@posthog/agent 2.3.504 → 2.3.508

package/dist/posthog-api.js

@@ -1,7 +1,7 @@
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.504",
+  version: "2.3.508",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {

package/dist/posthog-api.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../package.json","../src/utils/gateway.ts","../src/posthog-api.ts"],"sourcesContent":["{\n  \"name\": \"@posthog/agent\",\n  \"version\": \"2.3.504\",\n  \"repository\": \"https://github.com/PostHog/code\",\n  \"description\": \"TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\"\n    },\n    \"./agent\": {\n      \"types\": \"./dist/agent.d.ts\",\n      \"import\": \"./dist/agent.js\"\n    },\n    \"./gateway-models\": {\n      \"types\": \"./dist/gateway-models.d.ts\",\n      \"import\": \"./dist/gateway-models.js\"\n    },\n    \"./posthog-api\": {\n      \"types\": \"./dist/posthog-api.d.ts\",\n      \"import\": \"./dist/posthog-api.js\"\n    },\n    \"./types\": {\n      \"types\": \"./dist/types.d.ts\",\n      \"import\": \"./dist/types.js\"\n    },\n    \"./adapters/claude/questions/utils\": {\n      \"types\": \"./dist/adapters/claude/questions/utils.d.ts\",\n      \"import\": \"./dist/adapters/claude/questions/utils.js\"\n    },\n    \"./adapters/claude/permissions/permission-options\": {\n      \"types\": \"./dist/adapters/claude/permissions/permission-options.d.ts\",\n      \"import\": \"./dist/adapters/claude/permissions/permission-options.js\"\n    },\n    \"./adapters/claude/tools\": {\n      \"types\": \"./dist/adapters/claude/tools.d.ts\",\n      \"import\": \"./dist/adapters/claude/tools.js\"\n    },\n    \"./adapters/claude/conversion/tool-use-to-acp\": {\n      \"types\": \"./dist/adapters/claude/conversion/tool-use-to-acp.d.ts\",\n      \"import\": \"./dist/adapters/claude/conversion/tool-use-to-acp.js\"\n    },\n    \"./adapters/claude/session/jsonl-hydration\": {\n      \"types\": \"./dist/adapters/claude/session/jsonl-hydration.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/jsonl-hydration.js\"\n    },\n    \"./adapters/claude/session/models\": {\n      \"types\": \"./dist/adapters/claude/session/models.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/models.js\"\n    },\n    \"./adapters/reasoning-effort\": {\n      \"types\": \"./dist/adapters/reasoning-effort.d.ts\",\n      \"import\": \"./dist/adapters/reasoning-effort.js\"\n    },\n    \"./adapters/claude/mcp/tool-metadata\": {\n      \"types\": \"./dist/adapters/claude/mcp/tool-metadata.d.ts\",\n      \"import\": \"./dist/adapters/claude/mcp/tool-metadata.js\"\n    },\n    \"./execution-mode\": {\n      \"types\": \"./dist/execution-mode.d.ts\",\n      \"import\": \"./dist/execution-mode.js\"\n    },\n    \"./resume\": {\n      \"types\": \"./dist/resume.d.ts\",\n      \"import\": \"./dist/resume.js\"\n    },\n    \"./handoff-checkpoint\": {\n      \"types\": \"./dist/handoff-checkpoint.d.ts\",\n      \"import\": \"./dist/handoff-checkpoint.js\"\n    },\n    \"./server\": {\n      \"types\": \"./dist/server/agent-server.d.ts\",\n      \"import\": \"./dist/server/agent-server.js\"\n    },\n    \"./server/schemas\": {\n      \"types\": \"./dist/server/schemas.d.ts\",\n      \"import\": \"./dist/server/schemas.js\"\n    }\n  },\n  \"bin\": {\n    \"agent-server\": \"./dist/server/bin.cjs\"\n  },\n  \"type\": \"module\",\n  \"keywords\": [\n    \"posthog\",\n    \"claude\",\n    \"agent\",\n    \"ai\",\n    \"git\",\n    \"typescript\"\n  ],\n  \"author\": \"PostHog\",\n  \"license\": \"SEE LICENSE IN LICENSE\",\n  \"scripts\": {\n    \"build\": \"node ../../scripts/rimraf.mjs dist && tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"pnpm exec tsc --noEmit\",\n    \"prepublishOnly\": \"pnpm run build\",\n    \"clean\": \"node ../../scripts/rimraf.mjs dist .turbo\"\n  },\n  \"engines\": {\n    \"node\": \">=20.0.0\"\n  },\n  \"devDependencies\": {\n    \"@posthog/shared\": \"workspace:*\",\n    \"@posthog/git\": \"workspace:*\",\n    \"@posthog/enricher\": \"workspace:*\",\n    \"@types/bun\": \"latest\",\n    \"@types/tar\": \"^6.1.13\",\n    \"msw\": \"^2.12.7\",\n    \"tsup\": \"^8.5.1\",\n    \"tsx\": \"^4.20.6\",\n    \"typescript\": \"^5.5.0\",\n    \"vitest\": \"^2.1.8\"\n  },\n  \"dependencies\": {\n    \"@agentclientprotocol/sdk\": \"0.19.0\",\n    \"ajv\": \"^8.17.1\",\n    \"@anthropic-ai/claude-agent-sdk\": \"0.2.112\",\n    \"@anthropic-ai/sdk\": \"0.89.0\",\n    \"@hono/node-server\": \"^1.19.9\",\n    \"@opentelemetry/api-logs\": \"^0.208.0\",\n    \"@opentelemetry/exporter-logs-otlp-http\": \"^0.208.0\",\n    \"@opentelemetry/resources\": \"^2.0.0\",\n    \"@opentelemetry/sdk-logs\": \"^0.208.0\",\n    \"@opentelemetry/semantic-conventions\": \"^1.28.0\",\n    \"@types/jsonwebtoken\": \"^9.0.10\",\n    \"commander\": \"^14.0.2\",\n    \"hono\": \"^4.11.7\",\n    \"jsonwebtoken\": \"^9.0.2\",\n    \"minimatch\": \"^10.0.3\",\n    \"tar\": \"^7.5.0\",\n    \"uuid\": \"13.0.0\",\n    \"yoga-wasm-web\": \"^0.3.3\",\n    \"zod\": \"^4.2.0\"\n  },\n  \"files\": [\n    \"dist/**/*\",\n    \"src/**/*\",\n    \"README.md\",\n    \"CLAUDE.md\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\"\n  }\n}\n","export type GatewayProduct = \"posthog_code\" | \"background_agents\";\n\nfunction getGatewayBaseUrl(posthogHost: string): string {\n  const url = new URL(posthogHost);\n  const hostname = url.hostname;\n\n  if (hostname === \"localhost\" || hostname === \"127.0.0.1\") {\n    return `${url.protocol}//localhost:3308`;\n  }\n\n  if (hostname === \"host.docker.internal\") {\n    return `${url.protocol}//host.docker.internal:3308`;\n  }\n\n  const region = hostname.match(/^(us|eu)\\.posthog\\.com$/)?.[1] ?? \"us\";\n  return `https://gateway.${region}.posthog.com`;\n}\n\nexport function getLlmGatewayUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/${product}`;\n}\n\nexport function getGatewayUsageUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/v1/usage/${product}`;\n}\n\nexport function getGatewayInvalidatePlanCacheUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/v1/usage/${product}/invalidate-plan-cache`;\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\nimport type {\n  ArtifactType,\n  PostHogAPIConfig,\n  StoredEntry,\n  Task,\n  TaskRun,\n  TaskRunArtifact,\n} from \"./types\";\nimport {\n  getGatewayInvalidatePlanCacheUrl,\n  getGatewayUsageUrl,\n  getLlmGatewayUrl,\n} from \"./utils/gateway\";\n\nexport {\n  getGatewayInvalidatePlanCacheUrl,\n  getGatewayUsageUrl,\n  getLlmGatewayUrl,\n};\n\nconst DEFAULT_USER_AGENT = `posthog/agent.hog.dev; version: ${packageJson.version}`;\n\nexport interface TaskArtifactUploadPayload {\n  name: string;\n  type: ArtifactType;\n  content: string;\n  content_type?: string;\n}\n\nexport type TaskRunUpdate = Partial<\n  Pick<\n    TaskRun,\n    | \"status\"\n    | \"branch\"\n    | \"stage\"\n    | \"error_message\"\n    | \"output\"\n    | \"state\"\n    | \"environment\"\n  >\n> & {\n  state_remove_keys?: string[];\n};\n\nexport class PostHogAPIClient {\n  private config: PostHogAPIConfig;\n\n  constructor(config: PostHogAPIConfig) {\n    this.config = config;\n  }\n\n  private get baseUrl(): string {\n    const host = this.config.apiUrl.endsWith(\"/\")\n      ? this.config.apiUrl.slice(0, -1)\n      : this.config.apiUrl;\n    return host;\n  }\n\n  private isAuthFailure(status: number): boolean {\n    return status === 401 || status === 403;\n  }\n\n  private async resolveApiKey(forceRefresh = false): Promise<string> {\n    if (forceRefresh && this.config.refreshApiKey) {\n      return this.config.refreshApiKey();\n    }\n\n    return this.config.getApiKey();\n  }\n\n  private async buildHeaders(\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Headers> {\n    const headers = new Headers(options.headers);\n    headers.set(\n      \"Authorization\",\n      `Bearer ${await this.resolveApiKey(forceRefresh)}`,\n    );\n    headers.set(\"Content-Type\", \"application/json\");\n    headers.set(\"User-Agent\", this.config.userAgent ?? DEFAULT_USER_AGENT);\n    return headers;\n  }\n\n  private async performRequest(\n    endpoint: string,\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Response> {\n    const url = `${this.baseUrl}${endpoint}`;\n\n    return fetch(url, {\n      ...options,\n      headers: await this.buildHeaders(options, forceRefresh),\n    });\n  }\n\n  private async performRequestWithRetry(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<Response> {\n    let response = await this.performRequest(endpoint, options);\n\n    if (!response.ok && this.isAuthFailure(response.status)) {\n      response = await this.performRequest(endpoint, options, true);\n    }\n\n    return response;\n  }\n\n  private async apiRequest<T>(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<T> {\n    const response = await this.performRequestWithRetry(endpoint, options);\n\n    if (!response.ok) {\n      let errorMessage: string;\n      try {\n        const errorResponse = await response.json();\n        errorMessage = `Failed request: [${response.status}] ${JSON.stringify(errorResponse)}`;\n      } catch {\n        errorMessage = `Failed request: [${response.status}] ${response.statusText}`;\n      }\n      throw new Error(errorMessage);\n    }\n\n    return response.json();\n  }\n\n  private getTeamId(): number {\n    return this.config.projectId;\n  }\n\n  async getApiKey(forceRefresh = false): Promise<string> {\n    return this.resolveApiKey(forceRefresh);\n  }\n\n  getLlmGatewayUrl(): string {\n    return getLlmGatewayUrl(this.baseUrl);\n  }\n\n  async getTask(taskId: string): Promise<Task> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<Task>(`/api/projects/${teamId}/tasks/${taskId}/`);\n  }\n\n  async getTaskRun(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n    );\n  }\n\n  async resumeRunInCloud(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/resume_in_cloud/`,\n      { method: \"POST\" },\n    );\n  }\n\n  async updateTaskRun(\n    taskId: string,\n    runId: string,\n    payload: TaskRunUpdate,\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(payload),\n      },\n    );\n  }\n\n  async setTaskRunOutput(\n    taskId: string,\n    runId: string,\n    output: Record<string, unknown>,\n  ): Promise<TaskRun> {\n    return this.apiRequest(\n      `/api/projects/${this.getTeamId()}/tasks/${taskId}/runs/${runId}/set_output/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(output),\n      },\n    );\n  }\n\n  async appendTaskRunLog(\n    taskId: string,\n    runId: string,\n    entries: StoredEntry[],\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/append_log/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ entries }),\n      },\n    );\n  }\n\n  async relayMessage(\n    taskId: string,\n    runId: string,\n    text: string,\n  ): Promise<void> {\n    const teamId = this.getTeamId();\n    await this.apiRequest<{ status: string }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/relay_message/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ text }),\n      },\n    );\n  }\n\n  async uploadTaskArtifacts(\n    taskId: string,\n    runId: string,\n    artifacts: TaskArtifactUploadPayload[],\n  ): Promise<TaskRunArtifact[]> {\n    if (!artifacts.length) {\n      return [];\n    }\n\n    const teamId = this.getTeamId();\n    const response = await this.apiRequest<{ artifacts: TaskRunArtifact[] }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ artifacts }),\n      },\n    );\n\n    const manifest = response.artifacts ?? [];\n\n    // The backend returns the full run artifact manifest after each upload.\n    // Callers want the artifacts corresponding to this upload request only.\n    return manifest.slice(-artifacts.length);\n  }\n\n  /**\n   * Download artifact content by storage path\n   * Streams the file through the PostHog backend so the sandbox does not need\n   * direct access to object storage.\n   */\n  async downloadArtifact(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<ArrayBuffer | null> {\n    const teamId = this.getTeamId();\n\n    try {\n      const response = await this.performRequestWithRetry(\n        `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/download/`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ storage_path: storagePath }),\n        },\n      );\n      if (!response.ok) {\n        throw new Error(`Failed to download artifact: ${response.status}`);\n      }\n      return response.arrayBuffer();\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Fetch logs for a task run via the logs API endpoint\n   * @param taskRun - The task run to fetch logs for\n   * @returns Array of stored entries, or empty array if no logs available\n   */\n  async fetchTaskRunLogs(taskRun: TaskRun): Promise<StoredEntry[]> {\n    const teamId = this.getTeamId();\n    const endpoint = `/api/projects/${teamId}/tasks/${taskRun.task}/runs/${taskRun.id}/logs`;\n\n    try {\n      const response = await this.performRequestWithRetry(endpoint);\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          return [];\n        }\n        throw new Error(\n          `Failed to fetch logs: ${response.status} ${response.statusText}`,\n        );\n      }\n\n      const content = await response.text();\n\n      if (!content.trim()) {\n        return [];\n      }\n\n      // Parse newline-delimited JSON\n      return content\n        .trim()\n        .split(\"\\n\")\n        .map((line) => JSON.parse(line) as StoredEntry);\n    } catch (error) {\n      throw new Error(\n        `Failed to fetch task run logs: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n}\n"],"mappings":";AAAA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,YAAc;AAAA,EACd,aAAe;AAAA,EACf,SAAW;AAAA,IACT,KAAK;AAAA,MACH,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,iBAAiB;AAAA,MACf,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,qCAAqC;AAAA,MACnC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oDAAoD;AAAA,MAClD,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,2BAA2B;AAAA,MACzB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,gDAAgD;AAAA,MAC9C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,6CAA6C;AAAA,MAC3C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oCAAoC;AAAA,MAClC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,+BAA+B;AAAA,MAC7B,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,uCAAuC;AAAA,MACrC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,wBAAwB;AAAA,MACtB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,KAAO;AAAA,IACL,gBAAgB;AAAA,EAClB;AAAA,EACA,MAAQ;AAAA,EACR,UAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,QAAU;AAAA,EACV,SAAW;AAAA,EACX,SAAW;AAAA,IACT,OAAS;AAAA,IACT,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,cAAc;AAAA,IACd,WAAa;AAAA,IACb,gBAAkB;AAAA,IAClB,OAAS;AAAA,EACX;AAAA,EACA,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,iBAAmB;AAAA,IACjB,mBAAmB;AAAA,IACnB,gBAAgB;AAAA,IAChB,qBAAqB;AAAA,IACrB,cAAc;AAAA,IACd,cAAc;AAAA,IACd,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,KAAO;AAAA,IACP,YAAc;AAAA,IACd,QAAU;AAAA,EACZ;AAAA,EACA,cAAgB;AAAA,IACd,4BAA4B;AAAA,IAC5B,KAAO;AAAA,IACP,kCAAkC;AAAA,IAClC,qBAAqB;AAAA,IACrB,qBAAqB;AAAA,IACrB,2BAA2B;AAAA,IAC3B,0CAA0C;AAAA,IAC1C,4BAA4B;AAAA,IAC5B,2BAA2B;AAAA,IAC3B,uCAAuC;AAAA,IACvC,uBAAuB;AAAA,IACvB,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,cAAgB;AAAA,IAChB,WAAa;AAAA,IACb,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,iBAAiB;AAAA,IACjB,KAAO;AAAA,EACT;AAAA,EACA,OAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,eAAiB;AAAA,IACf,QAAU;AAAA,EACZ;AACF;;;ACjJA,SAAS,kBAAkB,aAA6B;AACtD,QAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,QAAM,WAAW,IAAI;AAErB,MAAI,aAAa,eAAe,aAAa,aAAa;AACxD,WAAO,GAAG,IAAI,QAAQ;AAAA,EACxB;AAEA,MAAI,aAAa,wBAAwB;AACvC,WAAO,GAAG,IAAI,QAAQ;AAAA,EACxB;AAEA,QAAM,SAAS,SAAS,MAAM,yBAAyB,IAAI,CAAC,KAAK;AACjE,SAAO,mBAAmB,MAAM;AAClC;AAEO,SAAS,iBACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,IAAI,OAAO;AACrD;AAEO,SAAS,mBACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,aAAa,OAAO;AAC9D;AAEO,SAAS,iCACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,aAAa,OAAO;AAC9D;;;AChBA,IAAM,qBAAqB,mCAAmC,gBAAY,OAAO;AAwB1E,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EAER,YAAY,QAA0B;AACpC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAY,UAAkB;AAC5B,UAAM,OAAO,KAAK,OAAO,OAAO,SAAS,GAAG,IACxC,KAAK,OAAO,OAAO,MAAM,GAAG,EAAE,IAC9B,KAAK,OAAO;AAChB,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc,QAAyB;AAC7C,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAAA,EAEA,MAAc,cAAc,eAAe,OAAwB;AACjE,QAAI,gBAAgB,KAAK,OAAO,eAAe;AAC7C,aAAO,KAAK,OAAO,cAAc;AAAA,IACnC;AAEA,WAAO,KAAK,OAAO,UAAU;AAAA,EAC/B;AAAA,EAEA,MAAc,aACZ,SACA,eAAe,OACG;AAClB,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,YAAQ;AAAA,MACN;AAAA,MACA,UAAU,MAAM,KAAK,cAAc,YAAY,CAAC;AAAA,IAClD;AACA,YAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,YAAQ,IAAI,cAAc,KAAK,OAAO,aAAa,kBAAkB;AACrE,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,eACZ,UACA,SACA,eAAe,OACI;AACnB,UAAM,MAAM,GAAG,KAAK,OAAO,GAAG,QAAQ;AAEtC,WAAO,MAAM,KAAK;AAAA,MAChB,GAAG;AAAA,MACH,SAAS,MAAM,KAAK,aAAa,SAAS,YAAY;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,wBACZ,UACA,UAAuB,CAAC,GACL;AACnB,QAAI,WAAW,MAAM,KAAK,eAAe,UAAU,OAAO;AAE1D,QAAI,CAAC,SAAS,MAAM,KAAK,cAAc,SAAS,MAAM,GAAG;AACvD,iBAAW,MAAM,KAAK,eAAe,UAAU,SAAS,IAAI;AAAA,IAC9D;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,WACZ,UACA,UAAuB,CAAC,GACZ;AACZ,UAAM,WAAW,MAAM,KAAK,wBAAwB,UAAU,OAAO;AAErE,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI;AACJ,UAAI;AACF,cAAM,gBAAgB,MAAM,SAAS,KAAK;AAC1C,uBAAe,oBAAoB,SAAS,MAAM,KAAK,KAAK,UAAU,aAAa,CAAC;AAAA,MACtF,QAAQ;AACN,uBAAe,oBAAoB,SAAS,MAAM,KAAK,SAAS,UAAU;AAAA,MAC5E;AACA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAEQ,YAAoB;AAC1B,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAM,UAAU,eAAe,OAAwB;AACrD,WAAO,KAAK,cAAc,YAAY;AAAA,EACxC;AAAA,EAEA,mBAA2B;AACzB,WAAO,iBAAiB,KAAK,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,QAAQ,QAA+B;AAC3C,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK,WAAiB,iBAAiB,MAAM,UAAU,MAAM,GAAG;AAAA,EACzE;AAAA,EAEA,MAAM,WAAW,QAAgB,OAAiC;AAChE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,IACvD;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,QAAgB,OAAiC;AACtE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD,EAAE,QAAQ,OAAO;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,OAAO;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,QACkB;AAClB,WAAO,KAAK;AAAA,MACV,iBAAiB,KAAK,UAAU,CAAC,UAAU,MAAM,SAAS,KAAK;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,MAAM;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,QACA,OACA,MACe;AACf,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,KAAK;AAAA,MACT,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,QACA,OACA,WAC4B;AAC5B,QAAI,CAAC,UAAU,QAAQ;AACrB,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC;AAAA,MACpC;AAAA,IACF;AAEA,UAAM,WAAW,SAAS,aAAa,CAAC;AAIxC,WAAO,SAAS,MAAM,CAAC,UAAU,MAAM;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBACJ,QACA,OACA,aAC6B;AAC7B,UAAM,SAAS,KAAK,UAAU;AAE9B,QAAI;AACF,YAAM,WAAW,MAAM,KAAK;AAAA,QAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,QACrD;AAAA,UACE,QAAQ;AAAA,UACR,MAAM,KAAK,UAAU,EAAE,cAAc,YAAY,CAAC;AAAA,QACpD;AAAA,MACF;AACA,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,EAAE;AAAA,MACnE;AACA,aAAO,SAAS,YAAY;AAAA,IAC9B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBAAiB,SAA0C;AAC/D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,iBAAiB,MAAM,UAAU,QAAQ,IAAI,SAAS,QAAQ,EAAE;AAEjF,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,wBAAwB,QAAQ;AAE5D,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,iBAAO,CAAC;AAAA,QACV;AACA,cAAM,IAAI;AAAA,UACR,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,eAAO,CAAC;AAAA,MACV;AAGA,aAAO,QACJ,KAAK,EACL,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,CAAgB;AAAA,IAClD,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../package.json","../src/utils/gateway.ts","../src/posthog-api.ts"],"sourcesContent":["{\n  \"name\": \"@posthog/agent\",\n  \"version\": \"2.3.508\",\n  \"repository\": \"https://github.com/PostHog/code\",\n  \"description\": \"TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\"\n    },\n    \"./agent\": {\n      \"types\": \"./dist/agent.d.ts\",\n      \"import\": \"./dist/agent.js\"\n    },\n    \"./gateway-models\": {\n      \"types\": \"./dist/gateway-models.d.ts\",\n      \"import\": \"./dist/gateway-models.js\"\n    },\n    \"./posthog-api\": {\n      \"types\": \"./dist/posthog-api.d.ts\",\n      \"import\": \"./dist/posthog-api.js\"\n    },\n    \"./types\": {\n      \"types\": \"./dist/types.d.ts\",\n      \"import\": \"./dist/types.js\"\n    },\n    \"./adapters/claude/questions/utils\": {\n      \"types\": \"./dist/adapters/claude/questions/utils.d.ts\",\n      \"import\": \"./dist/adapters/claude/questions/utils.js\"\n    },\n    \"./adapters/claude/permissions/permission-options\": {\n      \"types\": \"./dist/adapters/claude/permissions/permission-options.d.ts\",\n      \"import\": \"./dist/adapters/claude/permissions/permission-options.js\"\n    },\n    \"./adapters/claude/tools\": {\n      \"types\": \"./dist/adapters/claude/tools.d.ts\",\n      \"import\": \"./dist/adapters/claude/tools.js\"\n    },\n    \"./adapters/claude/conversion/tool-use-to-acp\": {\n      \"types\": \"./dist/adapters/claude/conversion/tool-use-to-acp.d.ts\",\n      \"import\": \"./dist/adapters/claude/conversion/tool-use-to-acp.js\"\n    },\n    \"./adapters/claude/session/jsonl-hydration\": {\n      \"types\": \"./dist/adapters/claude/session/jsonl-hydration.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/jsonl-hydration.js\"\n    },\n    \"./adapters/claude/session/models\": {\n      \"types\": \"./dist/adapters/claude/session/models.d.ts\",\n      \"import\": \"./dist/adapters/claude/session/models.js\"\n    },\n    \"./adapters/reasoning-effort\": {\n      \"types\": \"./dist/adapters/reasoning-effort.d.ts\",\n      \"import\": \"./dist/adapters/reasoning-effort.js\"\n    },\n    \"./adapters/claude/mcp/tool-metadata\": {\n      \"types\": \"./dist/adapters/claude/mcp/tool-metadata.d.ts\",\n      \"import\": \"./dist/adapters/claude/mcp/tool-metadata.js\"\n    },\n    \"./execution-mode\": {\n      \"types\": \"./dist/execution-mode.d.ts\",\n      \"import\": \"./dist/execution-mode.js\"\n    },\n    \"./resume\": {\n      \"types\": \"./dist/resume.d.ts\",\n      \"import\": \"./dist/resume.js\"\n    },\n    \"./handoff-checkpoint\": {\n      \"types\": \"./dist/handoff-checkpoint.d.ts\",\n      \"import\": \"./dist/handoff-checkpoint.js\"\n    },\n    \"./server\": {\n      \"types\": \"./dist/server/agent-server.d.ts\",\n      \"import\": \"./dist/server/agent-server.js\"\n    },\n    \"./server/schemas\": {\n      \"types\": \"./dist/server/schemas.d.ts\",\n      \"import\": \"./dist/server/schemas.js\"\n    }\n  },\n  \"bin\": {\n    \"agent-server\": \"./dist/server/bin.cjs\"\n  },\n  \"type\": \"module\",\n  \"keywords\": [\n    \"posthog\",\n    \"claude\",\n    \"agent\",\n    \"ai\",\n    \"git\",\n    \"typescript\"\n  ],\n  \"author\": \"PostHog\",\n  \"license\": \"SEE LICENSE IN LICENSE\",\n  \"scripts\": {\n    \"build\": \"node ../../scripts/rimraf.mjs dist && tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"pnpm exec tsc --noEmit\",\n    \"prepublishOnly\": \"pnpm run build\",\n    \"clean\": \"node ../../scripts/rimraf.mjs dist .turbo\"\n  },\n  \"engines\": {\n    \"node\": \">=20.0.0\"\n  },\n  \"devDependencies\": {\n    \"@posthog/shared\": \"workspace:*\",\n    \"@posthog/git\": \"workspace:*\",\n    \"@posthog/enricher\": \"workspace:*\",\n    \"@types/bun\": \"latest\",\n    \"@types/tar\": \"^6.1.13\",\n    \"msw\": \"^2.12.7\",\n    \"tsup\": \"^8.5.1\",\n    \"tsx\": \"^4.20.6\",\n    \"typescript\": \"^5.5.0\",\n    \"vitest\": \"^2.1.8\"\n  },\n  \"dependencies\": {\n    \"@agentclientprotocol/sdk\": \"0.19.0\",\n    \"ajv\": \"^8.17.1\",\n    \"@anthropic-ai/claude-agent-sdk\": \"0.2.112\",\n    \"@anthropic-ai/sdk\": \"0.89.0\",\n    \"@hono/node-server\": \"^1.19.9\",\n    \"@opentelemetry/api-logs\": \"^0.208.0\",\n    \"@opentelemetry/exporter-logs-otlp-http\": \"^0.208.0\",\n    \"@opentelemetry/resources\": \"^2.0.0\",\n    \"@opentelemetry/sdk-logs\": \"^0.208.0\",\n    \"@opentelemetry/semantic-conventions\": \"^1.28.0\",\n    \"@types/jsonwebtoken\": \"^9.0.10\",\n    \"commander\": \"^14.0.2\",\n    \"hono\": \"^4.11.7\",\n    \"jsonwebtoken\": \"^9.0.2\",\n    \"minimatch\": \"^10.0.3\",\n    \"tar\": \"^7.5.0\",\n    \"uuid\": \"13.0.0\",\n    \"yoga-wasm-web\": \"^0.3.3\",\n    \"zod\": \"^4.2.0\"\n  },\n  \"files\": [\n    \"dist/**/*\",\n    \"src/**/*\",\n    \"README.md\",\n    \"CLAUDE.md\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\"\n  }\n}\n","export type GatewayProduct = \"posthog_code\" | \"background_agents\";\n\nfunction getGatewayBaseUrl(posthogHost: string): string {\n  const url = new URL(posthogHost);\n  const hostname = url.hostname;\n\n  if (hostname === \"localhost\" || hostname === \"127.0.0.1\") {\n    return `${url.protocol}//localhost:3308`;\n  }\n\n  if (hostname === \"host.docker.internal\") {\n    return `${url.protocol}//host.docker.internal:3308`;\n  }\n\n  const region = hostname.match(/^(us|eu)\\.posthog\\.com$/)?.[1] ?? \"us\";\n  return `https://gateway.${region}.posthog.com`;\n}\n\nexport function getLlmGatewayUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/${product}`;\n}\n\nexport function getGatewayUsageUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/v1/usage/${product}`;\n}\n\nexport function getGatewayInvalidatePlanCacheUrl(\n  posthogHost: string,\n  product: GatewayProduct = \"posthog_code\",\n): string {\n  return `${getGatewayBaseUrl(posthogHost)}/v1/usage/${product}/invalidate-plan-cache`;\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\nimport type {\n  ArtifactType,\n  PostHogAPIConfig,\n  StoredEntry,\n  Task,\n  TaskRun,\n  TaskRunArtifact,\n} from \"./types\";\nimport {\n  getGatewayInvalidatePlanCacheUrl,\n  getGatewayUsageUrl,\n  getLlmGatewayUrl,\n} from \"./utils/gateway\";\n\nexport {\n  getGatewayInvalidatePlanCacheUrl,\n  getGatewayUsageUrl,\n  getLlmGatewayUrl,\n};\n\nconst DEFAULT_USER_AGENT = `posthog/agent.hog.dev; version: ${packageJson.version}`;\n\nexport interface TaskArtifactUploadPayload {\n  name: string;\n  type: ArtifactType;\n  content: string;\n  content_type?: string;\n}\n\nexport type TaskRunUpdate = Partial<\n  Pick<\n    TaskRun,\n    | \"status\"\n    | \"branch\"\n    | \"stage\"\n    | \"error_message\"\n    | \"output\"\n    | \"state\"\n    | \"environment\"\n  >\n> & {\n  state_remove_keys?: string[];\n};\n\nexport class PostHogAPIClient {\n  private config: PostHogAPIConfig;\n\n  constructor(config: PostHogAPIConfig) {\n    this.config = config;\n  }\n\n  private get baseUrl(): string {\n    const host = this.config.apiUrl.endsWith(\"/\")\n      ? this.config.apiUrl.slice(0, -1)\n      : this.config.apiUrl;\n    return host;\n  }\n\n  private isAuthFailure(status: number): boolean {\n    return status === 401 || status === 403;\n  }\n\n  private async resolveApiKey(forceRefresh = false): Promise<string> {\n    if (forceRefresh && this.config.refreshApiKey) {\n      return this.config.refreshApiKey();\n    }\n\n    return this.config.getApiKey();\n  }\n\n  private async buildHeaders(\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Headers> {\n    const headers = new Headers(options.headers);\n    headers.set(\n      \"Authorization\",\n      `Bearer ${await this.resolveApiKey(forceRefresh)}`,\n    );\n    headers.set(\"Content-Type\", \"application/json\");\n    headers.set(\"User-Agent\", this.config.userAgent ?? DEFAULT_USER_AGENT);\n    return headers;\n  }\n\n  private async performRequest(\n    endpoint: string,\n    options: RequestInit,\n    forceRefresh = false,\n  ): Promise<Response> {\n    const url = `${this.baseUrl}${endpoint}`;\n\n    return fetch(url, {\n      ...options,\n      headers: await this.buildHeaders(options, forceRefresh),\n    });\n  }\n\n  private async performRequestWithRetry(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<Response> {\n    let response = await this.performRequest(endpoint, options);\n\n    if (!response.ok && this.isAuthFailure(response.status)) {\n      response = await this.performRequest(endpoint, options, true);\n    }\n\n    return response;\n  }\n\n  private async apiRequest<T>(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<T> {\n    const response = await this.performRequestWithRetry(endpoint, options);\n\n    if (!response.ok) {\n      let errorMessage: string;\n      try {\n        const errorResponse = await response.json();\n        errorMessage = `Failed request: [${response.status}] ${JSON.stringify(errorResponse)}`;\n      } catch {\n        errorMessage = `Failed request: [${response.status}] ${response.statusText}`;\n      }\n      throw new Error(errorMessage);\n    }\n\n    return response.json();\n  }\n\n  private getTeamId(): number {\n    return this.config.projectId;\n  }\n\n  async getApiKey(forceRefresh = false): Promise<string> {\n    return this.resolveApiKey(forceRefresh);\n  }\n\n  getLlmGatewayUrl(): string {\n    return getLlmGatewayUrl(this.baseUrl);\n  }\n\n  async getTask(taskId: string): Promise<Task> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<Task>(`/api/projects/${teamId}/tasks/${taskId}/`);\n  }\n\n  async getTaskRun(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n    );\n  }\n\n  async resumeRunInCloud(taskId: string, runId: string): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/resume_in_cloud/`,\n      { method: \"POST\" },\n    );\n  }\n\n  async updateTaskRun(\n    taskId: string,\n    runId: string,\n    payload: TaskRunUpdate,\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(payload),\n      },\n    );\n  }\n\n  async setTaskRunOutput(\n    taskId: string,\n    runId: string,\n    output: Record<string, unknown>,\n  ): Promise<TaskRun> {\n    return this.apiRequest(\n      `/api/projects/${this.getTeamId()}/tasks/${taskId}/runs/${runId}/set_output/`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify(output),\n      },\n    );\n  }\n\n  async appendTaskRunLog(\n    taskId: string,\n    runId: string,\n    entries: StoredEntry[],\n  ): Promise<TaskRun> {\n    const teamId = this.getTeamId();\n    return this.apiRequest<TaskRun>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/append_log/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ entries }),\n      },\n    );\n  }\n\n  async relayMessage(\n    taskId: string,\n    runId: string,\n    text: string,\n  ): Promise<void> {\n    const teamId = this.getTeamId();\n    await this.apiRequest<{ status: string }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/relay_message/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ text }),\n      },\n    );\n  }\n\n  async uploadTaskArtifacts(\n    taskId: string,\n    runId: string,\n    artifacts: TaskArtifactUploadPayload[],\n  ): Promise<TaskRunArtifact[]> {\n    if (!artifacts.length) {\n      return [];\n    }\n\n    const teamId = this.getTeamId();\n    const response = await this.apiRequest<{ artifacts: TaskRunArtifact[] }>(\n      `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ artifacts }),\n      },\n    );\n\n    const manifest = response.artifacts ?? [];\n\n    // The backend returns the full run artifact manifest after each upload.\n    // Callers want the artifacts corresponding to this upload request only.\n    return manifest.slice(-artifacts.length);\n  }\n\n  /**\n   * Download artifact content by storage path\n   * Streams the file through the PostHog backend so the sandbox does not need\n   * direct access to object storage.\n   */\n  async downloadArtifact(\n    taskId: string,\n    runId: string,\n    storagePath: string,\n  ): Promise<ArrayBuffer | null> {\n    const teamId = this.getTeamId();\n\n    try {\n      const response = await this.performRequestWithRetry(\n        `/api/projects/${teamId}/tasks/${taskId}/runs/${runId}/artifacts/download/`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ storage_path: storagePath }),\n        },\n      );\n      if (!response.ok) {\n        throw new Error(`Failed to download artifact: ${response.status}`);\n      }\n      return response.arrayBuffer();\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Fetch logs for a task run via the logs API endpoint\n   * @param taskRun - The task run to fetch logs for\n   * @returns Array of stored entries, or empty array if no logs available\n   */\n  async fetchTaskRunLogs(taskRun: TaskRun): Promise<StoredEntry[]> {\n    const teamId = this.getTeamId();\n    const endpoint = `/api/projects/${teamId}/tasks/${taskRun.task}/runs/${taskRun.id}/logs`;\n\n    try {\n      const response = await this.performRequestWithRetry(endpoint);\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          return [];\n        }\n        throw new Error(\n          `Failed to fetch logs: ${response.status} ${response.statusText}`,\n        );\n      }\n\n      const content = await response.text();\n\n      if (!content.trim()) {\n        return [];\n      }\n\n      // Parse newline-delimited JSON\n      return content\n        .trim()\n        .split(\"\\n\")\n        .map((line) => JSON.parse(line) as StoredEntry);\n    } catch (error) {\n      throw new Error(\n        `Failed to fetch task run logs: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n}\n"],"mappings":";AAAA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,YAAc;AAAA,EACd,aAAe;AAAA,EACf,SAAW;AAAA,IACT,KAAK;AAAA,MACH,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,iBAAiB;AAAA,MACf,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,qCAAqC;AAAA,MACnC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oDAAoD;AAAA,MAClD,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,2BAA2B;AAAA,MACzB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,gDAAgD;AAAA,MAC9C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,6CAA6C;AAAA,MAC3C,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oCAAoC;AAAA,MAClC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,+BAA+B;AAAA,MAC7B,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,uCAAuC;AAAA,MACrC,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,wBAAwB;AAAA,MACtB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,IACA,oBAAoB;AAAA,MAClB,OAAS;AAAA,MACT,QAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,KAAO;AAAA,IACL,gBAAgB;AAAA,EAClB;AAAA,EACA,MAAQ;AAAA,EACR,UAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,QAAU;AAAA,EACV,SAAW;AAAA,EACX,SAAW;AAAA,IACT,OAAS;AAAA,IACT,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,cAAc;AAAA,IACd,WAAa;AAAA,IACb,gBAAkB;AAAA,IAClB,OAAS;AAAA,EACX;AAAA,EACA,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,iBAAmB;AAAA,IACjB,mBAAmB;AAAA,IACnB,gBAAgB;AAAA,IAChB,qBAAqB;AAAA,IACrB,cAAc;AAAA,IACd,cAAc;AAAA,IACd,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,KAAO;AAAA,IACP,YAAc;AAAA,IACd,QAAU;AAAA,EACZ;AAAA,EACA,cAAgB;AAAA,IACd,4BAA4B;AAAA,IAC5B,KAAO;AAAA,IACP,kCAAkC;AAAA,IAClC,qBAAqB;AAAA,IACrB,qBAAqB;AAAA,IACrB,2BAA2B;AAAA,IAC3B,0CAA0C;AAAA,IAC1C,4BAA4B;AAAA,IAC5B,2BAA2B;AAAA,IAC3B,uCAAuC;AAAA,IACvC,uBAAuB;AAAA,IACvB,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,cAAgB;AAAA,IAChB,WAAa;AAAA,IACb,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,iBAAiB;AAAA,IACjB,KAAO;AAAA,EACT;AAAA,EACA,OAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,eAAiB;AAAA,IACf,QAAU;AAAA,EACZ;AACF;;;ACjJA,SAAS,kBAAkB,aAA6B;AACtD,QAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,QAAM,WAAW,IAAI;AAErB,MAAI,aAAa,eAAe,aAAa,aAAa;AACxD,WAAO,GAAG,IAAI,QAAQ;AAAA,EACxB;AAEA,MAAI,aAAa,wBAAwB;AACvC,WAAO,GAAG,IAAI,QAAQ;AAAA,EACxB;AAEA,QAAM,SAAS,SAAS,MAAM,yBAAyB,IAAI,CAAC,KAAK;AACjE,SAAO,mBAAmB,MAAM;AAClC;AAEO,SAAS,iBACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,IAAI,OAAO;AACrD;AAEO,SAAS,mBACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,aAAa,OAAO;AAC9D;AAEO,SAAS,iCACd,aACA,UAA0B,gBAClB;AACR,SAAO,GAAG,kBAAkB,WAAW,CAAC,aAAa,OAAO;AAC9D;;;AChBA,IAAM,qBAAqB,mCAAmC,gBAAY,OAAO;AAwB1E,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EAER,YAAY,QAA0B;AACpC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAY,UAAkB;AAC5B,UAAM,OAAO,KAAK,OAAO,OAAO,SAAS,GAAG,IACxC,KAAK,OAAO,OAAO,MAAM,GAAG,EAAE,IAC9B,KAAK,OAAO;AAChB,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc,QAAyB;AAC7C,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AAAA,EAEA,MAAc,cAAc,eAAe,OAAwB;AACjE,QAAI,gBAAgB,KAAK,OAAO,eAAe;AAC7C,aAAO,KAAK,OAAO,cAAc;AAAA,IACnC;AAEA,WAAO,KAAK,OAAO,UAAU;AAAA,EAC/B;AAAA,EAEA,MAAc,aACZ,SACA,eAAe,OACG;AAClB,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,YAAQ;AAAA,MACN;AAAA,MACA,UAAU,MAAM,KAAK,cAAc,YAAY,CAAC;AAAA,IAClD;AACA,YAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,YAAQ,IAAI,cAAc,KAAK,OAAO,aAAa,kBAAkB;AACrE,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,eACZ,UACA,SACA,eAAe,OACI;AACnB,UAAM,MAAM,GAAG,KAAK,OAAO,GAAG,QAAQ;AAEtC,WAAO,MAAM,KAAK;AAAA,MAChB,GAAG;AAAA,MACH,SAAS,MAAM,KAAK,aAAa,SAAS,YAAY;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,wBACZ,UACA,UAAuB,CAAC,GACL;AACnB,QAAI,WAAW,MAAM,KAAK,eAAe,UAAU,OAAO;AAE1D,QAAI,CAAC,SAAS,MAAM,KAAK,cAAc,SAAS,MAAM,GAAG;AACvD,iBAAW,MAAM,KAAK,eAAe,UAAU,SAAS,IAAI;AAAA,IAC9D;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,WACZ,UACA,UAAuB,CAAC,GACZ;AACZ,UAAM,WAAW,MAAM,KAAK,wBAAwB,UAAU,OAAO;AAErE,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI;AACJ,UAAI;AACF,cAAM,gBAAgB,MAAM,SAAS,KAAK;AAC1C,uBAAe,oBAAoB,SAAS,MAAM,KAAK,KAAK,UAAU,aAAa,CAAC;AAAA,MACtF,QAAQ;AACN,uBAAe,oBAAoB,SAAS,MAAM,KAAK,SAAS,UAAU;AAAA,MAC5E;AACA,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAEQ,YAAoB;AAC1B,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAM,UAAU,eAAe,OAAwB;AACrD,WAAO,KAAK,cAAc,YAAY;AAAA,EACxC;AAAA,EAEA,mBAA2B;AACzB,WAAO,iBAAiB,KAAK,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,QAAQ,QAA+B;AAC3C,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK,WAAiB,iBAAiB,MAAM,UAAU,MAAM,GAAG;AAAA,EACzE;AAAA,EAEA,MAAM,WAAW,QAAgB,OAAiC;AAChE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,IACvD;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,QAAgB,OAAiC;AACtE,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD,EAAE,QAAQ,OAAO;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,OAAO;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,QACkB;AAClB,WAAO,KAAK;AAAA,MACV,iBAAiB,KAAK,UAAU,CAAC,UAAU,MAAM,SAAS,KAAK;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,MAAM;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBACJ,QACA,OACA,SACkB;AAClB,UAAM,SAAS,KAAK,UAAU;AAC9B,WAAO,KAAK;AAAA,MACV,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,QACA,OACA,MACe;AACf,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,KAAK;AAAA,MACT,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,QACA,OACA,WAC4B;AAC5B,QAAI,CAAC,UAAU,QAAQ;AACrB,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,MACrD;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC;AAAA,MACpC;AAAA,IACF;AAEA,UAAM,WAAW,SAAS,aAAa,CAAC;AAIxC,WAAO,SAAS,MAAM,CAAC,UAAU,MAAM;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBACJ,QACA,OACA,aAC6B;AAC7B,UAAM,SAAS,KAAK,UAAU;AAE9B,QAAI;AACF,YAAM,WAAW,MAAM,KAAK;AAAA,QAC1B,iBAAiB,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,QACrD;AAAA,UACE,QAAQ;AAAA,UACR,MAAM,KAAK,UAAU,EAAE,cAAc,YAAY,CAAC;AAAA,QACpD;AAAA,MACF;AACA,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,gCAAgC,SAAS,MAAM,EAAE;AAAA,MACnE;AACA,aAAO,SAAS,YAAY;AAAA,IAC9B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBAAiB,SAA0C;AAC/D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,WAAW,iBAAiB,MAAM,UAAU,QAAQ,IAAI,SAAS,QAAQ,EAAE;AAEjF,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,wBAAwB,QAAQ;AAE5D,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS,WAAW,KAAK;AAC3B,iBAAO,CAAC;AAAA,QACV;AACA,cAAM,IAAI;AAAA,UACR,yBAAyB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,UAAI,CAAC,QAAQ,KAAK,GAAG;AACnB,eAAO,CAAC;AAAA,MACV;AAGA,aAAO,QACJ,KAAK,EACL,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,CAAgB;AAAA,IAClD,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/server/agent-server.js

@@ -8599,7 +8599,7 @@ import { z as z4 } from "zod";
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.504",
+  version: "2.3.508",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {
@@ -13461,6 +13461,24 @@ function toolContent() {
   return new ToolContentBuilder();
 }
 
+// src/adapters/claude/permissions/posthog-exec-gate.ts
+var POSTHOG_EXEC_TOOL_RE = /^mcp__posthog(?:_[^_]+)*__exec$/;
+var POSTHOG_CALL_COMMAND_RE = /^\s*call\s+(?:--json\s+)?([a-zA-Z0-9_-]+)/;
+var POSTHOG_DESTRUCTIVE_SUBTOOL_RE = /(^|-)(partial-update|update|delete|destroy)(-|$)/i;
+function isPostHogExecTool(toolName) {
+  return POSTHOG_EXEC_TOOL_RE.test(toolName);
+}
+function extractPostHogSubTool(toolInput) {
+  if (!toolInput || typeof toolInput !== "object") return null;
+  const command = toolInput.command;
+  if (typeof command !== "string") return null;
+  const match = command.match(POSTHOG_CALL_COMMAND_RE);
+  return match ? match[1] ?? null : null;
+}
+function isPostHogDestructiveSubTool(subTool) {
+  return POSTHOG_DESTRUCTIVE_SUBTOOL_RE.test(subTool);
+}
+
 // src/adapters/claude/hooks.ts
 function extractTextFromToolResponse(response) {
   if (typeof response === "string") return response;
@@ -13601,6 +13619,19 @@ var createPreToolUseHook = (settingsManager, logger) => async (input, _toolUseID
       `[PreToolUseHook] Tool: ${toolName}, Decision: ${permissionCheck.decision}, Rule: ${permissionCheck.rule}`
     );
   }
+  if (permissionCheck.decision === "allow" && isPostHogExecTool(toolName)) {
+    const subTool = extractPostHogSubTool(toolInput);
+    if (subTool && isPostHogDestructiveSubTool(subTool)) {
+      return {
+        continue: true,
+        hookSpecificOutput: {
+          hookEventName: "PreToolUse",
+          permissionDecision: "ask",
+          permissionDecisionReason: `Destructive PostHog sub-tool '${subTool}' requires explicit approval`
+        }
+      };
+    }
+  }
   switch (permissionCheck.decision) {
     case "allow":
       return {
@@ -15195,6 +15226,12 @@ async function emitToolDenial(context, message) {
     }
   });
 }
+async function buildDenialResult(context, response) {
+  const feedback = response._meta?.customInput?.trim();
+  const message = feedback ? `User refused permission to run tool with feedback: ${feedback}` : "User refused permission to run tool";
+  await emitToolDenial(context, message);
+  return { behavior: "deny", message, interrupt: !feedback };
+}
 function getPlanFromFile(session, fileContentCache) {
   return session.lastPlanContent || (session.lastPlanFilePath ? fileContentCache[session.lastPlanFilePath] : void 0);
 }
@@ -15419,12 +15456,8 @@ async function handleDefaultPermissionFlow(context) {
       behavior: "allow",
       updatedInput: toolInput
     };
-  } else {
-    const feedback = response._meta?.customInput?.trim();
-    const message = feedback ? `User refused permission to run tool with feedback: ${feedback}` : "User refused permission to run tool";
-    await emitToolDenial(context, message);
-    return { behavior: "deny", message, interrupt: !feedback };
   }
+  return buildDenialResult(context, response);
 }
 function parseMcpToolName(toolName) {
   const parts2 = toolName.split("__");
@@ -15487,10 +15520,61 @@ ${metadata2.description}` : "";
       updatedInput: toolInput
     };
   }
-  const feedback = response._meta?.customInput?.trim();
-  const message = feedback ? `User refused permission to run tool with feedback: ${feedback}` : "User refused permission to run tool";
-  await emitToolDenial(context, message);
-  return { behavior: "deny", message, interrupt: !feedback };
+  return buildDenialResult(context, response);
+}
+async function handlePostHogExecApprovalFlow(context, subTool) {
+  const { toolName, toolInput, toolUseID, client, sessionId, session } = context;
+  const response = await client.requestPermission({
+    options: [
+      { kind: "allow_once", name: "Yes", optionId: "allow" },
+      {
+        kind: "allow_always",
+        name: "Yes, always allow",
+        optionId: "allow_always"
+      },
+      {
+        kind: "reject_once",
+        name: "Type here to tell the agent what to do differently",
+        optionId: "reject",
+        _meta: { customInput: true }
+      }
+    ],
+    sessionId,
+    toolCall: {
+      toolCallId: toolUseID,
+      title: `The agent wants to run \`${subTool}\` on PostHog`,
+      kind: "other",
+      content: [
+        {
+          type: "content",
+          content: text(
+            "This will modify live PostHog data. Approve to run this sub-tool."
+          )
+        }
+      ],
+      rawInput: { ...toolInput, toolName }
+    }
+  });
+  if (context.signal?.aborted || response.outcome?.outcome === "cancelled") {
+    throw new Error("Tool use aborted");
+  }
+  if (response.outcome?.outcome === "selected" && (response.outcome.optionId === "allow" || response.outcome.optionId === "allow_always")) {
+    if (response.outcome.optionId === "allow_always") {
+      try {
+        await session.settingsManager.addPostHogExecApproval(subTool);
+      } catch (error) {
+        context.logger.warn(
+          "[canUseTool] Failed to persist PostHog exec approval",
+          { error: error instanceof Error ? error.message : String(error) }
+        );
+      }
+    }
+    return {
+      behavior: "allow",
+      updatedInput: toolInput
+    };
+  }
+  return buildDenialResult(context, response);
 }
 function handlePlanFileException(context) {
   const { session, toolName, toolInput } = context;
@@ -15572,6 +15656,24 @@ async function canUseTool(context) {
     if (approvalState === "needs_approval") {
       return handleMcpApprovalFlow(context);
     }
+    if (isPostHogExecTool(toolName)) {
+      const subTool = extractPostHogSubTool(toolInput);
+      if (subTool && isPostHogDestructiveSubTool(subTool)) {
+        if (session.permissionMode === "auto" || session.permissionMode === "bypassPermissions") {
+          return {
+            behavior: "allow",
+            updatedInput: toolInput
+          };
+        }
+        if (session.settingsManager.hasPostHogExecApproval(subTool)) {
+          return {
+            behavior: "allow",
+            updatedInput: toolInput
+          };
+        }
+        return handlePostHogExecApprovalFlow(context, subTool);
+      }
+    }
   }
   if (isToolAllowedForMode(toolName, session.permissionMode)) {
     return {
@@ -16307,6 +16409,7 @@ var SettingsManager = class {
       ask: []
     };
     const merged = { permissions };
+    const posthogApprovedExecTools = /* @__PURE__ */ new Set();
     for (const settings of allSettings) {
       if (settings.permissions) {
         if (settings.permissions.allow) {
@@ -16334,6 +16437,14 @@ var SettingsManager = class {
       if (settings.model) {
         merged.model = settings.model;
       }
+      if (settings.posthogApprovedExecTools) {
+        for (const tool of settings.posthogApprovedExecTools) {
+          posthogApprovedExecTools.add(tool);
+        }
+      }
+    }
+    if (posthogApprovedExecTools.size > 0) {
+      merged.posthogApprovedExecTools = Array.from(posthogApprovedExecTools);
     }
     this.mergedSettings = merged;
   }
@@ -16398,6 +16509,39 @@ var SettingsManager = class {
       const next = { ...existing, permissions };
       await fs7.promises.mkdir(path9.dirname(filePath), { recursive: true });
       await writeFileAtomic(filePath, `${JSON.stringify(next, null, 2)}
+`);
+      this.localSettings = next;
+      this.mergeAllSettings();
+    } finally {
+      this.writeMutex.release();
+    }
+  }
+  hasPostHogExecApproval(subTool) {
+    return this.mergedSettings.posthogApprovedExecTools?.includes(subTool) ?? false;
+  }
+  /**
+   * Persists an approved PostHog MCP `exec` sub-tool (e.g. `experiment-update`)
+   * to the local settings file so future calls skip the prompt. Mirrors
+   * `addAllowRules` — serialised via `writeMutex`, atomic temp-file + rename.
+   */
+  async addPostHogExecApproval(subTool) {
+    if (!subTool) return;
+    if (!this.initialized) await this.initialize();
+    await this.writeMutex.acquire();
+    try {
+      const filePath = this.getLocalSettingsPath();
+      const existing = await readSettingsFileForUpdate(filePath);
+      const current2 = new Set(existing.posthogApprovedExecTools ?? []);
+      if (current2.has(subTool)) {
+        return;
+      }
+      current2.add(subTool);
+      const next = {
+        ...existing,
+        posthogApprovedExecTools: Array.from(current2)
+      };
+      await fs7.promises.mkdir(path9.dirname(filePath), { recursive: true });
+      await writeFileAtomic(filePath, `${JSON.stringify(next, null, 2)}
 `);
       this.localSettings = next;
       this.mergeAllSettings();
@@ -21747,6 +21891,15 @@ ${attributionInstructions}
 `;
     }
     if (!this.config.repositoryPath) {
+      const publishInstructions = this.config.createPr === false ? `
+When the user asks for code changes:
+- You may clone a repository and make local edits in that clone
+- Do NOT create branches, commits, push changes, or open pull requests in this run` : `
+When the user explicitly asks to clone or work in a GitHub repository:
+- Clone the repository into /tmp/workspace/repos/<owner>/<repo> using \`gh repo clone <owner>/<repo> /tmp/workspace/repos/<owner>/<repo>\`
+- Work from inside that cloned repository for follow-up code changes
+- If the user explicitly asks you to open or update a pull request, create a branch, commit the requested changes, push it, and open a draft pull request from inside the clone
+- Do NOT create branches, commits, push changes, or open pull requests unless the user explicitly asks for that`;
       return `
 # Cloud Task Execution \u2014 No Repository Mode
 
@@ -21759,11 +21912,12 @@ When the user asks about analytics, data, metrics, events, funnels, dashboards,
 
 When the user asks for code changes or software engineering tasks:
 - Let them know you can help but don't have a repository connected for this session
-- Offer to write code snippets, scripts, or provide guidance
+- If they have not specified a repository to clone, offer to write code snippets, scripts, or provide guidance
+${publishInstructions}
 
 Important:
-- Do NOT create branches, commits, or pull requests in this mode.
 - Prefer using MCP tools to answer questions with real data over giving generic advice.
+${attributionInstructions}
 `;
     }
     if (!shouldAutoCreatePr) {