@posthog/agent 2.3.349 → 2.3.353

package/dist/posthog-api.js

@@ -1,7 +1,7 @@
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.349",
+  version: "2.3.353",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {

package/dist/posthog-api.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../package.json","../src/utils/gateway.ts","../src/posthog-api.ts"],"sourcesContent":["{\n  \"name\": \"@posthog/agent\",\n  \"version\": \"2.3.349\",\n  \"repository\": \"https://github.com/PostHog/code\",\n  \"description\": \"TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\"\n    },\n    \"./agent\": {\n      \"types\": \"./dist/agent.d.ts\",\n      \"import\": \"./dist/agent.js\"\n    },\n    \"./gateway-models\": {\n      \"types\": \"./dist/gateway-models.d.ts\",\n      \"import\": \"./dist/gateway-models.js\"\n    },\n    \"./posthog-api\": {\n      \"types\": \"./dist/posthog-api.d.ts\",\n      \"import\": \"./dist/posthog-api.js\"\n    },\n    \"./types\": {\n      \"types\": \"./dist/types.d.ts\",\n      \"import\": \"./dist/types.js\"\n    },\n    \"./adapters/claude/questions/utils\": {\n      \"types\": \"./dist/adapters/claude/questions/utils.d.ts\",\n      \"import\": \"./dist/adapters/claude/questions/utils.js\"\n    },\n    \"./adapters/claude/permissions/permission-options\": {\n      \"types\": \"./dist/adapters/claude/permissions/permission-options.d.ts\",\n      \"import\": \"./dist/adapters/claude/permissions/permission-options.js\"\n    },\n    \"./adapters/claude/tools\": {\n      \"types\": \"./dist/adapters/claude/tools.d.ts\",\n      \"import\": \"./dist/adapters/claude/tools.js\"\n    },\n    \"./adapters/claude/conversion/tool-use-to-acp\": {\n      \"types\": \"./dist/adapters/claude/conversion/tool-use-to-acp.d.ts\",\n      \"import\": \"./dist/adapters/claude/conversion/tool-use-to-acp.js\"\n    },\n    \"./adapters/claude/session/jsonl-hydration\": {\n      \"types\": \"./dist/adapters/claude/session/jsonl-hydration.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/jsonl-hydration.js\"\n    },\n    \"./adapters/claude/session/models\": {\n      \"types\": \"./dist/adapters/claude/session/models.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/models.js\"\n    },\n    \"./adapters/reasoning-effort\": {\n      \"types\": \"./dist/adapters/reasoning-effort.d.ts\",\n      \"import\": \"./dist/adapters/reasoning-effort.js\"\n    },\n    \"./execution-mode\": {\n      \"types\": \"./dist/execution-mode.d.ts\",\n      \"import\": \"./dist/execution-mode.js\"\n    },\n    \"./server\": {\n      \"types\": \"./dist/server/agent-server.d.ts\",\n      \"import\": \"./dist/server/agent-server.js\"\n    }\n  },\n  \"bin\": {\n    \"agent-server\": \"./dist/server/bin.cjs\"\n  },\n  \"type\": \"module\",\n  \"keywords\": [\n    \"posthog\",\n    \"claude\",\n    \"agent\",\n    \"ai\",\n    \"git\",\n    \"typescript\"\n  ],\n  \"author\": \"PostHog\",\n  \"license\": \"SEE LICENSE IN LICENSE\",\n  \"scripts\": {\n    \"build\": \"node ../../scripts/rimraf.mjs dist && tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"pnpm exec tsc --noEmit\",\n    \"prepublishOnly\": \"pnpm run build\",\n    \"clean\": \"node ../../scripts/rimraf.mjs dist .turbo\"\n  },\n  \"engines\": {\n    \"node\": \">=20.0.0\"\n  },\n  \"devDependencies\": {\n    \"@posthog/shared\": \"workspace:*\",\n    \"@posthog/git\": \"workspace:*\",\n    \"@posthog/enricher\": \"workspace:*\",\n    \"@types/bun\": \"latest\",\n    \"@types/tar\": \"^6.1.13\",\n    \"msw\": \"^2.12.7\",\n    \"tsup\": \"^8.5.1\",\n    \"tsx\": \"^4.20.6\",\n    \"typescript\": \"^5.5.0\",\n    \"vitest\": \"^2.1.8\"\n  },\n  \"dependencies\": {\n    \"@agentclientprotocol/sdk\": \"0.19.0\",\n    \"ajv\": \"^8.17.1\",\n    \"@anthropic-ai/claude-agent-sdk\": \"0.2.112\",\n    \"@anthropic-ai/sdk\": \"0.89.0\",\n    \"@hono/node-server\": \"^1.19.9\",\n    \"@opentelemetry/api-logs\": \"^0.208.0\",\n    \"@opentelemetry/exporter-logs-otlp-http\": \"^0.208.0\",\n    \"@opentelemetry/resources\": \"^2.0.0\",\n    \"@opentelemetry/sdk-logs\": \"^0.208.0\",\n    \"@opentelemetry/semantic-conventions\": \"^1.28.0\",\n    \"@types/jsonwebtoken\": \"^9.0.10\",\n    \"commander\": \"^14.0.2\",\n    \"hono\": \"^4.11.7\",\n    \"jsonwebtoken\": \"^9.0.2\",\n    \"minimatch\": \"^10.0.3\",\n    \"tar\": \"^7.5.0\",\n    \"uuid\": \"13.0.0\",\n    \"yoga-wasm-web\": \"^0.3.3\",\n    \"zod\": \"^4.2.0\"\n  },\n  \"files\": [\n    \"dist/**/*\",\n    \"src/**/*\",\n    \"README.md\",\n    \"CLAUDE.md\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\"\n  }\n}\n","export type GatewayProduct = \"posthog_code\" | \"background_agents\";\n\nfunction getGatewayBaseUrl(posthogHost: string): string {\n  const url = new URL(posthogHost);\n  const hostname = url.hostname;\n\n  if (hostname === \"localhost\" || hostname === \"127.0.0.1\") {\n    return `${url.protocol}//localhost:3308`;\n  }\n\n  if (hostname === \"host.docker.internal\") {\n    return `${url.protocol}//host.docker.internal:3308`;\n  }\n\n  const region = hostname.match(/^(us|eu)\\.posthog\\.com$/)?.[1] ?? \"us\";\n  return `https://gateway.${region}.posthog.com`;\n}\n\nexport function getLlmGatewayUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/${product}`;\n}\n\nexport function getGatewayUsageUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/v1/usage/${product}`;\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\nimport type {\n  ArtifactType,\n  PostHogAPIConfig,\n  StoredEntry,\n  Task,\n  TaskRun,\n  TaskRunArtifact,\n} from \"./types\";\nimport { getGatewayUsageUrl, getLlmGatewayUrl } from \"./utils/gateway\";\n\nexport { getGatewayUsageUrl, getLlmGatewayUrl };\n\nconst DEFAULT_USER_AGENT = `posthog/agent.hog.dev; version: ${packageJson.version}`;\n\nexport interface TaskArtifactUploadPayload {\n  name: string;\n  type: ArtifactType;\n  content: string;\n  content_type?: string;\n}\n\nexport type TaskRunUpdate = Partial<\n  Pick<\n    TaskRun,\n    | \"status\"\n    | \"branch\"\n    | \"stage\"\n    | \"error_message\"\n    | \"output\"\n    | \"state\"\n    | \"environment\"\n  >\n> & {\n  state_remove_keys?: string[];\n};\n\nexport class PostHogAPIClient {\n  private config: PostHogAPIConfig;\n\n  constructor(config: PostHogAPIConfig) {\n    this.config = config;\n  }\n\n  private get baseUrl(): string {\n    const host = this.config.apiUrl.endsWith(\"/\")\n      ? this.config.apiUrl.slice(0, -1)\n      : this.config.apiUrl;\n    return host;\n  }\n\n  private isAuthFailure(status: number): boolean {\n    return status === 401 || status === 403;\n  }\n\n  private async resolveApiKey(forceRefresh = false): Promise<string> {\n    if (forceRefresh && this.config.refreshApiKey) {\n      return this.config.refreshApiKey();\n    }\n\n    return this.config.getApiKey();\n  }\n\n  private async buildHeaders(\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Headers> {\n    const headers = new Headers(options.headers);\n    headers.set(\n      \"Authorization\",\n      `Bearer ${await this.resolveApiKey(forceRefresh)}`,\n    );\n    headers.set(\"Content-Type\", \"application/json\");\n    headers.set(\"User-Agent\", this.config.userAgent ?? DEFAULT_USER_AGENT);\n    return headers;\n  }\n\n  private async performRequest(\n    endpoint: string,\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Response> {\n    const url = `${this.baseUrl}${endpoint}`;\n\n    return fetch(url, {\n      ...options,\n      headers: await this.buildHeaders(options, forceRefresh),\n    });\n  }\n\n  private async performRequestWithRetry(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<Response> {\n    let response = await this.performRequest(endpoint, options);\n\n    if (!response.ok && this.isAuthFailure(response.status)) {\n      response = await this.performRequest(endpoint, options, true);\n    }\n\n    return response;\n  }\n\n  private async apiRequest<T>(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<T> {\n    const response = await this.performRequestWithRetry(endpoint, options);\n\n    if (!response.ok) {\n      let errorMessage: string;\n      try {\n        const errorResponse = await response.json();\n        errorMessage = `Failed request: [${response.status}] ${JSON.stringify(errorResponse)}`;\n      } catch {\n        errorMessage = `Failed request: [${response.status}] ${response.statusText}`;\n      }\n      throw new Error(errorMessage);\n    }\n\n    return response.json();\n  }\n\n  private getTeamId(): number {\n    return this.config.projectId;\n  }\n\n  async getApiKey(forceRefresh = false): Promise<string> {\n    return this.resolveApiKey(forceRefresh);\n  }\n\n  getLlmGatewayUrl(): string {\n    return getLlmGatewayUrl(this.baseUrl);\n  }\n\n  async getTask(taskId: string): Promise<Task> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<Task>(`/api/projects/${teamId}/tasks/${taskId}/`);\n  }\n\n  async getTaskRun(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n    );\n  }\n\n  async updateTaskRun(\n    taskId: string,\n    runId: string,\n    payload: TaskRunUpdate,\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(payload),\n      },\n    );\n  }\n\n  async setTaskRunOutput(\n    taskId: string,\n    runId: string,\n    output: Record<string, unknown>,\n  ): Promise<TaskRun> {\n    return this.apiRequest(\n      `/api/projects/${this.getTeamId()}/tasks/${taskId}/runs/${runId}/set_output/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(output),\n      },\n    );\n  }\n\n  async appendTaskRunLog(\n    taskId: string,\n    runId: string,\n    entries: StoredEntry[],\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/append_log/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ entries }),\n      },\n    );\n  }\n\n  async relayMessage(\n    taskId: string,\n    runId: string,\n    text: string,\n  ): Promise<void> {\n    const teamId = this.getTeamId();\n    await this.apiRequest<{ status: string }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/relay_message/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ text }),\n      },\n    );\n  }\n\n  async uploadTaskArtifacts(\n    taskId: string,\n    runId: string,\n    artifacts: TaskArtifactUploadPayload[],\n  ): Promise<TaskRunArtifact[]> {\n    if (!artifacts.length) {\n      return [];\n    }\n\n    const teamId = this.getTeamId();\n    const response = await this.apiRequest<{ artifacts: TaskRunArtifact[] }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ artifacts }),\n      },\n    );\n\n    return response.artifacts ?? [];\n  }\n\n  /**\n   * Download artifact content by storage path\n   * Streams the file through the PostHog backend so the sandbox does not need\n   * direct access to object storage.\n   */\n  async downloadArtifact(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<ArrayBuffer | null> {\n    const teamId = this.getTeamId();\n\n    try {\n      const response = await this.performRequestWithRetry(\n        `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/download/`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ storage_path: storagePath }),\n        },\n      );\n      if (!response.ok) {\n        throw new Error(`Failed to download artifact: ${response.status}`);\n      }\n      return response.arrayBuffer();\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Fetch logs for a task run via the logs API endpoint\n   * @param taskRun - The task run to fetch logs for\n   * @returns Array of stored entries, or empty array if no logs available\n   */\n  async fetchTaskRunLogs(taskRun: TaskRun): Promise<StoredEntry[]> {\n    const teamId = this.getTeamId();\n    const endpoint = `/api/projects/${teamId}/tasks/${taskRun.task}/runs/${taskRun.id}/logs`;\n\n    try {\n      const response = await this.performRequestWithRetry(endpoint);\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          return [];\n        }\n        throw new Error(\n          `Failed to fetch logs: ${response.status} ${response.statusText}`,\n        );\n      }\n\n      const content = await response.text();\n\n      if (!content.trim()) {\n        return [];\n      }\n\n      // Parse newline-delimited JSON\n      return content\n        .trim()\n        .split(\"\\n\")\n        .map((line) => JSON.parse(line) as StoredEntry);\n    } catch (error) {\n      throw new Error(\n        `Failed to fetch task run logs: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n}\n"],"mappings":";AAAA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,YAAc;AAAA,EACd,aAAe;AAAA,EACf,SAAW;AAAA,IACT,KAAK;AAAA,MACH,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,iBAAiB;AAAA,MACf,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,qCAAqC;AAAA,MACnC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oDAAoD;AAAA,MAClD,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,2BAA2B;AAAA,MACzB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,gDAAgD;AAAA,MAC9C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,6CAA6C;AAAA,MAC3C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oCAAoC;AAAA,MAClC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,+BAA+B;AAAA,MAC7B,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,KAAO;AAAA,IACL,gBAAgB;AAAA,EAClB;AAAA,EACA,MAAQ;AAAA,EACR,UAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,QAAU;AAAA,EACV,SAAW;AAAA,EACX,SAAW;AAAA,IACT,OAAS;AAAA,IACT,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,cAAc;AAAA,IACd,WAAa;AAAA,IACb,gBAAkB;AAAA,IAClB,OAAS;AAAA,EACX;AAAA,EACA,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,iBAAmB;AAAA,IACjB,mBAAmB;AAAA,IACnB,gBAAgB;AAAA,IAChB,qBAAqB;AAAA,IACrB,cAAc;AAAA,IACd,cAAc;AAAA,IACd,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,KAAO;AAAA,IACP,YAAc;AAAA,IACd,QAAU;AAAA,EACZ;AAAA,EACA,cAAgB;AAAA,IACd,4BAA4B;AAAA,IAC5B,KAAO;AAAA,IACP,kCAAkC;AAAA,IAClC,qBAAqB;AAAA,IACrB,qBAAqB;AAAA,IACrB,2BAA2B;AAAA,IAC3B,0CAA0C;AAAA,IAC1C,4BAA4B;AAAA,IAC5B,2BAA2B;AAAA,IAC3B,uCAAuC;AAAA,IACvC,uBAAuB;AAAA,IACvB,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,cAAgB;AAAA,IAChB,WAAa;AAAA,IACb,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,iBAAiB;AAAA,IACjB,KAAO;AAAA,EACT;AAAA,EACA,OAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,eAAiB;AAAA,IACf,QAAU;AAAA,EACZ;AACF;;;ACjIA,SAAS,kBAAkB,aAA6B;AACtD,QAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,QAAM,WAAW,IAAI;AAErB,MAAI,aAAa,eAAe,aAAa,aAAa;AACxD,WAAO,GAAG,IAAI,QAAQ;AAAA,EACxB;AAEA,MAAI,aAAa,wBAAwB;AACvC,WAAO,GAAG,IAAI,QAAQ;AAAA,EACxB;AAEA,QAAM,SAAS,SAAS,MAAM,yBAAyB,IAAI,CAAC,KAAK;AACjE,SAAO,mBAAmB,MAAM;AAClC;AAEO,SAAS,iBACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,IAAI,OAAO;AACrD;AAEO,SAAS,mBACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,aAAa,OAAO;AAC9D;;;ACjBA,IAAM,qBAAqB,mCAAmC,gBAAY,OAAO;AAwB1E,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EAER,YAAY,QAA0B;AACpC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAY,UAAkB;AAC5B,UAAM,OAAO,KAAK,OAAO,OAAO,SAAS,GAAG,IACxC,KAAK,OAAO,OAAO,MAAM,GAAG,EAAE,IAC9B,KAAK,OAAO;AAChB,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc,QAAyB;AAC7C,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAAA,EAEA,MAAc,cAAc,eAAe,OAAwB;AACjE,QAAI,gBAAgB,KAAK,OAAO,eAAe;AAC7C,aAAO,KAAK,OAAO,cAAc;AAAA,IACnC;AAEA,WAAO,KAAK,OAAO,UAAU;AAAA,EAC/B;AAAA,EAEA,MAAc,aACZ,SACA,eAAe,OACG;AAClB,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,YAAQ;AAAA,MACN;AAAA,MACA,UAAU,MAAM,KAAK,cAAc,YAAY,CAAC;AAAA,IAClD;AACA,YAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,YAAQ,IAAI,cAAc,KAAK,OAAO,aAAa,kBAAkB;AACrE,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,eACZ,UACA,SACA,eAAe,OACI;AACnB,UAAM,MAAM,GAAG,KAAK,OAAO,GAAG,QAAQ;AAEtC,WAAO,MAAM,KAAK;AAAA,MAChB,GAAG;AAAA,MACH,SAAS,MAAM,KAAK,aAAa,SAAS,YAAY;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,wBACZ,UACA,UAAuB,CAAC,GACL;AACnB,QAAI,WAAW,MAAM,KAAK,eAAe,UAAU,OAAO;AAE1D,QAAI,CAAC,SAAS,MAAM,KAAK,cAAc,SAAS,MAAM,GAAG;AACvD,iBAAW,MAAM,KAAK,eAAe,UAAU,SAAS,IAAI;AAAA,IAC9D;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,WACZ,UACA,UAAuB,CAAC,GACZ;AACZ,UAAM,WAAW,MAAM,KAAK,wBAAwB,UAAU,OAAO;AAErE,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI;AACJ,UAAI;AACF,cAAM,gBAAgB,MAAM,SAAS,KAAK;AAC1C,uBAAe,oBAAoB,SAAS,MAAM,KAAK,KAAK,UAAU,aAAa,CAAC;AAAA,MACtF,QAAQ;AACN,uBAAe,oBAAoB,SAAS,MAAM,KAAK,SAAS,UAAU;AAAA,MAC5E;AACA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAEQ,YAAoB;AAC1B,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAM,UAAU,eAAe,OAAwB;AACrD,WAAO,KAAK,cAAc,YAAY;AAAA,EACxC;AAAA,EAEA,mBAA2B;AACzB,WAAO,iBAAiB,KAAK,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,QAAQ,QAA+B;AAC3C,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK,WAAiB,iBAAiB,MAAM,UAAU,MAAM,GAAG;AAAA,EACzE;AAAA,EAEA,MAAM,WAAW,QAAgB,OAAiC;AAChE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,IACvD;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,OAAO;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,QACkB;AAClB,WAAO,KAAK;AAAA,MACV,iBAAiB,KAAK,UAAU,CAAC,UAAU,MAAM,SAAS,KAAK;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,MAAM;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,QACA,OACA,MACe;AACf,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,KAAK;AAAA,MACT,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,QACA,OACA,WAC4B;AAC5B,QAAI,CAAC,UAAU,QAAQ;AACrB,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC;AAAA,MACpC;AAAA,IACF;AAEA,WAAO,SAAS,aAAa,CAAC;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBACJ,QACA,OACA,aAC6B;AAC7B,UAAM,SAAS,KAAK,UAAU;AAE9B,QAAI;AACF,YAAM,WAAW,MAAM,KAAK;AAAA,QAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,QACrD;AAAA,UACE,QAAQ;AAAA,UACR,MAAM,KAAK,UAAU,EAAE,cAAc,YAAY,CAAC;AAAA,QACpD;AAAA,MACF;AACA,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,EAAE;AAAA,MACnE;AACA,aAAO,SAAS,YAAY;AAAA,IAC9B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBAAiB,SAA0C;AAC/D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,iBAAiB,MAAM,UAAU,QAAQ,IAAI,SAAS,QAAQ,EAAE;AAEjF,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,wBAAwB,QAAQ;AAE5D,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,iBAAO,CAAC;AAAA,QACV;AACA,cAAM,IAAI;AAAA,UACR,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,eAAO,CAAC;AAAA,MACV;AAGA,aAAO,QACJ,KAAK,EACL,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,CAAgB;AAAA,IAClD,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../package.json","../src/utils/gateway.ts","../src/posthog-api.ts"],"sourcesContent":["{\n  \"name\": \"@posthog/agent\",\n  \"version\": \"2.3.353\",\n  \"repository\": \"https://github.com/PostHog/code\",\n  \"description\": \"TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\"\n    },\n    \"./agent\": {\n      \"types\": \"./dist/agent.d.ts\",\n      \"import\": \"./dist/agent.js\"\n    },\n    \"./gateway-models\": {\n      \"types\": \"./dist/gateway-models.d.ts\",\n      \"import\": \"./dist/gateway-models.js\"\n    },\n    \"./posthog-api\": {\n      \"types\": \"./dist/posthog-api.d.ts\",\n      \"import\": \"./dist/posthog-api.js\"\n    },\n    \"./types\": {\n      \"types\": \"./dist/types.d.ts\",\n      \"import\": \"./dist/types.js\"\n    },\n    \"./adapters/claude/questions/utils\": {\n      \"types\": \"./dist/adapters/claude/questions/utils.d.ts\",\n      \"import\": \"./dist/adapters/claude/questions/utils.js\"\n    },\n    \"./adapters/claude/permissions/permission-options\": {\n      \"types\": \"./dist/adapters/claude/permissions/permission-options.d.ts\",\n      \"import\": \"./dist/adapters/claude/permissions/permission-options.js\"\n    },\n    \"./adapters/claude/tools\": {\n      \"types\": \"./dist/adapters/claude/tools.d.ts\",\n      \"import\": \"./dist/adapters/claude/tools.js\"\n    },\n    \"./adapters/claude/conversion/tool-use-to-acp\": {\n      \"types\": \"./dist/adapters/claude/conversion/tool-use-to-acp.d.ts\",\n      \"import\": \"./dist/adapters/claude/conversion/tool-use-to-acp.js\"\n    },\n    \"./adapters/claude/session/jsonl-hydration\": {\n      \"types\": \"./dist/adapters/claude/session/jsonl-hydration.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/jsonl-hydration.js\"\n    },\n    \"./adapters/claude/session/models\": {\n      \"types\": \"./dist/adapters/claude/session/models.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/models.js\"\n    },\n    \"./adapters/reasoning-effort\": {\n      \"types\": \"./dist/adapters/reasoning-effort.d.ts\",\n      \"import\": \"./dist/adapters/reasoning-effort.js\"\n    },\n    \"./execution-mode\": {\n      \"types\": \"./dist/execution-mode.d.ts\",\n      \"import\": \"./dist/execution-mode.js\"\n    },\n    \"./server\": {\n      \"types\": \"./dist/server/agent-server.d.ts\",\n      \"import\": \"./dist/server/agent-server.js\"\n    }\n  },\n  \"bin\": {\n    \"agent-server\": \"./dist/server/bin.cjs\"\n  },\n  \"type\": \"module\",\n  \"keywords\": [\n    \"posthog\",\n    \"claude\",\n    \"agent\",\n    \"ai\",\n    \"git\",\n    \"typescript\"\n  ],\n  \"author\": \"PostHog\",\n  \"license\": \"SEE LICENSE IN LICENSE\",\n  \"scripts\": {\n    \"build\": \"node ../../scripts/rimraf.mjs dist && tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"pnpm exec tsc --noEmit\",\n    \"prepublishOnly\": \"pnpm run build\",\n    \"clean\": \"node ../../scripts/rimraf.mjs dist .turbo\"\n  },\n  \"engines\": {\n    \"node\": \">=20.0.0\"\n  },\n  \"devDependencies\": {\n    \"@posthog/shared\": \"workspace:*\",\n    \"@posthog/git\": \"workspace:*\",\n    \"@posthog/enricher\": \"workspace:*\",\n    \"@types/bun\": \"latest\",\n    \"@types/tar\": \"^6.1.13\",\n    \"msw\": \"^2.12.7\",\n    \"tsup\": \"^8.5.1\",\n    \"tsx\": \"^4.20.6\",\n    \"typescript\": \"^5.5.0\",\n    \"vitest\": \"^2.1.8\"\n  },\n  \"dependencies\": {\n    \"@agentclientprotocol/sdk\": \"0.19.0\",\n    \"ajv\": \"^8.17.1\",\n    \"@anthropic-ai/claude-agent-sdk\": \"0.2.112\",\n    \"@anthropic-ai/sdk\": \"0.89.0\",\n    \"@hono/node-server\": \"^1.19.9\",\n    \"@opentelemetry/api-logs\": \"^0.208.0\",\n    \"@opentelemetry/exporter-logs-otlp-http\": \"^0.208.0\",\n    \"@opentelemetry/resources\": \"^2.0.0\",\n    \"@opentelemetry/sdk-logs\": \"^0.208.0\",\n    \"@opentelemetry/semantic-conventions\": \"^1.28.0\",\n    \"@types/jsonwebtoken\": \"^9.0.10\",\n    \"commander\": \"^14.0.2\",\n    \"hono\": \"^4.11.7\",\n    \"jsonwebtoken\": \"^9.0.2\",\n    \"minimatch\": \"^10.0.3\",\n    \"tar\": \"^7.5.0\",\n    \"uuid\": \"13.0.0\",\n    \"yoga-wasm-web\": \"^0.3.3\",\n    \"zod\": \"^4.2.0\"\n  },\n  \"files\": [\n    \"dist/**/*\",\n    \"src/**/*\",\n    \"README.md\",\n    \"CLAUDE.md\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\"\n  }\n}\n","export type GatewayProduct = \"posthog_code\" | \"background_agents\";\n\nfunction getGatewayBaseUrl(posthogHost: string): string {\n  const url = new URL(posthogHost);\n  const hostname = url.hostname;\n\n  if (hostname === \"localhost\" || hostname === \"127.0.0.1\") {\n    return `${url.protocol}//localhost:3308`;\n  }\n\n  if (hostname === \"host.docker.internal\") {\n    return `${url.protocol}//host.docker.internal:3308`;\n  }\n\n  const region = hostname.match(/^(us|eu)\\.posthog\\.com$/)?.[1] ?? \"us\";\n  return `https://gateway.${region}.posthog.com`;\n}\n\nexport function getLlmGatewayUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/${product}`;\n}\n\nexport function getGatewayUsageUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/v1/usage/${product}`;\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\nimport type {\n  ArtifactType,\n  PostHogAPIConfig,\n  StoredEntry,\n  Task,\n  TaskRun,\n  TaskRunArtifact,\n} from \"./types\";\nimport { getGatewayUsageUrl, getLlmGatewayUrl } from \"./utils/gateway\";\n\nexport { getGatewayUsageUrl, getLlmGatewayUrl };\n\nconst DEFAULT_USER_AGENT = `posthog/agent.hog.dev; version: ${packageJson.version}`;\n\nexport interface TaskArtifactUploadPayload {\n  name: string;\n  type: ArtifactType;\n  content: string;\n  content_type?: string;\n}\n\nexport type TaskRunUpdate = Partial<\n  Pick<\n    TaskRun,\n    | \"status\"\n    | \"branch\"\n    | \"stage\"\n    | \"error_message\"\n    | \"output\"\n    | \"state\"\n    | \"environment\"\n  >\n> & {\n  state_remove_keys?: string[];\n};\n\nexport class PostHogAPIClient {\n  private config: PostHogAPIConfig;\n\n  constructor(config: PostHogAPIConfig) {\n    this.config = config;\n  }\n\n  private get baseUrl(): string {\n    const host = this.config.apiUrl.endsWith(\"/\")\n      ? this.config.apiUrl.slice(0, -1)\n      : this.config.apiUrl;\n    return host;\n  }\n\n  private isAuthFailure(status: number): boolean {\n    return status === 401 || status === 403;\n  }\n\n  private async resolveApiKey(forceRefresh = false): Promise<string> {\n    if (forceRefresh && this.config.refreshApiKey) {\n      return this.config.refreshApiKey();\n    }\n\n    return this.config.getApiKey();\n  }\n\n  private async buildHeaders(\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Headers> {\n    const headers = new Headers(options.headers);\n    headers.set(\n      \"Authorization\",\n      `Bearer ${await this.resolveApiKey(forceRefresh)}`,\n    );\n    headers.set(\"Content-Type\", \"application/json\");\n    headers.set(\"User-Agent\", this.config.userAgent ?? DEFAULT_USER_AGENT);\n    return headers;\n  }\n\n  private async performRequest(\n    endpoint: string,\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Response> {\n    const url = `${this.baseUrl}${endpoint}`;\n\n    return fetch(url, {\n      ...options,\n      headers: await this.buildHeaders(options, forceRefresh),\n    });\n  }\n\n  private async performRequestWithRetry(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<Response> {\n    let response = await this.performRequest(endpoint, options);\n\n    if (!response.ok && this.isAuthFailure(response.status)) {\n      response = await this.performRequest(endpoint, options, true);\n    }\n\n    return response;\n  }\n\n  private async apiRequest<T>(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<T> {\n    const response = await this.performRequestWithRetry(endpoint, options);\n\n    if (!response.ok) {\n      let errorMessage: string;\n      try {\n        const errorResponse = await response.json();\n        errorMessage = `Failed request: [${response.status}] ${JSON.stringify(errorResponse)}`;\n      } catch {\n        errorMessage = `Failed request: [${response.status}] ${response.statusText}`;\n      }\n      throw new Error(errorMessage);\n    }\n\n    return response.json();\n  }\n\n  private getTeamId(): number {\n    return this.config.projectId;\n  }\n\n  async getApiKey(forceRefresh = false): Promise<string> {\n    return this.resolveApiKey(forceRefresh);\n  }\n\n  getLlmGatewayUrl(): string {\n    return getLlmGatewayUrl(this.baseUrl);\n  }\n\n  async getTask(taskId: string): Promise<Task> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<Task>(`/api/projects/${teamId}/tasks/${taskId}/`);\n  }\n\n  async getTaskRun(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n    );\n  }\n\n  async updateTaskRun(\n    taskId: string,\n    runId: string,\n    payload: TaskRunUpdate,\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(payload),\n      },\n    );\n  }\n\n  async setTaskRunOutput(\n    taskId: string,\n    runId: string,\n    output: Record<string, unknown>,\n  ): Promise<TaskRun> {\n    return this.apiRequest(\n      `/api/projects/${this.getTeamId()}/tasks/${taskId}/runs/${runId}/set_output/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(output),\n      },\n    );\n  }\n\n  async appendTaskRunLog(\n    taskId: string,\n    runId: string,\n    entries: StoredEntry[],\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/append_log/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ entries }),\n      },\n    );\n  }\n\n  async relayMessage(\n    taskId: string,\n    runId: string,\n    text: string,\n  ): Promise<void> {\n    const teamId = this.getTeamId();\n    await this.apiRequest<{ status: string }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/relay_message/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ text }),\n      },\n    );\n  }\n\n  async uploadTaskArtifacts(\n    taskId: string,\n    runId: string,\n    artifacts: TaskArtifactUploadPayload[],\n  ): Promise<TaskRunArtifact[]> {\n    if (!artifacts.length) {\n      return [];\n    }\n\n    const teamId = this.getTeamId();\n    const response = await this.apiRequest<{ artifacts: TaskRunArtifact[] }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ artifacts }),\n      },\n    );\n\n    return response.artifacts ?? [];\n  }\n\n  /**\n   * Download artifact content by storage path\n   * Streams the file through the PostHog backend so the sandbox does not need\n   * direct access to object storage.\n   */\n  async downloadArtifact(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<ArrayBuffer | null> {\n    const teamId = this.getTeamId();\n\n    try {\n      const response = await this.performRequestWithRetry(\n        `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/download/`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ storage_path: storagePath }),\n        },\n      );\n      if (!response.ok) {\n        throw new Error(`Failed to download artifact: ${response.status}`);\n      }\n      return response.arrayBuffer();\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Fetch logs for a task run via the logs API endpoint\n   * @param taskRun - The task run to fetch logs for\n   * @returns Array of stored entries, or empty array if no logs available\n   */\n  async fetchTaskRunLogs(taskRun: TaskRun): Promise<StoredEntry[]> {\n    const teamId = this.getTeamId();\n    const endpoint = `/api/projects/${teamId}/tasks/${taskRun.task}/runs/${taskRun.id}/logs`;\n\n    try {\n      const response = await this.performRequestWithRetry(endpoint);\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          return [];\n        }\n        throw new Error(\n          `Failed to fetch logs: ${response.status} ${response.statusText}`,\n        );\n      }\n\n      const content = await response.text();\n\n      if (!content.trim()) {\n        return [];\n      }\n\n      // Parse newline-delimited JSON\n      return content\n        .trim()\n        .split(\"\\n\")\n        .map((line) => JSON.parse(line) as StoredEntry);\n    } catch (error) {\n      throw new Error(\n        `Failed to fetch task run logs: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n}\n"],"mappings":";AAAA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,YAAc;AAAA,EACd,aAAe;AAAA,EACf,SAAW;AAAA,IACT,KAAK;AAAA,MACH,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,iBAAiB;AAAA,MACf,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,qCAAqC;AAAA,MACnC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oDAAoD;AAAA,MAClD,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,2BAA2B;AAAA,MACzB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,gDAAgD;AAAA,MAC9C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,6CAA6C;AAAA,MAC3C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oCAAoC;AAAA,MAClC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,+BAA+B;AAAA,MAC7B,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,KAAO;AAAA,IACL,gBAAgB;AAAA,EAClB;AAAA,EACA,MAAQ;AAAA,EACR,UAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,QAAU;AAAA,EACV,SAAW;AAAA,EACX,SAAW;AAAA,IACT,OAAS;AAAA,IACT,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,cAAc;AAAA,IACd,WAAa;AAAA,IACb,gBAAkB;AAAA,IAClB,OAAS;AAAA,EACX;AAAA,EACA,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,iBAAmB;AAAA,IACjB,mBAAmB;AAAA,IACnB,gBAAgB;AAAA,IAChB,qBAAqB;AAAA,IACrB,cAAc;AAAA,IACd,cAAc;AAAA,IACd,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,KAAO;AAAA,IACP,YAAc;AAAA,IACd,QAAU;AAAA,EACZ;AAAA,EACA,cAAgB;AAAA,IACd,4BAA4B;AAAA,IAC5B,KAAO;AAAA,IACP,kCAAkC;AAAA,IAClC,qBAAqB;AAAA,IACrB,qBAAqB;AAAA,IACrB,2BAA2B;AAAA,IAC3B,0CAA0C;AAAA,IAC1C,4BAA4B;AAAA,IAC5B,2BAA2B;AAAA,IAC3B,uCAAuC;AAAA,IACvC,uBAAuB;AAAA,IACvB,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,cAAgB;AAAA,IAChB,WAAa;AAAA,IACb,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,iBAAiB;AAAA,IACjB,KAAO;AAAA,EACT;AAAA,EACA,OAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,eAAiB;AAAA,IACf,QAAU;AAAA,EACZ;AACF;;;ACjIA,SAAS,kBAAkB,aAA6B;AACtD,QAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,QAAM,WAAW,IAAI;AAErB,MAAI,aAAa,eAAe,aAAa,aAAa;AACxD,WAAO,GAAG,IAAI,QAAQ;AAAA,EACxB;AAEA,MAAI,aAAa,wBAAwB;AACvC,WAAO,GAAG,IAAI,QAAQ;AAAA,EACxB;AAEA,QAAM,SAAS,SAAS,MAAM,yBAAyB,IAAI,CAAC,KAAK;AACjE,SAAO,mBAAmB,MAAM;AAClC;AAEO,SAAS,iBACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,IAAI,OAAO;AACrD;AAEO,SAAS,mBACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,aAAa,OAAO;AAC9D;;;ACjBA,IAAM,qBAAqB,mCAAmC,gBAAY,OAAO;AAwB1E,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EAER,YAAY,QAA0B;AACpC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAY,UAAkB;AAC5B,UAAM,OAAO,KAAK,OAAO,OAAO,SAAS,GAAG,IACxC,KAAK,OAAO,OAAO,MAAM,GAAG,EAAE,IAC9B,KAAK,OAAO;AAChB,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc,QAAyB;AAC7C,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAAA,EAEA,MAAc,cAAc,eAAe,OAAwB;AACjE,QAAI,gBAAgB,KAAK,OAAO,eAAe;AAC7C,aAAO,KAAK,OAAO,cAAc;AAAA,IACnC;AAEA,WAAO,KAAK,OAAO,UAAU;AAAA,EAC/B;AAAA,EAEA,MAAc,aACZ,SACA,eAAe,OACG;AAClB,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,YAAQ;AAAA,MACN;AAAA,MACA,UAAU,MAAM,KAAK,cAAc,YAAY,CAAC;AAAA,IAClD;AACA,YAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,YAAQ,IAAI,cAAc,KAAK,OAAO,aAAa,kBAAkB;AACrE,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,eACZ,UACA,SACA,eAAe,OACI;AACnB,UAAM,MAAM,GAAG,KAAK,OAAO,GAAG,QAAQ;AAEtC,WAAO,MAAM,KAAK;AAAA,MAChB,GAAG;AAAA,MACH,SAAS,MAAM,KAAK,aAAa,SAAS,YAAY;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,wBACZ,UACA,UAAuB,CAAC,GACL;AACnB,QAAI,WAAW,MAAM,KAAK,eAAe,UAAU,OAAO;AAE1D,QAAI,CAAC,SAAS,MAAM,KAAK,cAAc,SAAS,MAAM,GAAG;AACvD,iBAAW,MAAM,KAAK,eAAe,UAAU,SAAS,IAAI;AAAA,IAC9D;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,WACZ,UACA,UAAuB,CAAC,GACZ;AACZ,UAAM,WAAW,MAAM,KAAK,wBAAwB,UAAU,OAAO;AAErE,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI;AACJ,UAAI;AACF,cAAM,gBAAgB,MAAM,SAAS,KAAK;AAC1C,uBAAe,oBAAoB,SAAS,MAAM,KAAK,KAAK,UAAU,aAAa,CAAC;AAAA,MACtF,QAAQ;AACN,uBAAe,oBAAoB,SAAS,MAAM,KAAK,SAAS,UAAU;AAAA,MAC5E;AACA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAEQ,YAAoB;AAC1B,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAM,UAAU,eAAe,OAAwB;AACrD,WAAO,KAAK,cAAc,YAAY;AAAA,EACxC;AAAA,EAEA,mBAA2B;AACzB,WAAO,iBAAiB,KAAK,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,QAAQ,QAA+B;AAC3C,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK,WAAiB,iBAAiB,MAAM,UAAU,MAAM,GAAG;AAAA,EACzE;AAAA,EAEA,MAAM,WAAW,QAAgB,OAAiC;AAChE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,IACvD;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,OAAO;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,QACkB;AAClB,WAAO,KAAK;AAAA,MACV,iBAAiB,KAAK,UAAU,CAAC,UAAU,MAAM,SAAS,KAAK;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,MAAM;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,QACA,OACA,MACe;AACf,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,KAAK;AAAA,MACT,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,QACA,OACA,WAC4B;AAC5B,QAAI,CAAC,UAAU,QAAQ;AACrB,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC;AAAA,MACpC;AAAA,IACF;AAEA,WAAO,SAAS,aAAa,CAAC;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBACJ,QACA,OACA,aAC6B;AAC7B,UAAM,SAAS,KAAK,UAAU;AAE9B,QAAI;AACF,YAAM,WAAW,MAAM,KAAK;AAAA,QAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,QACrD;AAAA,UACE,QAAQ;AAAA,UACR,MAAM,KAAK,UAAU,EAAE,cAAc,YAAY,CAAC;AAAA,QACpD;AAAA,MACF;AACA,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,EAAE;AAAA,MACnE;AACA,aAAO,SAAS,YAAY;AAAA,IAC9B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBAAiB,SAA0C;AAC/D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,iBAAiB,MAAM,UAAU,QAAQ,IAAI,SAAS,QAAQ,EAAE;AAEjF,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,wBAAwB,QAAQ;AAE5D,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,iBAAO,CAAC;AAAA,QACV;AACA,cAAM,IAAI;AAAA,UACR,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,eAAO,CAAC;AAAA,MACV;AAGA,aAAO,QACJ,KAAK,EACL,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,CAAgB;AAAA,IAClD,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/server/agent-server.js

@@ -8564,6 +8564,32 @@ async function getCurrentBranch(baseDir, options) {
     return branch === "HEAD" ? null : branch;
   }, { signal: options?.abortSignal });
 }
+async function listWorktrees(baseDir, options) {
+  const manager = getGitOperationManager();
+  return manager.executeRead(baseDir, async (git) => {
+    const output = await git.raw(["worktree", "list", "--porcelain"]);
+    const worktrees = [];
+    let current2 = {};
+    for (const line of output.split("\n")) {
+      if (line.startsWith("worktree ")) {
+        if (current2.path) {
+          worktrees.push(current2);
+        }
+        current2 = { path: line.slice(9), branch: null };
+      } else if (line.startsWith("HEAD ")) {
+        current2.head = line.slice(5);
+      } else if (line.startsWith("branch ")) {
+        current2.branch = line.slice(7).replace("refs/heads/", "");
+      } else if (line === "detached") {
+        current2.branch = null;
+      }
+    }
+    if (current2.path) {
+      worktrees.push(current2);
+    }
+    return worktrees;
+  }, { signal: options?.abortSignal });
+}
 async function getHeadSha(baseDir, options) {
   const manager = getGitOperationManager();
   return manager.executeRead(baseDir, (git) => git.revparse(["HEAD"]), {
@@ -8577,7 +8603,7 @@ import { Hono } from "hono";
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.349",
+  version: "2.3.353",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {
@@ -12621,7 +12647,7 @@ var createPostToolUseHook = ({ onModeChange, logger }) => async (input, toolUseI
 var SUBAGENT_REWRITES = {
   Explore: "ph-explore"
 };
-var createSubagentRewriteHook = (logger) => async (input, _toolUseID) => {
+var createSubagentRewriteHook = (logger, registeredAgents) => async (input, _toolUseID) => {
   if (input.hook_event_name !== "PreToolUse") {
     return { continue: true };
   }
@@ -12634,6 +12660,12 @@ var createSubagentRewriteHook = (logger) => async (input, _toolUseID) => {
     return { continue: true };
   }
   const target = SUBAGENT_REWRITES[subagentType];
+  if (!registeredAgents.has(target)) {
+    logger.warn(
+      `[SubagentRewriteHook] Skipping rewrite ${subagentType} \u2192 ${target}: target agent not registered for this session. Falling back to built-in ${subagentType}.`
+    );
+    return { continue: true };
+  }
   logger.info(
     `[SubagentRewriteHook] Rewriting subagent_type: ${subagentType} \u2192 ${target}`
   );
@@ -14106,16 +14138,16 @@ function permissionOptions(allowAlwaysLabel) {
     }
   ];
 }
-function buildPermissionOptions(toolName, toolInput, cwd, suggestions) {
+function buildPermissionOptions(toolName, toolInput, repoRoot, suggestions) {
   if (BASH_TOOLS.has(toolName)) {
     const rawRuleContent = suggestions?.flatMap((s) => "rules" in s ? s.rules : []).find((r) => r.toolName === "Bash" && r.ruleContent)?.ruleContent;
     const ruleContent = rawRuleContent?.replace(/:?\*$/, "");
     const command = toolInput?.command;
     const cmdName = command?.split(/\s+/)[0] ?? "this command";
-    const cwdLabel = cwd ? ` in ${cwd}` : "";
+    const scopeLabel = repoRoot ? ` in ${repoRoot}` : "";
     const label = ruleContent ?? `\`${cmdName}\` commands`;
     return permissionOptions(
-      `Yes, and don't ask again for ${label}${cwdLabel}`
+      `Yes, and don't ask again for ${label}${scopeLabel}`
     );
   }
   if (toolName === "BashOutput") {
@@ -14401,7 +14433,7 @@ async function handleDefaultPermissionFlow(context) {
   const options = buildPermissionOptions(
     toolName,
     toolInput,
-    session?.cwd,
+    session.settingsManager.getRepoRoot(),
     suggestions
   );
   const response = await client.requestPermission({
@@ -14421,17 +14453,19 @@ async function handleDefaultPermissionFlow(context) {
   }
   if (response.outcome?.outcome === "selected" && (response.outcome.optionId === "allow" || response.outcome.optionId === "allow_always")) {
     if (response.outcome.optionId === "allow_always") {
+      const rules = extractAllowRules(suggestions, toolName);
+      try {
+        await session.settingsManager.addAllowRules(rules);
+      } catch (error) {
+        context.logger.warn(
+          "[canUseTool] Failed to persist allow rules to repository settings",
+          { error: error instanceof Error ? error.message : String(error) }
+        );
+      }
       return {
         behavior: "allow",
         updatedInput: toolInput,
-        updatedPermissions: suggestions ?? [
-          {
-            type: "addRules",
-            rules: [{ toolName }],
-            behavior: "allow",
-            destination: "localSettings"
-          }
-        ]
+        updatedPermissions: buildSessionPermissions(suggestions, rules)
       };
     }
     return {
@@ -14464,6 +14498,26 @@ function handlePlanFileException(context) {
     updatedInput: toolInput
   };
 }
+function extractAllowRules(suggestions, toolName) {
+  if (!suggestions || suggestions.length === 0) {
+    return [{ toolName }];
+  }
+  return suggestions.filter(
+    (update) => update.type === "addRules" && update.behavior === "allow"
+  ).flatMap((update) => "rules" in update ? update.rules : []);
+}
+function buildSessionPermissions(suggestions, rules) {
+  const passthrough = (suggestions ?? []).filter(
+    (update) => !(update.type === "addRules" && update.behavior === "allow")
+  ).map((update) => ({ ...update, destination: "session" }));
+  if (rules.length === 0) {
+    return passthrough;
+  }
+  return [
+    { type: "addRules", rules, behavior: "allow", destination: "session" },
+    ...passthrough
+  ];
+}
 function extractDomainFromUrl(url) {
   try {
     return new URL(url).hostname;
@@ -14747,7 +14801,7 @@ function buildEnvironment() {
     CLAUDE_CODE_EMIT_SESSION_STATE_EVENTS: "1"
   };
 }
-function buildHooks(userHooks, onModeChange, settingsManager, logger, enrichmentDeps, enrichedReadCache) {
+function buildHooks(userHooks, onModeChange, settingsManager, logger, enrichmentDeps, enrichedReadCache, registeredAgents) {
   const postToolUseHooks = [createPostToolUseHook({ onModeChange, logger })];
   if (enrichmentDeps && enrichedReadCache) {
     postToolUseHooks.push(
@@ -14765,12 +14819,49 @@ function buildHooks(userHooks, onModeChange, settingsManager, logger, enrichment
       {
         hooks: [
           createPreToolUseHook(settingsManager, logger),
-          createSubagentRewriteHook(logger)
+          createSubagentRewriteHook(logger, registeredAgents)
         ]
       }
     ]
   };
 }
+var PH_EXPLORE_AGENT = {
+  description: 'Fast agent for exploring and understanding codebases. Use this when you need to find files by pattern (eg. "src/components/**/*.tsx"), search for code or keywords (eg. "where is the auth middleware?"), or answer questions about how the codebase works (eg. "how does the session service handle reconnects?"). When calling this agent, specify a thoroughness level: "quick" for targeted lookups, "medium" for broader exploration, or "very thorough" for comprehensive analysis across multiple locations.',
+  model: "haiku",
+  prompt: `You are a fast, read-only codebase exploration agent.
+
+Your job is to find files, search code, read the most relevant sources, and report findings clearly.
+
+Rules:
+- Never create, modify, delete, move, or copy files.
+- Never use shell redirection or any command that changes system state.
+- Use Glob for broad file pattern matching.
+- Use Grep for searching file contents.
+- Use Read when you know the exact file path to inspect.
+- Use Bash only for safe read-only commands like ls, git status, git log, git diff, find, cat, head, and tail.
+- Adapt your search approach based on the thoroughness level specified by the caller.
+- Return file paths as absolute paths in your final response.
+- Avoid using emojis.
+- Wherever possible, spawn multiple parallel tool calls for grepping and reading files.
+- Search efficiently, then read only the most relevant files.
+- Return findings directly in your final response \u2014 do not create files.`,
+  tools: [
+    "Bash",
+    "Glob",
+    "Grep",
+    "Read",
+    "WebFetch",
+    "WebSearch",
+    "NotebookRead",
+    "TodoWrite"
+  ]
+};
+function buildAgents(userAgents) {
+  return {
+    "ph-explore": PH_EXPLORE_AGENT,
+    ...userAgents || {}
+  };
+}
 function getAbortController(userProvidedController) {
   const controller = userProvidedController ?? new AbortController();
   if (controller.signal.aborted) {
@@ -14856,6 +14947,8 @@ function ensureLocalSettings(cwd) {
 function buildSessionOptions(params) {
   ensureLocalSettings(params.cwd);
   const tools = params.userProvidedOptions?.tools ?? (params.disableBuiltInTools ? [] : { type: "preset", preset: "claude_code" });
+  const agents = buildAgents(params.userProvidedOptions?.agents);
+  const registeredAgentNames = new Set(Object.keys(agents));
   const options = {
     ...params.userProvidedOptions,
     betas: ["context-1m-2025-08-07"],
@@ -14869,6 +14962,7 @@ function buildSessionOptions(params) {
     canUseTool: params.canUseTool,
     executable: "node",
     tools,
+    agents,
     extraArgs: {
       ...params.userProvidedOptions?.extraArgs,
       "replay-user-messages": ""
@@ -14884,7 +14978,8 @@ function buildSessionOptions(params) {
       params.settingsManager,
       params.logger,
       params.enrichmentDeps,
-      params.enrichedReadCache
+      params.enrichedReadCache,
+      registeredAgentNames
     ),
     outputFormat: params.outputFormat,
     abortController: getAbortController(
@@ -14932,6 +15027,47 @@ import * as fs7 from "fs";
 import * as os3 from "os";
 import * as path9 from "path";
 import { minimatch } from "minimatch";
+
+// src/utils/async-mutex.ts
+var AsyncMutex = class {
+  locked = false;
+  queue = [];
+  async acquire() {
+    if (!this.locked) {
+      this.locked = true;
+      return;
+    }
+    return new Promise((resolve4) => {
+      this.queue.push(resolve4);
+    });
+  }
+  release() {
+    const next = this.queue.shift();
+    if (next) {
+      next();
+    } else {
+      this.locked = false;
+    }
+  }
+  isLocked() {
+    return this.locked;
+  }
+  get queueLength() {
+    return this.queue.length;
+  }
+};
+
+// src/adapters/claude/session/repo-path.ts
+async function resolveMainRepoPath(cwd) {
+  try {
+    const worktrees = await listWorktrees(cwd);
+    return worktrees[0]?.path ?? cwd;
+  } catch {
+    return cwd;
+  }
+}
+
+// src/adapters/claude/session/settings.ts
 var ACP_TOOL_NAME_PREFIX = "mcp__acp__";
 var acpToolNames = {
   read: `${ACP_TOOL_NAME_PREFIX}Read`,
@@ -14988,7 +15124,7 @@ function matchesGlob(pattern, filePath, cwd) {
   });
 }
 function matchesRule(rule, toolName, toolInput, cwd) {
-  const ruleAppliesToTool = rule.toolName === "Bash" && toolName === acpToolNames.bash || rule.toolName === "Edit" && FILE_EDITING_TOOLS.includes(toolName) || rule.toolName === "Read" && FILE_READING_TOOLS.includes(toolName);
+  const ruleAppliesToTool = rule.toolName === "Bash" && toolName === acpToolNames.bash || rule.toolName === "Edit" && FILE_EDITING_TOOLS.includes(toolName) || rule.toolName === "Read" && FILE_READING_TOOLS.includes(toolName) || rule.toolName === toolName && !rule.argument;
   if (!ruleAppliesToTool) {
     return false;
   }
@@ -15018,6 +15154,19 @@ function matchesRule(rule, toolName, toolInput, cwd) {
   }
   return matchesGlob(rule.argument, actualArg, cwd);
 }
+function formatRule(rule) {
+  return rule.ruleContent ? `${rule.toolName}(${rule.ruleContent})` : rule.toolName;
+}
+async function writeFileAtomic(filePath, data) {
+  const tmpPath = `${filePath}.${process.pid}.${Date.now()}.tmp`;
+  await fs7.promises.writeFile(tmpPath, data);
+  try {
+    await fs7.promises.rename(tmpPath, filePath);
+  } catch (error) {
+    await fs7.promises.rm(tmpPath, { force: true });
+    throw error;
+  }
+}
 async function loadSettingsFile(filePath) {
   if (!filePath) {
     return {};
@@ -15036,6 +15185,17 @@ async function loadSettingsFile(filePath) {
     return {};
   }
 }
+async function readSettingsFileForUpdate(filePath) {
+  try {
+    const content = await fs7.promises.readFile(filePath, "utf-8");
+    return JSON.parse(content);
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+      return {};
+    }
+    throw error;
+  }
+}
 function getManagedSettingsPath() {
   switch (process.platform) {
     case "darwin":
@@ -15050,6 +15210,7 @@ function getManagedSettingsPath() {
 }
 var SettingsManager = class {
   cwd;
+  repoRoot;
   userSettings = {};
   projectSettings = {};
   localSettings = {};
@@ -15057,8 +15218,10 @@ var SettingsManager = class {
   mergedSettings = {};
   initialized = false;
   initPromise = null;
+  writeMutex = new AsyncMutex();
   constructor(cwd) {
     this.cwd = cwd;
+    this.repoRoot = cwd;
   }
   async initialize() {
     if (this.initialized) return;
@@ -15076,10 +15239,16 @@ var SettingsManager = class {
   getProjectSettingsPath() {
     return path9.join(this.cwd, ".claude", "settings.json");
   }
+  /**
+   * Local settings are anchored to the primary worktree so every worktree of
+   * the same repository shares a single `.claude/settings.local.json`. This
+   * avoids re-prompting for the same permission in every worktree.
+   */
   getLocalSettingsPath() {
-    return path9.join(this.cwd, ".claude", "settings.local.json");
+    return path9.join(this.repoRoot, ".claude", "settings.local.json");
   }
   async loadAllSettings() {
+    this.repoRoot = await resolveMainRepoPath(this.cwd);
     const [userSettings, projectSettings, localSettings, enterpriseSettings] = await Promise.all([
       loadSettingsFile(this.getUserSettingsPath()),
       loadSettingsFile(this.getProjectSettingsPath()),
@@ -15136,9 +15305,6 @@ var SettingsManager = class {
     this.mergedSettings = merged;
   }
   checkPermission(toolName, toolInput) {
-    if (!toolName.startsWith(ACP_TOOL_NAME_PREFIX)) {
-      return { decision: "ask" };
-    }
     const permissions = this.mergedSettings.permissions;
     if (!permissions) {
       return { decision: "ask" };
@@ -15169,6 +15335,43 @@ var SettingsManager = class {
   getCwd() {
     return this.cwd;
   }
+  getRepoRoot() {
+    return this.repoRoot;
+  }
+  /**
+   * Persists allow rules to `<primary-worktree>/.claude/settings.local.json`.
+   * Because local settings are resolved against the primary worktree, every
+   * worktree of the same repository picks up the new rule on next load.
+   *
+   * Writes are serialised via `writeMutex` to prevent concurrent callers from
+   * clobbering each other, and use a temp-file + rename to keep the file
+   * consistent if the process dies mid-write.
+   */
+  async addAllowRules(rules) {
+    if (rules.length === 0) return;
+    if (!this.initialized) await this.initialize();
+    await this.writeMutex.acquire();
+    try {
+      const filePath = this.getLocalSettingsPath();
+      const existing = await readSettingsFileForUpdate(filePath);
+      const permissions = {
+        ...existing.permissions ?? {}
+      };
+      const current2 = new Set(permissions.allow ?? []);
+      for (const rule of rules) {
+        current2.add(formatRule(rule));
+      }
+      permissions.allow = Array.from(current2);
+      const next = { ...existing, permissions };
+      await fs7.promises.mkdir(path9.dirname(filePath), { recursive: true });
+      await writeFileAtomic(filePath, `${JSON.stringify(next, null, 2)}
+`);
+      this.localSettings = next;
+      this.mergeAllSettings();
+    } finally {
+      this.writeMutex.release();
+    }
+  }
   async setCwd(cwd) {
     if (this.cwd === cwd) return;
     if (this.initPromise) await this.initPromise;
@@ -16524,7 +16727,7 @@ function parseCodexToml(content, cwd) {
 // src/adapters/codex/spawn.ts
 import { spawn as spawn3 } from "child_process";
 import { existsSync as existsSync4 } from "fs";
-import { delimiter, dirname as dirname3 } from "path";
+import { delimiter, dirname as dirname4 } from "path";
 function buildConfigArgs(options) {
   const args2 = [];
   args2.push("-c", `features.remote_models=false`);
@@ -16575,7 +16778,7 @@ function spawnCodexProcess(options) {
   }
   const { command, args: args2 } = findCodexBinary(options);
   if (options.binaryPath && existsSync4(options.binaryPath)) {
-    const binDir = dirname3(options.binaryPath);
+    const binDir = dirname4(options.binaryPath);
     env.PATH = `${binDir}${delimiter}${env.PATH ?? ""}`;
   }
   logger.info("Spawning codex-acp process", {
@@ -18758,35 +18961,6 @@ var SessionLogWriter = class _SessionLogWriter {
   }
 };
 
-// src/utils/async-mutex.ts
-var AsyncMutex = class {
-  locked = false;
-  queue = [];
-  async acquire() {
-    if (!this.locked) {
-      this.locked = true;
-      return;
-    }
-    return new Promise((resolve4) => {
-      this.queue.push(resolve4);
-    });
-  }
-  release() {
-    const next = this.queue.shift();
-    if (next) {
-      next();
-    } else {
-      this.locked = false;
-    }
-  }
-  isLocked() {
-    return this.locked;
-  }
-  get queueLength() {
-    return this.queue.length;
-  }
-};
-
 // src/server/cloud-prompt.ts
 function normalizeCloudPromptContent(content) {
   if (typeof content === "string") {