@posthog/wizard 2.79.0 → 2.80.0

package/dist/agent-QGK2YzlX.js

@@ -0,0 +1,6 @@
+import "./agent-interface-CzyCmp7q.js";
+import { d as configureGatewayFromCIEnvironment } from "./gateway-BmjYUSua.js";
+import { t as runMcpPromptViaSdk } from "./agent-BkBbVuNq.js";
+import "./yara-hooks-C3L6lBij.js";
+import "./queue-tools-knnPQP0e.js";
+export { configureGatewayFromCIEnvironment, runMcpPromptViaSdk };

package/dist/{agent-interface-BXvmAm4c.js → agent-interface-CzyCmp7q.js}

@@ -1,14 +1,13 @@
-import { n as __require } from "./rolldown-runtime-B_-DWIq7.js";
-import { i as classifyAuthFailure } from "./errors-ddDE6MbA.js";
-import { a as getLogFilePath, o as initLogFile, r as debug, s as logToFile, v as runtimeEnv } from "./debug-Cj-8vfXY.js";
-import { Y as WIZARD_REMARK_EVENT_NAME, c as CONTEXT_MILL_URL, et as wizardUserAgentForProgram, o as AWS_SKILLS_BASE_URL } from "./constants-CuJfQEcC.js";
-import { n as analytics } from "./analytics-VRYdebXW.js";
-import { a as safeReadFile, i as readProjectFile, o as walkProjectFiles } from "./bounded-fs-Cpn129A4.js";
-import { t as registerCleanup } from "./wizard-abort-HDbP3YcS.js";
-import { c as REMARK_INSTRUCTION, f as gatewayAuth, i as gatewayApiFor, l as RESUME_INSTRUCTION, n as buildGatewayModel, p as isPastRefresh, s as AgentSignals, u as buildWizardPropertiesBlob } from "./gateway-CVU1G0H3.js";
-import { i as modelCapabilities, o as triageModelFor } from "./models-DnAY67Lg.js";
-import { _ as coerceAuditChecks, h as AUDIT_CHECKS_FILE, l as prewarmYaraScanner, n as createPostToolUseYaraHooks, p as scanInstalledSkill, r as createPreToolUseYaraHooks } from "./yara-hooks-DCfROpZt.js";
-import { l as buildOrchestratorTools, v as makeMutex, y as writeJsonAtomic } from "./queue-tools-B7_aCyd-.js";
+import { a as getLogFilePath, o as initLogFile, r as debug, s as logToFile, v as runtimeEnv } from "./debug-DyARf5TF.js";
+import { Y as WIZARD_REMARK_EVENT_NAME, c as CONTEXT_MILL_URL, et as wizardUserAgentForProgram, o as AWS_SKILLS_BASE_URL } from "./constants-DO4X70po.js";
+import { n as analytics } from "./analytics-B6q5PN7a.js";
+import { i as classifyAuthFailure } from "./errors-C2domSkK.js";
+import { a as safeReadFile, i as readProjectFile, o as walkProjectFiles } from "./bounded-fs-CC_NDtoP.js";
+import { t as registerCleanup } from "./wizard-abort-DBKtfnBR.js";
+import { c as REMARK_INSTRUCTION, f as gatewayAuth, i as gatewayApiFor, l as RESUME_INSTRUCTION, n as buildGatewayModel, p as isPastRefresh, s as AgentSignals, u as buildWizardPropertiesBlob } from "./gateway-BmjYUSua.js";
+import { i as modelCapabilities, o as triageModelFor } from "./models-Dba8ITeo.js";
+import { _ as coerceAuditChecks, h as AUDIT_CHECKS_FILE, l as prewarmYaraScanner, n as createPostToolUseYaraHooks, p as scanInstalledSkill, r as createPreToolUseYaraHooks } from "./yara-hooks-C3L6lBij.js";
+import { l as buildOrchestratorTools, v as makeMutex, y as writeJsonAtomic } from "./queue-tools-knnPQP0e.js";
 import { createRequire } from "node:module";
 import * as fs$1 from "fs";
 import fs from "fs";
@@ -16,11 +15,14 @@ import path from "path";
 import path$1 from "node:path";
 import { spawnSync } from "node:child_process";
 import { closeSync, constants, fchmodSync, lstatSync, openSync, renameSync, unlinkSync, writeSync } from "node:fs";
-import { randomBytes, randomUUID } from "node:crypto";
-import { z } from "zod";
-import { randomUUID as randomUUID$1 } from "crypto";
+import { randomUUID } from "crypto";
+import { randomBytes, randomUUID as randomUUID$1 } from "node:crypto";
 import * as os from "os";
 import { unzipSync } from "fflate";
+import { z } from "zod";
+//#region \0rolldown/runtime.js
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+//#endregion
 //#region src/agent/triage-provider.ts
 const TRIAGE_MAX_TOKENS = 16384;
 const TRIAGE_TIMEOUT_MS = 2e4;
@@ -71,6 +73,34 @@ function createTriageLLMProvider(auth, harness) {
 		}
 	};
 }
+//#endregion
+//#region src/shared/ask-policy.ts
+/**
+* Decide whether the `wizard_ask` overlay should be wired for this run.
+* Disabled in non-interactive modes (CI, signup) — there's no human to
+* answer. Per-program disabling is done by adding WIZARD_ASK_TOOL_NAME to
+* the program's `disallowedTools` so the SDK rejects calls outright.
+* Extracted so the policy can be unit-tested directly.
+*
+* `e2eAsk` is the one escape hatch. The e2e harness runs a `ci`
+* session, but it does have an answerer — the driver loop answers each
+* `wizard_ask` batch from the program's e2e profile. Without the flag the
+* agent-in-the-loop layer (the ask bridge in both sequence arms, and the
+* orchestrator's seeded warehouse task) stays unreachable from a test.
+*
+* Only the e2e TUI host sets the flag, from the `E2E_ASK` env var. No CLI flag
+* populates it, so plain `--ci` and `--signup` runs behave exactly as before.
+*/
+function shouldDisableAsk(flags) {
+	return (flags.ci || flags.signup) && !flags.e2eAsk;
+}
+/**
+* The longer per-question timeout, for asks that send the user on an errand —
+* open a database console, mint a restricted API key. The default above is
+* sized for a question answerable from memory and expires long before an
+* errand is done.
+*/
+const LONGER_ASK_TIMEOUT_MS = 1200 * 1e3;
 /** A scan retains at most this many distinct key names. */
 const MAX_ENV_KEY_SET = 5e3;
 /** Files whose names start with `.env` carry env keys (`.env.local`, `.env.production`, …). */
@@ -727,13 +757,6 @@ function evaluateBashCommand(rawCommand) {
 */
 /** Sentinel returned for unanswered fields on cancellation or timeout. */
 const CANCELLED_SENTINEL = "__cancelled__";
-/**
-* The longer per-question timeout, for asks that send the user on an errand —
-* open a database console, mint a restricted API key. The default above is
-* sized for a question answerable from memory and expires long before an
-* errand is done.
-*/
-const LONGER_ASK_TIMEOUT_MS = 1200 * 1e3;
 function buildCancelledAnswers(questions) {
 	const out = {};
 	for (const q of questions) out[q.id] = CANCELLED_SENTINEL;
@@ -758,7 +781,7 @@ function createWizardAskBridge(opts) {
 				timedOut: false
 			};
 			const pending = {
-				id: randomUUID$1(),
+				id: randomUUID(),
 				questions,
 				source: opts.getSource(),
 				richLinks: opts.richLinks ?? false,
@@ -769,13 +792,21 @@ function createWizardAskBridge(opts) {
 			const controller = new AbortController();
 			let timer;
 			let timedOut = false;
+			let settled = false;
+			let answeredCount = 0;
 			let cancelForAbort;
+			let armTimeout = () => void 0;
 			const timeoutPromise = new Promise((resolve) => {
-				timer = setTimeout(() => {
-					timedOut = true;
-					resolve(buildCancelledAnswers(questions));
-					controller.abort();
-				}, timeoutMs);
+				armTimeout = () => {
+					if (settled) return;
+					if (timer) clearTimeout(timer);
+					timer = setTimeout(() => {
+						timedOut = true;
+						resolve(buildCancelledAnswers(questions));
+						controller.abort();
+					}, timeoutMs);
+				};
+				armTimeout();
 			});
 			const aborted = new Promise((resolve) => {
 				cancelForAbort = () => {
@@ -786,7 +817,13 @@ function createWizardAskBridge(opts) {
 			});
 			try {
 				const answers = await Promise.race([
-					opts.showQuestion(pending, { signal: controller.signal }),
+					opts.showQuestion(pending, {
+						signal: controller.signal,
+						onAnswer: () => {
+							answeredCount += 1;
+							armTimeout();
+						}
+					}),
 					timeoutPromise,
 					aborted
 				]);
@@ -795,6 +832,7 @@ function createWizardAskBridge(opts) {
 					source: pending.source,
 					subject,
 					question_count: questions.length,
+					questions_answered: answeredCount,
 					duration_ms: durationMs,
 					timed_out: timedOut
 				});
@@ -809,6 +847,7 @@ function createWizardAskBridge(opts) {
 					timedOut
 				};
 			} finally {
+				settled = true;
 				if (timer) clearTimeout(timer);
 				if (cancelForAbort) opts.signal?.removeEventListener("abort", cancelForAbort);
 				pendingQuestions.delete(pending.id);
@@ -1629,8 +1668,18 @@ const WIZARD_TOOL_NAMES = {
 //#region src/agent/tools/handoff.ts
 const MAX_HANDOFF_TEXT_CHARS = 64 * 1024;
 const PUBLISH_HANDOFF_TOOL_NAME = "publish_handoff";
-/** Shared between the MCP server and the pi facade so the contract can't drift. */
-const PUBLISH_HANDOFF_DESCRIPTION = "Publish the handoff document — the full markdown report of what this run did — to the wizard session. Call it exactly once, at the end of the run, passing the complete report as `content`. This call is the required way to deliver the report to the user; do not write the report to a file yourself.";
+/**
+* Shared between the MCP server and the pi facade so the contract can't drift.
+*
+* Naming who publishes is the load-bearing part: every task of an orchestrated
+* run holds this tool, and "call it at the end of the run to deliver the
+* report" is an instruction all of them can follow — so a run published one
+* full report per step, each replaced by the next, and a step that read the
+* call as its own finish skipped `complete_task` and was restarted.
+*/
+const PUBLISH_HANDOFF_DESCRIPTION = "Publish the handoff document — the full markdown report of what the whole run did — to the wizard session. A run publishes once: call it only when your own instructions ask you to write that report, passing the complete report as `content`, and never write the report to a file yourself. It is not how you report your own work — in a run made of several tasks each step finishes with complete_task, and a step that was not asked for the run report leaves this one uncalled, because the section it owns travels in its handoff.";
+/** Appended for a task agent: the reminder lands as it decides it has finished. */
+const TASK_REPORTING_NOTE = " This does not report your task: call complete_task to finish.";
 const PUBLISH_HANDOFF_CONTENT_DESCRIPTION = "The complete handoff report as markdown, starting with an H1 heading.";
 /**
 * Write the handoff report to the host-designated `targetPath`.
@@ -1692,7 +1741,7 @@ function writeHandoffFileAtomically(targetPath, text) {
 		};
 	}
 }
-function publishHandoff(content, emit) {
+function publishHandoff(content, emit, opts = {}) {
 	if (content.trim() === "") {
 		analytics.wizardCapture("handoff published", {
 			handoff_ok: false,
@@ -1731,7 +1780,7 @@ function publishHandoff(content, emit) {
 	if (handoffOutputError) notes.push(`host output write failed: ${handoffOutputError}`);
 	return {
 		ok: true,
-		message: `Handoff published (${text.length} chars${notes.length > 0 ? `, ${notes.join("; ")}` : ""}).`
+		message: `Handoff published (${text.length} chars${notes.length > 0 ? `, ${notes.join("; ")}` : ""}).${opts.taskAgent ? TASK_REPORTING_NOTE : ""}`
 	};
 }
 //#endregion
@@ -1755,7 +1804,7 @@ function createSecretVault() {
 	const store = /* @__PURE__ */ new Map();
 	return {
 		put(value, meta) {
-			const ref = `${REF_PREFIX}${randomUUID$1()}`;
+			const ref = `${REF_PREFIX}${randomUUID()}`;
 			store.set(ref, {
 				value,
 				meta: {
@@ -2104,7 +2153,7 @@ async function createWizardToolsServer(options) {
 				}
 			}),
 			tool(PUBLISH_HANDOFF_TOOL_NAME, PUBLISH_HANDOFF_DESCRIPTION, { content: z.string().describe(PUBLISH_HANDOFF_CONTENT_DESCRIPTION) }, (args) => {
-				const result = publishHandoff(args.content, emit);
+				const result = publishHandoff(args.content, emit, { taskAgent: orchestrator?.currentTaskId !== void 0 });
 				logToFile(`publish_handoff: ${result.message}`);
 				return {
 					content: [{
@@ -3807,11 +3856,11 @@ function handleTaskCreate(block, store) {
 	if (!input?.subject) return;
 	let source = taskSources.get(store.tasks);
 	if (!source) {
-		source = randomUUID();
+		source = randomUUID$1();
 		taskSources.set(store.tasks, source);
 	}
 	store.tasks.set(block.id, {
-		id: randomUUID(),
+		id: randomUUID$1(),
 		source,
 		content: input.subject,
 		status: "pending",
@@ -4075,6 +4124,6 @@ function handleSDKMessage(message, options, spinner, signals, emit, receivedSucc
 	}
 }
 //#endregion
-export { vaultSensitiveAnswers as $, CHECK_ENV_KEYS_FILE_PATH_DESCRIPTION as A, describeAskCancellation as B, AUDIT_ADD_CHECKS_PARAM_DESCRIPTION as C, AUDIT_SEED_CHECKS_PARAM_DESCRIPTION as D, AUDIT_SEED_CHECKS_DESCRIPTION as E, WIZARD_ASK_TOOL_DESCRIPTION as F, mergeEnvValues as G, ensureGitignoreCoverage as H, WIZARD_TOOL_NAMES as I, resolveAuditChecks as J, normaliseAskSubject as K, addAuditChecks as L, WIZARD_ASK_KIND_DESCRIPTION as M, WIZARD_ASK_SENSITIVE_DESCRIPTION as N, AUDIT_STATUSES as O, WIZARD_ASK_SUBJECT_DESCRIPTION as P, templateEnvWriteRefusal as Q, checkEnvKeys as R, AUDIT_ADD_CHECKS_DESCRIPTION as S, AUDIT_RESOLVE_CHECKS_PARAM_DESCRIPTION as T, installSkillById as U, downloadSkill as V, legacyKeyNameRefusal as W, resolveEnvSecretRefs as X, resolveEnvPath as Y, seedAuditChecks as Z, createSecretVault as _, wizardCanUseTool as a, MAX_ENV_KEY_SET as at, PUBLISH_HANDOFF_TOOL_NAME as b, checkAllSettingsConflicts as c, toPromptSafeRelativePath as ct, restoreClaudeSettings as d, fetchSkillMenu as et, sanitizeAgentSubprocessEnv as f, assembleCommandments as g, markGrantRevoked as h, runAgent as i, isFullyCancelled as it, ENV_FILE_PATH_DESCRIPTION as j, CHECK_ENV_KEYS_DESCRIPTION as k, classifySettingsConflicts as l, createTriageLLMProvider as lt, isGrantRevoked as m, buildRunTags as n, LONGER_ASK_TIMEOUT_MS as nt, createIsolatedAgentConfigDir as o, isEnvFileName as ot, AgentOutputSignals as p, resolveAskQuestionKinds as q, initializeAgent as r, createWizardAskBridge as rt, backupAndFixClaudeSettings as s, parseEnvKeyNames as st, buildAgentEnv as t, fetchWithRetry as tt, recoverOrphanedSettingsBackups as u, PUBLISH_HANDOFF_CONTENT_DESCRIPTION as v, AUDIT_RESOLVE_CHECKS_DESCRIPTION as w, publishHandoff as x, PUBLISH_HANDOFF_DESCRIPTION as y, createAskAccounting as z };
+export { vaultSensitiveAnswers as $, CHECK_ENV_KEYS_FILE_PATH_DESCRIPTION as A, describeAskCancellation as B, AUDIT_ADD_CHECKS_PARAM_DESCRIPTION as C, AUDIT_SEED_CHECKS_PARAM_DESCRIPTION as D, AUDIT_SEED_CHECKS_DESCRIPTION as E, WIZARD_ASK_TOOL_DESCRIPTION as F, mergeEnvValues as G, ensureGitignoreCoverage as H, WIZARD_TOOL_NAMES as I, resolveAuditChecks as J, normaliseAskSubject as K, addAuditChecks as L, WIZARD_ASK_KIND_DESCRIPTION as M, WIZARD_ASK_SENSITIVE_DESCRIPTION as N, AUDIT_STATUSES as O, WIZARD_ASK_SUBJECT_DESCRIPTION as P, templateEnvWriteRefusal as Q, checkEnvKeys as R, AUDIT_ADD_CHECKS_DESCRIPTION as S, AUDIT_RESOLVE_CHECKS_PARAM_DESCRIPTION as T, installSkillById as U, downloadSkill as V, legacyKeyNameRefusal as W, resolveEnvSecretRefs as X, resolveEnvPath as Y, seedAuditChecks as Z, createSecretVault as _, wizardCanUseTool as a, isEnvFileName as at, PUBLISH_HANDOFF_TOOL_NAME as b, checkAllSettingsConflicts as c, LONGER_ASK_TIMEOUT_MS as ct, restoreClaudeSettings as d, fetchSkillMenu as et, sanitizeAgentSubprocessEnv as f, assembleCommandments as g, markGrantRevoked as h, runAgent as i, MAX_ENV_KEY_SET as it, ENV_FILE_PATH_DESCRIPTION as j, CHECK_ENV_KEYS_DESCRIPTION as k, classifySettingsConflicts as l, shouldDisableAsk as lt, isGrantRevoked as m, buildRunTags as n, createWizardAskBridge as nt, createIsolatedAgentConfigDir as o, parseEnvKeyNames as ot, AgentOutputSignals as p, resolveAskQuestionKinds as q, initializeAgent as r, isFullyCancelled as rt, backupAndFixClaudeSettings as s, toPromptSafeRelativePath as st, buildAgentEnv as t, fetchWithRetry as tt, recoverOrphanedSettingsBackups as u, createTriageLLMProvider as ut, PUBLISH_HANDOFF_CONTENT_DESCRIPTION as v, AUDIT_RESOLVE_CHECKS_DESCRIPTION as w, publishHandoff as x, PUBLISH_HANDOFF_DESCRIPTION as y, createAskAccounting as z };
 
-//# sourceMappingURL=agent-interface-BXvmAm4c.js.map
+//# sourceMappingURL=agent-interface-CzyCmp7q.js.map