@posthog/wizard 2.78.0 → 2.79.1

package/dist/{agent-interface-BAOIHuXS.js → agent-interface-FkbaBJwz.js}

@@ -1,14 +1,13 @@
-import { n as __require } from "./rolldown-runtime-B_-DWIq7.js";
-import { a as AgentSignals, c as classifyAuthFailure, o as REMARK_INSTRUCTION, s as RESUME_INSTRUCTION } from "./errors-CQ9kttJD.js";
-import { a as getLogFilePath, o as initLogFile, r as debug, s as logToFile, v as runtimeEnv } from "./debug-Ch4BDOtD.js";
-import { Y as WIZARD_REMARK_EVENT_NAME, c as CONTEXT_MILL_URL, et as wizardUserAgentForProgram, o as AWS_SKILLS_BASE_URL } from "./constants-jFI2SaE1.js";
-import { n as analytics } from "./analytics-CHCZ_qUR.js";
-import { a as safeReadFile, i as readProjectFile, o as walkProjectFiles } from "./bounded-fs-Bx9zTe6m.js";
-import { t as registerCleanup } from "./wizard-abort-BBkiUxfS.js";
-import { i as gatewayApiFor, l as gatewayAuth, n as buildGatewayModel, s as buildWizardPropertiesBlob, u as isPastRefresh } from "./gateway-CjoShdLa.js";
-import { i as modelCapabilities, o as triageModelFor } from "./models-DDdBJKwT.js";
-import { _ as coerceAuditChecks, h as AUDIT_CHECKS_FILE, l as prewarmYaraScanner, n as createPostToolUseYaraHooks, p as scanInstalledSkill, r as createPreToolUseYaraHooks } from "./yara-hooks-DCeMDd1o.js";
-import { l as buildOrchestratorTools, v as makeMutex, y as writeJsonAtomic } from "./queue-tools-9OOVx5TE.js";
+import { a as getLogFilePath, o as initLogFile, r as debug, s as logToFile, v as runtimeEnv } from "./debug-kAHwWGg7.js";
+import { Y as WIZARD_REMARK_EVENT_NAME, c as CONTEXT_MILL_URL, et as wizardUserAgentForProgram, o as AWS_SKILLS_BASE_URL } from "./constants-DHCBSfnx.js";
+import { n as analytics } from "./analytics-DXK1gc12.js";
+import { i as classifyAuthFailure } from "./errors-C2domSkK.js";
+import { a as safeReadFile, i as readProjectFile, o as walkProjectFiles } from "./bounded-fs-vAq-T-K7.js";
+import { t as registerCleanup } from "./wizard-abort-BPdv07np.js";
+import { c as REMARK_INSTRUCTION, f as gatewayAuth, i as gatewayApiFor, l as RESUME_INSTRUCTION, n as buildGatewayModel, p as isPastRefresh, s as AgentSignals, u as buildWizardPropertiesBlob } from "./gateway-C9-GlLO9.js";
+import { i as modelCapabilities, o as triageModelFor } from "./models-WcwUnSKb.js";
+import { _ as coerceAuditChecks, h as AUDIT_CHECKS_FILE, l as prewarmYaraScanner, n as createPostToolUseYaraHooks, p as scanInstalledSkill, r as createPreToolUseYaraHooks } from "./yara-hooks-BnxejtXK.js";
+import { l as buildOrchestratorTools, v as makeMutex, y as writeJsonAtomic } from "./queue-tools-C8mXOh7e.js";
 import { createRequire } from "node:module";
 import * as fs$1 from "fs";
 import fs from "fs";
@@ -18,9 +17,12 @@ import { spawnSync } from "node:child_process";
 import { closeSync, constants, fchmodSync, lstatSync, openSync, renameSync, unlinkSync, writeSync } from "node:fs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { z } from "zod";
+import { randomUUID as randomUUID$1 } from "crypto";
 import * as os from "os";
 import { unzipSync } from "fflate";
-import { randomUUID as randomUUID$1 } from "crypto";
+//#region \0rolldown/runtime.js
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+//#endregion
 //#region src/agent/triage-provider.ts
 const TRIAGE_MAX_TOKENS = 16384;
 const TRIAGE_TIMEOUT_MS = 2e4;
@@ -1629,8 +1631,18 @@ const WIZARD_TOOL_NAMES = {
 //#region src/agent/tools/handoff.ts
 const MAX_HANDOFF_TEXT_CHARS = 64 * 1024;
 const PUBLISH_HANDOFF_TOOL_NAME = "publish_handoff";
-/** Shared between the MCP server and the pi facade so the contract can't drift. */
-const PUBLISH_HANDOFF_DESCRIPTION = "Publish the handoff document — the full markdown report of what this run did — to the wizard session. Call it exactly once, at the end of the run, passing the complete report as `content`. This call is the required way to deliver the report to the user; do not write the report to a file yourself.";
+/**
+* Shared between the MCP server and the pi facade so the contract can't drift.
+*
+* Naming who publishes is the load-bearing part: every task of an orchestrated
+* run holds this tool, and "call it at the end of the run to deliver the
+* report" is an instruction all of them can follow — so a run published one
+* full report per step, each replaced by the next, and a step that read the
+* call as its own finish skipped `complete_task` and was restarted.
+*/
+const PUBLISH_HANDOFF_DESCRIPTION = "Publish the handoff document — the full markdown report of what the whole run did — to the wizard session. A run publishes once: call it only when your own instructions ask you to write that report, passing the complete report as `content`, and never write the report to a file yourself. It is not how you report your own work — in a run made of several tasks each step finishes with complete_task, and a step that was not asked for the run report leaves this one uncalled, because the section it owns travels in its handoff.";
+/** Appended for a task agent: the reminder lands as it decides it has finished. */
+const TASK_REPORTING_NOTE = " This does not report your task: call complete_task to finish.";
 const PUBLISH_HANDOFF_CONTENT_DESCRIPTION = "The complete handoff report as markdown, starting with an H1 heading.";
 /**
 * Write the handoff report to the host-designated `targetPath`.
@@ -1692,7 +1704,7 @@ function writeHandoffFileAtomically(targetPath, text) {
 		};
 	}
 }
-function publishHandoff(content, emit) {
+function publishHandoff(content, emit, opts = {}) {
 	if (content.trim() === "") {
 		analytics.wizardCapture("handoff published", {
 			handoff_ok: false,
@@ -1731,7 +1743,7 @@ function publishHandoff(content, emit) {
 	if (handoffOutputError) notes.push(`host output write failed: ${handoffOutputError}`);
 	return {
 		ok: true,
-		message: `Handoff published (${text.length} chars${notes.length > 0 ? `, ${notes.join("; ")}` : ""}).`
+		message: `Handoff published (${text.length} chars${notes.length > 0 ? `, ${notes.join("; ")}` : ""}).${opts.taskAgent ? TASK_REPORTING_NOTE : ""}`
 	};
 }
 //#endregion
@@ -2104,7 +2116,7 @@ async function createWizardToolsServer(options) {
 				}
 			}),
 			tool(PUBLISH_HANDOFF_TOOL_NAME, PUBLISH_HANDOFF_DESCRIPTION, { content: z.string().describe(PUBLISH_HANDOFF_CONTENT_DESCRIPTION) }, (args) => {
-				const result = publishHandoff(args.content, emit);
+				const result = publishHandoff(args.content, emit, { taskAgent: orchestrator?.currentTaskId !== void 0 });
 				logToFile(`publish_handoff: ${result.message}`);
 				return {
 					content: [{
@@ -2405,7 +2417,7 @@ var AgentOutputSignals = class {
 	}
 };
 //#endregion
-//#region src/agent/agent-env-isolation.ts
+//#region src/shared/agent-env-isolation.ts
 /**
 * Credential isolation for the Claude Agent SDK subprocess.
 *
@@ -2997,6 +3009,10 @@ function buildAgentEnv(wizardMetadata, wizardFlags, teamId) {
 * this guard is a belt-and-suspenders second line.
 */
 function wizardCanUseTool(toolName, input, context = {}) {
+	if (context.readOnly && !READ_ONLY_TOOLS.includes(toolName)) return {
+		behavior: "deny",
+		message: `Tool ${toolName} is disabled for read-only runs.`
+	};
 	if (context.disallowedTools?.includes(toolName)) {
 		logToFile(`Denying disallowed tool: ${toolName}`);
 		return {
@@ -3137,10 +3153,12 @@ async function initializeAgent(config, options) {
 			workingDirectory: config.workingDirectory,
 			mcpServers,
 			model,
+			outputFormat: config.outputFormat,
 			posthogApiKey: config.posthogApiKey,
 			currentPosthogApiKey: config.currentPosthogApiKey,
 			wizardFlags: config.wizardFlags,
 			wizardMetadata: config.wizardMetadata,
+			readOnly: config.readOnly,
 			allowedTools: config.allowedTools,
 			disallowedTools: config.disallowedTools,
 			getPendingQuestion: config.getPendingQuestion,
@@ -3199,9 +3217,15 @@ function sdkResultFailure(message) {
 	if (message.subtype === "success" && message.is_error !== true) return void 0;
 	const errors = Array.isArray(message.errors) ? message.errors : [];
 	const detail = errors.map((error) => typeof error === "string" ? error : JSON.stringify(error)).join("; ") || (typeof message.result === "string" ? message.result : String(message.subtype ?? "SDK result failed"));
+	const status = sdkErrorStatus(message.api_error_status) ?? sdkErrorStatus(message.status) ?? errors.map(sdkErrorStatus).find((code) => code !== void 0) ?? sdkErrorStatus(message.result);
+	if (message.subtype === "error_max_structured_output_retries") return {
+		kind: "failure",
+		classification: "WIZARD_INVALID_STRUCTURED_OUTPUT",
+		message: detail
+	};
 	return {
 		kind: "failure",
-		classification: (sdkErrorStatus(message.api_error_status) ?? sdkErrorStatus(message.status) ?? errors.map(sdkErrorStatus).find((code) => code !== void 0) ?? sdkErrorStatus(message.result)) === 429 ? "WIZARD_RATE_LIMIT" : "WIZARD_API_ERROR",
+		classification: status === 429 ? "WIZARD_RATE_LIMIT" : "WIZARD_API_ERROR",
 		message: detail
 	};
 }
@@ -3281,7 +3305,10 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 			logToFile(`${AgentSignals.BENCHMARK} Middleware finalize error:`, e);
 		}
 		spinner.stop(successMessage);
-		return { kind: "success" };
+		return {
+			kind: "success",
+			structuredOutput: lastResultMessage?.structured_output
+		};
 	};
 	let abortController = new AbortController();
 	const onExternalAbort = () => {
@@ -3307,7 +3334,7 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 	}, timeoutMs) : void 0;
 	try {
 		const disallow = new Set(agentConfig.disallowedTools ?? []);
-		const allowedTools = [...BASE_ALLOWED_TOOLS, ...agentConfig.allowedTools ?? []].filter((t) => !disallow.has(t));
+		const allowedTools = (agentConfig.readOnly ? READ_ONLY_TOOLS : [...BASE_ALLOWED_TOOLS, ...agentConfig.allowedTools ?? []]).filter((t) => !disallow.has(t));
 		const inheritedMcpServerNames = Object.keys(agentConfig.mcpServers);
 		const triageProvider = agentConfig.triageProvider;
 		const onYaraTerminate = (reason) => {
@@ -3330,18 +3357,19 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 					abortController,
 					resume,
 					model: agentConfig.model,
+					outputFormat: agentConfig.outputFormat,
 					cwd: agentConfig.workingDirectory,
-					permissionMode: "acceptEdits",
+					permissionMode: agentConfig.readOnly ? "default" : "acceptEdits",
 					betas: ["context-1m-2025-08-07"],
-					mcpServers: agentConfig.mcpServers,
-					agents: { "general-purpose": {
+					mcpServers: agentConfig.readOnly ? {} : agentConfig.mcpServers,
+					agents: agentConfig.readOnly ? void 0 : { "general-purpose": {
 						description: "General-purpose subagent. Inherits the parent run's tools plus the PostHog and wizard-tools MCP servers, so it can call mcp__posthog-wizard__* directly instead of curling the REST API.",
 						prompt: "You are a general-purpose subagent for the PostHog wizard. Prefer the authenticated mcp__posthog-wizard__* MCP tools over raw HTTP — they are already authenticated for this project. Only fall back to other transports if no MCP tool covers the operation.",
 						mcpServers: inheritedMcpServerNames,
 						disallowedTools: agentConfig.disallowedTools ? [...agentConfig.disallowedTools] : void 0
 					} },
-					settingSources: ["project"],
-					skills: "all",
+					settingSources: agentConfig.readOnly ? [] : ["project"],
+					skills: agentConfig.readOnly ? [] : "all",
 					allowedTools,
 					sandbox: {
 						enabled: true,
@@ -3398,6 +3426,7 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 							input
 						});
 						const result = wizardCanUseTool(toolName, input, {
+							readOnly: agentConfig.readOnly,
 							wizardAskPending: agentConfig.getPendingQuestion?.() != null,
 							disallowedTools: agentConfig.disallowedTools
 						});
@@ -3413,7 +3442,7 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 							harness: "anthropic"
 						})
 					},
-					tools: {
+					tools: agentConfig.readOnly ? [...READ_ONLY_TOOLS] : {
 						type: "preset",
 						preset: "claude_code"
 					},
@@ -3688,6 +3717,10 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 				message: `Agent run timed out after ${timeoutMs / 1e3}s`
 			};
 		}
+		if (terminalFailure) {
+			spinner.stop(errorMessage);
+			return terminalFailure;
+		}
 		const apiErrorMessage = signals.apiErrorMessage() ?? "Unknown API error";
 		if (signals.hasApiErrorStatus(429)) {
 			logToFile("Agent error (caught): RATE_LIMIT");
@@ -3764,6 +3797,11 @@ let TaskTool = /* @__PURE__ */ function(TaskTool) {
 * init handler has to recognise this server in the SDK's status report.
 */
 const POSTHOG_MCP_SERVER_NAME = "posthog-wizard";
+const READ_ONLY_TOOLS = [
+	"Read",
+	"Glob",
+	"Grep"
+];
 const BASE_ALLOWED_TOOLS = [
 	"Read",
 	"Write",
@@ -4051,4 +4089,4 @@ function handleSDKMessage(message, options, spinner, signals, emit, receivedSucc
 //#endregion
 export { vaultSensitiveAnswers as $, CHECK_ENV_KEYS_FILE_PATH_DESCRIPTION as A, describeAskCancellation as B, AUDIT_ADD_CHECKS_PARAM_DESCRIPTION as C, AUDIT_SEED_CHECKS_PARAM_DESCRIPTION as D, AUDIT_SEED_CHECKS_DESCRIPTION as E, WIZARD_ASK_TOOL_DESCRIPTION as F, mergeEnvValues as G, ensureGitignoreCoverage as H, WIZARD_TOOL_NAMES as I, resolveAuditChecks as J, normaliseAskSubject as K, addAuditChecks as L, WIZARD_ASK_KIND_DESCRIPTION as M, WIZARD_ASK_SENSITIVE_DESCRIPTION as N, AUDIT_STATUSES as O, WIZARD_ASK_SUBJECT_DESCRIPTION as P, templateEnvWriteRefusal as Q, checkEnvKeys as R, AUDIT_ADD_CHECKS_DESCRIPTION as S, AUDIT_RESOLVE_CHECKS_PARAM_DESCRIPTION as T, installSkillById as U, downloadSkill as V, legacyKeyNameRefusal as W, resolveEnvSecretRefs as X, resolveEnvPath as Y, seedAuditChecks as Z, createSecretVault as _, wizardCanUseTool as a, MAX_ENV_KEY_SET as at, PUBLISH_HANDOFF_TOOL_NAME as b, checkAllSettingsConflicts as c, toPromptSafeRelativePath as ct, restoreClaudeSettings as d, fetchSkillMenu as et, sanitizeAgentSubprocessEnv as f, assembleCommandments as g, markGrantRevoked as h, runAgent as i, isFullyCancelled as it, ENV_FILE_PATH_DESCRIPTION as j, CHECK_ENV_KEYS_DESCRIPTION as k, classifySettingsConflicts as l, createTriageLLMProvider as lt, isGrantRevoked as m, buildRunTags as n, LONGER_ASK_TIMEOUT_MS as nt, createIsolatedAgentConfigDir as o, isEnvFileName as ot, AgentOutputSignals as p, resolveAskQuestionKinds as q, initializeAgent as r, createWizardAskBridge as rt, backupAndFixClaudeSettings as s, parseEnvKeyNames as st, buildAgentEnv as t, fetchWithRetry as tt, recoverOrphanedSettingsBackups as u, PUBLISH_HANDOFF_CONTENT_DESCRIPTION as v, AUDIT_RESOLVE_CHECKS_DESCRIPTION as w, publishHandoff as x, PUBLISH_HANDOFF_DESCRIPTION as y, createAskAccounting as z };
 
-//# sourceMappingURL=agent-interface-BAOIHuXS.js.map
+//# sourceMappingURL=agent-interface-FkbaBJwz.js.map