@posthog/agent 2.3.403 → 2.3.418

package/dist/execution-mode.js

@@ -1,8 +1,8 @@
 // src/utils/common.ts
 var IS_ROOT = typeof process !== "undefined" && (process.geteuid?.() ?? process.getuid?.()) === 0;
+var ALLOW_BYPASS = !IS_ROOT || !!process.env.IS_SANDBOX;
 
 // src/execution-mode.ts
-var ALLOW_BYPASS = !IS_ROOT;
 var availableModes = [
   {
     id: "default",
@@ -45,7 +45,7 @@ function isCodeExecutionMode(mode) {
   return CODE_EXECUTION_MODES.includes(mode);
 }
 function getAvailableModes() {
-  return IS_ROOT ? availableModes.filter((m) => m.id !== "bypassPermissions") : availableModes;
+  return ALLOW_BYPASS ? availableModes : availableModes.filter((m) => m.id !== "bypassPermissions");
 }
 var CODEX_NATIVE_MODES = ["auto", "read-only", "full-access"];
 function isCodexNativeMode(mode) {
@@ -71,7 +71,7 @@ if (ALLOW_BYPASS) {
   });
 }
 function getAvailableCodexModes() {
-  return IS_ROOT ? codexModes.filter((m) => m.id !== "full-access") : codexModes;
+  return ALLOW_BYPASS ? codexModes : codexModes.filter((m) => m.id !== "full-access");
 }
 export {
   CODEX_NATIVE_MODES,

package/dist/execution-mode.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/utils/common.ts","../src/execution-mode.ts"],"sourcesContent":["import type { Logger } from \"./logger\";\n\n/**\n * Races an operation against a timeout.\n * Returns success with the value if the operation completes in time,\n * or timeout if the operation takes longer than the specified duration.\n */\nexport async function withTimeout<T>(\n  operation: Promise<T>,\n  timeoutMs: number,\n): Promise<{ result: \"success\"; value: T } | { result: \"timeout\" }> {\n  const timeoutPromise = new Promise<{ result: \"timeout\" }>((resolve) =>\n    setTimeout(() => resolve({ result: \"timeout\" }), timeoutMs),\n  );\n  const operationPromise = operation.then((value) => ({\n    result: \"success\" as const,\n    value,\n  }));\n  return Promise.race([operationPromise, timeoutPromise]);\n}\n\nexport const IS_ROOT =\n  typeof process !== \"undefined\" &&\n  (process.geteuid?.() ?? process.getuid?.()) === 0;\n\nexport function unreachable(value: never, logger: Logger): void {\n  let valueAsString: string;\n  try {\n    valueAsString = JSON.stringify(value);\n  } catch {\n    valueAsString = String(value);\n  }\n  logger.error(`Unexpected case: ${valueAsString}`);\n}\n","import { IS_ROOT } from \"./utils/common\";\n\nexport interface ModeInfo {\n  id: string;\n  name: string;\n  description: string;\n}\n\n// Helper constant that can easily be toggled for env/feature flag/etc\nconst ALLOW_BYPASS = !IS_ROOT;\n\nconst availableModes: ModeInfo[] = [\n  {\n    id: \"default\",\n    name: \"Default\",\n    description: \"Standard behavior, prompts for dangerous operations\",\n  },\n  {\n    id: \"acceptEdits\",\n    name: \"Accept Edits\",\n    description: \"Auto-accept file edit operations\",\n  },\n  {\n    id: \"plan\",\n    name: \"Plan Mode\",\n    description: \"Planning mode, no actual tool execution\",\n  },\n];\n\nif (ALLOW_BYPASS) {\n  availableModes.push(\n    {\n      id: \"bypassPermissions\",\n      name: \"Bypass Permissions\",\n      description: \"Auto-accept all permission requests\",\n    },\n    {\n      id: \"auto\",\n      name: \"Auto Mode\",\n      description: \"Use a model classifier to approve/deny permission prompts\",\n    },\n  );\n}\n\n// Expose execution mode IDs in type-safe order for type checks\nexport const CODE_EXECUTION_MODES = [\n  \"default\",\n  \"acceptEdits\",\n  \"plan\",\n  \"bypassPermissions\",\n  \"auto\",\n] as const;\n\nexport type CodeExecutionMode = (typeof CODE_EXECUTION_MODES)[number];\n\nexport function isCodeExecutionMode(mode: string): mode is CodeExecutionMode {\n  return (CODE_EXECUTION_MODES as readonly string[]).includes(mode);\n}\n\nexport function getAvailableModes(): ModeInfo[] {\n  return IS_ROOT\n    ? availableModes.filter((m) => m.id !== \"bypassPermissions\")\n    : availableModes;\n}\n\n// --- Codex-native modes ---\n\nexport const CODEX_NATIVE_MODES = [\"auto\", \"read-only\", \"full-access\"] as const;\n\nexport type CodexNativeMode = (typeof CODEX_NATIVE_MODES)[number];\n\n/** Union of all permission mode IDs across adapters */\nexport type PermissionMode = CodeExecutionMode | CodexNativeMode;\n\nexport function isCodexNativeMode(mode: string): mode is CodexNativeMode {\n  return (CODEX_NATIVE_MODES as readonly string[]).includes(mode);\n}\n\nconst codexModes: ModeInfo[] = [\n  {\n    id: \"read-only\",\n    name: \"Read Only\",\n    description: \"Read-only access, no file modifications\",\n  },\n  {\n    id: \"auto\",\n    name: \"Auto\",\n    description: \"Standard behavior, prompts for dangerous operations\",\n  },\n];\n\nif (ALLOW_BYPASS) {\n  codexModes.push({\n    id: \"full-access\",\n    name: \"Full Access\",\n    description: \"Auto-accept all permission requests\",\n  });\n}\n\nexport function getAvailableCodexModes(): ModeInfo[] {\n  return IS_ROOT\n    ? codexModes.filter((m) => m.id !== \"full-access\")\n    : codexModes;\n}\n"],"mappings":";AAqBO,IAAM,UACX,OAAO,YAAY,gBAClB,QAAQ,UAAU,KAAK,QAAQ,SAAS,OAAO;;;ACdlD,IAAM,eAAe,CAAC;AAEtB,IAAM,iBAA6B;AAAA,EACjC;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AACF;AAEA,IAAI,cAAc;AAChB,iBAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,aAAa;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,aAAa;AAAA,IACf;AAAA,EACF;AACF;AAGO,IAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIO,SAAS,oBAAoB,MAAyC;AAC3E,SAAQ,qBAA2C,SAAS,IAAI;AAClE;AAEO,SAAS,oBAAgC;AAC9C,SAAO,UACH,eAAe,OAAO,CAAC,MAAM,EAAE,OAAO,mBAAmB,IACzD;AACN;AAIO,IAAM,qBAAqB,CAAC,QAAQ,aAAa,aAAa;AAO9D,SAAS,kBAAkB,MAAuC;AACvE,SAAQ,mBAAyC,SAAS,IAAI;AAChE;AAEA,IAAM,aAAyB;AAAA,EAC7B;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AACF;AAEA,IAAI,cAAc;AAChB,aAAW,KAAK;AAAA,IACd,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf,CAAC;AACH;AAEO,SAAS,yBAAqC;AACnD,SAAO,UACH,WAAW,OAAO,CAAC,MAAM,EAAE,OAAO,aAAa,IAC/C;AACN;","names":[]}
+{"version":3,"sources":["../src/utils/common.ts","../src/execution-mode.ts"],"sourcesContent":["import type { Logger } from \"./logger\";\n\n/**\n * Races an operation against a timeout.\n * Returns success with the value if the operation completes in time,\n * or timeout if the operation takes longer than the specified duration.\n */\nexport async function withTimeout<T>(\n  operation: Promise<T>,\n  timeoutMs: number,\n): Promise<{ result: \"success\"; value: T } | { result: \"timeout\" }> {\n  const timeoutPromise = new Promise<{ result: \"timeout\" }>((resolve) =>\n    setTimeout(() => resolve({ result: \"timeout\" }), timeoutMs),\n  );\n  const operationPromise = operation.then((value) => ({\n    result: \"success\" as const,\n    value,\n  }));\n  return Promise.race([operationPromise, timeoutPromise]);\n}\n\nexport const IS_ROOT =\n  typeof process !== \"undefined\" &&\n  (process.geteuid?.() ?? process.getuid?.()) === 0;\n\nexport const ALLOW_BYPASS = !IS_ROOT || !!process.env.IS_SANDBOX;\n\nexport function unreachable(value: never, logger: Logger): void {\n  let valueAsString: string;\n  try {\n    valueAsString = JSON.stringify(value);\n  } catch {\n    valueAsString = String(value);\n  }\n  logger.error(`Unexpected case: ${valueAsString}`);\n}\n","import { ALLOW_BYPASS } from \"./utils/common\";\n\nexport interface ModeInfo {\n  id: string;\n  name: string;\n  description: string;\n}\n\nconst availableModes: ModeInfo[] = [\n  {\n    id: \"default\",\n    name: \"Default\",\n    description: \"Standard behavior, prompts for dangerous operations\",\n  },\n  {\n    id: \"acceptEdits\",\n    name: \"Accept Edits\",\n    description: \"Auto-accept file edit operations\",\n  },\n  {\n    id: \"plan\",\n    name: \"Plan Mode\",\n    description: \"Planning mode, no actual tool execution\",\n  },\n];\n\nif (ALLOW_BYPASS) {\n  availableModes.push(\n    {\n      id: \"bypassPermissions\",\n      name: \"Bypass Permissions\",\n      description: \"Auto-accept all permission requests\",\n    },\n    {\n      id: \"auto\",\n      name: \"Auto Mode\",\n      description: \"Use a model classifier to approve/deny permission prompts\",\n    },\n  );\n}\n\n// Expose execution mode IDs in type-safe order for type checks\nexport const CODE_EXECUTION_MODES = [\n  \"default\",\n  \"acceptEdits\",\n  \"plan\",\n  \"bypassPermissions\",\n  \"auto\",\n] as const;\n\nexport type CodeExecutionMode = (typeof CODE_EXECUTION_MODES)[number];\n\nexport function isCodeExecutionMode(mode: string): mode is CodeExecutionMode {\n  return (CODE_EXECUTION_MODES as readonly string[]).includes(mode);\n}\n\nexport function getAvailableModes(): ModeInfo[] {\n  return ALLOW_BYPASS\n    ? availableModes\n    : availableModes.filter((m) => m.id !== \"bypassPermissions\");\n}\n\n// --- Codex-native modes ---\n\nexport const CODEX_NATIVE_MODES = [\"auto\", \"read-only\", \"full-access\"] as const;\n\nexport type CodexNativeMode = (typeof CODEX_NATIVE_MODES)[number];\n\n/** Union of all permission mode IDs across adapters */\nexport type PermissionMode = CodeExecutionMode | CodexNativeMode;\n\nexport function isCodexNativeMode(mode: string): mode is CodexNativeMode {\n  return (CODEX_NATIVE_MODES as readonly string[]).includes(mode);\n}\n\nconst codexModes: ModeInfo[] = [\n  {\n    id: \"read-only\",\n    name: \"Read Only\",\n    description: \"Read-only access, no file modifications\",\n  },\n  {\n    id: \"auto\",\n    name: \"Auto\",\n    description: \"Standard behavior, prompts for dangerous operations\",\n  },\n];\n\nif (ALLOW_BYPASS) {\n  codexModes.push({\n    id: \"full-access\",\n    name: \"Full Access\",\n    description: \"Auto-accept all permission requests\",\n  });\n}\n\nexport function getAvailableCodexModes(): ModeInfo[] {\n  return ALLOW_BYPASS\n    ? codexModes\n    : codexModes.filter((m) => m.id !== \"full-access\");\n}\n"],"mappings":";AAqBO,IAAM,UACX,OAAO,YAAY,gBAClB,QAAQ,UAAU,KAAK,QAAQ,SAAS,OAAO;AAE3C,IAAM,eAAe,CAAC,WAAW,CAAC,CAAC,QAAQ,IAAI;;;ACjBtD,IAAM,iBAA6B;AAAA,EACjC;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AACF;AAEA,IAAI,cAAc;AAChB,iBAAe;AAAA,IACb;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,aAAa;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,aAAa;AAAA,IACf;AAAA,EACF;AACF;AAGO,IAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIO,SAAS,oBAAoB,MAAyC;AAC3E,SAAQ,qBAA2C,SAAS,IAAI;AAClE;AAEO,SAAS,oBAAgC;AAC9C,SAAO,eACH,iBACA,eAAe,OAAO,CAAC,MAAM,EAAE,OAAO,mBAAmB;AAC/D;AAIO,IAAM,qBAAqB,CAAC,QAAQ,aAAa,aAAa;AAO9D,SAAS,kBAAkB,MAAuC;AACvE,SAAQ,mBAAyC,SAAS,IAAI;AAChE;AAEA,IAAM,aAAyB;AAAA,EAC7B;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AACF;AAEA,IAAI,cAAc;AAChB,aAAW,KAAK;AAAA,IACd,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf,CAAC;AACH;AAEO,SAAS,yBAAqC;AACnD,SAAO,eACH,aACA,WAAW,OAAO,CAAC,MAAM,EAAE,OAAO,aAAa;AACrD;","names":[]}

package/dist/posthog-api.js

@@ -1,7 +1,7 @@
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.403",
+  version: "2.3.418",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {

package/dist/posthog-api.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../package.json","../src/utils/gateway.ts","../src/posthog-api.ts"],"sourcesContent":["{\n  \"name\": \"@posthog/agent\",\n  \"version\": \"2.3.403\",\n  \"repository\": \"https://github.com/PostHog/code\",\n  \"description\": \"TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\"\n    },\n    \"./agent\": {\n      \"types\": \"./dist/agent.d.ts\",\n      \"import\": \"./dist/agent.js\"\n    },\n    \"./gateway-models\": {\n      \"types\": \"./dist/gateway-models.d.ts\",\n      \"import\": \"./dist/gateway-models.js\"\n    },\n    \"./posthog-api\": {\n      \"types\": \"./dist/posthog-api.d.ts\",\n      \"import\": \"./dist/posthog-api.js\"\n    },\n    \"./types\": {\n      \"types\": \"./dist/types.d.ts\",\n      \"import\": \"./dist/types.js\"\n    },\n    \"./adapters/claude/questions/utils\": {\n      \"types\": \"./dist/adapters/claude/questions/utils.d.ts\",\n      \"import\": \"./dist/adapters/claude/questions/utils.js\"\n    },\n    \"./adapters/claude/permissions/permission-options\": {\n      \"types\": \"./dist/adapters/claude/permissions/permission-options.d.ts\",\n      \"import\": \"./dist/adapters/claude/permissions/permission-options.js\"\n    },\n    \"./adapters/claude/tools\": {\n      \"types\": \"./dist/adapters/claude/tools.d.ts\",\n      \"import\": \"./dist/adapters/claude/tools.js\"\n    },\n    \"./adapters/claude/conversion/tool-use-to-acp\": {\n      \"types\": \"./dist/adapters/claude/conversion/tool-use-to-acp.d.ts\",\n      \"import\": \"./dist/adapters/claude/conversion/tool-use-to-acp.js\"\n    },\n    \"./adapters/claude/session/jsonl-hydration\": {\n      \"types\": \"./dist/adapters/claude/session/jsonl-hydration.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/jsonl-hydration.js\"\n    },\n    \"./adapters/claude/session/models\": {\n      \"types\": \"./dist/adapters/claude/session/models.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/models.js\"\n    },\n    \"./adapters/reasoning-effort\": {\n      \"types\": \"./dist/adapters/reasoning-effort.d.ts\",\n      \"import\": \"./dist/adapters/reasoning-effort.js\"\n    },\n    \"./adapters/claude/mcp/tool-metadata\": {\n      \"types\": \"./dist/adapters/claude/mcp/tool-metadata.d.ts\",\n      \"import\": \"./dist/adapters/claude/mcp/tool-metadata.js\"\n    },\n    \"./execution-mode\": {\n      \"types\": \"./dist/execution-mode.d.ts\",\n      \"import\": \"./dist/execution-mode.js\"\n    },\n    \"./resume\": {\n      \"types\": \"./dist/resume.d.ts\",\n      \"import\": \"./dist/resume.js\"\n    },\n    \"./handoff-checkpoint\": {\n      \"types\": \"./dist/handoff-checkpoint.d.ts\",\n      \"import\": \"./dist/handoff-checkpoint.js\"\n    },\n    \"./server\": {\n      \"types\": \"./dist/server/agent-server.d.ts\",\n      \"import\": \"./dist/server/agent-server.js\"\n    },\n    \"./server/schemas\": {\n      \"types\": \"./dist/server/schemas.d.ts\",\n      \"import\": \"./dist/server/schemas.js\"\n    }\n  },\n  \"bin\": {\n    \"agent-server\": \"./dist/server/bin.cjs\"\n  },\n  \"type\": \"module\",\n  \"keywords\": [\n    \"posthog\",\n    \"claude\",\n    \"agent\",\n    \"ai\",\n    \"git\",\n    \"typescript\"\n  ],\n  \"author\": \"PostHog\",\n  \"license\": \"SEE LICENSE IN LICENSE\",\n  \"scripts\": {\n    \"build\": \"node ../../scripts/rimraf.mjs dist && tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"pnpm exec tsc --noEmit\",\n    \"prepublishOnly\": \"pnpm run build\",\n    \"clean\": \"node ../../scripts/rimraf.mjs dist .turbo\"\n  },\n  \"engines\": {\n    \"node\": \">=20.0.0\"\n  },\n  \"devDependencies\": {\n    \"@posthog/shared\": \"workspace:*\",\n    \"@posthog/git\": \"workspace:*\",\n    \"@posthog/enricher\": \"workspace:*\",\n    \"@types/bun\": \"latest\",\n    \"@types/tar\": \"^6.1.13\",\n    \"msw\": \"^2.12.7\",\n    \"tsup\": \"^8.5.1\",\n    \"tsx\": \"^4.20.6\",\n    \"typescript\": \"^5.5.0\",\n    \"vitest\": \"^2.1.8\"\n  },\n  \"dependencies\": {\n    \"@agentclientprotocol/sdk\": \"0.19.0\",\n    \"ajv\": \"^8.17.1\",\n    \"@anthropic-ai/claude-agent-sdk\": \"0.2.112\",\n    \"@anthropic-ai/sdk\": \"0.89.0\",\n    \"@hono/node-server\": \"^1.19.9\",\n    \"@opentelemetry/api-logs\": \"^0.208.0\",\n    \"@opentelemetry/exporter-logs-otlp-http\": \"^0.208.0\",\n    \"@opentelemetry/resources\": \"^2.0.0\",\n    \"@opentelemetry/sdk-logs\": \"^0.208.0\",\n    \"@opentelemetry/semantic-conventions\": \"^1.28.0\",\n    \"@types/jsonwebtoken\": \"^9.0.10\",\n    \"commander\": \"^14.0.2\",\n    \"hono\": \"^4.11.7\",\n    \"jsonwebtoken\": \"^9.0.2\",\n    \"minimatch\": \"^10.0.3\",\n    \"tar\": \"^7.5.0\",\n    \"uuid\": \"13.0.0\",\n    \"yoga-wasm-web\": \"^0.3.3\",\n    \"zod\": \"^4.2.0\"\n  },\n  \"files\": [\n    \"dist/**/*\",\n    \"src/**/*\",\n    \"README.md\",\n    \"CLAUDE.md\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\"\n  }\n}\n","export type GatewayProduct = \"posthog_code\" | \"background_agents\";\n\nfunction getGatewayBaseUrl(posthogHost: string): string {\n  const url = new URL(posthogHost);\n  const hostname = url.hostname;\n\n  if (hostname === \"localhost\" || hostname === \"127.0.0.1\") {\n    return `${url.protocol}//localhost:3308`;\n  }\n\n  if (hostname === \"host.docker.internal\") {\n    return `${url.protocol}//host.docker.internal:3308`;\n  }\n\n  const region = hostname.match(/^(us|eu)\\.posthog\\.com$/)?.[1] ?? \"us\";\n  return `https://gateway.${region}.posthog.com`;\n}\n\nexport function getLlmGatewayUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/${product}`;\n}\n\nexport function getGatewayUsageUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/v1/usage/${product}`;\n}\n\nexport function getGatewayInvalidatePlanCacheUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/v1/usage/${product}/invalidate-plan-cache`;\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\nimport type {\n  ArtifactType,\n  PostHogAPIConfig,\n  StoredEntry,\n  Task,\n  TaskRun,\n  TaskRunArtifact,\n} from \"./types\";\nimport {\n  getGatewayInvalidatePlanCacheUrl,\n  getGatewayUsageUrl,\n  getLlmGatewayUrl,\n} from \"./utils/gateway\";\n\nexport {\n  getGatewayInvalidatePlanCacheUrl,\n  getGatewayUsageUrl,\n  getLlmGatewayUrl,\n};\n\nconst DEFAULT_USER_AGENT = `posthog/agent.hog.dev; version: ${packageJson.version}`;\n\nexport interface TaskArtifactUploadPayload {\n  name: string;\n  type: ArtifactType;\n  content: string;\n  content_type?: string;\n}\n\nexport type TaskRunUpdate = Partial<\n  Pick<\n    TaskRun,\n    | \"status\"\n    | \"branch\"\n    | \"stage\"\n    | \"error_message\"\n    | \"output\"\n    | \"state\"\n    | \"environment\"\n  >\n> & {\n  state_remove_keys?: string[];\n};\n\nexport class PostHogAPIClient {\n  private config: PostHogAPIConfig;\n\n  constructor(config: PostHogAPIConfig) {\n    this.config = config;\n  }\n\n  private get baseUrl(): string {\n    const host = this.config.apiUrl.endsWith(\"/\")\n      ? this.config.apiUrl.slice(0, -1)\n      : this.config.apiUrl;\n    return host;\n  }\n\n  private isAuthFailure(status: number): boolean {\n    return status === 401 || status === 403;\n  }\n\n  private async resolveApiKey(forceRefresh = false): Promise<string> {\n    if (forceRefresh && this.config.refreshApiKey) {\n      return this.config.refreshApiKey();\n    }\n\n    return this.config.getApiKey();\n  }\n\n  private async buildHeaders(\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Headers> {\n    const headers = new Headers(options.headers);\n    headers.set(\n      \"Authorization\",\n      `Bearer ${await this.resolveApiKey(forceRefresh)}`,\n    );\n    headers.set(\"Content-Type\", \"application/json\");\n    headers.set(\"User-Agent\", this.config.userAgent ?? DEFAULT_USER_AGENT);\n    return headers;\n  }\n\n  private async performRequest(\n    endpoint: string,\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Response> {\n    const url = `${this.baseUrl}${endpoint}`;\n\n    return fetch(url, {\n      ...options,\n      headers: await this.buildHeaders(options, forceRefresh),\n    });\n  }\n\n  private async performRequestWithRetry(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<Response> {\n    let response = await this.performRequest(endpoint, options);\n\n    if (!response.ok && this.isAuthFailure(response.status)) {\n      response = await this.performRequest(endpoint, options, true);\n    }\n\n    return response;\n  }\n\n  private async apiRequest<T>(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<T> {\n    const response = await this.performRequestWithRetry(endpoint, options);\n\n    if (!response.ok) {\n      let errorMessage: string;\n      try {\n        const errorResponse = await response.json();\n        errorMessage = `Failed request: [${response.status}] ${JSON.stringify(errorResponse)}`;\n      } catch {\n        errorMessage = `Failed request: [${response.status}] ${response.statusText}`;\n      }\n      throw new Error(errorMessage);\n    }\n\n    return response.json();\n  }\n\n  private getTeamId(): number {\n    return this.config.projectId;\n  }\n\n  async getApiKey(forceRefresh = false): Promise<string> {\n    return this.resolveApiKey(forceRefresh);\n  }\n\n  getLlmGatewayUrl(): string {\n    return getLlmGatewayUrl(this.baseUrl);\n  }\n\n  async getTask(taskId: string): Promise<Task> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<Task>(`/api/projects/${teamId}/tasks/${taskId}/`);\n  }\n\n  async getTaskRun(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n    );\n  }\n\n  async resumeRunInCloud(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/resume_in_cloud/`,\n      { method: \"POST\" },\n    );\n  }\n\n  async updateTaskRun(\n    taskId: string,\n    runId: string,\n    payload: TaskRunUpdate,\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(payload),\n      },\n    );\n  }\n\n  async setTaskRunOutput(\n    taskId: string,\n    runId: string,\n    output: Record<string, unknown>,\n  ): Promise<TaskRun> {\n    return this.apiRequest(\n      `/api/projects/${this.getTeamId()}/tasks/${taskId}/runs/${runId}/set_output/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(output),\n      },\n    );\n  }\n\n  async appendTaskRunLog(\n    taskId: string,\n    runId: string,\n    entries: StoredEntry[],\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/append_log/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ entries }),\n      },\n    );\n  }\n\n  async relayMessage(\n    taskId: string,\n    runId: string,\n    text: string,\n  ): Promise<void> {\n    const teamId = this.getTeamId();\n    await this.apiRequest<{ status: string }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/relay_message/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ text }),\n      },\n    );\n  }\n\n  async uploadTaskArtifacts(\n    taskId: string,\n    runId: string,\n    artifacts: TaskArtifactUploadPayload[],\n  ): Promise<TaskRunArtifact[]> {\n    if (!artifacts.length) {\n      return [];\n    }\n\n    const teamId = this.getTeamId();\n    const response = await this.apiRequest<{ artifacts: TaskRunArtifact[] }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ artifacts }),\n      },\n    );\n\n    const manifest = response.artifacts ?? [];\n\n    // The backend returns the full run artifact manifest after each upload.\n    // Callers want the artifacts corresponding to this upload request only.\n    return manifest.slice(-artifacts.length);\n  }\n\n  /**\n   * Download artifact content by storage path\n   * Streams the file through the PostHog backend so the sandbox does not need\n   * direct access to object storage.\n   */\n  async downloadArtifact(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<ArrayBuffer | null> {\n    const teamId = this.getTeamId();\n\n    try {\n      const response = await this.performRequestWithRetry(\n        `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/download/`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ storage_path: storagePath }),\n        },\n      );\n      if (!response.ok) {\n        throw new Error(`Failed to download artifact: ${response.status}`);\n      }\n      return response.arrayBuffer();\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Fetch logs for a task run via the logs API endpoint\n   * @param taskRun - The task run to fetch logs for\n   * @returns Array of stored entries, or empty array if no logs available\n   */\n  async fetchTaskRunLogs(taskRun: TaskRun): Promise<StoredEntry[]> {\n    const teamId = this.getTeamId();\n    const endpoint = `/api/projects/${teamId}/tasks/${taskRun.task}/runs/${taskRun.id}/logs`;\n\n    try {\n      const response = await this.performRequestWithRetry(endpoint);\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          return [];\n        }\n        throw new Error(\n          `Failed to fetch logs: ${response.status} ${response.statusText}`,\n        );\n      }\n\n      const content = await response.text();\n\n      if (!content.trim()) {\n        return [];\n      }\n\n      // Parse newline-delimited JSON\n      return content\n        .trim()\n        .split(\"\\n\")\n        .map((line) => JSON.parse(line) as StoredEntry);\n    } catch (error) {\n      throw new Error(\n        `Failed to fetch task run logs: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n}\n"],"mappings":";AAAA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,YAAc;AAAA,EACd,aAAe;AAAA,EACf,SAAW;AAAA,IACT,KAAK;AAAA,MACH,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,iBAAiB;AAAA,MACf,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,qCAAqC;AAAA,MACnC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oDAAoD;AAAA,MAClD,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,2BAA2B;AAAA,MACzB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,gDAAgD;AAAA,MAC9C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,6CAA6C;AAAA,MAC3C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oCAAoC;AAAA,MAClC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,+BAA+B;AAAA,MAC7B,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,uCAAuC;AAAA,MACrC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,wBAAwB;AAAA,MACtB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,KAAO;AAAA,IACL,gBAAgB;AAAA,EAClB;AAAA,EACA,MAAQ;AAAA,EACR,UAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,QAAU;AAAA,EACV,SAAW;AAAA,EACX,SAAW;AAAA,IACT,OAAS;AAAA,IACT,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,cAAc;AAAA,IACd,WAAa;AAAA,IACb,gBAAkB;AAAA,IAClB,OAAS;AAAA,EACX;AAAA,EACA,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,iBAAmB;AAAA,IACjB,mBAAmB;AAAA,IACnB,gBAAgB;AAAA,IAChB,qBAAqB;AAAA,IACrB,cAAc;AAAA,IACd,cAAc;AAAA,IACd,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,KAAO;AAAA,IACP,YAAc;AAAA,IACd,QAAU;AAAA,EACZ;AAAA,EACA,cAAgB;AAAA,IACd,4BAA4B;AAAA,IAC5B,KAAO;AAAA,IACP,kCAAkC;AAAA,IAClC,qBAAqB;AAAA,IACrB,qBAAqB;AAAA,IACrB,2BAA2B;AAAA,IAC3B,0CAA0C;AAAA,IAC1C,4BAA4B;AAAA,IAC5B,2BAA2B;AAAA,IAC3B,uCAAuC;AAAA,IACvC,uBAAuB;AAAA,IACvB,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,cAAgB;AAAA,IAChB,WAAa;AAAA,IACb,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,iBAAiB;AAAA,IACjB,KAAO;AAAA,EACT;AAAA,EACA,OAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,eAAiB;AAAA,IACf,QAAU;AAAA,EACZ;AACF;;;ACjJA,SAAS,kBAAkB,aAA6B;AACtD,QAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,QAAM,WAAW,IAAI;AAErB,MAAI,aAAa,eAAe,aAAa,aAAa;AACxD,WAAO,GAAG,IAAI,QAAQ;AAAA,EACxB;AAEA,MAAI,aAAa,wBAAwB;AACvC,WAAO,GAAG,IAAI,QAAQ;AAAA,EACxB;AAEA,QAAM,SAAS,SAAS,MAAM,yBAAyB,IAAI,CAAC,KAAK;AACjE,SAAO,mBAAmB,MAAM;AAClC;AAEO,SAAS,iBACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,IAAI,OAAO;AACrD;AAEO,SAAS,mBACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,aAAa,OAAO;AAC9D;AAEO,SAAS,iCACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,aAAa,OAAO;AAC9D;;;AChBA,IAAM,qBAAqB,mCAAmC,gBAAY,OAAO;AAwB1E,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EAER,YAAY,QAA0B;AACpC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAY,UAAkB;AAC5B,UAAM,OAAO,KAAK,OAAO,OAAO,SAAS,GAAG,IACxC,KAAK,OAAO,OAAO,MAAM,GAAG,EAAE,IAC9B,KAAK,OAAO;AAChB,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc,QAAyB;AAC7C,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAAA,EAEA,MAAc,cAAc,eAAe,OAAwB;AACjE,QAAI,gBAAgB,KAAK,OAAO,eAAe;AAC7C,aAAO,KAAK,OAAO,cAAc;AAAA,IACnC;AAEA,WAAO,KAAK,OAAO,UAAU;AAAA,EAC/B;AAAA,EAEA,MAAc,aACZ,SACA,eAAe,OACG;AAClB,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,YAAQ;AAAA,MACN;AAAA,MACA,UAAU,MAAM,KAAK,cAAc,YAAY,CAAC;AAAA,IAClD;AACA,YAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,YAAQ,IAAI,cAAc,KAAK,OAAO,aAAa,kBAAkB;AACrE,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,eACZ,UACA,SACA,eAAe,OACI;AACnB,UAAM,MAAM,GAAG,KAAK,OAAO,GAAG,QAAQ;AAEtC,WAAO,MAAM,KAAK;AAAA,MAChB,GAAG;AAAA,MACH,SAAS,MAAM,KAAK,aAAa,SAAS,YAAY;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,wBACZ,UACA,UAAuB,CAAC,GACL;AACnB,QAAI,WAAW,MAAM,KAAK,eAAe,UAAU,OAAO;AAE1D,QAAI,CAAC,SAAS,MAAM,KAAK,cAAc,SAAS,MAAM,GAAG;AACvD,iBAAW,MAAM,KAAK,eAAe,UAAU,SAAS,IAAI;AAAA,IAC9D;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,WACZ,UACA,UAAuB,CAAC,GACZ;AACZ,UAAM,WAAW,MAAM,KAAK,wBAAwB,UAAU,OAAO;AAErE,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI;AACJ,UAAI;AACF,cAAM,gBAAgB,MAAM,SAAS,KAAK;AAC1C,uBAAe,oBAAoB,SAAS,MAAM,KAAK,KAAK,UAAU,aAAa,CAAC;AAAA,MACtF,QAAQ;AACN,uBAAe,oBAAoB,SAAS,MAAM,KAAK,SAAS,UAAU;AAAA,MAC5E;AACA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAEQ,YAAoB;AAC1B,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAM,UAAU,eAAe,OAAwB;AACrD,WAAO,KAAK,cAAc,YAAY;AAAA,EACxC;AAAA,EAEA,mBAA2B;AACzB,WAAO,iBAAiB,KAAK,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,QAAQ,QAA+B;AAC3C,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK,WAAiB,iBAAiB,MAAM,UAAU,MAAM,GAAG;AAAA,EACzE;AAAA,EAEA,MAAM,WAAW,QAAgB,OAAiC;AAChE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,IACvD;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,QAAgB,OAAiC;AACtE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD,EAAE,QAAQ,OAAO;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,OAAO;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,QACkB;AAClB,WAAO,KAAK;AAAA,MACV,iBAAiB,KAAK,UAAU,CAAC,UAAU,MAAM,SAAS,KAAK;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,MAAM;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,QACA,OACA,MACe;AACf,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,KAAK;AAAA,MACT,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,QACA,OACA,WAC4B;AAC5B,QAAI,CAAC,UAAU,QAAQ;AACrB,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC;AAAA,MACpC;AAAA,IACF;AAEA,UAAM,WAAW,SAAS,aAAa,CAAC;AAIxC,WAAO,SAAS,MAAM,CAAC,UAAU,MAAM;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBACJ,QACA,OACA,aAC6B;AAC7B,UAAM,SAAS,KAAK,UAAU;AAE9B,QAAI;AACF,YAAM,WAAW,MAAM,KAAK;AAAA,QAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,QACrD;AAAA,UACE,QAAQ;AAAA,UACR,MAAM,KAAK,UAAU,EAAE,cAAc,YAAY,CAAC;AAAA,QACpD;AAAA,MACF;AACA,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,EAAE;AAAA,MACnE;AACA,aAAO,SAAS,YAAY;AAAA,IAC9B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBAAiB,SAA0C;AAC/D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,iBAAiB,MAAM,UAAU,QAAQ,IAAI,SAAS,QAAQ,EAAE;AAEjF,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,wBAAwB,QAAQ;AAE5D,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,iBAAO,CAAC;AAAA,QACV;AACA,cAAM,IAAI;AAAA,UACR,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,eAAO,CAAC;AAAA,MACV;AAGA,aAAO,QACJ,KAAK,EACL,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,CAAgB;AAAA,IAClD,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../package.json","../src/utils/gateway.ts","../src/posthog-api.ts"],"sourcesContent":["{\n  \"name\": \"@posthog/agent\",\n  \"version\": \"2.3.418\",\n  \"repository\": \"https://github.com/PostHog/code\",\n  \"description\": \"TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\"\n    },\n    \"./agent\": {\n      \"types\": \"./dist/agent.d.ts\",\n      \"import\": \"./dist/agent.js\"\n    },\n    \"./gateway-models\": {\n      \"types\": \"./dist/gateway-models.d.ts\",\n      \"import\": \"./dist/gateway-models.js\"\n    },\n    \"./posthog-api\": {\n      \"types\": \"./dist/posthog-api.d.ts\",\n      \"import\": \"./dist/posthog-api.js\"\n    },\n    \"./types\": {\n      \"types\": \"./dist/types.d.ts\",\n      \"import\": \"./dist/types.js\"\n    },\n    \"./adapters/claude/questions/utils\": {\n      \"types\": \"./dist/adapters/claude/questions/utils.d.ts\",\n      \"import\": \"./dist/adapters/claude/questions/utils.js\"\n    },\n    \"./adapters/claude/permissions/permission-options\": {\n      \"types\": \"./dist/adapters/claude/permissions/permission-options.d.ts\",\n      \"import\": \"./dist/adapters/claude/permissions/permission-options.js\"\n    },\n    \"./adapters/claude/tools\": {\n      \"types\": \"./dist/adapters/claude/tools.d.ts\",\n      \"import\": \"./dist/adapters/claude/tools.js\"\n    },\n    \"./adapters/claude/conversion/tool-use-to-acp\": {\n      \"types\": \"./dist/adapters/claude/conversion/tool-use-to-acp.d.ts\",\n      \"import\": \"./dist/adapters/claude/conversion/tool-use-to-acp.js\"\n    },\n    \"./adapters/claude/session/jsonl-hydration\": {\n      \"types\": \"./dist/adapters/claude/session/jsonl-hydration.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/jsonl-hydration.js\"\n    },\n    \"./adapters/claude/session/models\": {\n      \"types\": \"./dist/adapters/claude/session/models.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/models.js\"\n    },\n    \"./adapters/reasoning-effort\": {\n      \"types\": \"./dist/adapters/reasoning-effort.d.ts\",\n      \"import\": \"./dist/adapters/reasoning-effort.js\"\n    },\n    \"./adapters/claude/mcp/tool-metadata\": {\n      \"types\": \"./dist/adapters/claude/mcp/tool-metadata.d.ts\",\n      \"import\": \"./dist/adapters/claude/mcp/tool-metadata.js\"\n    },\n    \"./execution-mode\": {\n      \"types\": \"./dist/execution-mode.d.ts\",\n      \"import\": \"./dist/execution-mode.js\"\n    },\n    \"./resume\": {\n      \"types\": \"./dist/resume.d.ts\",\n      \"import\": \"./dist/resume.js\"\n    },\n    \"./handoff-checkpoint\": {\n      \"types\": \"./dist/handoff-checkpoint.d.ts\",\n      \"import\": \"./dist/handoff-checkpoint.js\"\n    },\n    \"./server\": {\n      \"types\": \"./dist/server/agent-server.d.ts\",\n      \"import\": \"./dist/server/agent-server.js\"\n    },\n    \"./server/schemas\": {\n      \"types\": \"./dist/server/schemas.d.ts\",\n      \"import\": \"./dist/server/schemas.js\"\n    }\n  },\n  \"bin\": {\n    \"agent-server\": \"./dist/server/bin.cjs\"\n  },\n  \"type\": \"module\",\n  \"keywords\": [\n    \"posthog\",\n    \"claude\",\n    \"agent\",\n    \"ai\",\n    \"git\",\n    \"typescript\"\n  ],\n  \"author\": \"PostHog\",\n  \"license\": \"SEE LICENSE IN LICENSE\",\n  \"scripts\": {\n    \"build\": \"node ../../scripts/rimraf.mjs dist && tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"pnpm exec tsc --noEmit\",\n    \"prepublishOnly\": \"pnpm run build\",\n    \"clean\": \"node ../../scripts/rimraf.mjs dist .turbo\"\n  },\n  \"engines\": {\n    \"node\": \">=20.0.0\"\n  },\n  \"devDependencies\": {\n    \"@posthog/shared\": \"workspace:*\",\n    \"@posthog/git\": \"workspace:*\",\n    \"@posthog/enricher\": \"workspace:*\",\n    \"@types/bun\": \"latest\",\n    \"@types/tar\": \"^6.1.13\",\n    \"msw\": \"^2.12.7\",\n    \"tsup\": \"^8.5.1\",\n    \"tsx\": \"^4.20.6\",\n    \"typescript\": \"^5.5.0\",\n    \"vitest\": \"^2.1.8\"\n  },\n  \"dependencies\": {\n    \"@agentclientprotocol/sdk\": \"0.19.0\",\n    \"ajv\": \"^8.17.1\",\n    \"@anthropic-ai/claude-agent-sdk\": \"0.2.112\",\n    \"@anthropic-ai/sdk\": \"0.89.0\",\n    \"@hono/node-server\": \"^1.19.9\",\n    \"@opentelemetry/api-logs\": \"^0.208.0\",\n    \"@opentelemetry/exporter-logs-otlp-http\": \"^0.208.0\",\n    \"@opentelemetry/resources\": \"^2.0.0\",\n    \"@opentelemetry/sdk-logs\": \"^0.208.0\",\n    \"@opentelemetry/semantic-conventions\": \"^1.28.0\",\n    \"@types/jsonwebtoken\": \"^9.0.10\",\n    \"commander\": \"^14.0.2\",\n    \"hono\": \"^4.11.7\",\n    \"jsonwebtoken\": \"^9.0.2\",\n    \"minimatch\": \"^10.0.3\",\n    \"tar\": \"^7.5.0\",\n    \"uuid\": \"13.0.0\",\n    \"yoga-wasm-web\": \"^0.3.3\",\n    \"zod\": \"^4.2.0\"\n  },\n  \"files\": [\n    \"dist/**/*\",\n    \"src/**/*\",\n    \"README.md\",\n    \"CLAUDE.md\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\"\n  }\n}\n","export type GatewayProduct = \"posthog_code\" | \"background_agents\";\n\nfunction getGatewayBaseUrl(posthogHost: string): string {\n  const url = new URL(posthogHost);\n  const hostname = url.hostname;\n\n  if (hostname === \"localhost\" || hostname === \"127.0.0.1\") {\n    return `${url.protocol}//localhost:3308`;\n  }\n\n  if (hostname === \"host.docker.internal\") {\n    return `${url.protocol}//host.docker.internal:3308`;\n  }\n\n  const region = hostname.match(/^(us|eu)\\.posthog\\.com$/)?.[1] ?? \"us\";\n  return `https://gateway.${region}.posthog.com`;\n}\n\nexport function getLlmGatewayUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/${product}`;\n}\n\nexport function getGatewayUsageUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/v1/usage/${product}`;\n}\n\nexport function getGatewayInvalidatePlanCacheUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/v1/usage/${product}/invalidate-plan-cache`;\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\nimport type {\n  ArtifactType,\n  PostHogAPIConfig,\n  StoredEntry,\n  Task,\n  TaskRun,\n  TaskRunArtifact,\n} from \"./types\";\nimport {\n  getGatewayInvalidatePlanCacheUrl,\n  getGatewayUsageUrl,\n  getLlmGatewayUrl,\n} from \"./utils/gateway\";\n\nexport {\n  getGatewayInvalidatePlanCacheUrl,\n  getGatewayUsageUrl,\n  getLlmGatewayUrl,\n};\n\nconst DEFAULT_USER_AGENT = `posthog/agent.hog.dev; version: ${packageJson.version}`;\n\nexport interface TaskArtifactUploadPayload {\n  name: string;\n  type: ArtifactType;\n  content: string;\n  content_type?: string;\n}\n\nexport type TaskRunUpdate = Partial<\n  Pick<\n    TaskRun,\n    | \"status\"\n    | \"branch\"\n    | \"stage\"\n    | \"error_message\"\n    | \"output\"\n    | \"state\"\n    | \"environment\"\n  >\n> & {\n  state_remove_keys?: string[];\n};\n\nexport class PostHogAPIClient {\n  private config: PostHogAPIConfig;\n\n  constructor(config: PostHogAPIConfig) {\n    this.config = config;\n  }\n\n  private get baseUrl(): string {\n    const host = this.config.apiUrl.endsWith(\"/\")\n      ? this.config.apiUrl.slice(0, -1)\n      : this.config.apiUrl;\n    return host;\n  }\n\n  private isAuthFailure(status: number): boolean {\n    return status === 401 || status === 403;\n  }\n\n  private async resolveApiKey(forceRefresh = false): Promise<string> {\n    if (forceRefresh && this.config.refreshApiKey) {\n      return this.config.refreshApiKey();\n    }\n\n    return this.config.getApiKey();\n  }\n\n  private async buildHeaders(\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Headers> {\n    const headers = new Headers(options.headers);\n    headers.set(\n      \"Authorization\",\n      `Bearer ${await this.resolveApiKey(forceRefresh)}`,\n    );\n    headers.set(\"Content-Type\", \"application/json\");\n    headers.set(\"User-Agent\", this.config.userAgent ?? DEFAULT_USER_AGENT);\n    return headers;\n  }\n\n  private async performRequest(\n    endpoint: string,\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Response> {\n    const url = `${this.baseUrl}${endpoint}`;\n\n    return fetch(url, {\n      ...options,\n      headers: await this.buildHeaders(options, forceRefresh),\n    });\n  }\n\n  private async performRequestWithRetry(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<Response> {\n    let response = await this.performRequest(endpoint, options);\n\n    if (!response.ok && this.isAuthFailure(response.status)) {\n      response = await this.performRequest(endpoint, options, true);\n    }\n\n    return response;\n  }\n\n  private async apiRequest<T>(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<T> {\n    const response = await this.performRequestWithRetry(endpoint, options);\n\n    if (!response.ok) {\n      let errorMessage: string;\n      try {\n        const errorResponse = await response.json();\n        errorMessage = `Failed request: [${response.status}] ${JSON.stringify(errorResponse)}`;\n      } catch {\n        errorMessage = `Failed request: [${response.status}] ${response.statusText}`;\n      }\n      throw new Error(errorMessage);\n    }\n\n    return response.json();\n  }\n\n  private getTeamId(): number {\n    return this.config.projectId;\n  }\n\n  async getApiKey(forceRefresh = false): Promise<string> {\n    return this.resolveApiKey(forceRefresh);\n  }\n\n  getLlmGatewayUrl(): string {\n    return getLlmGatewayUrl(this.baseUrl);\n  }\n\n  async getTask(taskId: string): Promise<Task> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<Task>(`/api/projects/${teamId}/tasks/${taskId}/`);\n  }\n\n  async getTaskRun(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n    );\n  }\n\n  async resumeRunInCloud(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/resume_in_cloud/`,\n      { method: \"POST\" },\n    );\n  }\n\n  async updateTaskRun(\n    taskId: string,\n    runId: string,\n    payload: TaskRunUpdate,\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(payload),\n      },\n    );\n  }\n\n  async setTaskRunOutput(\n    taskId: string,\n    runId: string,\n    output: Record<string, unknown>,\n  ): Promise<TaskRun> {\n    return this.apiRequest(\n      `/api/projects/${this.getTeamId()}/tasks/${taskId}/runs/${runId}/set_output/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(output),\n      },\n    );\n  }\n\n  async appendTaskRunLog(\n    taskId: string,\n    runId: string,\n    entries: StoredEntry[],\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/append_log/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ entries }),\n      },\n    );\n  }\n\n  async relayMessage(\n    taskId: string,\n    runId: string,\n    text: string,\n  ): Promise<void> {\n    const teamId = this.getTeamId();\n    await this.apiRequest<{ status: string }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/relay_message/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ text }),\n      },\n    );\n  }\n\n  async uploadTaskArtifacts(\n    taskId: string,\n    runId: string,\n    artifacts: TaskArtifactUploadPayload[],\n  ): Promise<TaskRunArtifact[]> {\n    if (!artifacts.length) {\n      return [];\n    }\n\n    const teamId = this.getTeamId();\n    const response = await this.apiRequest<{ artifacts: TaskRunArtifact[] }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ artifacts }),\n      },\n    );\n\n    const manifest = response.artifacts ?? [];\n\n    // The backend returns the full run artifact manifest after each upload.\n    // Callers want the artifacts corresponding to this upload request only.\n    return manifest.slice(-artifacts.length);\n  }\n\n  /**\n   * Download artifact content by storage path\n   * Streams the file through the PostHog backend so the sandbox does not need\n   * direct access to object storage.\n   */\n  async downloadArtifact(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<ArrayBuffer | null> {\n    const teamId = this.getTeamId();\n\n    try {\n      const response = await this.performRequestWithRetry(\n        `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/download/`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ storage_path: storagePath }),\n        },\n      );\n      if (!response.ok) {\n        throw new Error(`Failed to download artifact: ${response.status}`);\n      }\n      return response.arrayBuffer();\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Fetch logs for a task run via the logs API endpoint\n   * @param taskRun - The task run to fetch logs for\n   * @returns Array of stored entries, or empty array if no logs available\n   */\n  async fetchTaskRunLogs(taskRun: TaskRun): Promise<StoredEntry[]> {\n    const teamId = this.getTeamId();\n    const endpoint = `/api/projects/${teamId}/tasks/${taskRun.task}/runs/${taskRun.id}/logs`;\n\n    try {\n      const response = await this.performRequestWithRetry(endpoint);\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          return [];\n        }\n        throw new Error(\n          `Failed to fetch logs: ${response.status} ${response.statusText}`,\n        );\n      }\n\n      const content = await response.text();\n\n      if (!content.trim()) {\n        return [];\n      }\n\n      // Parse newline-delimited JSON\n      return content\n        .trim()\n        .split(\"\\n\")\n        .map((line) => JSON.parse(line) as StoredEntry);\n    } catch (error) {\n      throw new Error(\n        `Failed to fetch task run logs: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n}\n"],"mappings":";AAAA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,YAAc;AAAA,EACd,aAAe;AAAA,EACf,SAAW;AAAA,IACT,KAAK;AAAA,MACH,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,iBAAiB;AAAA,MACf,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,qCAAqC;AAAA,MACnC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oDAAoD;AAAA,MAClD,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,2BAA2B;AAAA,MACzB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,gDAAgD;AAAA,MAC9C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,6CAA6C;AAAA,MAC3C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oCAAoC;AAAA,MAClC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,+BAA+B;AAAA,MAC7B,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,uCAAuC;AAAA,MACrC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,wBAAwB;AAAA,MACtB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,KAAO;AAAA,IACL,gBAAgB;AAAA,EAClB;AAAA,EACA,MAAQ;AAAA,EACR,UAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,QAAU;AAAA,EACV,SAAW;AAAA,EACX,SAAW;AAAA,IACT,OAAS;AAAA,IACT,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,cAAc;AAAA,IACd,WAAa;AAAA,IACb,gBAAkB;AAAA,IAClB,OAAS;AAAA,EACX;AAAA,EACA,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,iBAAmB;AAAA,IACjB,mBAAmB;AAAA,IACnB,gBAAgB;AAAA,IAChB,qBAAqB;AAAA,IACrB,cAAc;AAAA,IACd,cAAc;AAAA,IACd,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,KAAO;AAAA,IACP,YAAc;AAAA,IACd,QAAU;AAAA,EACZ;AAAA,EACA,cAAgB;AAAA,IACd,4BAA4B;AAAA,IAC5B,KAAO;AAAA,IACP,kCAAkC;AAAA,IAClC,qBAAqB;AAAA,IACrB,qBAAqB;AAAA,IACrB,2BAA2B;AAAA,IAC3B,0CAA0C;AAAA,IAC1C,4BAA4B;AAAA,IAC5B,2BAA2B;AAAA,IAC3B,uCAAuC;AAAA,IACvC,uBAAuB;AAAA,IACvB,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,cAAgB;AAAA,IAChB,WAAa;AAAA,IACb,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,iBAAiB;AAAA,IACjB,KAAO;AAAA,EACT;AAAA,EACA,OAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,eAAiB;AAAA,IACf,QAAU;AAAA,EACZ;AACF;;;ACjJA,SAAS,kBAAkB,aAA6B;AACtD,QAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,QAAM,WAAW,IAAI;AAErB,MAAI,aAAa,eAAe,aAAa,aAAa;AACxD,WAAO,GAAG,IAAI,QAAQ;AAAA,EACxB;AAEA,MAAI,aAAa,wBAAwB;AACvC,WAAO,GAAG,IAAI,QAAQ;AAAA,EACxB;AAEA,QAAM,SAAS,SAAS,MAAM,yBAAyB,IAAI,CAAC,KAAK;AACjE,SAAO,mBAAmB,MAAM;AAClC;AAEO,SAAS,iBACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,IAAI,OAAO;AACrD;AAEO,SAAS,mBACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,aAAa,OAAO;AAC9D;AAEO,SAAS,iCACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,aAAa,OAAO;AAC9D;;;AChBA,IAAM,qBAAqB,mCAAmC,gBAAY,OAAO;AAwB1E,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EAER,YAAY,QAA0B;AACpC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAY,UAAkB;AAC5B,UAAM,OAAO,KAAK,OAAO,OAAO,SAAS,GAAG,IACxC,KAAK,OAAO,OAAO,MAAM,GAAG,EAAE,IAC9B,KAAK,OAAO;AAChB,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc,QAAyB;AAC7C,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAAA,EAEA,MAAc,cAAc,eAAe,OAAwB;AACjE,QAAI,gBAAgB,KAAK,OAAO,eAAe;AAC7C,aAAO,KAAK,OAAO,cAAc;AAAA,IACnC;AAEA,WAAO,KAAK,OAAO,UAAU;AAAA,EAC/B;AAAA,EAEA,MAAc,aACZ,SACA,eAAe,OACG;AAClB,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,YAAQ;AAAA,MACN;AAAA,MACA,UAAU,MAAM,KAAK,cAAc,YAAY,CAAC;AAAA,IAClD;AACA,YAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,YAAQ,IAAI,cAAc,KAAK,OAAO,aAAa,kBAAkB;AACrE,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,eACZ,UACA,SACA,eAAe,OACI;AACnB,UAAM,MAAM,GAAG,KAAK,OAAO,GAAG,QAAQ;AAEtC,WAAO,MAAM,KAAK;AAAA,MAChB,GAAG;AAAA,MACH,SAAS,MAAM,KAAK,aAAa,SAAS,YAAY;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,wBACZ,UACA,UAAuB,CAAC,GACL;AACnB,QAAI,WAAW,MAAM,KAAK,eAAe,UAAU,OAAO;AAE1D,QAAI,CAAC,SAAS,MAAM,KAAK,cAAc,SAAS,MAAM,GAAG;AACvD,iBAAW,MAAM,KAAK,eAAe,UAAU,SAAS,IAAI;AAAA,IAC9D;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,WACZ,UACA,UAAuB,CAAC,GACZ;AACZ,UAAM,WAAW,MAAM,KAAK,wBAAwB,UAAU,OAAO;AAErE,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI;AACJ,UAAI;AACF,cAAM,gBAAgB,MAAM,SAAS,KAAK;AAC1C,uBAAe,oBAAoB,SAAS,MAAM,KAAK,KAAK,UAAU,aAAa,CAAC;AAAA,MACtF,QAAQ;AACN,uBAAe,oBAAoB,SAAS,MAAM,KAAK,SAAS,UAAU;AAAA,MAC5E;AACA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAEQ,YAAoB;AAC1B,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAM,UAAU,eAAe,OAAwB;AACrD,WAAO,KAAK,cAAc,YAAY;AAAA,EACxC;AAAA,EAEA,mBAA2B;AACzB,WAAO,iBAAiB,KAAK,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,QAAQ,QAA+B;AAC3C,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK,WAAiB,iBAAiB,MAAM,UAAU,MAAM,GAAG;AAAA,EACzE;AAAA,EAEA,MAAM,WAAW,QAAgB,OAAiC;AAChE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,IACvD;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,QAAgB,OAAiC;AACtE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD,EAAE,QAAQ,OAAO;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,OAAO;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,QACkB;AAClB,WAAO,KAAK;AAAA,MACV,iBAAiB,KAAK,UAAU,CAAC,UAAU,MAAM,SAAS,KAAK;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,MAAM;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,QACA,OACA,MACe;AACf,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,KAAK;AAAA,MACT,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,QACA,OACA,WAC4B;AAC5B,QAAI,CAAC,UAAU,QAAQ;AACrB,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC;AAAA,MACpC;AAAA,IACF;AAEA,UAAM,WAAW,SAAS,aAAa,CAAC;AAIxC,WAAO,SAAS,MAAM,CAAC,UAAU,MAAM;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBACJ,QACA,OACA,aAC6B;AAC7B,UAAM,SAAS,KAAK,UAAU;AAE9B,QAAI;AACF,YAAM,WAAW,MAAM,KAAK;AAAA,QAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,QACrD;AAAA,UACE,QAAQ;AAAA,UACR,MAAM,KAAK,UAAU,EAAE,cAAc,YAAY,CAAC;AAAA,QACpD;AAAA,MACF;AACA,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,EAAE;AAAA,MACnE;AACA,aAAO,SAAS,YAAY;AAAA,IAC9B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBAAiB,SAA0C;AAC/D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,iBAAiB,MAAM,UAAU,QAAQ,IAAI,SAAS,QAAQ,EAAE;AAEjF,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,wBAAwB,QAAQ;AAE5D,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,iBAAO,CAAC;AAAA,QACV;AACA,cAAM,IAAI;AAAA,UACR,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,eAAO,CAAC;AAAA,MACV;AAGA,aAAO,QACJ,KAAK,EACL,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,CAAgB;AAAA,IAClD,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/server/agent-server.js

@@ -8142,12 +8142,12 @@ function isTaskError(result) {
 function getErrorMessage(result) {
   return Buffer.concat([...result.stdOut, ...result.stdErr]);
 }
-function errorDetectionHandler(overwrite = false, isError = isTaskError, errorMessage = getErrorMessage) {
+function errorDetectionHandler(overwrite = false, isError = isTaskError, errorMessage2 = getErrorMessage) {
   return (error, result) => {
     if (!overwrite && error || !isError(result)) {
       return error;
     }
-    return errorMessage(result);
+    return errorMessage2(result);
   };
 }
 function errorDetectionPlugin(config) {
@@ -8599,7 +8599,7 @@ import { z as z4 } from "zod";
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.403",
+  version: "2.3.418",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {
@@ -12787,6 +12787,8 @@ var ParseResult = class {
     return this.calls.filter((c) => CAPTURE_METHODS.has(c.method)).map((c) => ({
       name: c.key,
       line: c.line,
+      keyStartCol: c.keyStartCol,
+      keyEndCol: c.keyEndCol,
       dynamic: c.dynamic ?? false,
       viaWrapper: c.viaWrapper,
       inJsx: c.inJsx
@@ -12797,6 +12799,8 @@ var ParseResult = class {
       method: c.method,
       flagKey: c.key,
       line: c.line,
+      keyStartCol: c.keyStartCol,
+      keyEndCol: c.keyEndCol,
       viaWrapper: c.viaWrapper,
       inJsx: c.inJsx
     }));
@@ -12946,6 +12950,15 @@ var PostHogEnricher = class {
       settled[4]
     );
   }
+  /**
+   * Detect wrapper functions (functions that internally call a PostHog SDK
+   * method) defined in the given source. Used by callers like `enrichSource`
+   * to pick up same-file wrappers such as `track(...)` without threading
+   * through filesystem I/O.
+   */
+  async findWrappersInSource(source, languageId) {
+    return this.detector.findWrappers(source, languageId);
+  }
   async parseFile(filePath) {
     const ext = path32.extname(filePath).toLowerCase();
     const languageId = EXT_TO_LANG_ID[ext];
@@ -13146,6 +13159,7 @@ async function withTimeout(operation, timeoutMs) {
   return Promise.race([operationPromise, timeoutPromise]);
 }
 var IS_ROOT = typeof process !== "undefined" && (process.geteuid?.() ?? process.getuid?.()) === 0;
+var ALLOW_BYPASS = !IS_ROOT || !!process.env.IS_SANDBOX;
 function unreachable(value, logger) {
   let valueAsString;
   try {
@@ -14937,7 +14951,6 @@ function normalizeAskUserQuestionInput(input) {
 }
 
 // src/execution-mode.ts
-var ALLOW_BYPASS = !IS_ROOT;
 var availableModes = [
   {
     id: "default",
@@ -14980,7 +14993,7 @@ function isCodeExecutionMode(mode) {
   return CODE_EXECUTION_MODES.includes(mode);
 }
 function getAvailableModes() {
-  return IS_ROOT ? availableModes.filter((m) => m.id !== "bypassPermissions") : availableModes;
+  return ALLOW_BYPASS ? availableModes : availableModes.filter((m) => m.id !== "bypassPermissions");
 }
 var CODEX_NATIVE_MODES = ["auto", "read-only", "full-access"];
 function isCodexNativeMode(mode) {
@@ -15113,10 +15126,9 @@ function buildPermissionOptions(toolName, toolInput, repoRoot, suggestions) {
   }
   return permissionOptions("Yes, always allow");
 }
-var ALLOW_BYPASS2 = !IS_ROOT || !!process.env.IS_SANDBOX;
 function buildExitPlanModePermissionOptions() {
   const options = [];
-  if (ALLOW_BYPASS2) {
+  if (ALLOW_BYPASS) {
     options.push({
       kind: "allow_always",
       name: "Yes, bypass all permissions",
@@ -15219,17 +15231,8 @@ async function requestPlanApproval(context, updatedInput) {
   });
 }
 async function applyPlanApproval(response, context, updatedInput) {
-  const { session } = context;
   if (response.outcome?.outcome === "selected" && (response.outcome.optionId === "auto" || response.outcome.optionId === "default" || response.outcome.optionId === "acceptEdits" || response.outcome.optionId === "bypassPermissions")) {
-    session.permissionMode = response.outcome.optionId;
-    await session.query.setPermissionMode(response.outcome.optionId);
-    await context.client.sessionUpdate({
-      sessionId: context.sessionId,
-      update: {
-        sessionUpdate: "current_mode_update",
-        currentModeId: response.outcome.optionId
-      }
-    });
+    await context.applySessionMode(response.outcome.optionId);
     await context.updateConfigOption("mode", response.outcome.optionId);
     return {
       behavior: "allow",
@@ -15250,9 +15253,8 @@ async function applyPlanApproval(response, context, updatedInput) {
   return { behavior: "deny", message, interrupt: !feedback };
 }
 async function handleEnterPlanModeTool(context) {
-  const { session, toolInput } = context;
-  session.permissionMode = "plan";
-  await session.query.setPermissionMode("plan");
+  const { toolInput } = context;
+  await context.applySessionMode("plan");
   await context.updateConfigOption("mode", "plan");
   return {
     behavior: "allow",
@@ -15967,7 +15969,7 @@ function buildSessionOptions(params) {
     stderr: (err2) => params.logger.error(err2),
     cwd: params.cwd,
     includePartialMessages: true,
-    allowDangerouslySkipPermissions: !IS_ROOT,
+    allowDangerouslySkipPermissions: !IS_ROOT || !!process.env.IS_SANDBOX,
     permissionMode: params.permissionMode,
     canUseTool: params.canUseTool,
     executable: "node",
@@ -17059,6 +17061,15 @@ var ClaudeAcpAgent = class extends BaseAcpAgent {
         configOptions: this.session.configOptions
       }
     });
+    if (configId === "mode") {
+      await this.client.sessionUpdate({
+        sessionId: this.sessionId,
+        update: {
+          sessionUpdate: "current_mode_update",
+          currentModeId: value
+        }
+      });
+    }
   }
   async applySessionMode(modeId) {
     if (!CODE_EXECUTION_MODES.includes(modeId)) {
@@ -17281,6 +17292,7 @@ var ClaudeAcpAgent = class extends BaseAcpAgent {
       fileContentCache: this.fileContentCache,
       logger: this.logger,
       updateConfigOption: (configId, value) => this.updateConfigOption(configId, value),
+      applySessionMode: (modeId) => this.applySessionMode(modeId),
       allowedDomains
     });
   }
@@ -18267,6 +18279,15 @@ var CodexAcpAgent = class extends BaseAcpAgent {
     if (response.configOptions) {
       this.sessionState.configOptions = response.configOptions;
     }
+    if (params.configId === "mode" && typeof params.value === "string") {
+      await this.client.sessionUpdate({
+        sessionId: this.sessionId,
+        update: {
+          sessionUpdate: "current_mode_update",
+          currentModeId: params.value
+        }
+      });
+    }
     return response;
   }
   async authenticate(_params) {
@@ -19469,14 +19490,14 @@ var PostHogAPIClient = class {
   async apiRequest(endpoint, options = {}) {
     const response = await this.performRequestWithRetry(endpoint, options);
     if (!response.ok) {
-      let errorMessage;
+      let errorMessage2;
       try {
         const errorResponse = await response.json();
-        errorMessage = `Failed request: [${response.status}] ${JSON.stringify(errorResponse)}`;
+        errorMessage2 = `Failed request: [${response.status}] ${JSON.stringify(errorResponse)}`;
       } catch {
-        errorMessage = `Failed request: [${response.status}] ${response.statusText}`;
+        errorMessage2 = `Failed request: [${response.status}] ${response.statusText}`;
       }
-      throw new Error(errorMessage);
+      throw new Error(errorMessage2);
     }
     return response.json();
   }
@@ -20262,6 +20283,72 @@ var SessionLogWriter = class _SessionLogWriter {
   }
 };
 
+// src/server/agentsh-runtime.ts
+import { execFile as execFile2 } from "child_process";
+import { readFile as readFile5 } from "fs/promises";
+import { promisify as promisify2 } from "util";
+var AGENTSH_SESSION_ID_FILE = "/tmp/agentsh-session-id";
+var execFileAsync2 = promisify2(execFile2);
+function errorMessage(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+function parseAgentshVersion(output) {
+  const version = `${output.stdout}
+${output.stderr}`.split("\n").map((line) => line.trim()).find(Boolean);
+  return version ?? null;
+}
+async function getAgentshVersion() {
+  const { stdout, stderr } = await execFileAsync2("agentsh", ["--version"], {
+    timeout: 5e3
+  });
+  return { stdout, stderr };
+}
+async function resolveAgentshRuntimeInfo({
+  sessionIdPath = AGENTSH_SESSION_ID_FILE,
+  readSessionId = async (path16) => readFile5(path16, "utf8"),
+  getVersion = getAgentshVersion
+} = {}) {
+  let sessionId;
+  try {
+    sessionId = (await readSessionId(sessionIdPath)).trim();
+  } catch (error) {
+    const code = error.code;
+    if (code === "ENOENT") {
+      return null;
+    }
+    throw error;
+  }
+  if (!sessionId) {
+    return null;
+  }
+  try {
+    const output = await getVersion();
+    return {
+      sessionId,
+      version: parseAgentshVersion(output)
+    };
+  } catch (error) {
+    return {
+      sessionId,
+      version: null,
+      versionLookupError: errorMessage(error)
+    };
+  }
+}
+async function logAgentshRuntimeInfo(logger, options) {
+  const agentsh = await resolveAgentshRuntimeInfo(options);
+  if (!agentsh) {
+    return;
+  }
+  logger.debug(`Agentsh session ID: ${agentsh.sessionId}`);
+  logger.debug(`Agentsh hardening version: ${agentsh.version ?? "unknown"}`);
+  if (agentsh.versionLookupError) {
+    logger.debug(
+      `Agentsh version lookup failed: ${agentsh.versionLookupError}`
+    );
+  }
+}
+
 // src/server/cloud-prompt.ts
 function normalizeCloudPromptContent(content) {
   if (typeof content === "string") {
@@ -20584,7 +20671,7 @@ var AgentServer = class {
     return this.getRuntimeAdapter() === "codex" ? "auto" : "default";
   }
   shouldRelayPermissionToClient(mode) {
-    return mode === "default" || mode === "auto";
+    return mode === "default" || mode === "auto" || mode === "read-only";
   }
   createApp() {
     const app = new Hono();
@@ -21101,6 +21188,7 @@ var AgentServer = class {
     this.logger.debug(
       `Agent version: ${this.config.version ?? package_default.version}`
     );
+    await logAgentshRuntimeInfo(this.logger);
     this.logger.debug(`Initial permission mode: ${initialPermissionMode}`);
     this.posthogAPI.updateTaskRun(payload.task_id, payload.run_id, {
       status: "in_progress"
@@ -21119,12 +21207,12 @@ var AgentServer = class {
   }
   classifyAndSignalFailure(payload, phase, error) {
     const { classification, message } = this.extractErrorClassification(error);
-    const errorMessage = classification === "upstream_stream_terminated" ? "Upstream LLM stream terminated" : classification === "upstream_connection_error" ? "Upstream LLM connection error" : message || "Agent error";
+    const errorMessage2 = classification === "upstream_stream_terminated" ? "Upstream LLM stream terminated" : classification === "upstream_connection_error" ? "Upstream LLM connection error" : message || "Agent error";
     this.logger.error(`send_${phase}_task_message_failed`, {
       classification,
       message
     });
-    return this.signalTaskComplete(payload, "error", errorMessage);
+    return this.signalTaskComplete(payload, "error", errorMessage2);
   }
   async sendInitialTaskMessage(payload, prefetchedRun) {
     if (!this.session) return;
@@ -21646,7 +21734,7 @@ ${attributionInstructions}
       });
     }
   }
-  async signalTaskComplete(payload, stopReason, errorMessage) {
+  async signalTaskComplete(payload, stopReason, errorMessage2) {
     if (this.session?.payload.run_id === payload.run_id) {
       try {
         await this.session.logWriter.flush(payload.run_id, {
@@ -21670,7 +21758,7 @@ ${attributionInstructions}
     try {
       await this.posthogAPI.updateTaskRun(payload.task_id, payload.run_id, {
         status,
-        error_message: errorMessage ?? "Agent error"
+        error_message: errorMessage2 ?? "Agent error"
       });
       this.logger.debug("Task completion signaled", { status, stopReason });
     } catch (error) {