@posthog/wizard 2.78.0 → 2.79.0

package/dist/{agent-interface-BAOIHuXS.js → agent-interface-BXvmAm4c.js}

@@ -1,14 +1,14 @@
 import { n as __require } from "./rolldown-runtime-B_-DWIq7.js";
-import { a as AgentSignals, c as classifyAuthFailure, o as REMARK_INSTRUCTION, s as RESUME_INSTRUCTION } from "./errors-CQ9kttJD.js";
-import { a as getLogFilePath, o as initLogFile, r as debug, s as logToFile, v as runtimeEnv } from "./debug-Ch4BDOtD.js";
-import { Y as WIZARD_REMARK_EVENT_NAME, c as CONTEXT_MILL_URL, et as wizardUserAgentForProgram, o as AWS_SKILLS_BASE_URL } from "./constants-jFI2SaE1.js";
-import { n as analytics } from "./analytics-CHCZ_qUR.js";
-import { a as safeReadFile, i as readProjectFile, o as walkProjectFiles } from "./bounded-fs-Bx9zTe6m.js";
-import { t as registerCleanup } from "./wizard-abort-BBkiUxfS.js";
-import { i as gatewayApiFor, l as gatewayAuth, n as buildGatewayModel, s as buildWizardPropertiesBlob, u as isPastRefresh } from "./gateway-CjoShdLa.js";
-import { i as modelCapabilities, o as triageModelFor } from "./models-DDdBJKwT.js";
-import { _ as coerceAuditChecks, h as AUDIT_CHECKS_FILE, l as prewarmYaraScanner, n as createPostToolUseYaraHooks, p as scanInstalledSkill, r as createPreToolUseYaraHooks } from "./yara-hooks-DCeMDd1o.js";
-import { l as buildOrchestratorTools, v as makeMutex, y as writeJsonAtomic } from "./queue-tools-9OOVx5TE.js";
+import { i as classifyAuthFailure } from "./errors-ddDE6MbA.js";
+import { a as getLogFilePath, o as initLogFile, r as debug, s as logToFile, v as runtimeEnv } from "./debug-Cj-8vfXY.js";
+import { Y as WIZARD_REMARK_EVENT_NAME, c as CONTEXT_MILL_URL, et as wizardUserAgentForProgram, o as AWS_SKILLS_BASE_URL } from "./constants-CuJfQEcC.js";
+import { n as analytics } from "./analytics-VRYdebXW.js";
+import { a as safeReadFile, i as readProjectFile, o as walkProjectFiles } from "./bounded-fs-Cpn129A4.js";
+import { t as registerCleanup } from "./wizard-abort-HDbP3YcS.js";
+import { c as REMARK_INSTRUCTION, f as gatewayAuth, i as gatewayApiFor, l as RESUME_INSTRUCTION, n as buildGatewayModel, p as isPastRefresh, s as AgentSignals, u as buildWizardPropertiesBlob } from "./gateway-CVU1G0H3.js";
+import { i as modelCapabilities, o as triageModelFor } from "./models-DnAY67Lg.js";
+import { _ as coerceAuditChecks, h as AUDIT_CHECKS_FILE, l as prewarmYaraScanner, n as createPostToolUseYaraHooks, p as scanInstalledSkill, r as createPreToolUseYaraHooks } from "./yara-hooks-DCfROpZt.js";
+import { l as buildOrchestratorTools, v as makeMutex, y as writeJsonAtomic } from "./queue-tools-B7_aCyd-.js";
 import { createRequire } from "node:module";
 import * as fs$1 from "fs";
 import fs from "fs";
@@ -18,9 +18,9 @@ import { spawnSync } from "node:child_process";
 import { closeSync, constants, fchmodSync, lstatSync, openSync, renameSync, unlinkSync, writeSync } from "node:fs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { z } from "zod";
+import { randomUUID as randomUUID$1 } from "crypto";
 import * as os from "os";
 import { unzipSync } from "fflate";
-import { randomUUID as randomUUID$1 } from "crypto";
 //#region src/agent/triage-provider.ts
 const TRIAGE_MAX_TOKENS = 16384;
 const TRIAGE_TIMEOUT_MS = 2e4;
@@ -2405,7 +2405,7 @@ var AgentOutputSignals = class {
 	}
 };
 //#endregion
-//#region src/agent/agent-env-isolation.ts
+//#region src/shared/agent-env-isolation.ts
 /**
 * Credential isolation for the Claude Agent SDK subprocess.
 *
@@ -2997,6 +2997,10 @@ function buildAgentEnv(wizardMetadata, wizardFlags, teamId) {
 * this guard is a belt-and-suspenders second line.
 */
 function wizardCanUseTool(toolName, input, context = {}) {
+	if (context.readOnly && !READ_ONLY_TOOLS.includes(toolName)) return {
+		behavior: "deny",
+		message: `Tool ${toolName} is disabled for read-only runs.`
+	};
 	if (context.disallowedTools?.includes(toolName)) {
 		logToFile(`Denying disallowed tool: ${toolName}`);
 		return {
@@ -3137,10 +3141,12 @@ async function initializeAgent(config, options) {
 			workingDirectory: config.workingDirectory,
 			mcpServers,
 			model,
+			outputFormat: config.outputFormat,
 			posthogApiKey: config.posthogApiKey,
 			currentPosthogApiKey: config.currentPosthogApiKey,
 			wizardFlags: config.wizardFlags,
 			wizardMetadata: config.wizardMetadata,
+			readOnly: config.readOnly,
 			allowedTools: config.allowedTools,
 			disallowedTools: config.disallowedTools,
 			getPendingQuestion: config.getPendingQuestion,
@@ -3199,9 +3205,15 @@ function sdkResultFailure(message) {
 	if (message.subtype === "success" && message.is_error !== true) return void 0;
 	const errors = Array.isArray(message.errors) ? message.errors : [];
 	const detail = errors.map((error) => typeof error === "string" ? error : JSON.stringify(error)).join("; ") || (typeof message.result === "string" ? message.result : String(message.subtype ?? "SDK result failed"));
+	const status = sdkErrorStatus(message.api_error_status) ?? sdkErrorStatus(message.status) ?? errors.map(sdkErrorStatus).find((code) => code !== void 0) ?? sdkErrorStatus(message.result);
+	if (message.subtype === "error_max_structured_output_retries") return {
+		kind: "failure",
+		classification: "WIZARD_INVALID_STRUCTURED_OUTPUT",
+		message: detail
+	};
 	return {
 		kind: "failure",
-		classification: (sdkErrorStatus(message.api_error_status) ?? sdkErrorStatus(message.status) ?? errors.map(sdkErrorStatus).find((code) => code !== void 0) ?? sdkErrorStatus(message.result)) === 429 ? "WIZARD_RATE_LIMIT" : "WIZARD_API_ERROR",
+		classification: status === 429 ? "WIZARD_RATE_LIMIT" : "WIZARD_API_ERROR",
 		message: detail
 	};
 }
@@ -3281,7 +3293,10 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 			logToFile(`${AgentSignals.BENCHMARK} Middleware finalize error:`, e);
 		}
 		spinner.stop(successMessage);
-		return { kind: "success" };
+		return {
+			kind: "success",
+			structuredOutput: lastResultMessage?.structured_output
+		};
 	};
 	let abortController = new AbortController();
 	const onExternalAbort = () => {
@@ -3307,7 +3322,7 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 	}, timeoutMs) : void 0;
 	try {
 		const disallow = new Set(agentConfig.disallowedTools ?? []);
-		const allowedTools = [...BASE_ALLOWED_TOOLS, ...agentConfig.allowedTools ?? []].filter((t) => !disallow.has(t));
+		const allowedTools = (agentConfig.readOnly ? READ_ONLY_TOOLS : [...BASE_ALLOWED_TOOLS, ...agentConfig.allowedTools ?? []]).filter((t) => !disallow.has(t));
 		const inheritedMcpServerNames = Object.keys(agentConfig.mcpServers);
 		const triageProvider = agentConfig.triageProvider;
 		const onYaraTerminate = (reason) => {
@@ -3330,18 +3345,19 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 					abortController,
 					resume,
 					model: agentConfig.model,
+					outputFormat: agentConfig.outputFormat,
 					cwd: agentConfig.workingDirectory,
-					permissionMode: "acceptEdits",
+					permissionMode: agentConfig.readOnly ? "default" : "acceptEdits",
 					betas: ["context-1m-2025-08-07"],
-					mcpServers: agentConfig.mcpServers,
-					agents: { "general-purpose": {
+					mcpServers: agentConfig.readOnly ? {} : agentConfig.mcpServers,
+					agents: agentConfig.readOnly ? void 0 : { "general-purpose": {
 						description: "General-purpose subagent. Inherits the parent run's tools plus the PostHog and wizard-tools MCP servers, so it can call mcp__posthog-wizard__* directly instead of curling the REST API.",
 						prompt: "You are a general-purpose subagent for the PostHog wizard. Prefer the authenticated mcp__posthog-wizard__* MCP tools over raw HTTP — they are already authenticated for this project. Only fall back to other transports if no MCP tool covers the operation.",
 						mcpServers: inheritedMcpServerNames,
 						disallowedTools: agentConfig.disallowedTools ? [...agentConfig.disallowedTools] : void 0
 					} },
-					settingSources: ["project"],
-					skills: "all",
+					settingSources: agentConfig.readOnly ? [] : ["project"],
+					skills: agentConfig.readOnly ? [] : "all",
 					allowedTools,
 					sandbox: {
 						enabled: true,
@@ -3398,6 +3414,7 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 							input
 						});
 						const result = wizardCanUseTool(toolName, input, {
+							readOnly: agentConfig.readOnly,
 							wizardAskPending: agentConfig.getPendingQuestion?.() != null,
 							disallowedTools: agentConfig.disallowedTools
 						});
@@ -3413,7 +3430,7 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 							harness: "anthropic"
 						})
 					},
-					tools: {
+					tools: agentConfig.readOnly ? [...READ_ONLY_TOOLS] : {
 						type: "preset",
 						preset: "claude_code"
 					},
@@ -3688,6 +3705,10 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 				message: `Agent run timed out after ${timeoutMs / 1e3}s`
 			};
 		}
+		if (terminalFailure) {
+			spinner.stop(errorMessage);
+			return terminalFailure;
+		}
 		const apiErrorMessage = signals.apiErrorMessage() ?? "Unknown API error";
 		if (signals.hasApiErrorStatus(429)) {
 			logToFile("Agent error (caught): RATE_LIMIT");
@@ -3764,6 +3785,11 @@ let TaskTool = /* @__PURE__ */ function(TaskTool) {
 * init handler has to recognise this server in the SDK's status report.
 */
 const POSTHOG_MCP_SERVER_NAME = "posthog-wizard";
+const READ_ONLY_TOOLS = [
+	"Read",
+	"Glob",
+	"Grep"
+];
 const BASE_ALLOWED_TOOLS = [
 	"Read",
 	"Write",
@@ -4051,4 +4077,4 @@ function handleSDKMessage(message, options, spinner, signals, emit, receivedSucc
 //#endregion
 export { vaultSensitiveAnswers as $, CHECK_ENV_KEYS_FILE_PATH_DESCRIPTION as A, describeAskCancellation as B, AUDIT_ADD_CHECKS_PARAM_DESCRIPTION as C, AUDIT_SEED_CHECKS_PARAM_DESCRIPTION as D, AUDIT_SEED_CHECKS_DESCRIPTION as E, WIZARD_ASK_TOOL_DESCRIPTION as F, mergeEnvValues as G, ensureGitignoreCoverage as H, WIZARD_TOOL_NAMES as I, resolveAuditChecks as J, normaliseAskSubject as K, addAuditChecks as L, WIZARD_ASK_KIND_DESCRIPTION as M, WIZARD_ASK_SENSITIVE_DESCRIPTION as N, AUDIT_STATUSES as O, WIZARD_ASK_SUBJECT_DESCRIPTION as P, templateEnvWriteRefusal as Q, checkEnvKeys as R, AUDIT_ADD_CHECKS_DESCRIPTION as S, AUDIT_RESOLVE_CHECKS_PARAM_DESCRIPTION as T, installSkillById as U, downloadSkill as V, legacyKeyNameRefusal as W, resolveEnvSecretRefs as X, resolveEnvPath as Y, seedAuditChecks as Z, createSecretVault as _, wizardCanUseTool as a, MAX_ENV_KEY_SET as at, PUBLISH_HANDOFF_TOOL_NAME as b, checkAllSettingsConflicts as c, toPromptSafeRelativePath as ct, restoreClaudeSettings as d, fetchSkillMenu as et, sanitizeAgentSubprocessEnv as f, assembleCommandments as g, markGrantRevoked as h, runAgent as i, isFullyCancelled as it, ENV_FILE_PATH_DESCRIPTION as j, CHECK_ENV_KEYS_DESCRIPTION as k, classifySettingsConflicts as l, createTriageLLMProvider as lt, isGrantRevoked as m, buildRunTags as n, LONGER_ASK_TIMEOUT_MS as nt, createIsolatedAgentConfigDir as o, isEnvFileName as ot, AgentOutputSignals as p, resolveAskQuestionKinds as q, initializeAgent as r, createWizardAskBridge as rt, backupAndFixClaudeSettings as s, parseEnvKeyNames as st, buildAgentEnv as t, fetchWithRetry as tt, recoverOrphanedSettingsBackups as u, PUBLISH_HANDOFF_CONTENT_DESCRIPTION as v, AUDIT_RESOLVE_CHECKS_DESCRIPTION as w, publishHandoff as x, PUBLISH_HANDOFF_DESCRIPTION as y, createAskAccounting as z };
 
-//# sourceMappingURL=agent-interface-BAOIHuXS.js.map
+//# sourceMappingURL=agent-interface-BXvmAm4c.js.map