@posthog/wizard 2.78.0 → 2.79.0

package/dist/{models-DDdBJKwT.js → models-DnAY67Lg.js}

@@ -1,4 +1,4 @@
-import { L as SONNET_5_MODEL, _ as GPT5_6_LUNA_MODEL, b as HAIKU_MODEL, v as GPT5_6_SOL_MODEL, x as HAIKU_TRIAGE_MODEL, y as GPT5_6_TERRA_MODEL } from "./constants-jFI2SaE1.js";
+import { L as SONNET_5_MODEL, _ as GPT5_6_LUNA_MODEL, b as HAIKU_MODEL, v as GPT5_6_SOL_MODEL, x as HAIKU_TRIAGE_MODEL, y as GPT5_6_TERRA_MODEL } from "./constants-CuJfQEcC.js";
 //#region src/agent/runner/switchboard/models.ts
 /** Reasoning effort, mapped by each harness to its provider transport. */
 const THINKING_LEVELS = [
@@ -80,4 +80,4 @@ function modelCapabilities(modelId, effortOverride) {
 //#endregion
 export { requireKnownModel as a, modelCapabilities as i, isThinkingLevel as n, triageModelFor as o, isValidModel as r, VALID_MODELS as t };
 
-//# sourceMappingURL=models-DDdBJKwT.js.map
+//# sourceMappingURL=models-DnAY67Lg.js.map

package/dist/{models-DDdBJKwT.js.map → models-DnAY67Lg.js.map}

@@ -1 +1 @@
-{"version":3,"file":"models-DDdBJKwT.js","names":[],"sources":["../src/agent/runner/switchboard/models.ts"],"sourcesContent":["// Local capabilities inform transport parameters; gateway policy independently admits models and efforts.\nimport {\n  SONNET_5_MODEL,\n  HAIKU_MODEL,\n  GPT5_6_LUNA_MODEL,\n  GPT5_6_SOL_MODEL,\n  GPT5_6_TERRA_MODEL,\n  HAIKU_TRIAGE_MODEL,\n  Harness,\n} from '@shared/constants';\n\n/** Reasoning effort, mapped by each harness to its provider transport. */\nconst THINKING_LEVELS = [\n  'off',\n  'minimal',\n  'low',\n  'medium',\n  'high',\n  'xhigh',\n] as const;\nexport type ThinkingLevel = (typeof THINKING_LEVELS)[number];\n\n/** Whether a value (e.g. remote prompt frontmatter) names a valid effort. */\nexport function isThinkingLevel(value: unknown): value is ThinkingLevel {\n  return (THINKING_LEVELS as readonly unknown[]).includes(value);\n}\n\n/**\n * An effort *override* is always a positive level — `'off'` is a model trait\n * (`reasoning: false`), not something a flag may force onto a reasoning model.\n */\nexport type EffortLevel = Exclude<ThinkingLevel, 'off'>;\n\nexport interface ModelCapabilities {\n  /** Model supports reasoning; safe to request reasoning effort. */\n  reasoning: boolean;\n  /** Effort to request when reasoning. Omit for the harness/provider default. */\n  thinkingLevel?: ThinkingLevel;\n}\n\n/**\n * Explicit per-model traits. Anything absent falls back to `defaultCaps`.\n *\n * A reasoning model without a `thinkingLevel` leaves the effort to the harness,\n * and the mint pins effort per model (posthog `WIZARD_MODEL_ALLOWLIST`), so an\n * unpinned reasoning model is refused with no tool calls. Every level below is\n * one the mint allows for that model.\n */\nexport const MODEL_CAPABILITIES: Record<string, ModelCapabilities> = {\n  // The mint takes sonnet 5 at `none` or `high`; high is the only level it\n  // serves once reasoning is on.\n  [SONNET_5_MODEL]: { reasoning: true, thinkingLevel: 'high' },\n  // The mint takes haiku with no effort parameter at all, which is `off`.\n  [HAIKU_MODEL]: { reasoning: true, thinkingLevel: 'off' },\n  // The openai 5.6 line; all reasoning models, so they must opt in past the\n  // openai-completions default (reasoning off). Luna stays low for cheap,\n  // short-context mechanical work; terra runs medium as the sonnet-tier parallel\n  // — enough reasoning depth for the judgment tasks without high's latency blowup.\n  [GPT5_6_LUNA_MODEL]: { reasoning: true, thinkingLevel: 'low' },\n  [GPT5_6_TERRA_MODEL]: { reasoning: true, thinkingLevel: 'medium' },\n  [GPT5_6_SOL_MODEL]: { reasoning: true, thinkingLevel: 'medium' },\n};\n\n/**\n * The mint's per-model effort pin, mirrored from posthog\n * `WIZARD_MODEL_ALLOWLIST`. `'off'` is the CLI's spelling of the mint's\n * `\"none\"` — a call carrying no effort parameter.\n */\nexport const MINT_ALLOWED_EFFORTS: Record<string, readonly ThinkingLevel[]> = {\n  [SONNET_5_MODEL]: ['off', 'high'],\n  [HAIKU_MODEL]: ['off'],\n  [GPT5_6_LUNA_MODEL]: ['low'],\n  [GPT5_6_SOL_MODEL]: ['medium'],\n  [GPT5_6_TERRA_MODEL]: ['low', 'medium', 'high'],\n};\n\n// Local model choices; gateway admission also requires allowed models, efforts, and prompt compatibility.\nexport const VALID_MODELS: ReadonlySet<string> = new Set(\n  Object.keys(MODEL_CAPABILITIES),\n);\n\n/** Whether the value is an allow-listed model. */\nexport function isValidModel(model: unknown): model is string {\n  return typeof model === 'string' && VALID_MODELS.has(model);\n}\n\n/** First allow-listed candidate, else throw so a bad id fails loud. */\nexport function requireKnownModel(\n  ...candidates: (string | undefined)[]\n): string {\n  for (const c of candidates) if (isValidModel(c)) return c;\n  throw new Error(\n    `No valid model to dispatch on (tried ${JSON.stringify(candidates)}). ` +\n      `Allowed: ${[...VALID_MODELS].join(', ')}.`,\n  );\n}\n\n// Unknown Anthropic models default to reasoning; OpenAI models must opt in through the local table.\nfunction defaultCaps(modelId: string): ModelCapabilities {\n  return { reasoning: !modelId.startsWith('openai/') };\n}\n\n// Triage requests must satisfy gateway safety policy and preserve Warlock’s classifier format.\nexport const TRIAGE_MODELS: Record<Harness, string> = {\n  [Harness.anthropic]: HAIKU_TRIAGE_MODEL,\n  [Harness.pi]: GPT5_6_LUNA_MODEL,\n};\n\nexport function triageModelFor(harness: Harness): string {\n  return TRIAGE_MODELS[harness];\n}\n\n/**\n * Capabilities for a gateway model id, table override then transport default.\n * `effortOverride` is a switchboard-resolved effort (e.g. from a pi effort\n * flag); it applies only when the model reasons at all — a non-reasoning model\n * rejects reasoning effort, so the override is dropped.\n */\nexport function modelCapabilities(\n  modelId: string,\n  effortOverride?: EffortLevel,\n): ModelCapabilities {\n  const caps = MODEL_CAPABILITIES[modelId] ?? defaultCaps(modelId);\n  if (caps.reasoning && effortOverride) {\n    return { ...caps, thinkingLevel: effortOverride };\n  }\n  return caps;\n}\n"],"mappings":";;;AAYA,MAAM,kBAAkB;CACtB;CACA;CACA;CACA;CACA;CACA;CACD;;AAID,SAAgB,gBAAgB,OAAwC;AACtE,QAAQ,gBAAuC,SAAS,MAAM;;;;;;;;;;AAwBhE,MAAa,qBAAwD;EAGlE,iBAAiB;EAAE,WAAW;EAAM,eAAe;EAAQ;EAE3D,cAAc;EAAE,WAAW;EAAM,eAAe;EAAO;EAKvD,oBAAoB;EAAE,WAAW;EAAM,eAAe;EAAO;EAC7D,qBAAqB;EAAE,WAAW;EAAM,eAAe;EAAU;EACjE,mBAAmB;EAAE,WAAW;EAAM,eAAe;EAAU;CACjE;AAgBD,MAAa,eAAoC,IAAI,IACnD,OAAO,KAAK,mBAAmB,CAChC;;AAGD,SAAgB,aAAa,OAAiC;AAC5D,QAAO,OAAO,UAAU,YAAY,aAAa,IAAI,MAAM;;;AAI7D,SAAgB,kBACd,GAAG,YACK;AACR,MAAK,MAAM,KAAK,WAAY,KAAI,aAAa,EAAE,CAAE,QAAO;AACxD,OAAM,IAAI,MACR,wCAAwC,KAAK,UAAU,WAAW,CAAC,cACrD,CAAC,GAAG,aAAa,CAAC,KAAK,KAAK,CAAC,GAC5C;;AAIH,SAAS,YAAY,SAAoC;AACvD,QAAO,EAAE,WAAW,CAAC,QAAQ,WAAW,UAAU,EAAE;;AAItD,MAAa,gBAAyC;gBAC/B;SACP;CACf;AAED,SAAgB,eAAe,SAA0B;AACvD,QAAO,cAAc;;;;;;;;AASvB,SAAgB,kBACd,SACA,gBACmB;CACnB,MAAM,OAAO,mBAAmB,YAAY,YAAY,QAAQ;AAChE,KAAI,KAAK,aAAa,eACpB,QAAO;EAAE,GAAG;EAAM,eAAe;EAAgB;AAEnD,QAAO"}
+{"version":3,"file":"models-DnAY67Lg.js","names":[],"sources":["../src/agent/runner/switchboard/models.ts"],"sourcesContent":["// Local capabilities inform transport parameters; gateway policy independently admits models and efforts.\nimport {\n  SONNET_5_MODEL,\n  HAIKU_MODEL,\n  GPT5_6_LUNA_MODEL,\n  GPT5_6_SOL_MODEL,\n  GPT5_6_TERRA_MODEL,\n  HAIKU_TRIAGE_MODEL,\n  Harness,\n} from '@shared/constants';\n\n/** Reasoning effort, mapped by each harness to its provider transport. */\nconst THINKING_LEVELS = [\n  'off',\n  'minimal',\n  'low',\n  'medium',\n  'high',\n  'xhigh',\n] as const;\nexport type ThinkingLevel = (typeof THINKING_LEVELS)[number];\n\n/** Whether a value (e.g. remote prompt frontmatter) names a valid effort. */\nexport function isThinkingLevel(value: unknown): value is ThinkingLevel {\n  return (THINKING_LEVELS as readonly unknown[]).includes(value);\n}\n\n/**\n * An effort *override* is always a positive level — `'off'` is a model trait\n * (`reasoning: false`), not something a flag may force onto a reasoning model.\n */\nexport type EffortLevel = Exclude<ThinkingLevel, 'off'>;\n\nexport interface ModelCapabilities {\n  /** Model supports reasoning; safe to request reasoning effort. */\n  reasoning: boolean;\n  /** Effort to request when reasoning. Omit for the harness/provider default. */\n  thinkingLevel?: ThinkingLevel;\n}\n\n/**\n * Explicit per-model traits. Anything absent falls back to `defaultCaps`.\n *\n * A reasoning model without a `thinkingLevel` leaves the effort to the harness,\n * and the mint pins effort per model (posthog `WIZARD_MODEL_ALLOWLIST`), so an\n * unpinned reasoning model is refused with no tool calls. Every level below is\n * one the mint allows for that model.\n */\nexport const MODEL_CAPABILITIES: Record<string, ModelCapabilities> = {\n  // The mint takes sonnet 5 at `none` or `high`; high is the only level it\n  // serves once reasoning is on.\n  [SONNET_5_MODEL]: { reasoning: true, thinkingLevel: 'high' },\n  // The mint takes haiku with no effort parameter at all, which is `off`.\n  [HAIKU_MODEL]: { reasoning: true, thinkingLevel: 'off' },\n  // The openai 5.6 line; all reasoning models, so they must opt in past the\n  // openai-completions default (reasoning off). Luna stays low for cheap,\n  // short-context mechanical work; terra runs medium as the sonnet-tier parallel\n  // — enough reasoning depth for the judgment tasks without high's latency blowup.\n  [GPT5_6_LUNA_MODEL]: { reasoning: true, thinkingLevel: 'low' },\n  [GPT5_6_TERRA_MODEL]: { reasoning: true, thinkingLevel: 'medium' },\n  [GPT5_6_SOL_MODEL]: { reasoning: true, thinkingLevel: 'medium' },\n};\n\n/**\n * The mint's per-model effort pin, mirrored from posthog\n * `WIZARD_MODEL_ALLOWLIST`. `'off'` is the CLI's spelling of the mint's\n * `\"none\"` — a call carrying no effort parameter.\n */\nexport const MINT_ALLOWED_EFFORTS: Record<string, readonly ThinkingLevel[]> = {\n  [SONNET_5_MODEL]: ['off', 'high'],\n  [HAIKU_MODEL]: ['off'],\n  [GPT5_6_LUNA_MODEL]: ['low'],\n  [GPT5_6_SOL_MODEL]: ['medium'],\n  [GPT5_6_TERRA_MODEL]: ['low', 'medium', 'high'],\n};\n\n// Local model choices; gateway admission also requires allowed models, efforts, and prompt compatibility.\nexport const VALID_MODELS: ReadonlySet<string> = new Set(\n  Object.keys(MODEL_CAPABILITIES),\n);\n\n/** Whether the value is an allow-listed model. */\nexport function isValidModel(model: unknown): model is string {\n  return typeof model === 'string' && VALID_MODELS.has(model);\n}\n\n/** First allow-listed candidate, else throw so a bad id fails loud. */\nexport function requireKnownModel(\n  ...candidates: (string | undefined)[]\n): string {\n  for (const c of candidates) if (isValidModel(c)) return c;\n  throw new Error(\n    `No valid model to dispatch on (tried ${JSON.stringify(candidates)}). ` +\n      `Allowed: ${[...VALID_MODELS].join(', ')}.`,\n  );\n}\n\n// Unknown Anthropic models default to reasoning; OpenAI models must opt in through the local table.\nfunction defaultCaps(modelId: string): ModelCapabilities {\n  return { reasoning: !modelId.startsWith('openai/') };\n}\n\n// Triage requests must satisfy gateway safety policy and preserve Warlock’s classifier format.\nexport const TRIAGE_MODELS: Record<Harness, string> = {\n  [Harness.anthropic]: HAIKU_TRIAGE_MODEL,\n  [Harness.pi]: GPT5_6_LUNA_MODEL,\n};\n\nexport function triageModelFor(harness: Harness): string {\n  return TRIAGE_MODELS[harness];\n}\n\n/**\n * Capabilities for a gateway model id, table override then transport default.\n * `effortOverride` is a switchboard-resolved effort (e.g. from a pi effort\n * flag); it applies only when the model reasons at all — a non-reasoning model\n * rejects reasoning effort, so the override is dropped.\n */\nexport function modelCapabilities(\n  modelId: string,\n  effortOverride?: EffortLevel,\n): ModelCapabilities {\n  const caps = MODEL_CAPABILITIES[modelId] ?? defaultCaps(modelId);\n  if (caps.reasoning && effortOverride) {\n    return { ...caps, thinkingLevel: effortOverride };\n  }\n  return caps;\n}\n"],"mappings":";;;AAYA,MAAM,kBAAkB;CACtB;CACA;CACA;CACA;CACA;CACA;CACD;;AAID,SAAgB,gBAAgB,OAAwC;AACtE,QAAQ,gBAAuC,SAAS,MAAM;;;;;;;;;;AAwBhE,MAAa,qBAAwD;EAGlE,iBAAiB;EAAE,WAAW;EAAM,eAAe;EAAQ;EAE3D,cAAc;EAAE,WAAW;EAAM,eAAe;EAAO;EAKvD,oBAAoB;EAAE,WAAW;EAAM,eAAe;EAAO;EAC7D,qBAAqB;EAAE,WAAW;EAAM,eAAe;EAAU;EACjE,mBAAmB;EAAE,WAAW;EAAM,eAAe;EAAU;CACjE;AAgBD,MAAa,eAAoC,IAAI,IACnD,OAAO,KAAK,mBAAmB,CAChC;;AAGD,SAAgB,aAAa,OAAiC;AAC5D,QAAO,OAAO,UAAU,YAAY,aAAa,IAAI,MAAM;;;AAI7D,SAAgB,kBACd,GAAG,YACK;AACR,MAAK,MAAM,KAAK,WAAY,KAAI,aAAa,EAAE,CAAE,QAAO;AACxD,OAAM,IAAI,MACR,wCAAwC,KAAK,UAAU,WAAW,CAAC,cACrD,CAAC,GAAG,aAAa,CAAC,KAAK,KAAK,CAAC,GAC5C;;AAIH,SAAS,YAAY,SAAoC;AACvD,QAAO,EAAE,WAAW,CAAC,QAAQ,WAAW,UAAU,EAAE;;AAItD,MAAa,gBAAyC;gBAC/B;SACP;CACf;AAED,SAAgB,eAAe,SAA0B;AACvD,QAAO,cAAc;;;;;;;;AASvB,SAAgB,kBACd,SACA,gBACmB;CACnB,MAAM,OAAO,mBAAmB,YAAY,YAAY,QAAQ;AAChE,KAAI,KAAK,aAAa,eACpB,QAAO;EAAE,GAAG;EAAM,eAAe;EAAgB;AAEnD,QAAO"}

package/dist/{non-interactive-Dzow7YKY.js → non-interactive-DR1CWXY1.js}

@@ -1,5 +1,5 @@
-import { d as ErrorCodes, u as emitWizardError } from "./errors-CQ9kttJD.js";
-import { t as getUI } from "./ui-BBVuTM1v.js";
+import { o as emitWizardError, s as ErrorCodes } from "./errors-ddDE6MbA.js";
+import { t as getUI } from "./ui-CGXtC7Vn.js";
 //#region src/commands/basic-integration/non-interactive.ts
 /** Print the "needs a TTY" error and exit. Used when no `--ci` flag and no TTY. */
 function failNonInteractive() {
@@ -14,4 +14,4 @@ function failNonInteractive() {
 //#endregion
 export { failNonInteractive };
 
-//# sourceMappingURL=non-interactive-Dzow7YKY.js.map
+//# sourceMappingURL=non-interactive-DR1CWXY1.js.map

package/dist/{non-interactive-Dzow7YKY.js.map → non-interactive-DR1CWXY1.js.map}

@@ -1 +1 @@
-{"version":3,"file":"non-interactive-Dzow7YKY.js","names":[],"sources":["../src/commands/basic-integration/non-interactive.ts"],"sourcesContent":["import { getUI } from '@ui';\nimport { ErrorCodes } from '@shared/errors';\nimport { emitWizardError } from '@shared/errors';\n\n/** Print the \"needs a TTY\" error and exit. Used when no `--ci` flag and no TTY. */\nexport function failNonInteractive(): void {\n  getUI().intro('PostHog Wizard');\n  getUI().log.error(\n    'This installer requires an interactive terminal (TTY) to run.\\n' +\n      'It appears you are running in a non-interactive environment.\\n' +\n      'Please run the wizard in an interactive terminal.\\n\\n' +\n      'For CI/CD environments, use --ci mode:\\n' +\n      '  npx @posthog/wizard --ci --region us --api-key phx_xxx',\n  );\n  emitWizardError({\n    code: ErrorCodes.CliInteractiveRequired,\n    message: 'This installer requires an interactive terminal (TTY) to run.',\n  });\n  process.exit(1);\n}\n"],"mappings":";;;;AAKA,SAAgB,qBAA2B;AACzC,QAAO,CAAC,MAAM,iBAAiB;AAC/B,QAAO,CAAC,IAAI,MACV,qRAKD;AACD,iBAAgB;EACd,MAAM,WAAW;EACjB,SAAS;EACV,CAAC;AACF,SAAQ,KAAK,EAAE"}
+{"version":3,"file":"non-interactive-DR1CWXY1.js","names":[],"sources":["../src/commands/basic-integration/non-interactive.ts"],"sourcesContent":["import { getUI } from '@ui';\nimport { ErrorCodes } from '@shared/errors';\nimport { emitWizardError } from '@shared/errors';\n\n/** Print the \"needs a TTY\" error and exit. Used when no `--ci` flag and no TTY. */\nexport function failNonInteractive(): void {\n  getUI().intro('PostHog Wizard');\n  getUI().log.error(\n    'This installer requires an interactive terminal (TTY) to run.\\n' +\n      'It appears you are running in a non-interactive environment.\\n' +\n      'Please run the wizard in an interactive terminal.\\n\\n' +\n      'For CI/CD environments, use --ci mode:\\n' +\n      '  npx @posthog/wizard --ci --region us --api-key phx_xxx',\n  );\n  emitWizardError({\n    code: ErrorCodes.CliInteractiveRequired,\n    message: 'This installer requires an interactive terminal (TTY) to run.',\n  });\n  process.exit(1);\n}\n"],"mappings":";;;;AAKA,SAAgB,qBAA2B;AACzC,QAAO,CAAC,MAAM,iBAAiB;AAC/B,QAAO,CAAC,IAAI,MACV,qRAKD;AACD,iBAAgB;EACd,MAAM,WAAW;EACjB,SAAS;EACV,CAAC;AACF,SAAQ,KAAK,EAAE"}

package/dist/{oauth-session-DJ8h6GFa.js → oauth-session-CQTFOk-I.js}

@@ -1,4 +1,4 @@
-import { s as logToFile } from "./debug-Ch4BDOtD.js";
+import { s as logToFile } from "./debug-Cj-8vfXY.js";
 //#region src/shared/oauth-session.ts
 const REFRESH_WHEN_REMAINING_MS = 3e3 * 1e3;
 let current = null;
@@ -71,4 +71,4 @@ async function refresh(rotateWith, credentials) {
 //#endregion
 export { oauthLoginKey as a, oauthCredentials as i, currentAccessToken as n, onAccessTokenRotated as o, currentCredentials as r, configureOAuthSession as t };
 
-//# sourceMappingURL=oauth-session-DJ8h6GFa.js.map
+//# sourceMappingURL=oauth-session-CQTFOk-I.js.map

package/dist/{oauth-session-DJ8h6GFa.js.map → oauth-session-CQTFOk-I.js.map}

@@ -1 +1 @@
-{"version":3,"file":"oauth-session-DJ8h6GFa.js","names":[],"sources":["../src/shared/oauth-session.ts"],"sourcesContent":["// The run's one OAuth token, shaped like gateway-session. The host supplies the rotation.\n\nimport type { Credentials } from '@shared/api';\nimport { logToFile } from '@utils/debug';\n\n// Below this remaining lifetime a run risks outliving its token; just-minted and 7-day tokens skip.\nconst REFRESH_WHEN_REMAINING_MS = 50 * 60 * 1000;\n\n/** Returns the rotated credentials, or the same object when the rotation failed. Never throws. */\nexport type RotateCredentials = (\n  credentials: Credentials,\n) => Promise<Credentials>;\n\nlet current: Credentials | null = null;\nlet rotate: RotateCredentials | undefined;\nlet onRefreshed: ((credentials: Credentials) => void) | undefined;\n// Shared so concurrent callers rotate once: a second rotation would spend the refresh token the first replaced.\nlet inFlight: Promise<Credentials> | null = null;\nconst listeners = new Set<(accessToken: string) => void>();\n// Every access token this login has held; the first one names the login.\nlet lineage = new Set<string>();\nlet lineageRoot: string | undefined;\n\n/** Adopt the run's credentials; a stale copy of the held login gets the newer one back through `onRefreshed`. */\nexport function configureOAuthSession(\n  credentials: Credentials,\n  options: {\n    rotate: RotateCredentials;\n    onRefreshed?: (credentials: Credentials) => void;\n  },\n): void {\n  rotate = options.rotate;\n  onRefreshed = options.onRefreshed;\n  if (\n    current &&\n    sameLogin(current, credentials) &&\n    (current.expiresAt ?? 0) > (credentials.expiresAt ?? 0)\n  ) {\n    onRefreshed?.(current);\n    return;\n  }\n  if (!current || !sameLogin(current, credentials)) {\n    lineage = new Set();\n    lineageRoot = credentials.accessToken;\n  }\n  lineage.add(credentials.accessToken);\n  current = credentials;\n}\n\n/** A key that stays the same across this login's rotations, so caches keyed on it survive one. */\nexport function oauthLoginKey(accessToken: string): string {\n  return lineageRoot && lineage.has(accessToken) ? lineageRoot : accessToken;\n}\n\n/** The current credentials, refreshed first when near expiry or when `force` is set. */\nexport async function oauthCredentials(\n  force = false,\n): Promise<Credentials | null> {\n  if (!current) return null;\n  if (!rotate || !current.refreshToken || (!force && !nearExpiry(current)))\n    return current;\n  inFlight ??= refresh(rotate, current).finally(() => {\n    inFlight = null;\n  });\n  return inFlight;\n}\n\n/** The credentials to use now for this login, or the fallback when another login is held. */\nexport async function currentCredentials(\n  fallback: Credentials,\n  force = false,\n): Promise<Credentials> {\n  if (!current || !sameLogin(current, fallback)) return fallback;\n  return (await oauthCredentials(force)) ?? fallback;\n}\n\n/** The access token to use now for this login. */\nexport async function currentAccessToken(\n  fallback: Credentials,\n): Promise<string> {\n  return (await currentCredentials(fallback)).accessToken;\n}\n\n/** Called with each new access token after a rotation. Returns the unsubscribe. */\nexport function onAccessTokenRotated(\n  listener: (accessToken: string) => void,\n): () => void {\n  listeners.add(listener);\n  return () => {\n    listeners.delete(listener);\n  };\n}\n\n/** Test hook: drop the held credentials so the next run configures afresh. */\nexport function resetOAuthSession(): void {\n  current = null;\n  rotate = undefined;\n  onRefreshed = undefined;\n  inFlight = null;\n  listeners.clear();\n  lineage = new Set();\n  lineageRoot = undefined;\n}\n\nfunction sameLogin(a: Credentials, b: Credentials): boolean {\n  return a.host.apiHost === b.host.apiHost && a.projectId === b.projectId;\n}\n\nfunction nearExpiry(credentials: Credentials): boolean {\n  // No expiry means we cannot tell how much life is left, so leave it alone.\n  return (\n    credentials.expiresAt !== undefined &&\n    credentials.expiresAt - Date.now() < REFRESH_WHEN_REMAINING_MS\n  );\n}\n\nasync function refresh(\n  rotateWith: RotateCredentials,\n  credentials: Credentials,\n): Promise<Credentials> {\n  const refreshed = await rotateWith(credentials);\n  if (refreshed === credentials) return credentials;\n  logToFile('[oauth-session] token rotated');\n  lineage.add(refreshed.accessToken);\n  current = refreshed;\n  onRefreshed?.(refreshed);\n  for (const listener of listeners) listener(refreshed.accessToken);\n  return refreshed;\n}\n"],"mappings":";;AAMA,MAAM,4BAA4B,MAAU;AAO5C,IAAI,UAA8B;AAClC,IAAI;AACJ,IAAI;AAEJ,IAAI,WAAwC;AAC5C,MAAM,4BAAY,IAAI,KAAoC;AAE1D,IAAI,0BAAU,IAAI,KAAa;AAC/B,IAAI;;AAGJ,SAAgB,sBACd,aACA,SAIM;AACN,UAAS,QAAQ;AACjB,eAAc,QAAQ;AACtB,KACE,WACA,UAAU,SAAS,YAAY,KAC9B,QAAQ,aAAa,MAAM,YAAY,aAAa,IACrD;AACA,gBAAc,QAAQ;AACtB;;AAEF,KAAI,CAAC,WAAW,CAAC,UAAU,SAAS,YAAY,EAAE;AAChD,4BAAU,IAAI,KAAK;AACnB,gBAAc,YAAY;;AAE5B,SAAQ,IAAI,YAAY,YAAY;AACpC,WAAU;;;AAIZ,SAAgB,cAAc,aAA6B;AACzD,QAAO,eAAe,QAAQ,IAAI,YAAY,GAAG,cAAc;;;AAIjE,eAAsB,iBACpB,QAAQ,OACqB;AAC7B,KAAI,CAAC,QAAS,QAAO;AACrB,KAAI,CAAC,UAAU,CAAC,QAAQ,gBAAiB,CAAC,SAAS,CAAC,WAAW,QAAQ,CACrE,QAAO;AACT,cAAa,QAAQ,QAAQ,QAAQ,CAAC,cAAc;AAClD,aAAW;GACX;AACF,QAAO;;;AAIT,eAAsB,mBACpB,UACA,QAAQ,OACc;AACtB,KAAI,CAAC,WAAW,CAAC,UAAU,SAAS,SAAS,CAAE,QAAO;AACtD,QAAQ,MAAM,iBAAiB,MAAM,IAAK;;;AAI5C,eAAsB,mBACpB,UACiB;AACjB,SAAQ,MAAM,mBAAmB,SAAS,EAAE;;;AAI9C,SAAgB,qBACd,UACY;AACZ,WAAU,IAAI,SAAS;AACvB,cAAa;AACX,YAAU,OAAO,SAAS;;;AAe9B,SAAS,UAAU,GAAgB,GAAyB;AAC1D,QAAO,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,cAAc,EAAE;;AAGhE,SAAS,WAAW,aAAmC;AAErD,QACE,YAAY,cAAc,KAAA,KAC1B,YAAY,YAAY,KAAK,KAAK,GAAG;;AAIzC,eAAe,QACb,YACA,aACsB;CACtB,MAAM,YAAY,MAAM,WAAW,YAAY;AAC/C,KAAI,cAAc,YAAa,QAAO;AACtC,WAAU,gCAAgC;AAC1C,SAAQ,IAAI,UAAU,YAAY;AAClC,WAAU;AACV,eAAc,UAAU;AACxB,MAAK,MAAM,YAAY,UAAW,UAAS,UAAU,YAAY;AACjE,QAAO"}
+{"version":3,"file":"oauth-session-CQTFOk-I.js","names":[],"sources":["../src/shared/oauth-session.ts"],"sourcesContent":["// The run's one OAuth token, shaped like gateway-session. The host supplies the rotation.\n\nimport type { Credentials } from '@shared/api';\nimport { logToFile } from '@utils/debug';\n\n// Below this remaining lifetime a run risks outliving its token; just-minted and 7-day tokens skip.\nconst REFRESH_WHEN_REMAINING_MS = 50 * 60 * 1000;\n\n/** Returns the rotated credentials, or the same object when the rotation failed. Never throws. */\nexport type RotateCredentials = (\n  credentials: Credentials,\n) => Promise<Credentials>;\n\nlet current: Credentials | null = null;\nlet rotate: RotateCredentials | undefined;\nlet onRefreshed: ((credentials: Credentials) => void) | undefined;\n// Shared so concurrent callers rotate once: a second rotation would spend the refresh token the first replaced.\nlet inFlight: Promise<Credentials> | null = null;\nconst listeners = new Set<(accessToken: string) => void>();\n// Every access token this login has held; the first one names the login.\nlet lineage = new Set<string>();\nlet lineageRoot: string | undefined;\n\n/** Adopt the run's credentials; a stale copy of the held login gets the newer one back through `onRefreshed`. */\nexport function configureOAuthSession(\n  credentials: Credentials,\n  options: {\n    rotate: RotateCredentials;\n    onRefreshed?: (credentials: Credentials) => void;\n  },\n): void {\n  rotate = options.rotate;\n  onRefreshed = options.onRefreshed;\n  if (\n    current &&\n    sameLogin(current, credentials) &&\n    (current.expiresAt ?? 0) > (credentials.expiresAt ?? 0)\n  ) {\n    onRefreshed?.(current);\n    return;\n  }\n  if (!current || !sameLogin(current, credentials)) {\n    lineage = new Set();\n    lineageRoot = credentials.accessToken;\n  }\n  lineage.add(credentials.accessToken);\n  current = credentials;\n}\n\n/** A key that stays the same across this login's rotations, so caches keyed on it survive one. */\nexport function oauthLoginKey(accessToken: string): string {\n  return lineageRoot && lineage.has(accessToken) ? lineageRoot : accessToken;\n}\n\n/** The current credentials, refreshed first when near expiry or when `force` is set. */\nexport async function oauthCredentials(\n  force = false,\n): Promise<Credentials | null> {\n  if (!current) return null;\n  if (!rotate || !current.refreshToken || (!force && !nearExpiry(current)))\n    return current;\n  inFlight ??= refresh(rotate, current).finally(() => {\n    inFlight = null;\n  });\n  return inFlight;\n}\n\n/** The credentials to use now for this login, or the fallback when another login is held. */\nexport async function currentCredentials(\n  fallback: Credentials,\n  force = false,\n): Promise<Credentials> {\n  if (!current || !sameLogin(current, fallback)) return fallback;\n  return (await oauthCredentials(force)) ?? fallback;\n}\n\n/** The access token to use now for this login. */\nexport async function currentAccessToken(\n  fallback: Credentials,\n): Promise<string> {\n  return (await currentCredentials(fallback)).accessToken;\n}\n\n/** Called with each new access token after a rotation. Returns the unsubscribe. */\nexport function onAccessTokenRotated(\n  listener: (accessToken: string) => void,\n): () => void {\n  listeners.add(listener);\n  return () => {\n    listeners.delete(listener);\n  };\n}\n\n/** Test hook: drop the held credentials so the next run configures afresh. */\nexport function resetOAuthSession(): void {\n  current = null;\n  rotate = undefined;\n  onRefreshed = undefined;\n  inFlight = null;\n  listeners.clear();\n  lineage = new Set();\n  lineageRoot = undefined;\n}\n\nfunction sameLogin(a: Credentials, b: Credentials): boolean {\n  return a.host.apiHost === b.host.apiHost && a.projectId === b.projectId;\n}\n\nfunction nearExpiry(credentials: Credentials): boolean {\n  // No expiry means we cannot tell how much life is left, so leave it alone.\n  return (\n    credentials.expiresAt !== undefined &&\n    credentials.expiresAt - Date.now() < REFRESH_WHEN_REMAINING_MS\n  );\n}\n\nasync function refresh(\n  rotateWith: RotateCredentials,\n  credentials: Credentials,\n): Promise<Credentials> {\n  const refreshed = await rotateWith(credentials);\n  if (refreshed === credentials) return credentials;\n  logToFile('[oauth-session] token rotated');\n  lineage.add(refreshed.accessToken);\n  current = refreshed;\n  onRefreshed?.(refreshed);\n  for (const listener of listeners) listener(refreshed.accessToken);\n  return refreshed;\n}\n"],"mappings":";;AAMA,MAAM,4BAA4B,MAAU;AAO5C,IAAI,UAA8B;AAClC,IAAI;AACJ,IAAI;AAEJ,IAAI,WAAwC;AAC5C,MAAM,4BAAY,IAAI,KAAoC;AAE1D,IAAI,0BAAU,IAAI,KAAa;AAC/B,IAAI;;AAGJ,SAAgB,sBACd,aACA,SAIM;AACN,UAAS,QAAQ;AACjB,eAAc,QAAQ;AACtB,KACE,WACA,UAAU,SAAS,YAAY,KAC9B,QAAQ,aAAa,MAAM,YAAY,aAAa,IACrD;AACA,gBAAc,QAAQ;AACtB;;AAEF,KAAI,CAAC,WAAW,CAAC,UAAU,SAAS,YAAY,EAAE;AAChD,4BAAU,IAAI,KAAK;AACnB,gBAAc,YAAY;;AAE5B,SAAQ,IAAI,YAAY,YAAY;AACpC,WAAU;;;AAIZ,SAAgB,cAAc,aAA6B;AACzD,QAAO,eAAe,QAAQ,IAAI,YAAY,GAAG,cAAc;;;AAIjE,eAAsB,iBACpB,QAAQ,OACqB;AAC7B,KAAI,CAAC,QAAS,QAAO;AACrB,KAAI,CAAC,UAAU,CAAC,QAAQ,gBAAiB,CAAC,SAAS,CAAC,WAAW,QAAQ,CACrE,QAAO;AACT,cAAa,QAAQ,QAAQ,QAAQ,CAAC,cAAc;AAClD,aAAW;GACX;AACF,QAAO;;;AAIT,eAAsB,mBACpB,UACA,QAAQ,OACc;AACtB,KAAI,CAAC,WAAW,CAAC,UAAU,SAAS,SAAS,CAAE,QAAO;AACtD,QAAQ,MAAM,iBAAiB,MAAM,IAAK;;;AAI5C,eAAsB,mBACpB,UACiB;AACjB,SAAQ,MAAM,mBAAmB,SAAS,EAAE;;;AAI9C,SAAgB,qBACd,UACY;AACZ,WAAU,IAAI,SAAS;AACvB,cAAa;AACX,YAAU,OAAO,SAAS;;;AAe9B,SAAS,UAAU,GAAgB,GAAyB;AAC1D,QAAO,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,cAAc,EAAE;;AAGhE,SAAS,WAAW,aAAmC;AAErD,QACE,YAAY,cAAc,KAAA,KAC1B,YAAY,YAAY,KAAK,KAAK,GAAG;;AAIzC,eAAe,QACb,YACA,aACsB;CACtB,MAAM,YAAY,MAAM,WAAW,YAAY;AAC/C,KAAI,cAAc,YAAa,QAAO;AACtC,WAAU,gCAAgC;AAC1C,SAAQ,IAAI,UAAU,YAAY;AAClC,WAAU;AACV,eAAc,UAAU;AACxB,MAAK,MAAM,YAAY,UAAW,UAAS,UAAU,YAAY;AACjE,QAAO"}

package/dist/{orchestrator-tools-szcdscwn.js → orchestrator-tools-CBdt-SXO.js}

@@ -1,5 +1,5 @@
-import { n as analytics } from "./analytics-CHCZ_qUR.js";
-import { a as REMARK_ASK, c as applyReadHandoffs, f as NotNeededReason, i as NOT_NEEDED_REASON_ASK, n as ENQUEUE_MODEL_DESCRIPTION, o as applyComplete, r as HANDOFF_FIELDS, s as applyEnqueue, t as COMPLETE_TASK_DESCRIPTION } from "./queue-tools-9OOVx5TE.js";
+import { n as analytics } from "./analytics-VRYdebXW.js";
+import { a as REMARK_ASK, c as applyReadHandoffs, f as NotNeededReason, i as NOT_NEEDED_REASON_ASK, n as ENQUEUE_MODEL_DESCRIPTION, o as applyComplete, r as HANDOFF_FIELDS, s as applyEnqueue, t as COMPLETE_TASK_DESCRIPTION } from "./queue-tools-B7_aCyd-.js";
 import { Type } from "typebox";
 import { defineTool } from "@earendil-works/pi-coding-agent";
 //#region src/agent/runner/harness/pi/orchestrator-tools.ts
@@ -110,4 +110,4 @@ function createPiOrchestratorTools(ctx) {
 //#endregion
 export { createPiOrchestratorTools };
 
-//# sourceMappingURL=orchestrator-tools-szcdscwn.js.map
+//# sourceMappingURL=orchestrator-tools-CBdt-SXO.js.map

package/dist/{orchestrator-tools-szcdscwn.js.map → orchestrator-tools-CBdt-SXO.js.map}

@@ -1 +1 @@
-{"version":3,"file":"orchestrator-tools-szcdscwn.js","names":[],"sources":["../src/agent/runner/harness/pi/orchestrator-tools.ts"],"sourcesContent":["/**\n * Orchestrator queue tools as pi custom tools. The queue lives in-process, and\n * `applyEnqueue` / `applyComplete` / `applyReadHandoffs` are plain exported\n * functions — so pi needs no MCP transport, just `defineTool` wrappers around\n * the same guards and apply logic the anthropic path mounts through the\n * wizard-tools MCP server. Tool names match the MCP short names so the shared\n * agent prompts are unchanged.\n *\n * Lazily imported (typebox is ESM and must stay out of the static module graph\n * so CommonJS unit tests can load the backend seam without parsing it).\n */\n\nimport { Type } from 'typebox';\nimport { defineTool } from '@earendil-works/pi-coding-agent';\nimport type { ToolDefinition } from '@earendil-works/pi-coding-agent';\nimport { analytics } from '@utils/analytics';\nimport {\n  applyComplete,\n  applyEnqueue,\n  applyReadHandoffs,\n  COMPLETE_TASK_DESCRIPTION,\n  ENQUEUE_MODEL_DESCRIPTION,\n  HANDOFF_FIELDS,\n  NOT_NEEDED_REASON_ASK,\n  REMARK_ASK,\n  type CompleteArgs,\n  type EnqueueArgs,\n  type OrchestratorToolsContext,\n} from '../../sequence/orchestrator/queue-tools';\nimport { NotNeededReason } from '../../sequence/orchestrator/queue';\n\nfunction text(s: string): {\n  content: [{ type: 'text'; text: string }];\n  details: unknown;\n} {\n  return { content: [{ type: 'text', text: s }], details: {} };\n}\n\n/** Mirrors the zod `HANDOFF_SHAPE`; both read their text from HANDOFF_FIELDS. */\nconst HANDOFF_PARAMS = Type.Object({\n  goals: Type.String({ description: HANDOFF_FIELDS.goals }),\n  did: Type.String({ description: HANDOFF_FIELDS.did }),\n  forNextAgent: Type.String({ description: HANDOFF_FIELDS.forNextAgent }),\n  filesTouched: Type.Optional(\n    Type.Array(Type.String(), { description: HANDOFF_FIELDS.filesTouched }),\n  ),\n  evidence: Type.Optional(\n    Type.String({ description: HANDOFF_FIELDS.evidence }),\n  ),\n  assumptions: Type.Optional(\n    Type.String({ description: HANDOFF_FIELDS.assumptions }),\n  ),\n  conflict: Type.Optional(\n    Type.String({ description: HANDOFF_FIELDS.conflict }),\n  ),\n  reportSection: Type.Optional(\n    Type.String({ description: HANDOFF_FIELDS.reportSection }),\n  ),\n});\n\n/** Exported so the parity test can compare both harnesses' field sets. */\nexport const PI_HANDOFF_PARAM_KEYS: readonly string[] = Object.keys(\n  HANDOFF_PARAMS.properties,\n);\n\n/** Mirrors the zod `COMPLETE_SHAPE`; ctx-independent, so it lives out here. */\nconst COMPLETE_PARAMS = Type.Object({\n  status: Type.Union([\n    Type.Literal('done'),\n    Type.Literal('failed'),\n    Type.Literal('not needed'),\n  ]),\n  handoff: HANDOFF_PARAMS,\n  remark: Type.Optional(Type.String({ description: REMARK_ASK })),\n  notNeededReason: Type.Optional(\n    Type.Union(\n      [\n        Type.Literal(NotNeededReason.NotApplicable),\n        Type.Literal(NotNeededReason.UserDeclined),\n        Type.Literal(NotNeededReason.Blocked),\n      ],\n      { description: NOT_NEEDED_REASON_ASK },\n    ),\n  ),\n});\n\n/** Exported so the parity test can compare both harnesses' field sets. */\nexport const PI_COMPLETE_PARAM_KEYS: readonly string[] = Object.keys(\n  COMPLETE_PARAMS.properties,\n);\n\n/** The three queue tools bound to one agent's orchestrator context. */\nexport function createPiOrchestratorTools(\n  ctx: OrchestratorToolsContext,\n): ToolDefinition[] {\n  const enqueueTask = defineTool({\n    name: 'enqueue_task',\n    label: 'Enqueue task',\n    description:\n      'Add a task to the orchestrator queue. Use it to seed work and to enqueue follow-up work you discover. Keep tasks small and discrete.',\n    promptSnippet:\n      'enqueue_task({type, label, dependsOn, reason}) — add a task to the queue; the task type goes in the \"type\" field, and it returns the task id',\n    parameters: Type.Object({\n      type: Type.String({\n        description: `The task type. One of: ${ctx.validTypes.join(', ')}.`,\n      }),\n      label: Type.Optional(\n        Type.String({\n          description:\n            'A short label for the UI — the action in a few words (e.g. \"Add the PostHog SDK\", \"Initialize PostHog\"). Leave out file names, class names, and other specifics.',\n        }),\n      ),\n      inputs: Type.Optional(Type.Record(Type.String(), Type.Unknown())),\n      dependsOn: Type.Optional(\n        Type.Array(Type.String(), {\n          description: 'Task ids that must be done before this task runs.',\n        }),\n      ),\n      model: Type.Optional(\n        Type.String({ description: ENQUEUE_MODEL_DESCRIPTION }),\n      ),\n      reason: Type.String({\n        description: 'One line on why this task is needed.',\n      }),\n    }),\n    execute(_id, args) {\n      const res = applyEnqueue(ctx, args as EnqueueArgs);\n      if (!res.ok) {\n        analytics.wizardCapture('orchestrator guard tripped', {\n          guard: res.guard,\n          type: (args as EnqueueArgs).type,\n        });\n        return Promise.resolve(text(`Error: ${res.message}`));\n      }\n      return Promise.resolve(text(JSON.stringify({ id: res.task.id })));\n    },\n  });\n\n  const completeTask = defineTool({\n    name: 'complete_task',\n    label: 'Complete task',\n    description: COMPLETE_TASK_DESCRIPTION,\n    promptSnippet:\n      'complete_task(status, handoff) — report your outcome exactly once when done, with goals/did/forNextAgent nested inside handoff',\n    parameters: COMPLETE_PARAMS,\n    execute(_id, args) {\n      const res = applyComplete(ctx, args as CompleteArgs);\n      if (!res.ok) return Promise.resolve(text(`Error: ${res.message}`));\n      return Promise.resolve(text('ok'));\n    },\n  });\n\n  const readHandoffs = defineTool({\n    name: 'read_handoffs',\n    label: 'Read handoffs',\n    description:\n      'Read structured handoffs from earlier tasks. With no argument, returns the handoffs of your dependencies.',\n    promptSnippet:\n      'read_handoffs() — read what earlier tasks handed off (defaults to your dependencies)',\n    parameters: Type.Object({\n      type: Type.Optional(Type.String()),\n      taskId: Type.Optional(Type.String()),\n    }),\n    execute(_id, args) {\n      const handoffs = applyReadHandoffs(\n        ctx,\n        args as { type?: string; taskId?: string },\n      );\n      return Promise.resolve(text(JSON.stringify(handoffs, null, 2)));\n    },\n  });\n\n  return [enqueueTask, completeTask, readHandoffs];\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA+BA,SAAS,KAAK,GAGZ;AACA,QAAO;EAAE,SAAS,CAAC;GAAE,MAAM;GAAQ,MAAM;GAAG,CAAC;EAAE,SAAS,EAAE;EAAE;;;AAI9D,MAAM,iBAAiB,KAAK,OAAO;CACjC,OAAO,KAAK,OAAO,EAAE,aAAa,eAAe,OAAO,CAAC;CACzD,KAAK,KAAK,OAAO,EAAE,aAAa,eAAe,KAAK,CAAC;CACrD,cAAc,KAAK,OAAO,EAAE,aAAa,eAAe,cAAc,CAAC;CACvE,cAAc,KAAK,SACjB,KAAK,MAAM,KAAK,QAAQ,EAAE,EAAE,aAAa,eAAe,cAAc,CAAC,CACxE;CACD,UAAU,KAAK,SACb,KAAK,OAAO,EAAE,aAAa,eAAe,UAAU,CAAC,CACtD;CACD,aAAa,KAAK,SAChB,KAAK,OAAO,EAAE,aAAa,eAAe,aAAa,CAAC,CACzD;CACD,UAAU,KAAK,SACb,KAAK,OAAO,EAAE,aAAa,eAAe,UAAU,CAAC,CACtD;CACD,eAAe,KAAK,SAClB,KAAK,OAAO,EAAE,aAAa,eAAe,eAAe,CAAC,CAC3D;CACF,CAAC;AAGsD,OAAO,KAC7D,eAAe,WAChB;;AAGD,MAAM,kBAAkB,KAAK,OAAO;CAClC,QAAQ,KAAK,MAAM;EACjB,KAAK,QAAQ,OAAO;EACpB,KAAK,QAAQ,SAAS;EACtB,KAAK,QAAQ,aAAa;EAC3B,CAAC;CACF,SAAS;CACT,QAAQ,KAAK,SAAS,KAAK,OAAO,EAAE,aAAa,YAAY,CAAC,CAAC;CAC/D,iBAAiB,KAAK,SACpB,KAAK,MACH;EACE,KAAK,QAAQ,gBAAgB,cAAc;EAC3C,KAAK,QAAQ,gBAAgB,aAAa;EAC1C,KAAK,QAAQ,gBAAgB,QAAQ;EACtC,EACD,EAAE,aAAa,uBAAuB,CACvC,CACF;CACF,CAAC;AAGuD,OAAO,KAC9D,gBAAgB,WACjB;;AAGD,SAAgB,0BACd,KACkB;AA8ElB,QAAO;EA7Ea,WAAW;GAC7B,MAAM;GACN,OAAO;GACP,aACE;GACF,eACE;GACF,YAAY,KAAK,OAAO;IACtB,MAAM,KAAK,OAAO,EAChB,aAAa,0BAA0B,IAAI,WAAW,KAAK,KAAK,CAAC,IAClE,CAAC;IACF,OAAO,KAAK,SACV,KAAK,OAAO,EACV,aACE,wKACH,CAAC,CACH;IACD,QAAQ,KAAK,SAAS,KAAK,OAAO,KAAK,QAAQ,EAAE,KAAK,SAAS,CAAC,CAAC;IACjE,WAAW,KAAK,SACd,KAAK,MAAM,KAAK,QAAQ,EAAE,EACxB,aAAa,qDACd,CAAC,CACH;IACD,OAAO,KAAK,SACV,KAAK,OAAO,EAAE,aAAa,2BAA2B,CAAC,CACxD;IACD,QAAQ,KAAK,OAAO,EAClB,aAAa,wCACd,CAAC;IACH,CAAC;GACF,QAAQ,KAAK,MAAM;IACjB,MAAM,MAAM,aAAa,KAAK,KAAoB;AAClD,QAAI,CAAC,IAAI,IAAI;AACX,eAAU,cAAc,8BAA8B;MACpD,OAAO,IAAI;MACX,MAAO,KAAqB;MAC7B,CAAC;AACF,YAAO,QAAQ,QAAQ,KAAK,UAAU,IAAI,UAAU,CAAC;;AAEvD,WAAO,QAAQ,QAAQ,KAAK,KAAK,UAAU,EAAE,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;;GAEpE,CAAC;EAEmB,WAAW;GAC9B,MAAM;GACN,OAAO;GACP,aAAa;GACb,eACE;GACF,YAAY;GACZ,QAAQ,KAAK,MAAM;IACjB,MAAM,MAAM,cAAc,KAAK,KAAqB;AACpD,QAAI,CAAC,IAAI,GAAI,QAAO,QAAQ,QAAQ,KAAK,UAAU,IAAI,UAAU,CAAC;AAClE,WAAO,QAAQ,QAAQ,KAAK,KAAK,CAAC;;GAErC,CAAC;EAEmB,WAAW;GAC9B,MAAM;GACN,OAAO;GACP,aACE;GACF,eACE;GACF,YAAY,KAAK,OAAO;IACtB,MAAM,KAAK,SAAS,KAAK,QAAQ,CAAC;IAClC,QAAQ,KAAK,SAAS,KAAK,QAAQ,CAAC;IACrC,CAAC;GACF,QAAQ,KAAK,MAAM;IACjB,MAAM,WAAW,kBACf,KACA,KACD;AACD,WAAO,QAAQ,QAAQ,KAAK,KAAK,UAAU,UAAU,MAAM,EAAE,CAAC,CAAC;;GAElE,CAAC;EAE8C"}
+{"version":3,"file":"orchestrator-tools-CBdt-SXO.js","names":[],"sources":["../src/agent/runner/harness/pi/orchestrator-tools.ts"],"sourcesContent":["/**\n * Orchestrator queue tools as pi custom tools. The queue lives in-process, and\n * `applyEnqueue` / `applyComplete` / `applyReadHandoffs` are plain exported\n * functions — so pi needs no MCP transport, just `defineTool` wrappers around\n * the same guards and apply logic the anthropic path mounts through the\n * wizard-tools MCP server. Tool names match the MCP short names so the shared\n * agent prompts are unchanged.\n *\n * Lazily imported (typebox is ESM and must stay out of the static module graph\n * so CommonJS unit tests can load the backend seam without parsing it).\n */\n\nimport { Type } from 'typebox';\nimport { defineTool } from '@earendil-works/pi-coding-agent';\nimport type { ToolDefinition } from '@earendil-works/pi-coding-agent';\nimport { analytics } from '@utils/analytics';\nimport {\n  applyComplete,\n  applyEnqueue,\n  applyReadHandoffs,\n  COMPLETE_TASK_DESCRIPTION,\n  ENQUEUE_MODEL_DESCRIPTION,\n  HANDOFF_FIELDS,\n  NOT_NEEDED_REASON_ASK,\n  REMARK_ASK,\n  type CompleteArgs,\n  type EnqueueArgs,\n  type OrchestratorToolsContext,\n} from '../../sequence/orchestrator/queue-tools';\nimport { NotNeededReason } from '../../sequence/orchestrator/queue';\n\nfunction text(s: string): {\n  content: [{ type: 'text'; text: string }];\n  details: unknown;\n} {\n  return { content: [{ type: 'text', text: s }], details: {} };\n}\n\n/** Mirrors the zod `HANDOFF_SHAPE`; both read their text from HANDOFF_FIELDS. */\nconst HANDOFF_PARAMS = Type.Object({\n  goals: Type.String({ description: HANDOFF_FIELDS.goals }),\n  did: Type.String({ description: HANDOFF_FIELDS.did }),\n  forNextAgent: Type.String({ description: HANDOFF_FIELDS.forNextAgent }),\n  filesTouched: Type.Optional(\n    Type.Array(Type.String(), { description: HANDOFF_FIELDS.filesTouched }),\n  ),\n  evidence: Type.Optional(\n    Type.String({ description: HANDOFF_FIELDS.evidence }),\n  ),\n  assumptions: Type.Optional(\n    Type.String({ description: HANDOFF_FIELDS.assumptions }),\n  ),\n  conflict: Type.Optional(\n    Type.String({ description: HANDOFF_FIELDS.conflict }),\n  ),\n  reportSection: Type.Optional(\n    Type.String({ description: HANDOFF_FIELDS.reportSection }),\n  ),\n});\n\n/** Exported so the parity test can compare both harnesses' field sets. */\nexport const PI_HANDOFF_PARAM_KEYS: readonly string[] = Object.keys(\n  HANDOFF_PARAMS.properties,\n);\n\n/** Mirrors the zod `COMPLETE_SHAPE`; ctx-independent, so it lives out here. */\nconst COMPLETE_PARAMS = Type.Object({\n  status: Type.Union([\n    Type.Literal('done'),\n    Type.Literal('failed'),\n    Type.Literal('not needed'),\n  ]),\n  handoff: HANDOFF_PARAMS,\n  remark: Type.Optional(Type.String({ description: REMARK_ASK })),\n  notNeededReason: Type.Optional(\n    Type.Union(\n      [\n        Type.Literal(NotNeededReason.NotApplicable),\n        Type.Literal(NotNeededReason.UserDeclined),\n        Type.Literal(NotNeededReason.Blocked),\n      ],\n      { description: NOT_NEEDED_REASON_ASK },\n    ),\n  ),\n});\n\n/** Exported so the parity test can compare both harnesses' field sets. */\nexport const PI_COMPLETE_PARAM_KEYS: readonly string[] = Object.keys(\n  COMPLETE_PARAMS.properties,\n);\n\n/** The three queue tools bound to one agent's orchestrator context. */\nexport function createPiOrchestratorTools(\n  ctx: OrchestratorToolsContext,\n): ToolDefinition[] {\n  const enqueueTask = defineTool({\n    name: 'enqueue_task',\n    label: 'Enqueue task',\n    description:\n      'Add a task to the orchestrator queue. Use it to seed work and to enqueue follow-up work you discover. Keep tasks small and discrete.',\n    promptSnippet:\n      'enqueue_task({type, label, dependsOn, reason}) — add a task to the queue; the task type goes in the \"type\" field, and it returns the task id',\n    parameters: Type.Object({\n      type: Type.String({\n        description: `The task type. One of: ${ctx.validTypes.join(', ')}.`,\n      }),\n      label: Type.Optional(\n        Type.String({\n          description:\n            'A short label for the UI — the action in a few words (e.g. \"Add the PostHog SDK\", \"Initialize PostHog\"). Leave out file names, class names, and other specifics.',\n        }),\n      ),\n      inputs: Type.Optional(Type.Record(Type.String(), Type.Unknown())),\n      dependsOn: Type.Optional(\n        Type.Array(Type.String(), {\n          description: 'Task ids that must be done before this task runs.',\n        }),\n      ),\n      model: Type.Optional(\n        Type.String({ description: ENQUEUE_MODEL_DESCRIPTION }),\n      ),\n      reason: Type.String({\n        description: 'One line on why this task is needed.',\n      }),\n    }),\n    execute(_id, args) {\n      const res = applyEnqueue(ctx, args as EnqueueArgs);\n      if (!res.ok) {\n        analytics.wizardCapture('orchestrator guard tripped', {\n          guard: res.guard,\n          type: (args as EnqueueArgs).type,\n        });\n        return Promise.resolve(text(`Error: ${res.message}`));\n      }\n      return Promise.resolve(text(JSON.stringify({ id: res.task.id })));\n    },\n  });\n\n  const completeTask = defineTool({\n    name: 'complete_task',\n    label: 'Complete task',\n    description: COMPLETE_TASK_DESCRIPTION,\n    promptSnippet:\n      'complete_task(status, handoff) — report your outcome exactly once when done, with goals/did/forNextAgent nested inside handoff',\n    parameters: COMPLETE_PARAMS,\n    execute(_id, args) {\n      const res = applyComplete(ctx, args as CompleteArgs);\n      if (!res.ok) return Promise.resolve(text(`Error: ${res.message}`));\n      return Promise.resolve(text('ok'));\n    },\n  });\n\n  const readHandoffs = defineTool({\n    name: 'read_handoffs',\n    label: 'Read handoffs',\n    description:\n      'Read structured handoffs from earlier tasks. With no argument, returns the handoffs of your dependencies.',\n    promptSnippet:\n      'read_handoffs() — read what earlier tasks handed off (defaults to your dependencies)',\n    parameters: Type.Object({\n      type: Type.Optional(Type.String()),\n      taskId: Type.Optional(Type.String()),\n    }),\n    execute(_id, args) {\n      const handoffs = applyReadHandoffs(\n        ctx,\n        args as { type?: string; taskId?: string },\n      );\n      return Promise.resolve(text(JSON.stringify(handoffs, null, 2)));\n    },\n  });\n\n  return [enqueueTask, completeTask, readHandoffs];\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA+BA,SAAS,KAAK,GAGZ;AACA,QAAO;EAAE,SAAS,CAAC;GAAE,MAAM;GAAQ,MAAM;GAAG,CAAC;EAAE,SAAS,EAAE;EAAE;;;AAI9D,MAAM,iBAAiB,KAAK,OAAO;CACjC,OAAO,KAAK,OAAO,EAAE,aAAa,eAAe,OAAO,CAAC;CACzD,KAAK,KAAK,OAAO,EAAE,aAAa,eAAe,KAAK,CAAC;CACrD,cAAc,KAAK,OAAO,EAAE,aAAa,eAAe,cAAc,CAAC;CACvE,cAAc,KAAK,SACjB,KAAK,MAAM,KAAK,QAAQ,EAAE,EAAE,aAAa,eAAe,cAAc,CAAC,CACxE;CACD,UAAU,KAAK,SACb,KAAK,OAAO,EAAE,aAAa,eAAe,UAAU,CAAC,CACtD;CACD,aAAa,KAAK,SAChB,KAAK,OAAO,EAAE,aAAa,eAAe,aAAa,CAAC,CACzD;CACD,UAAU,KAAK,SACb,KAAK,OAAO,EAAE,aAAa,eAAe,UAAU,CAAC,CACtD;CACD,eAAe,KAAK,SAClB,KAAK,OAAO,EAAE,aAAa,eAAe,eAAe,CAAC,CAC3D;CACF,CAAC;AAGsD,OAAO,KAC7D,eAAe,WAChB;;AAGD,MAAM,kBAAkB,KAAK,OAAO;CAClC,QAAQ,KAAK,MAAM;EACjB,KAAK,QAAQ,OAAO;EACpB,KAAK,QAAQ,SAAS;EACtB,KAAK,QAAQ,aAAa;EAC3B,CAAC;CACF,SAAS;CACT,QAAQ,KAAK,SAAS,KAAK,OAAO,EAAE,aAAa,YAAY,CAAC,CAAC;CAC/D,iBAAiB,KAAK,SACpB,KAAK,MACH;EACE,KAAK,QAAQ,gBAAgB,cAAc;EAC3C,KAAK,QAAQ,gBAAgB,aAAa;EAC1C,KAAK,QAAQ,gBAAgB,QAAQ;EACtC,EACD,EAAE,aAAa,uBAAuB,CACvC,CACF;CACF,CAAC;AAGuD,OAAO,KAC9D,gBAAgB,WACjB;;AAGD,SAAgB,0BACd,KACkB;AA8ElB,QAAO;EA7Ea,WAAW;GAC7B,MAAM;GACN,OAAO;GACP,aACE;GACF,eACE;GACF,YAAY,KAAK,OAAO;IACtB,MAAM,KAAK,OAAO,EAChB,aAAa,0BAA0B,IAAI,WAAW,KAAK,KAAK,CAAC,IAClE,CAAC;IACF,OAAO,KAAK,SACV,KAAK,OAAO,EACV,aACE,wKACH,CAAC,CACH;IACD,QAAQ,KAAK,SAAS,KAAK,OAAO,KAAK,QAAQ,EAAE,KAAK,SAAS,CAAC,CAAC;IACjE,WAAW,KAAK,SACd,KAAK,MAAM,KAAK,QAAQ,EAAE,EACxB,aAAa,qDACd,CAAC,CACH;IACD,OAAO,KAAK,SACV,KAAK,OAAO,EAAE,aAAa,2BAA2B,CAAC,CACxD;IACD,QAAQ,KAAK,OAAO,EAClB,aAAa,wCACd,CAAC;IACH,CAAC;GACF,QAAQ,KAAK,MAAM;IACjB,MAAM,MAAM,aAAa,KAAK,KAAoB;AAClD,QAAI,CAAC,IAAI,IAAI;AACX,eAAU,cAAc,8BAA8B;MACpD,OAAO,IAAI;MACX,MAAO,KAAqB;MAC7B,CAAC;AACF,YAAO,QAAQ,QAAQ,KAAK,UAAU,IAAI,UAAU,CAAC;;AAEvD,WAAO,QAAQ,QAAQ,KAAK,KAAK,UAAU,EAAE,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;;GAEpE,CAAC;EAEmB,WAAW;GAC9B,MAAM;GACN,OAAO;GACP,aAAa;GACb,eACE;GACF,YAAY;GACZ,QAAQ,KAAK,MAAM;IACjB,MAAM,MAAM,cAAc,KAAK,KAAqB;AACpD,QAAI,CAAC,IAAI,GAAI,QAAO,QAAQ,QAAQ,KAAK,UAAU,IAAI,UAAU,CAAC;AAClE,WAAO,QAAQ,QAAQ,KAAK,KAAK,CAAC;;GAErC,CAAC;EAEmB,WAAW;GAC9B,MAAM;GACN,OAAO;GACP,aACE;GACF,eACE;GACF,YAAY,KAAK,OAAO;IACtB,MAAM,KAAK,SAAS,KAAK,QAAQ,CAAC;IAClC,QAAQ,KAAK,SAAS,KAAK,QAAQ,CAAC;IACrC,CAAC;GACF,QAAQ,KAAK,MAAM;IACjB,MAAM,WAAW,kBACf,KACA,KACD;AACD,WAAO,QAAQ,QAAQ,KAAK,KAAK,UAAU,UAAU,MAAM,EAAE,CAAC,CAAC;;GAElE,CAAC;EAE8C"}

package/dist/{pi-D3h5Ok0i.js → pi-BtqcLX3y.js}

@@ -1,11 +1,11 @@
-import { a as AgentSignals, d as ErrorCodes, o as REMARK_INSTRUCTION, t as classifyRunFailure } from "./errors-CQ9kttJD.js";
-import { a as getLogFilePath, s as logToFile } from "./debug-Ch4BDOtD.js";
-import { t as VERSION } from "./version-aXxpgRKx.js";
-import { Q as WIZARD_USER_AGENT, Y as WIZARD_REMARK_EVENT_NAME } from "./constants-jFI2SaE1.js";
-import { n as analytics } from "./analytics-CHCZ_qUR.js";
-import { n as currentAccessToken } from "./oauth-session-DJ8h6GFa.js";
-import { l as gatewayAuth, o as withGatewayRemint, r as buildGatewayProvider, t as GATEWAY_PROVIDER } from "./gateway-CjoShdLa.js";
-import { g as assembleCommandments, p as AgentOutputSignals } from "./agent-interface-BAOIHuXS.js";
+import { s as ErrorCodes, t as classifyRunFailure } from "./errors-ddDE6MbA.js";
+import { a as getLogFilePath, s as logToFile } from "./debug-Cj-8vfXY.js";
+import { t as VERSION } from "./version-Cadof0Z_.js";
+import { Q as WIZARD_USER_AGENT, Y as WIZARD_REMARK_EVENT_NAME } from "./constants-CuJfQEcC.js";
+import { n as analytics } from "./analytics-VRYdebXW.js";
+import { n as currentAccessToken } from "./oauth-session-CQTFOk-I.js";
+import { c as REMARK_INSTRUCTION, f as gatewayAuth, o as withGatewayRemint, r as buildGatewayProvider, s as AgentSignals, t as GATEWAY_PROVIDER } from "./gateway-CVU1G0H3.js";
+import { g as assembleCommandments, p as AgentOutputSignals } from "./agent-interface-BXvmAm4c.js";
 import fs from "fs";
 import path from "path";
 function appendStatus(messages, message) {
@@ -378,6 +378,41 @@ function bindPiCancellation(signal, session, onAbortError) {
 	} };
 }
 //#endregion
+//#region src/agent/runner/harness/pi/structured-output.ts
+/** Apply the output contract at the provider boundary on every agent turn. */
+function structuredOutputExtension(schema, api) {
+	return (pi) => {
+		pi.on("before_provider_request", (event) => {
+			const payload = event.payload;
+			const format = {
+				type: "json_schema",
+				schema
+			};
+			switch (api) {
+				case "anthropic-messages": return {
+					...payload,
+					output_config: {
+						...payload.output_config,
+						format
+					}
+				};
+				case "openai-responses": return {
+					...payload,
+					text: {
+						...payload.text,
+						format: {
+							...format,
+							name: "wizard_result",
+							strict: true
+						}
+					}
+				};
+				case "openai-completions": throw new Error("Structured output is not supported on Chat Completions");
+			}
+		});
+	};
+}
+//#endregion
 //#region src/agent/runner/harness/pi/index.ts
 /**
 * The `pi` backend — the challenger. Drives pi.dev's coding agent
@@ -461,15 +496,23 @@ function withMode(tool, mode) {
 	tool.executionMode = mode;
 	return tool;
 }
-/** Pull plain text out of a pi AgentMessage (content is text/image blocks). */
-function extractText(message) {
+/**
+* The text blocks of a pi AgentMessage (content is text/image blocks). A
+* Responses model can send several message items in one turn, commentary
+* before its answer, and each becomes its own block.
+*/
+function textBlocks(message) {
 	const content = message?.content;
-	if (typeof content === "string") return content;
+	if (typeof content === "string") return [content];
 	if (Array.isArray(content)) return content.filter((c) => {
 		const block = c;
 		return block?.type === "text" && typeof block.text === "string";
-	}).map((c) => c.text).join("");
-	return "";
+	}).map((c) => c.text);
+	return [];
+}
+/** Pull plain text out of a pi AgentMessage. */
+function extractText(message) {
+	return textBlocks(message).join("");
 }
 /**
 * Surface `[DASHBOARD_URL]` / `[NOTEBOOK_URL]` markers the agent prints (after
@@ -522,7 +565,7 @@ const piBackend = {
 			classification: "WIZARD_ABORT",
 			message: "Agent run cancelled"
 		};
-		const { config: runConfig, input, boot, emit, prompt, spinner } = inputs;
+		const { config: runConfig, input, boot, emit, prompt, spinner, structured } = inputs;
 		const config = runConfig.run;
 		const modelId = inputs.model;
 		const log = createEmitLog(emit);
@@ -532,13 +575,16 @@ const piBackend = {
 			apiHost: boot.credentials.host.apiHost,
 			runTags: boot.wizardMetadata
 		});
-		log.step("Initializing Wizard agent...");
-		log.step(`Verbose logs: ${getLogFilePath()}`);
-		log.success("Agent initialized. Let's get cooking!");
+		if (!structured) {
+			log.step("Initializing Wizard agent...");
+			log.step(`Verbose logs: ${getLogFilePath()}`);
+			log.success("Agent initialized. Let's get cooking!");
+		}
 		spinner.start(config.spinnerMessage ?? "Customizing your PostHog setup...");
 		const startTime = Date.now();
 		const signals = new AgentOutputSignals();
 		let assistantTurns = 0;
+		let lastAssistantText = "";
 		let toolCalls = 0;
 		const runDurations = () => {
 			const durationMs = Date.now() - startTime;
@@ -552,9 +598,30 @@ const piBackend = {
 			...runDurations(),
 			model: modelId
 		});
+		const timedOutResult = (timeoutMs) => {
+			spinner.stop("Agent run timed out");
+			captureAborted("WIZARD_AGENTIC_DETECTION_TIMEOUT");
+			return {
+				kind: "failure",
+				classification: "WIZARD_AGENTIC_DETECTION_TIMEOUT",
+				message: `Agent run timed out after ${timeoutMs / 1e3}s`
+			};
+		};
 		let mcpCleanup;
 		let aioFailed = true;
 		let cancellation;
+		let timedOut = false;
+		let timeoutAbort;
+		let securityState;
+		const yaraViolationResult = () => {
+			spinner.stop("Security violation detected");
+			logToFile(`[pi] terminated: YARA violation (blocked ${securityState?.blockedCount} call(s))`);
+			captureAborted("WIZARD_YARA_VIOLATION");
+			return {
+				kind: "failure",
+				classification: "WIZARD_YARA_VIOLATION"
+			};
+		};
 		try {
 			const { createAgentSession, DefaultResourceLoader, SessionManager, AuthStorage, ModelRegistry, getAgentDir, createLsToolDefinition, createFindToolDefinition, createGrepToolDefinition, createBashToolDefinition, createReadToolDefinition, createEditToolDefinition, createWriteToolDefinition } = await import("@earendil-works/pi-coding-agent");
 			const refreshAuth = async () => gatewayAuth(boot.credentials.host, await currentAccessToken(boot.credentials), boot.programId);
@@ -568,7 +635,7 @@ const piBackend = {
 				modelId,
 				effort: inputs.thinkingLevel
 			});
-			const { provider, caps } = buildGatewayProvider(providerInputs(auth));
+			const { provider, caps, api } = buildGatewayProvider(providerInputs(auth));
 			const registry = ModelRegistry.inMemory(AuthStorage.create());
 			registry.registerProvider(GATEWAY_PROVIDER, provider);
 			const model = registry.find(GATEWAY_PROVIDER, modelId);
@@ -578,20 +645,22 @@ const piBackend = {
 				message: "pi: gateway model could not be resolved"
 			};
 			const askState = { pending: false };
-			const { createSecurityExtension } = await import("./security-Cg_4a7vB.js");
+			const { createSecurityExtension, READ_ONLY_PI_TOOLS } = await import("./security-lkBwWbrK.js");
 			const security = createSecurityExtension({
+				readOnly: config.readOnly,
 				disallowedTools: runConfig.disallowedTools,
 				getWizardAskPending: () => askState.pending,
 				triageProvider: boot.triageProvider,
 				workingDirectory: input.installDir
 			});
-			const { prewarmYaraScanner } = await import("./yara-hooks-DSGuCU9A.js");
+			securityState = security.state;
+			const { prewarmYaraScanner } = await import("./yara-hooks-B49RIk5d.js");
 			prewarmYaraScanner();
 			const extensionFactories = [security.factory];
 			let mcpInstructions;
 			let posthogMcp = false;
-			try {
-				const { setupPostHogMcp, fetchInstructions } = await import("./mcp-DAgaoGk5.js");
+			if (!config.readOnly) try {
+				const { setupPostHogMcp, fetchInstructions } = await import("./mcp-JcsBBnWv.js");
 				const mcpToken = await currentAccessToken(boot.credentials);
 				const instructionsPromise = fetchInstructions(boot.credentials.host.mcpUrl, mcpToken, WIZARD_USER_AGENT);
 				const mcp = await setupPostHogMcp({
@@ -615,6 +684,7 @@ const piBackend = {
 					error: String(err).slice(0, 300)
 				});
 			}
+			if (structured) extensionFactories.push(structuredOutputExtension(structured.schema, api));
 			const resourceLoader = new DefaultResourceLoader({
 				cwd: input.installDir,
 				agentDir: getAgentDir(),
@@ -635,9 +705,9 @@ const piBackend = {
 				extensionFactories
 			});
 			await resourceLoader.reload();
-			const { createWizardPiTools } = await import("./tools-Dyfh9aCD.js");
+			const { createWizardPiTools } = await import("./tools-Cc41af5W.js");
 			const { createWizardPiTaskTools } = await import("./tasks-Bbv_lOBG.js");
-			const { createDispatchAgentTool } = await import("./subagent-BofIDK-O.js");
+			const { createDispatchAgentTool } = await import("./subagent-Bfy0sfhU.js");
 			const wizardTaskTools = createWizardPiTaskTools((tasks) => emit({
 				kind: "tasks",
 				tasks
@@ -681,7 +751,7 @@ const piBackend = {
 						SessionManager
 					}
 				})
-			];
+			].filter((tool) => !config.readOnly || READ_ONLY_PI_TOOLS.has(tool.name));
 			const { session: agentSession } = await createAgentSession({
 				model,
 				modelRegistry: registry,
@@ -716,7 +786,16 @@ const piBackend = {
 						if (event.message?.role !== "assistant") break;
 						assistantTurns += 1;
 						turns.noteAssistantTurn(event.message);
-						const assistant = extractText(event.message).trim();
+						const blocks = textBlocks(event.message);
+						const assistant = blocks.join("").trim();
+						lastAssistantText = (blocks.at(-1) ?? "").trim();
+						if (structured) inputs.middleware?.onMessage({
+							type: "assistant",
+							message: { content: blocks.map((text) => ({
+								type: "text",
+								text
+							})) }
+						});
 						if (assistant) {
 							logToFile(`[pi] assistant: ${assistant.slice(0, 1e3)}`);
 							applyOutroMarkers(assistant, emit);
@@ -736,6 +815,14 @@ const piBackend = {
 						toolCalls += 1;
 						const args = JSON.stringify(event.args ?? {}).slice(0, 200);
 						logToFile(`[pi] → ${event.toolName} ${args}`);
+						if (structured) inputs.middleware?.onMessage({
+							type: "assistant",
+							message: { content: [{
+								type: "tool_use",
+								name: event.toolName,
+								input: event.args
+							}] }
+						});
 						break;
 					}
 					case "tool_execution_end":
@@ -749,6 +836,12 @@ const piBackend = {
 			});
 			capture.setInitialPrompt(prompt);
 			let terminal = turns.terminalFailure();
+			const timeout = structured && setTimeout(() => {
+				timedOut = true;
+				timeoutAbort = agentSession.abort().catch((error) => {
+					logToFile(`[pi] timeout abort failed: ${String(error)}`);
+				});
+			}, structured.timeoutMs);
 			try {
 				if (inputs.signal?.aborted) return {
 					kind: "abort",
@@ -758,18 +851,19 @@ const piBackend = {
 				await turns.prompt(prompt);
 				terminal = turns.terminalFailure();
 				let continueNudges = 0;
-				while (continueNudges < MAX_CONTINUE_NUDGES && !security.state.criticalViolation && !inputs.signal?.aborted && !terminal && hasOpenTasks(wizardTaskTools.store)) {
+				while (!structured && continueNudges < MAX_CONTINUE_NUDGES && !security.state.criticalViolation && !inputs.signal?.aborted && !terminal && hasOpenTasks(wizardTaskTools.store)) {
 					continueNudges += 1;
 					logToFile(`[pi] completion guard: tasks still open, nudge ${continueNudges}/${MAX_CONTINUE_NUDGES}`);
 					await turns.prompt(CONTINUE_INSTRUCTION);
 					terminal = turns.terminalFailure();
 				}
-				if (!security.state.criticalViolation && !terminal && !inputs.signal?.aborted) try {
+				if (!structured && !security.state.criticalViolation && !terminal && !inputs.signal?.aborted) try {
 					await agentSession.prompt(REMARK_INSTRUCTION);
 				} catch (err) {
 					logToFile(`[pi] remark request failed: ${String(err)}`);
 				}
 			} finally {
+				if (timeout) clearTimeout(timeout);
 				try {
 					unsubscribe();
 				} catch {}
@@ -779,6 +873,7 @@ const piBackend = {
 				classification: "WIZARD_ABORT",
 				message: "Agent run cancelled"
 			};
+			if (timedOut && structured && !security.state.criticalViolation) return timedOutResult(structured.timeoutMs);
 			if (terminal && !security.state.criticalViolation) {
 				spinner.stop(config.errorMessage ?? `${config.integrationLabel} failed`);
 				captureAborted(terminal.classification);
@@ -800,16 +895,8 @@ const piBackend = {
 					message: terminal.message
 				};
 			}
-			if (security.state.criticalViolation) {
-				spinner.stop("Security violation detected");
-				logToFile(`[pi] terminated: YARA violation (blocked ${security.state.blockedCount} call(s))`);
-				captureAborted("WIZARD_YARA_VIOLATION");
-				return {
-					kind: "failure",
-					classification: "WIZARD_YARA_VIOLATION"
-				};
-			}
-			const openTasks = hasOpenTasks(wizardTaskTools.store);
+			if (security.state.criticalViolation) return yaraViolationResult();
+			const openTasks = !structured && hasOpenTasks(wizardTaskTools.store);
 			const failure = completionFailure({
 				toolCalls,
 				openTasks
@@ -818,10 +905,11 @@ const piBackend = {
 				spinner.stop("Agent made no changes");
 				logToFile(`[pi] no progress: ${assistantTurns} assistant turn(s), 0 tool calls`);
 				analytics.wizardCapture("agent no progress", { assistant_turns: assistantTurns });
-				captureAborted(failure);
+				const classification = structured ? "WIZARD_INVALID_STRUCTURED_OUTPUT" : failure;
+				captureAborted(classification);
 				return {
 					kind: "failure",
-					classification: failure
+					classification
 				};
 			}
 			if (failure === "WIZARD_INCOMPLETE_TASKS") {
@@ -840,7 +928,7 @@ const piBackend = {
 			if (skillFailure !== void 0) analytics.wizardCapture("agent continued without skill", { detail: skillFailure });
 			try {
 				const planFile = path.join(input.installDir, ".posthog-events.json");
-				if (fs.existsSync(planFile)) await fs.promises.rm(planFile);
+				if (!structured && fs.existsSync(planFile)) await fs.promises.rm(planFile);
 			} catch (err) {
 				logToFile(`[pi] .posthog-events.json cleanup skipped: ${String(err)}`);
 			}
@@ -856,13 +944,23 @@ const piBackend = {
 			});
 			spinner.stop(config.successMessage ?? "PostHog integration complete");
 			aioFailed = false;
-			return { kind: "success" };
+			if (!structured) return { kind: "success" };
+			try {
+				return {
+					kind: "success",
+					structuredOutput: JSON.parse(lastAssistantText)
+				};
+			} catch {
+				return { kind: "success" };
+			}
 		} catch (err) {
 			if (inputs.signal?.aborted) return {
 				kind: "abort",
 				classification: "WIZARD_ABORT",
 				message: "Agent run cancelled"
 			};
+			if (securityState?.criticalViolation) return yaraViolationResult();
+			if (timedOut && structured) return timedOutResult(structured.timeoutMs);
 			const message = err instanceof Error ? err.message : String(err);
 			logToFile(`[pi] run error: ${message}`);
 			spinner.stop(config.errorMessage ?? `${config.integrationLabel} failed`);
@@ -889,6 +987,7 @@ const piBackend = {
 			};
 		} finally {
 			await cancellation?.settle();
+			await timeoutAbort;
 			try {
 				mcpCleanup?.();
 			} catch {}
@@ -898,11 +997,11 @@ const piBackend = {
 		}
 	},
 	async runTask(inputs) {
-		const { runPiTask } = await import("./task-r9t1UhQP.js");
+		const { runPiTask } = await import("./task-BOfw7GPc.js");
 		return runPiTask(inputs);
 	}
 };
 //#endregion
 export { piBackend as a, runErrorType as c, createEmitSpinner as d, createProgressCollector as f, lastStatusLine as i, createAioCapture as l, buildScrubbedEnv as n, withMode as o, appendStatus as p, extractText as r, bindPiCancellation as s, applyOutroMarkers as t, createEmitLog as u };
 
-//# sourceMappingURL=pi-D3h5Ok0i.js.map
+//# sourceMappingURL=pi-BtqcLX3y.js.map