey(forceRefresh = false): Promise<string> {\n    return this.resolveApiKey(forceRefresh);\n  }\n\n  getLlmGatewayUrl(): string {\n    return getLlmGatewayUrl(this.baseUrl);\n  }\n\n  async getTask(taskId: string): Promise<Task> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<Task>(`/api/projects/${teamId}/tasks/${taskId}/`);\n  }\n\n  async getTaskRun(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n    );\n  }\n\n  async updateTaskRun(\n    taskId: string,\n    runId: string,\n    payload: TaskRunUpdate,\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(payload),\n      },\n    );\n  }\n\n  async setTaskRunOutput(\n    taskId: string,\n    runId: string,\n    output: Record<string, unknown>,\n  ): Promise<TaskRun> {\n    return this.apiRequest(\n      `/api/projects/${this.getTeamId()}/tasks/${taskId}/runs/${runId}/set_output/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(output),\n      },\n    );\n  }\n\n  async appendTaskRunLog(\n    taskId: string,\n    runId: string,\n    entries: StoredEntry[],\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/append_log/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ entries }),\n      },\n    );\n  }\n\n  async relayMessage(\n    taskId: string,\n    runId: string,\n    text: string,\n  ): Promise<void> {\n    const teamId = this.getTeamId();\n    await this.apiRequest<{ status: string }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/relay_message/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ text }),\n      },\n    );\n  }\n\n  async uploadTaskArtifacts(\n    taskId: string,\n    runId: string,\n    artifacts: TaskArtifactUploadPayload[],\n  ): Promise<TaskRunArtifact[]> {\n    if (!artifacts.length) {\n      return [];\n    }\n\n    const teamId = this.getTeamId();\n    const response = await this.apiRequest<{ artifacts: TaskRunArtifact[] }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ artifacts }),\n      },\n    );\n\n    return response.artifacts ?? [];\n  }\n\n  async getArtifactPresignedUrl(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<string | null> {\n    const teamId = this.getTeamId();\n    try {\n      const response = await this.apiRequest<{\n        url: string;\n        expires_in: number;\n      }>(\n        `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/presign/`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ storage_path: storagePath }),\n        },\n      );\n      return response.url;\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Download artifact content by storage path\n   * Gets a presigned URL and fetches the content\n   */\n  async downloadArtifact(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<ArrayBuffer | null> {\n    const url = await this.getArtifactPresignedUrl(taskId, runId, storagePath);\n    if (!url) {\n      return null;\n    }\n\n    try {\n      const response = await fetch(url);\n      if (!response.ok) {\n        throw new Error(`Failed to download artifact: ${response.status}`);\n      }\n      return response.arrayBuffer();\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Fetch logs for a task run via the logs API endpoint\n   * @param taskRun - The task run to fetch logs for\n   * @returns Array of stored entries, or empty array if no logs available\n   */\n  async fetchTaskRunLogs(taskRun: TaskRun): Promise<StoredEntry[]> {\n    const teamId = this.getTeamId();\n    const endpoint = `/api/projects/${teamId}/tasks/${taskRun.task}/runs/${taskRun.id}/logs`;\n\n    try {\n      const response = await this.performRequestWithRetry(endpoint);\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          return [];\n        }\n        throw new Error(\n          `Failed to fetch logs: ${response.status} ${response.statusText}`,\n        );\n      }\n\n      const content = await response.text();\n\n      if (!content.trim()) {\n        return [];\n      }\n\n      // Parse newline-delimited JSON\n      return content\n        .trim()\n        .split(\"\\n\")\n        .map((line) => JSON.parse(line) as StoredEntry);\n    } catch (error) {\n      throw new Error(\n        `Failed to fetch task run logs: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n}\n"],"mappings":";AAAA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,YAAc;AAAA,EACd,aAAe;AAAA,EACf,SAAW;AAAA,IACT,KAAK;AAAA,MACH,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,iBAAiB;AAAA,MACf,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,qCAAqC;AAAA,MACnC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oDAAoD;AAAA,MAClD,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,2BAA2B;AAAA,MACzB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,gDAAgD;AAAA,MAC9C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,6CAA6C;AAAA,MAC3C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oCAAoC;AAAA,MAClC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,KAAO;AAAA,IACL,gBAAgB;AAAA,EAClB;AAAA,EACA,MAAQ;AAAA,EACR,UAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,QAAU;AAAA,EACV,SAAW;AAAA,EACX,SAAW;AAAA,IACT,OAAS;AAAA,IACT,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,cAAc;AAAA,IACd,WAAa;AAAA,IACb,gBAAkB;AAAA,IAClB,OAAS;AAAA,EACX;AAAA,EACA,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,iBAAmB;AAAA,IACjB,mBAAmB;AAAA,IACnB,gBAAgB;AAAA,IAChB,cAAc;AAAA,IACd,cAAc;AAAA,IACd,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,KAAO;AAAA,IACP,YAAc;AAAA,IACd,QAAU;AAAA,EACZ;AAAA,EACA,cAAgB;AAAA,IACd,4BAA4B;AAAA,IAC5B,KAAO;AAAA,IACP,kCAAkC;AAAA,IAClC,qBAAqB;AAAA,IACrB,qBAAqB;AAAA,IACrB,2BAA2B;AAAA,IAC3B,0CAA0C;AAAA,IAC1C,4BAA4B;AAAA,IAC5B,2BAA2B;AAAA,IAC3B,uCAAuC;AAAA,IACvC,uBAAuB;AAAA,IACvB,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,cAAgB;AAAA,IAChB,WAAa;AAAA,IACb,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,iBAAiB;AAAA,IACjB,KAAO;AAAA,EACT;AAAA,EACA,OAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,eAAiB;AAAA,IACf,QAAU;AAAA,EACZ;AACF;;;AC5HO,SAAS,iBACd,aACA,UAA0B,gBAClB;AACR,QAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,QAAM,WAAW,IAAI;AAGrB,MAAI,aAAa,eAAe,aAAa,aAAa;AACxD,WAAO,GAAG,IAAI,QAAQ,oBAAoB,OAAO;AAAA,EACnD;AAGA,MAAI,aAAa,wBAAwB;AACvC,WAAO,GAAG,IAAI,QAAQ,+BAA+B,OAAO;AAAA,EAC9D;AAGA,QAAM,SAAS,SAAS,MAAM,yBAAyB,IAAI,CAAC,KAAK;AACjE,SAAO,mBAAmB,MAAM,gBAAgB,OAAO;AACzD;;;ACTA,IAAM,qBAAqB,mCAAmC,gBAAY,OAAO;AAsB1E,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EAER,YAAY,QAA0B;AACpC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAY,UAAkB;AAC5B,UAAM,OAAO,KAAK,OAAO,OAAO,SAAS,GAAG,IACxC,KAAK,OAAO,OAAO,MAAM,GAAG,EAAE,IAC9B,KAAK,OAAO;AAChB,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc,QAAyB;AAC7C,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAAA,EAEA,MAAc,cAAc,eAAe,OAAwB;AACjE,QAAI,gBAAgB,KAAK,OAAO,eAAe;AAC7C,aAAO,KAAK,OAAO,cAAc;AAAA,IACnC;AAEA,WAAO,KAAK,OAAO,UAAU;AAAA,EAC/B;AAAA,EAEA,MAAc,aACZ,SACA,eAAe,OACG;AAClB,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,YAAQ;AAAA,MACN;AAAA,MACA,UAAU,MAAM,KAAK,cAAc,YAAY,CAAC;AAAA,IAClD;AACA,YAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,YAAQ,IAAI,cAAc,KAAK,OAAO,aAAa,kBAAkB;AACrE,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,eACZ,UACA,SACA,eAAe,OACI;AACnB,UAAM,MAAM,GAAG,KAAK,OAAO,GAAG,QAAQ;AAEtC,WAAO,MAAM,KAAK;AAAA,MAChB,GAAG;AAAA,MACH,SAAS,MAAM,KAAK,aAAa,SAAS,YAAY;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,wBACZ,UACA,UAAuB,CAAC,GACL;AACnB,QAAI,WAAW,MAAM,KAAK,eAAe,UAAU,OAAO;AAE1D,QAAI,CAAC,SAAS,MAAM,KAAK,cAAc,SAAS,MAAM,GAAG;AACvD,iBAAW,MAAM,KAAK,eAAe,UAAU,SAAS,IAAI;AAAA,IAC9D;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,WACZ,UACA,UAAuB,CAAC,GACZ;AACZ,UAAM,WAAW,MAAM,KAAK,wBAAwB,UAAU,OAAO;AAErE,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI;AACJ,UAAI;AACF,cAAM,gBAAgB,MAAM,SAAS,KAAK;AAC1C,uBAAe,oBAAoB,SAAS,MAAM,KAAK,KAAK,UAAU,aAAa,CAAC;AAAA,MACtF,QAAQ;AACN,uBAAe,oBAAoB,SAAS,MAAM,KAAK,SAAS,UAAU;AAAA,MAC5E;AACA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAEQ,YAAoB;AAC1B,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAM,UAAU,eAAe,OAAwB;AACrD,WAAO,KAAK,cAAc,YAAY;AAAA,EACxC;AAAA,EAEA,mBAA2B;AACzB,WAAO,iBAAiB,KAAK,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,QAAQ,QAA+B;AAC3C,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK,WAAiB,iBAAiB,MAAM,UAAU,MAAM,GAAG;AAAA,EACzE;AAAA,EAEA,MAAM,WAAW,QAAgB,OAAiC;AAChE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,IACvD;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,OAAO;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,QACkB;AAClB,WAAO,KAAK;AAAA,MACV,iBAAiB,KAAK,UAAU,CAAC,UAAU,MAAM,SAAS,KAAK;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,MAAM;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,QACA,OACA,MACe;AACf,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,KAAK;AAAA,MACT,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,QACA,OACA,WAC4B;AAC5B,QAAI,CAAC,UAAU,QAAQ;AACrB,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC;AAAA,MACpC;AAAA,IACF;AAEA,WAAO,SAAS,aAAa,CAAC;AAAA,EAChC;AAAA,EAEA,MAAM,wBACJ,QACA,OACA,aACwB;AACxB,UAAM,SAAS,KAAK,UAAU;AAC9B,QAAI;AACF,YAAM,WAAW,MAAM,KAAK;AAAA,QAI1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,QACrD;AAAA,UACE,QAAQ;AAAA,UACR,MAAM,KAAK,UAAU,EAAE,cAAc,YAAY,CAAC;AAAA,QACpD;AAAA,MACF;AACA,aAAO,SAAS;AAAA,IAClB,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,iBACJ,QACA,OACA,aAC6B;AAC7B,UAAM,MAAM,MAAM,KAAK,wBAAwB,QAAQ,OAAO,WAAW;AACzE,QAAI,CAAC,KAAK;AACR,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,GAAG;AAChC,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,EAAE;AAAA,MACnE;AACA,aAAO,SAAS,YAAY;AAAA,IAC9B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBAAiB,SAA0C;AAC/D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,iBAAiB,MAAM,UAAU,QAAQ,IAAI,SAAS,QAAQ,EAAE;AAEjF,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,wBAAwB,QAAQ;AAE5D,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,iBAAO,CAAC;AAAA,QACV;AACA,cAAM,IAAI;AAAA,UACR,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,eAAO,CAAC;AAAA,MACV;AAGA,aAAO,QACJ,KAAK,EACL,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,CAAgB;AAAA,IAClD,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/server/agent-server.d.ts

@@ -36,6 +36,7 @@ interface AgentServerConfig {
     mode: AgentMode;
     taskId: string;
     runId: string;
+    createPr?: boolean;
     version?: string;
     mcpServers?: RemoteMcpServer[];
     baseBranch?: string;
@@ -56,10 +57,12 @@ declare class AgentServer {
     private resumeState;
     private initializationPromise;
     private pendingEvents;
+    private pendingPermissions;
     private detachSseController;
     private emitConsoleLog;
     constructor(config: AgentServerConfig);
     private getEffectiveMode;
+    private getSessionPermissionMode;
     private createApp;
     start(): Promise<void>;
     private autoInitializeSession;
@@ -77,11 +80,21 @@ declare class AgentServer {
     private getPendingUserPrompt;
     private getResumeRunId;
     private buildSessionSystemPrompt;
+    private getCloudInteractionOrigin;
+    /**
+     * Slack-origin cloud runs auto-publish by default. Every other origin is
+     * review-first unless the user explicitly asks, and createPr=false always
+     * disables publishing.
+     */
+    private shouldAutoPublishCloudChanges;
+    private buildDetectedPrContext;
     private buildCloudSystemPrompt;
     private getCurrentGitBranch;
     private syncCloudBranchMetadata;
     private signalTaskComplete;
     private configureEnvironment;
+    private buildSlackQuestionRelayResponse;
+    private shouldBlockPublishPermission;
     private createCloudClient;
     private relayAgentResponse;
     private relaySlackQuestion;
@@ -94,6 +107,16 @@ declare class AgentServer {
     private broadcastEvent;
     private replayPendingEvents;
     private sendSseEvent;
+    /**
+     * Relay a permission request (e.g., plan approval) to the connected desktop
+     * app via SSE and wait for a response via the `/command` endpoint.
+     *
+     * The promise waits indefinitely — if SSE is disconnected, the event is
+     * buffered by broadcastEvent and replayed when the client reconnects. Session
+     * cleanup force-resolves all pending permissions, so there is no leak.
+     */
+    private relayPermissionToClient;
+    private resolvePermission;
 }
 
 export { AgentServer };

package/dist/server/agent-server.js

@@ -5687,7 +5687,7 @@ import { Hono } from "hono";
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.259",
+  version: "2.3.263",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {
@@ -5848,7 +5848,9 @@ var POSTHOG_NOTIFICATIONS = {
   /** Marks a boundary for log compaction */
   COMPACT_BOUNDARY: "_posthog/compact_boundary",
   /** Token usage update for a session turn */
-  USAGE_UPDATE: "_posthog/usage_update"
+  USAGE_UPDATE: "_posthog/usage_update",
+  /** Response to a relayed permission request (plan approval, question) */
+  PERMISSION_RESPONSE: "_posthog/permission_response"
 };
 function isNotification(method, notification) {
   if (!method) return false;
@@ -8291,6 +8293,11 @@ async function canUseTool(context) {
   if (planFileResult) {
     return planFileResult;
   }
+  if (session.permissionMode === "plan") {
+    const message = `This tool is not available in plan mode. Write your plan to a file in ${getClaudePlansDir()} and call ExitPlanMode when ready.`;
+    await emitToolDenial(context, message);
+    return { behavior: "deny", message, interrupt: false };
+  }
   return handleDefaultPermissionFlow(context);
 }
 
@@ -12232,13 +12239,27 @@ var userMessageParamsSchema = z3.object({
     z3.array(z3.record(z3.string(), z3.unknown())).min(1, "Content is required")
   ])
 });
+var permissionResponseParamsSchema = z3.object({
+  requestId: z3.string().min(1, "requestId is required"),
+  optionId: z3.string().min(1, "optionId is required"),
+  customInput: z3.string().optional(),
+  answers: z3.record(z3.string(), z3.string()).optional()
+});
+var setConfigOptionParamsSchema = z3.object({
+  configId: z3.string().min(1, "configId is required"),
+  value: z3.string().min(1, "value is required")
+});
 var commandParamsSchemas = {
   user_message: userMessageParamsSchema,
   "posthog/user_message": userMessageParamsSchema,
   cancel: z3.object({}).optional(),
   "posthog/cancel": z3.object({}).optional(),
   close: z3.object({}).optional(),
-  "posthog/close": z3.object({}).optional()
+  "posthog/close": z3.object({}).optional(),
+  permission_response: permissionResponseParamsSchema,
+  "posthog/permission_response": permissionResponseParamsSchema,
+  set_config_option: setConfigOptionParamsSchema,
+  "posthog/set_config_option": setConfigOptionParamsSchema
 };
 function validateCommandParams(method, params) {
   const schema = commandParamsSchemas[method] ?? commandParamsSchemas[method.replace("posthog/", "")];
@@ -12355,6 +12376,7 @@ var AgentServer = class _AgentServer {
   // causing a second session to be created and duplicate Slack messages to be sent.
   initializationPromise = null;
   pendingEvents = [];
+  pendingPermissions = /* @__PURE__ */ new Map();
   detachSseController(controller) {
     if (this.session?.sseController === controller) {
       this.session.sseController = null;
@@ -12392,6 +12414,9 @@ var AgentServer = class _AgentServer {
   getEffectiveMode(payload) {
     return payload.mode ?? this.config.mode;
   }
+  getSessionPermissionMode() {
+    return this.session?.permissionMode ?? "default";
+  }
   createApp() {
     const app = new Hono();
     app.get("/health", (c) => {
@@ -12436,6 +12461,7 @@ var AgentServer = class _AgentServer {
             await this.initializeSession(payload, sseController);
           } else {
             this.session.sseController = sseController;
+            this.session.hasDesktopConnected = true;
             this.replayPendingEvents();
           }
           this.sendSseEvent(sseController, {
@@ -12625,12 +12651,9 @@ var AgentServer = class _AgentServer {
           prompt,
           ...this.detectedPrUrl && {
             _meta: {
-              prContext: `IMPORTANT \u2014 OVERRIDE PREVIOUS INSTRUCTIONS ABOUT CREATING BRANCHES/PRs.
-You already have an open pull request: ${this.detectedPrUrl}
-You MUST:
-1. Check out the existing PR branch with \`gh pr checkout ${this.detectedPrUrl}\`
-2. Make changes, commit, and push to that branch
-You MUST NOT create a new branch, close the existing PR, or create a new PR.`
+              // Keep the live-session PR override aligned with the startup
+              // prompt policy so non-Slack runs remain review-first.
+              prContext: this.buildDetectedPrContext(this.detectedPrUrl)
             }
           }
         });
@@ -12678,6 +12701,43 @@ You MUST NOT create a new branch, close the existing PR, or create a new PR.`
         await this.cleanupSession();
         return { closed: true };
       }
+      case "posthog/set_config_option":
+      case "set_config_option": {
+        const configId = params.configId;
+        const value = params.value;
+        this.logger.info("Set config option requested", { configId, value });
+        const result = await this.session.clientConnection.setSessionConfigOption({
+          sessionId: this.session.acpSessionId,
+          configId,
+          value
+        });
+        return {
+          configOptions: result.configOptions
+        };
+      }
+      case POSTHOG_NOTIFICATIONS.PERMISSION_RESPONSE:
+      case "permission_response": {
+        const requestId = params.requestId;
+        const optionId = params.optionId;
+        const customInput = params.customInput;
+        const answers = params.answers;
+        this.logger.info("Permission response received", {
+          requestId,
+          optionId
+        });
+        const resolved = this.resolvePermission(
+          requestId,
+          optionId,
+          customInput,
+          answers
+        );
+        if (!resolved) {
+          throw new Error(
+            `No pending permission request found for id: ${requestId}`
+          );
+        }
+        return { resolved: true };
+      }
       default:
         throw new Error(`Unknown method: ${method}`);
     }
@@ -12796,6 +12856,8 @@ You MUST NOT create a new branch, close the existing PR, or create a new PR.`
     if (prUrl) {
       this.detectedPrUrl = prUrl;
     }
+    const runState = preTaskRun?.state;
+    const initialPermissionMode = typeof runState?.initial_permission_mode === "string" ? runState.initial_permission_mode : "bypassPermissions";
     const sessionResponse = await clientConnection.newSession({
       cwd: this.config.repositoryPath ?? "/tmp/workspace",
       mcpServers: this.config.mcpServers ?? [],
@@ -12805,6 +12867,7 @@ You MUST NOT create a new branch, close the existing PR, or create a new PR.`
         systemPrompt: this.buildSessionSystemPrompt(prUrl),
         allowedDomains: this.config.allowedDomains,
         jsonSchema: preTask?.json_schema ?? null,
+        permissionMode: initialPermissionMode,
         ...this.config.claudeCode?.plugins?.length && {
           claudeCode: {
             options: {
@@ -12827,7 +12890,9 @@ You MUST NOT create a new branch, close the existing PR, or create a new PR.`
       treeTracker,
       sseController,
       deviceInfo,
-      logWriter
+      logWriter,
+      permissionMode: initialPermissionMode,
+      hasDesktopConnected: sseController !== null
     };
     this.logger = new Logger({
       debug: true,
@@ -12841,6 +12906,7 @@ You MUST NOT create a new branch, close the existing PR, or create a new PR.`
     this.logger.info(
       `Agent version: ${this.config.version ?? package_default.version}`
     );
+    this.logger.info(`Initial permission mode: ${initialPermissionMode}`);
     this.posthogAPI.updateTaskRun(payload.task_id, payload.run_id, {
       status: "in_progress"
     }).catch(
@@ -13090,13 +13156,38 @@ ${toolSummary}`);
     }
     return { append: cloudAppend };
   }
+  getCloudInteractionOrigin() {
+    return process.env.POSTHOG_CODE_INTERACTION_ORIGIN ?? process.env.CODE_INTERACTION_ORIGIN ?? process.env.TWIG_INTERACTION_ORIGIN;
+  }
+  /**
+   * Slack-origin cloud runs auto-publish by default. Every other origin is
+   * review-first unless the user explicitly asks, and createPr=false always
+   * disables publishing.
+   */
+  shouldAutoPublishCloudChanges() {
+    return this.getCloudInteractionOrigin() === "slack" && this.config.createPr !== false;
+  }
+  buildDetectedPrContext(prUrl) {
+    if (!this.shouldAutoPublishCloudChanges()) {
+      return `An open pull request already exists: ${prUrl}
+Use that PR as context if it is helpful, but stop with local changes ready for review.
+Do NOT create commits, push to the PR branch, update the pull request, create a new branch, or create a new pull request unless the user explicitly asks.`;
+    }
+    return `IMPORTANT \u2014 OVERRIDE PREVIOUS INSTRUCTIONS ABOUT CREATING BRANCHES/PRs.
+You already have an open pull request: ${prUrl}
+You MUST:
+1. Check out the existing PR branch with \`gh pr checkout ${prUrl}\`
+2. Make changes, commit, and push to that branch
+You MUST NOT create a new branch, close the existing PR, or create a new PR.`;
+  }
   buildCloudSystemPrompt(prUrl) {
     const taskId = this.config.taskId;
+    const shouldAutoCreatePr = this.shouldAutoPublishCloudChanges();
     const attributionInstructions = `
 ## Attribution
 Do NOT use Claude Code's default attribution (no "Co-Authored-By" trailers, no "Generated with [Claude Code]" lines).
 
-Instead, add the following trailers to EVERY commit message (after a blank line at the end):
+If you create a commit, add the following trailers to the commit message (after a blank line at the end):
   Generated-By: PostHog Code
   Task-Id: ${taskId}
 
@@ -13111,6 +13202,20 @@ EOF
 )"
 \`\`\``;
     if (prUrl) {
+      if (!shouldAutoCreatePr) {
+        return `
+# Cloud Task Execution
+
+This task already has an open pull request: ${prUrl}
+
+Do the requested work, but stop with local changes ready for review.
+
+Important:
+- Do NOT create new commits, push to the branch, or update the pull request unless the user explicitly asks.
+- Do NOT create a new branch or a new pull request.
+${attributionInstructions}
+`;
+      }
       return `
 # Cloud Task Execution
 
@@ -13144,6 +13249,17 @@ When the user asks for code changes or software engineering tasks:
 Important:
 - Do NOT create branches, commits, or pull requests in this mode.
 - Prefer using MCP tools to answer questions with real data over giving generic advice.
+`;
+    }
+    if (!shouldAutoCreatePr) {
+      return `
+# Cloud Task Execution
+
+Do the requested work, but stop with local changes ready for review.
+
+Important:
+- Do NOT create a branch, commit, push, or open a pull request unless the user explicitly asks.
+${attributionInstructions}
 `;
     }
     return `
@@ -13252,32 +13368,73 @@ ${attributionInstructions}
       LLM_GATEWAY_URL: gatewayUrl
     });
   }
+  buildSlackQuestionRelayResponse(payload, toolMeta2) {
+    this.relaySlackQuestion(payload, toolMeta2);
+    return {
+      outcome: { outcome: "cancelled" },
+      _meta: {
+        message: "This question has been relayed to the Slack thread where this task originated. The user will reply there. Do NOT re-ask the question or pick an answer yourself. Simply let the user know you are waiting for their reply."
+      }
+    };
+  }
+  shouldBlockPublishPermission(params) {
+    if (this.config.createPr !== false) {
+      return false;
+    }
+    const meta = params.toolCall?._meta && typeof params.toolCall._meta === "object" && !Array.isArray(params.toolCall._meta) ? params.toolCall._meta : null;
+    const rawInput = params.toolCall?.rawInput && typeof params.toolCall.rawInput === "object" && !Array.isArray(params.toolCall.rawInput) ? params.toolCall.rawInput : null;
+    const toolName = typeof meta?.toolName === "string" ? meta.toolName : null;
+    const command = typeof rawInput?.command === "string" ? rawInput.command : null;
+    return Boolean(
+      toolName && (toolName === "Bash" || toolName.includes("bash")) && command && /\bgit\s+push\b|\bgh\s+pr\s+(create|edit|ready|merge)\b/.test(command)
+    );
+  }
   createCloudClient(payload) {
     const mode = this.getEffectiveMode(payload);
-    const interactionOrigin = process.env.CODE_INTERACTION_ORIGIN ?? process.env.TWIG_INTERACTION_ORIGIN;
+    const interactionOrigin = process.env.POSTHOG_CODE_INTERACTION_ORIGIN ?? process.env.CODE_INTERACTION_ORIGIN ?? process.env.TWIG_INTERACTION_ORIGIN;
     return {
       requestPermission: async (params) => {
         this.logger.debug("Permission request", {
           mode,
           interactionOrigin,
+          kind: params.toolCall?.kind,
           options: params.options
         });
         const allowOption = params.options.find(
           (o) => o.kind === "allow_once" || o.kind === "allow_always"
         );
         const selectedOptionId = allowOption?.optionId ?? params.options[0].optionId;
+        const codeToolKind = params.toolCall?._meta?.codeToolKind;
+        const isPlanApproval = params.toolCall?.kind === "switch_mode";
         if (interactionOrigin === "slack") {
-          const codeToolKind = params.toolCall?._meta?.codeToolKind;
           if (codeToolKind === "question") {
-            this.relaySlackQuestion(payload, params.toolCall?._meta);
-            return {
-              outcome: { outcome: "cancelled" },
-              _meta: {
-                message: "This question has been relayed to the Slack thread where this task originated. The user will reply there. Do NOT re-ask the question or pick an answer yourself. Simply let the user know you are waiting for their reply."
-              }
-            };
+            return this.buildSlackQuestionRelayResponse(
+              payload,
+              params.toolCall?._meta
+            );
+          }
+        }
+        {
+          const isQuestion = codeToolKind === "question";
+          const sessionPermissionMode = this.getSessionPermissionMode();
+          const needsRelay = isQuestion || isPlanApproval || sessionPermissionMode === "default";
+          if (needsRelay && this.session?.hasDesktopConnected) {
+            this.logger.info("Relaying permission to connected client", {
+              kind: params.toolCall?.kind,
+              isQuestion,
+              sessionPermissionMode
+            });
+            return this.relayPermissionToClient(params);
           }
         }
+        if (this.shouldBlockPublishPermission(params)) {
+          return {
+            outcome: { outcome: "cancelled" },
+            _meta: {
+              message: "This run is configured to stop before publishing. Do not push commits or create/update pull requests unless the user explicitly asks."
+            }
+          };
+        }
         return {
           outcome: {
             outcome: "selected",
@@ -13289,6 +13446,12 @@ ${attributionInstructions}
         this.logger.debug("Extension notification", { method, params });
       },
       sessionUpdate: async (params) => {
+        if (params.update?.sessionUpdate === "current_mode_update" && typeof params.update?.currentModeId === "string" && this.session) {
+          this.session.permissionMode = params.update.currentModeId;
+          this.logger.info("Permission mode updated", {
+            mode: params.update.currentModeId
+          });
+        }
         if (params.update?.sessionUpdate === "tool_call_update") {
           const meta = params.update?._meta?.claudeCode;
           const toolName = meta?.toolName;
@@ -13467,6 +13630,13 @@ ${attributionInstructions}
     } catch (error) {
       this.logger.error("Failed to flush session logs", error);
     }
+    for (const [, pending] of this.pendingPermissions) {
+      pending.resolve({
+        outcome: { outcome: "selected", optionId: "reject" },
+        _meta: { customInput: "Session is shutting down." }
+      });
+    }
+    this.pendingPermissions.clear();
     try {
       await this.session.acpConnection.cleanup();
     } catch (error) {
@@ -13544,6 +13714,39 @@ ${attributionInstructions}
       this.detachSseController(controller);
     }
   }
+  /**
+   * Relay a permission request (e.g., plan approval) to the connected desktop
+   * app via SSE and wait for a response via the `/command` endpoint.
+   *
+   * The promise waits indefinitely — if SSE is disconnected, the event is
+   * buffered by broadcastEvent and replayed when the client reconnects. Session
+   * cleanup force-resolves all pending permissions, so there is no leak.
+   */
+  relayPermissionToClient(params) {
+    const requestId = crypto.randomUUID();
+    this.broadcastEvent({
+      type: "permission_request",
+      requestId,
+      options: params.options,
+      toolCall: params.toolCall
+    });
+    return new Promise((resolve4) => {
+      this.pendingPermissions.set(requestId, { resolve: resolve4 });
+    });
+  }
+  resolvePermission(requestId, optionId, customInput, answers) {
+    const pending = this.pendingPermissions.get(requestId);
+    if (!pending) return false;
+    this.pendingPermissions.delete(requestId);
+    const meta = {};
+    if (customInput) meta.customInput = customInput;
+    if (answers) meta.answers = answers;
+    pending.resolve({
+      outcome: { outcome: "selected", optionId },
+      ...Object.keys(meta).length > 0 ? { _meta: meta } : {}
+    });
+    return true;
+  }
 };
 export {
   AgentServer