@posthog/wizard 2.80.1 → 2.81.0

package/dist/{subagent-CnFvAq6E.js → subagent-DR5caRzL.js}

@@ -1,5 +1,5 @@
-import { o as logToFile } from "./debug-BfQPD2Hg.js";
-import { a as gatewayTerminalFailure } from "./gateway-D3gIlR6b.js";
+import { o as logToFile } from "./debug-sB20p-Ek.js";
+import { a as gatewayTerminalFailure } from "./gateway-Dg4Fm-nC.js";
 import { Type } from "typebox";
 import { defineTool } from "@earendil-works/pi-coding-agent";
 //#region src/agent/runner/harness/pi/subagent.ts
@@ -10,10 +10,10 @@ import { defineTool } from "@earendil-works/pi-coding-agent";
 * about (it can't propagate the parent's disallowedTools into subagents).
 *
 * Controls on every child:
-*  - the SAME security extension (canUseTool + YARA, fail-closed) — shared state,
-*    so the child shares the parent's tool-call cap and violation latch;
-*  - a read-only built-in toolset (read/grep/find/ls + allowlisted bash) — no
-*    write/edit, so a subagent can research but never mutate the project;
+*  - the parent's subagent security gate (canUseTool + YARA, fail-closed, no
+*    `rm`) — shared state, so the child shares the tool-call cap and latch;
+*  - a read-only built-in toolset (read/grep/find/ls) plus allowlisted bash —
+*    no write/edit tools;
 *  - no custom tools — no .env writes, and crucially no `dispatch_agent`, so a
 *    child cannot recurse (depth is hard-capped at 1).
 */
@@ -110,4 +110,4 @@ function createDispatchAgentTool(ctx) {
 //#endregion
 export { createDispatchAgentTool };
 
-//# sourceMappingURL=subagent-CnFvAq6E.js.map
+//# sourceMappingURL=subagent-DR5caRzL.js.map

package/dist/subagent-DR5caRzL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent-DR5caRzL.js","names":[],"sources":["../src/agent/runner/harness/pi/subagent.ts"],"sourcesContent":["/**\n * Controlled subagent dispatch for pi (#526). pi has no native subagent\n * mechanism, so a subagent is a nested `createAgentSession` we construct — which\n * means WE decide its powers, closing the leak the claude-agent-sdk path warns\n * about (it can't propagate the parent's disallowedTools into subagents).\n *\n * Controls on every child:\n *  - the parent's subagent security gate (canUseTool + YARA, fail-closed, no\n *    `rm`) — shared state, so the child shares the tool-call cap and latch;\n *  - a read-only built-in toolset (read/grep/find/ls) plus allowlisted bash —\n *    no write/edit tools;\n *  - no custom tools — no .env writes, and crucially no `dispatch_agent`, so a\n *    child cannot recurse (depth is hard-capped at 1).\n */\n\nimport { Type } from 'typebox';\nimport { defineTool } from '@earendil-works/pi-coding-agent';\nimport type { ToolDefinition } from '@earendil-works/pi-coding-agent';\nimport { logToFile } from '@utils/debug';\nimport { gatewayTerminalFailure } from './gateway';\nimport type { SubagentSecurityFactory } from './security';\n\n/**\n * Read-only built-ins a subagent may use. bash is supplied separately as the\n * parent's env-scrubbed tool (below), not the built-in, so a subagent's\n * subprocesses are locked down too.\n */\nconst SUBAGENT_TOOLS = ['read', 'grep', 'find', 'ls'];\n\nconst SUBAGENT_SYSTEM_PROMPT = [\n  'You are a read-only research subagent for the PostHog wizard.',\n  'You can read and search files and run safe build/inspect shell commands.',\n  'You cannot edit files, modify .env, or dispatch further subagents.',\n  'Investigate the task you are given and report concise findings as your final message.',\n].join('\\n');\n\nfunction text(s: string): {\n  content: [{ type: 'text'; text: string }];\n  details: unknown;\n} {\n  return { content: [{ type: 'text', text: s }], details: {} };\n}\n\nfunction extractText(message: unknown): string {\n  const content = (message as { content?: unknown })?.content;\n  if (typeof content === 'string') return content;\n  if (Array.isArray(content)) {\n    return content\n      .filter((c): c is { type: string; text: string } => {\n        const b = c as { type?: string; text?: unknown };\n        return b?.type === 'text' && typeof b.text === 'string';\n      })\n      .map((c) => c.text)\n      .join('');\n  }\n  return '';\n}\n\nexport interface SubagentContext {\n  /** Resolved gateway model (same as the parent). */\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  model: import('@earendil-works/pi-ai').Model<any>;\n  /** Registry holding the gateway provider. */\n  modelRegistry: import('@earendil-works/pi-coding-agent').ModelRegistry;\n  cwd: string;\n  agentDir: string;\n  /** The parent's subagent gate: the same fence and shared state, with no rm. */\n  securityFactory: SubagentSecurityFactory;\n  /** The parent's env-scrubbed bash, so a subagent's subprocesses are locked down too. */\n  bashTool: ToolDefinition;\n  /** pi SDK entrypoints, already imported by the backend. */\n  sdk: {\n    createAgentSession: typeof import('@earendil-works/pi-coding-agent')['createAgentSession'];\n    DefaultResourceLoader: typeof import('@earendil-works/pi-coding-agent')['DefaultResourceLoader'];\n    SessionManager: typeof import('@earendil-works/pi-coding-agent')['SessionManager'];\n  };\n}\n\nexport function createDispatchAgentTool(ctx: SubagentContext): ToolDefinition {\n  return defineTool({\n    name: 'dispatch_agent',\n    label: 'Dispatch subagent',\n    description:\n      'Delegate a focused, read-only research subtask to a subagent (e.g. \"find where events are captured\"). The subagent can read/search files and run safe shell, but CANNOT edit files, change .env, or dispatch further subagents. Returns its findings.',\n    promptSnippet:\n      'dispatch_agent(description, prompt) — delegate a read-only research subtask',\n    parameters: Type.Object({\n      description: Type.String({ description: 'Short label for the subtask' }),\n      prompt: Type.String({ description: 'Full instruction for the subagent' }),\n    }),\n    // eslint-disable-next-line @typescript-eslint/require-await -- pi tool contract returns a Promise\n    async execute(_id, args) {\n      const { createAgentSession, DefaultResourceLoader, SessionManager } =\n        ctx.sdk;\n\n      const loader = new DefaultResourceLoader({\n        cwd: ctx.cwd,\n        agentDir: ctx.agentDir,\n        systemPrompt: SUBAGENT_SYSTEM_PROMPT,\n        noExtensions: true,\n        noSkills: true,\n        noContextFiles: true,\n        noPromptTemplates: true,\n        noThemes: true,\n        extensionFactories: [ctx.securityFactory as (pi: unknown) => void],\n      });\n      await loader.reload();\n\n      const { session: child } = await createAgentSession({\n        model: ctx.model,\n        modelRegistry: ctx.modelRegistry,\n        cwd: ctx.cwd,\n        sessionManager: SessionManager.inMemory(ctx.cwd),\n        resourceLoader: loader,\n        tools: SUBAGENT_TOOLS, // read-only built-ins; no write/edit, no dispatch_agent\n        customTools: [ctx.bashTool], // env-scrubbed bash only (still allowlist-fenced)\n      });\n\n      let result = '';\n      let finalTurn:\n        | {\n            stopReason?: string;\n            errorMessage?: string;\n            diagnostics?: {\n              error?: { name?: string; code?: string | number };\n            }[];\n          }\n        | undefined;\n      const unsub = child.subscribe((e) => {\n        if (e.type === 'message_end') {\n          if ((e.message as { role?: string })?.role === 'assistant')\n            finalTurn = e.message as typeof finalTurn;\n          const t = extractText(e.message).trim();\n          if (t) result = t;\n        }\n      });\n      logToFile(`[pi] subagent dispatch: ${args.description}`);\n      try {\n        await child.prompt(args.prompt);\n        const failure = gatewayTerminalFailure(finalTurn);\n        if (failure) throw new Error(`Subagent failed: ${failure.message}`);\n      } finally {\n        unsub();\n      }\n      logToFile(`[pi] subagent \"${args.description}\" → ${result.length} chars`);\n      return text(result || 'Subagent completed with no textual result.');\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA2BA,MAAM,iBAAiB;CAAC;CAAQ;CAAQ;CAAQ;CAAK;AAErD,MAAM,yBAAyB;CAC7B;CACA;CACA;CACA;CACD,CAAC,KAAK,KAAK;AAEZ,SAAS,KAAK,GAGZ;AACA,QAAO;EAAE,SAAS,CAAC;GAAE,MAAM;GAAQ,MAAM;GAAG,CAAC;EAAE,SAAS,EAAE;EAAE;;AAG9D,SAAS,YAAY,SAA0B;CAC7C,MAAM,UAAW,SAAmC;AACpD,KAAI,OAAO,YAAY,SAAU,QAAO;AACxC,KAAI,MAAM,QAAQ,QAAQ,CACxB,QAAO,QACJ,QAAQ,MAA2C;EAClD,MAAM,IAAI;AACV,SAAO,GAAG,SAAS,UAAU,OAAO,EAAE,SAAS;GAC/C,CACD,KAAK,MAAM,EAAE,KAAK,CAClB,KAAK,GAAG;AAEb,QAAO;;AAuBT,SAAgB,wBAAwB,KAAsC;AAC5E,QAAO,WAAW;EAChB,MAAM;EACN,OAAO;EACP,aACE;EACF,eACE;EACF,YAAY,KAAK,OAAO;GACtB,aAAa,KAAK,OAAO,EAAE,aAAa,+BAA+B,CAAC;GACxE,QAAQ,KAAK,OAAO,EAAE,aAAa,qCAAqC,CAAC;GAC1E,CAAC;EAEF,MAAM,QAAQ,KAAK,MAAM;GACvB,MAAM,EAAE,oBAAoB,uBAAuB,mBACjD,IAAI;GAEN,MAAM,SAAS,IAAI,sBAAsB;IACvC,KAAK,IAAI;IACT,UAAU,IAAI;IACd,cAAc;IACd,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,UAAU;IACV,oBAAoB,CAAC,IAAI,gBAAyC;IACnE,CAAC;AACF,SAAM,OAAO,QAAQ;GAErB,MAAM,EAAE,SAAS,UAAU,MAAM,mBAAmB;IAClD,OAAO,IAAI;IACX,eAAe,IAAI;IACnB,KAAK,IAAI;IACT,gBAAgB,eAAe,SAAS,IAAI,IAAI;IAChD,gBAAgB;IAChB,OAAO;IACP,aAAa,CAAC,IAAI,SAAS;IAC5B,CAAC;GAEF,IAAI,SAAS;GACb,IAAI;GASJ,MAAM,QAAQ,MAAM,WAAW,MAAM;AACnC,QAAI,EAAE,SAAS,eAAe;AAC5B,SAAK,EAAE,SAA+B,SAAS,YAC7C,aAAY,EAAE;KAChB,MAAM,IAAI,YAAY,EAAE,QAAQ,CAAC,MAAM;AACvC,SAAI,EAAG,UAAS;;KAElB;AACF,aAAU,2BAA2B,KAAK,cAAc;AACxD,OAAI;AACF,UAAM,MAAM,OAAO,KAAK,OAAO;IAC/B,MAAM,UAAU,uBAAuB,UAAU;AACjD,QAAI,QAAS,OAAM,IAAI,MAAM,oBAAoB,QAAQ,UAAU;aAC3D;AACR,WAAO;;AAET,aAAU,kBAAkB,KAAK,YAAY,MAAM,OAAO,OAAO,QAAQ;AACzE,UAAO,KAAK,UAAU,6CAA6C;;EAEtE,CAAC"}

package/dist/{task-BOScSm4W.js → task-C1qKgsAf.js}

@@ -1,13 +1,13 @@
-import { n as ErrorCodes } from "./emit-RfAewcWv.js";
-import { o as logToFile } from "./debug-BfQPD2Hg.js";
-import { $ as WIZARD_REMARK_EVENT_NAME, it as wizardUserAgentForProgram, n as analytics } from "./analytics-D21z3E5l.js";
-import { t as classifyRunFailure } from "./errors-CHrJzAZb.js";
-import { n as currentAccessToken } from "./oauth-session-Dde79Ycm.js";
-import { c as REMARK_INSTRUCTION, d as gatewayAuth, o as withGatewayRemint, r as buildGatewayProvider, t as GATEWAY_PROVIDER } from "./gateway-D3gIlR6b.js";
-import { h as AgentOutputSignals, v as assembleCommandments } from "./agent-interface-CemBvTAA.js";
-import { c as runErrorType, i as lastStatusLine, l as createAioCapture, n as buildScrubbedEnv, o as withMode, r as extractText, s as bindPiCancellation, t as applyOutroMarkers } from "./pi-cM_4Gd_9.js";
-import { g as TaskStatus } from "./queue-tools-BIZSJyt6.js";
-import { c as queueTools, l as renderToolInventory, r as allowsPostHogMcp } from "./agent-prompt-loader-DPnj6SwU.js";
+import { n as ErrorCodes } from "./emit-BqLCdV8Y.js";
+import { o as logToFile } from "./debug-sB20p-Ek.js";
+import { $ as WIZARD_REMARK_EVENT_NAME, it as wizardUserAgentForProgram, n as analytics } from "./analytics-CGGE7OSa.js";
+import { t as classifyRunFailure } from "./errors-DhFeR8Sp.js";
+import { n as currentAccessToken } from "./oauth-session-C2fVSGfr.js";
+import { c as REMARK_INSTRUCTION, d as gatewayAuth, o as withGatewayRemint, r as buildGatewayProvider, t as GATEWAY_PROVIDER } from "./gateway-Dg4Fm-nC.js";
+import { h as AgentOutputSignals, v as assembleCommandments } from "./agent-interface-BFzBnz10.js";
+import { c as runErrorType, i as lastStatusLine, l as createAioCapture, n as buildScrubbedEnv, o as withMode, r as extractText, s as bindPiCancellation, t as applyOutroMarkers } from "./pi-Cw7CPXSl.js";
+import { g as TaskStatus } from "./queue-tools-BQfRI_uD.js";
+import { c as queueTools, l as renderToolInventory, r as allowsPostHogMcp } from "./agent-prompt-loader-CbCW6YbP.js";
 //#region src/agent/runner/harness/pi/task.ts
 /**
 * Orchestrator-mode execution on pi: one fresh pi session per unit of work —
@@ -157,18 +157,19 @@ async function runPiTask(inputs) {
 			message: "pi: gateway model could not be resolved"
 		};
 		const askState = { pending: false };
-		const { createSecurityExtension } = await import("./security-DEH8Rn0_.js");
+		const { createSecurityExtension } = await import("./security-C36p8lu6.js");
 		const security = createSecurityExtension({
 			disallowedTools: fenceDisallowList(disallowedTools),
 			triageProvider: boot.triageProvider,
-			getWizardAskPending: () => askState.pending
+			getWizardAskPending: () => askState.pending,
+			workingDirectory: input.installDir
 		});
-		const { prewarmYaraScanner } = await import("./yara-hooks-CZ1tKxy_.js");
+		const { prewarmYaraScanner } = await import("./yara-hooks-DV4EkkZY.js");
 		prewarmYaraScanner();
 		const extensionFactories = [security.factory];
 		let posthogMcp = false;
 		if (allowsPostHogMcp(allowedTools)) try {
-			const { setupPostHogMcp } = await import("./mcp-D3Z5MXhA.js");
+			const { setupPostHogMcp } = await import("./mcp-SZcGfaOz.js");
 			const mcp = await setupPostHogMcp({
 				mcpUrl: boot.credentials.host.mcpUrl,
 				accessToken: await currentAccessToken(boot.credentials),
@@ -224,7 +225,7 @@ async function runPiTask(inputs) {
 			find: () => withMode(createFindToolDefinition(dir), "parallel"),
 			grep: () => withMode(createGrepToolDefinition(dir), "parallel")
 		}).filter(([name]) => codingTools.has(name)).map(([, make]) => make());
-		const { createWizardPiTools } = await import("./tools-Cz8tDptL.js");
+		const { createWizardPiTools } = await import("./tools-CmSMclOD.js");
 		const wizardToolNames = allowedPiWizardTools(allowedTools);
 		const wizardTools = createWizardPiTools({
 			workingDirectory: dir,
@@ -237,7 +238,7 @@ async function runPiTask(inputs) {
 				askState.pending = pending;
 			}
 		}).filter((t) => wizardToolNames.has(t.name));
-		const { createPiOrchestratorTools } = await import("./orchestrator-tools-BSNhzzkT.js");
+		const { createPiOrchestratorTools } = await import("./orchestrator-tools-BchqG7Qi.js");
 		const queueTools = createPiOrchestratorTools(orchestrator).filter((t) => orchestratorTools.has(t.name));
 		const customTools = [
 			...codingToolDefs,
@@ -433,4 +434,4 @@ async function runPiTask(inputs) {
 //#endregion
 export { runPiTask };
 
-//# sourceMappingURL=task-BOScSm4W.js.map
+//# sourceMappingURL=task-C1qKgsAf.js.map

package/dist/task-C1qKgsAf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-C1qKgsAf.js","names":[],"sources":["../src/agent/runner/harness/pi/task.ts"],"sourcesContent":["/**\n * Orchestrator-mode execution on pi: one fresh pi session per unit of work —\n * the seed plan, or one drained task. The linear pipeline's concerns (skill\n * menu, todo panel, event-plan cleanup) stay in `index.ts`; this module builds\n * the leaner per-task session: gateway model, security fence, the task's\n * allowed coding tools, the wizard env tools, and the in-process orchestrator\n * queue tools.\n *\n * The task's `allowedTools` / `disallowedTools` arrive in the wizard's tool\n * vocabulary (`Read`, `Edit`, `Glob`, …, plus MCP-qualified orchestrator names\n * from `agentRunTools`). pi is where they become real: allowed names decide\n * which pi tool definitions get registered at all, and the disallow list is\n * ALSO handed to the security fence, so a name that never got registered stays\n * blocked even if the model hallucinates it.\n *\n * Loaded lazily from `index.ts` (typebox/ESM constraint, same as tools.ts).\n */\n\nimport { logToFile } from '@utils/debug';\nimport { analytics } from '@utils/analytics';\nimport {\n  Harness,\n  Sequence,\n  WIZARD_REMARK_EVENT_NAME,\n  wizardUserAgentForProgram,\n} from '@shared/constants';\nimport {\n  allowsPostHogMcp,\n  queueTools,\n  renderToolInventory,\n} from '../../../agent-prompt-loader';\nimport { AgentErrorType } from '../../../agent-interface';\nimport { REMARK_INSTRUCTION } from '../../../signals';\nimport { AgentOutputSignals } from '../../../output-signals';\nimport { TaskStatus } from '../../sequence/orchestrator/queue';\nimport type { OrchestratorToolsContext } from '../../sequence/orchestrator/queue-tools';\nimport type { AgentResult, TaskRunInputs } from '../types';\nimport { gatewayAuth, type GatewayAuth } from '../../../gateway-session';\nimport { currentAccessToken } from '@shared/oauth-session';\nimport {\n  buildGatewayProvider,\n  GATEWAY_PROVIDER,\n  withGatewayRemint,\n} from './gateway';\nimport { runErrorType } from './completion';\nimport { bindPiCancellation } from './cancellation';\nimport { classifyRunFailure, ErrorCodes } from '@shared/errors';\nimport { assembleCommandments } from '../../switchboard/commandments';\nimport {\n  applyOutroMarkers,\n  buildScrubbedEnv,\n  extractText,\n  lastStatusLine,\n  withMode,\n} from './index';\nimport { createAioCapture } from '../../../aio-capture';\n\n/** wizard tool vocabulary → the pi tool definitions it unlocks. */\nconst CODING_TOOL_MAP: Record<string, readonly string[]> = {\n  Read: ['read'],\n  Edit: ['edit'],\n  Write: ['write'],\n  Bash: ['bash'],\n  Glob: ['find', 'ls'],\n  Grep: ['grep'],\n};\n\n/** `mcp__wizard-tools__wizard_ask` → `wizard_ask`; native names pass through. */\nfunction shortToolName(name: string): string {\n  return name.replace(/^mcp__.+?__/, '');\n}\n\n/**\n * The pi coding tools a task may use. An empty allow list means \"no\n * restriction\" (mirrors the SDK), so every coding tool registers.\n */\nexport function allowedPiCodingTools(\n  allowedTools: readonly string[] | undefined,\n): Set<string> {\n  const allowed = (allowedTools ?? []).map(shortToolName);\n  const names = allowed.length\n    ? allowed.flatMap((name) => CODING_TOOL_MAP[name] ?? [])\n    : Object.values(CODING_TOOL_MAP).flat();\n  return new Set(names);\n}\n\n/**\n * The orchestrator queue tools this agent gets. Everything not disallowed:\n * the seed's frontmatter disallows `complete_task` (it is not a task), a\n * task's disallows `enqueue_task` (the seed owns the graph).\n */\nexport function allowedOrchestratorTools(\n  disallowedTools: readonly string[] | undefined,\n): Set<string> {\n  return new Set(queueTools(disallowedTools ?? []));\n}\n\n/**\n * The wizard tools a task gets. Four are always on — their handlers are fenced\n * and the coding tasks depend on them. The rest are opt-in per task through\n * its frontmatter: `wizard_ask` stops the run until a person answers, and the\n * skill-menu pair (`load_skill_menu`, `install_skill`) lets a task pull its\n * own skill variant.\n */\nconst ALWAYS_ON_WIZARD_TOOLS = [\n  'check_env_keys',\n  'set_env_values',\n  'detect_package_manager',\n  'publish_handoff',\n];\n\nconst OPT_IN_WIZARD_TOOLS = [\n  'wizard_ask',\n  'load_skill_menu',\n  'install_skill',\n  // Audit programs only: they declare the ledger tools on `allowedTools`.\n  'audit_seed_checks',\n  'audit_add_checks',\n  'audit_resolve_checks',\n];\n\nexport function allowedPiWizardTools(\n  allowedTools: readonly string[] | undefined,\n): Set<string> {\n  const allowed = (allowedTools ?? []).map(shortToolName);\n  return new Set([\n    ...ALWAYS_ON_WIZARD_TOOLS,\n    ...OPT_IN_WIZARD_TOOLS.filter((tool) => allowed.includes(tool)),\n  ]);\n}\n\n/**\n * The disallow list for the security fence: the wizard-vocabulary names as\n * given (the fence translates pi built-ins to the same vocabulary) plus the\n * short names, so a disallowed orchestrator tool is blocked under the name pi\n * would call it by.\n */\nexport function fenceDisallowList(\n  disallowedTools: readonly string[] | undefined,\n): string[] {\n  const names = disallowedTools ?? [];\n  return [...new Set([...names, ...names.map(shortToolName)])];\n}\n\n/** Nudges when the session returns without the work reaching a terminal state. */\nconst MAX_TASK_NUDGES = 3;\n\nconst TASK_NUDGE =\n  'You have not called complete_task yet. Finish your task now: if the work is done, call complete_task with your handoff; if it cannot be done, call it with status \"failed\" or \"not needed\" and say why.';\n\nconst SEED_NUDGE =\n  'The queue is still empty. Seed it now with enqueue_task calls for the task graph you planned.';\n\n/** Whether this unit of work has reached its terminal state. */\nfunction isSettled(ctx: OrchestratorToolsContext): boolean {\n  if (!ctx.currentTaskId) {\n    // The seed's job is a seeded queue, not a complete_task call.\n    return ctx.store.list().length > 0;\n  }\n  const task = ctx.store.get(ctx.currentTaskId);\n  return (\n    !!task &&\n    (task.status === TaskStatus.Done ||\n      task.status === TaskStatus.Failed ||\n      task.status === TaskStatus.Skipped)\n  );\n}\n\nexport async function runPiTask(inputs: TaskRunInputs): Promise<AgentResult> {\n  if (inputs.signal?.aborted) {\n    return {\n      kind: 'abort',\n      classification: AgentErrorType.ABORT,\n      message: 'Agent run cancelled',\n    };\n  }\n  const {\n    config,\n    input,\n    boot,\n    emit,\n    prompt,\n    spinner,\n    model: modelId,\n    effort,\n    allowedTools,\n    disallowedTools,\n    askBridge,\n    orchestrator,\n    spinnerMessage,\n    successMessage,\n    errorMessage,\n    requestRemark,\n    analyticsProperties,\n  } = inputs;\n\n  if (spinnerMessage) spinner.start(spinnerMessage);\n\n  const capture = createAioCapture({\n    enabled: input.flags.captureAio,\n    projectApiKey: boot.credentials.projectApiKey,\n    apiHost: boot.credentials.host.apiHost,\n    runTags: boot.wizardMetadata,\n  });\n\n  const startTime = Date.now();\n  const signals = new AgentOutputSignals();\n  let assistantTurns = 0;\n  const runDurations = () => {\n    const durationMs = Date.now() - startTime;\n    return {\n      duration_ms: durationMs,\n      duration_seconds: Math.round(durationMs / 1000),\n    };\n  };\n  // How this task run failed: the closed AgentErrorType it is about to return.\n  // Without it every terminal path below — a security termination, a rate\n  // limit, a gateway error — arrived as the same unlabelled event, so a task\n  // agent that died could be counted but not diagnosed. A security stop is not\n  // an error, hence \"failure mode\" over \"error\".\n  //\n  // Not `reason`: the linear sequence emits this same event with a `reason`\n  // holding the agent's free-text [ABORT] string, and one property cannot be\n  // both a closed enum and unbounded prose without making either unreadable.\n  const captureAborted = (failureMode: AgentErrorType) =>\n    analytics.wizardCapture('agent aborted', {\n      failure_mode: failureMode,\n      ...runDurations(),\n      model: modelId,\n      ...analyticsProperties,\n    });\n\n  let mcpCleanup: (() => void) | undefined;\n  let aioFailed = true;\n  let cancellation: ReturnType<typeof bindPiCancellation> | undefined;\n  try {\n    const sdk = await import('@earendil-works/pi-coding-agent');\n    const {\n      createAgentSession,\n      DefaultResourceLoader,\n      SessionManager,\n      AuthStorage,\n      ModelRegistry,\n      getAgentDir,\n      createLsToolDefinition,\n      createFindToolDefinition,\n      createGrepToolDefinition,\n      createBashToolDefinition,\n      createReadToolDefinition,\n      createEditToolDefinition,\n      createWriteToolDefinition,\n    } = sdk;\n\n    // Reads the live OAuth token, so a mid-run rotation re-mints on the new one.\n    const refreshAuth = async () =>\n      gatewayAuth(\n        boot.credentials.host,\n        await currentAccessToken(boot.credentials),\n        boot.programId,\n      );\n    const auth = await refreshAuth();\n    const providerInputs = (current: GatewayAuth) => ({\n      gatewayUrl: current.gatewayUrl,\n      accessToken: current.token,\n      teamId: current.teamId,\n      wizardMetadata: boot.wizardMetadata,\n      wizardFlags: boot.wizardFlags,\n      modelId,\n      // Per-task agents own their effort via the prompt frontmatter, falling\n      // back to the model table.\n      effort,\n    });\n    const { provider, caps } = buildGatewayProvider(providerInputs(auth));\n    const registry = ModelRegistry.inMemory(AuthStorage.create());\n    registry.registerProvider(GATEWAY_PROVIDER, provider as never);\n    const model = registry.find(GATEWAY_PROVIDER, modelId);\n    if (!model) {\n      return {\n        kind: 'failure',\n        classification: AgentErrorType.API_ERROR,\n        message: 'pi: gateway model could not be resolved',\n      };\n    }\n\n    // Shared flag: true while a wizard_ask overlay is open. The ask tool sets\n    // it (onAskPendingChange, below); the security fence reads it to pause\n    // Write/Edit until the answer comes back. Wired the same way as the linear\n    // pi run — without it the warehouse task could mutate files while its\n    // credential prompt sits open (up to LONGER_ASK_TIMEOUT_MS).\n    const askState = { pending: false };\n\n    // The same fail-closed fence as the linear run, with the task's disallow\n    // list layered in (both the wizard-vocabulary and pi-short names).\n    const { createSecurityExtension } = await import('./security');\n    const security = createSecurityExtension({\n      disallowedTools: fenceDisallowList(disallowedTools),\n      triageProvider: boot.triageProvider,\n      getWizardAskPending: () => askState.pending,\n      workingDirectory: input.installDir,\n    });\n    const { prewarmYaraScanner } = await import('../../../yara-hooks');\n    void prewarmYaraScanner();\n\n    // PostHog MCP, for the tasks whose prompt requests it. Tasks that never\n    // asked skip the handshake and never see a posthog tool.\n    const extensionFactories = [security.factory] as Array<\n      (pi: unknown) => void\n    >;\n    let posthogMcp = false;\n    if (allowsPostHogMcp(allowedTools)) {\n      try {\n        const { setupPostHogMcp } = await import('./mcp');\n        const mcp = await setupPostHogMcp({\n          mcpUrl: boot.credentials.host.mcpUrl,\n          accessToken: await currentAccessToken(boot.credentials),\n          // Same `program:` marker as the linear run, so a task's MCP writes are\n          // attributed to the program that queued it. `anthropic/index.ts` uses\n          // `programId` as the label on the task path too.\n          userAgent: wizardUserAgentForProgram(config.programId),\n        });\n        extensionFactories.push(mcp.extensionFactory);\n        mcpCleanup = mcp.cleanup;\n        posthogMcp = true;\n      } catch (err) {\n        try {\n          mcpCleanup?.();\n        } catch {\n          /* Setup cleanup is best effort. */\n        }\n        mcpCleanup = undefined;\n        // Silent here reads as a task failure minutes later: a task that asked\n        // for this tool can only skip or fail without it.\n        logToFile(`[pi-task] PostHog MCP setup skipped: ${String(err)}`);\n        analytics.wizardCapture('mcp setup failed', {\n          harness: 'pi',\n          scope: 'task',\n          error: String(err).slice(0, 300),\n        });\n      }\n    }\n\n    const codingTools = allowedPiCodingTools(allowedTools);\n    const orchestratorTools = allowedOrchestratorTools(disallowedTools);\n\n    const resourceLoader = new DefaultResourceLoader({\n      cwd: input.installDir,\n      agentDir: getAgentDir(),\n      systemPrompt: assembleCommandments({\n        program: config.programId,\n        sequence: Sequence.orchestrator,\n        harness: Harness.pi,\n        caps: { bash: codingTools.has('bash'), posthogMcp },\n      }),\n      noExtensions: true,\n      noSkills: true,\n      noContextFiles: true,\n      noPromptTemplates: true,\n      noThemes: true,\n      extensionFactories,\n    });\n    await resourceLoader.reload();\n\n    // The task's coding tools, gated by its allow list. Reads and searches run\n    // in parallel; mutating tools stay sequential. Bash subprocesses get the\n    // scrubbed env, same as the linear run.\n    const dir = input.installDir;\n    const codingToolFactories = {\n      read: () => withMode(createReadToolDefinition(dir), 'parallel'),\n      edit: () => withMode(createEditToolDefinition(dir), 'sequential'),\n      write: () => withMode(createWriteToolDefinition(dir), 'sequential'),\n      bash: () =>\n        withMode(\n          createBashToolDefinition(dir, {\n            spawnHook: (ctx) => ({ ...ctx, env: buildScrubbedEnv() }),\n          }),\n          'sequential',\n        ),\n      ls: () => withMode(createLsToolDefinition(dir), 'parallel'),\n      find: () => withMode(createFindToolDefinition(dir), 'parallel'),\n      grep: () => withMode(createGrepToolDefinition(dir), 'parallel'),\n    } as const;\n    const codingToolDefs = Object.entries(codingToolFactories)\n      .filter(([name]) => codingTools.has(name))\n      .map(([, make]) => make());\n\n    // Wizard env + package-manager tools are always on — their handlers are\n    // fenced, and init/build tasks depend on them. publish_handoff rides\n    // along (it only emits) so the report task can publish the handoff; every\n    // other task is told, on the call, that it still owes a complete_task.\n    const { createWizardPiTools } = await import('./tools');\n    const wizardToolNames = allowedPiWizardTools(allowedTools);\n    const wizardTools = createWizardPiTools({\n      workingDirectory: dir,\n      skillsBaseUrl: boot.skillsBaseUrl,\n      triageProvider: boot.triageProvider,\n      emit,\n      taskAgent: orchestrator.currentTaskId !== undefined,\n      // Present only for a task allowed to ask; without it wizard_ask errors\n      // instead of hanging on a prompt nobody will ever see.\n      askBridge,\n      // Pause Write/Edit while the ask overlay is open (see askState above).\n      onAskPendingChange: (pending) => {\n        askState.pending = pending;\n      },\n    }).filter((t) => wizardToolNames.has(t.name));\n\n    const { createPiOrchestratorTools } = await import('./orchestrator-tools');\n    const queueTools = createPiOrchestratorTools(orchestrator).filter((t) =>\n      orchestratorTools.has(t.name),\n    );\n\n    const customTools = [...codingToolDefs, ...wizardTools, ...queueTools];\n    const { session: agentSession } = await createAgentSession({\n      model,\n      modelRegistry: registry,\n      thinkingLevel: caps.thinkingLevel,\n      cwd: dir,\n      sessionManager: SessionManager.inMemory(dir),\n      resourceLoader,\n      noTools: 'builtin',\n      customTools,\n    });\n    cancellation = bindPiCancellation(inputs.signal, agentSession, (error) => {\n      logToFile(`[pi-task] abort failed: ${String(error)}`);\n    });\n    await agentSession.bindExtensions({});\n\n    // A turn that ends on a 401 from an aged bearer re-mints once and\n    // continues with the nudge the task would get anyway.\n    const turns = withGatewayRemint({\n      signal: inputs.signal,\n      session: agentSession,\n      registry,\n      auth,\n      refreshAuth,\n      providerInputs,\n      continueText: () =>\n        orchestrator.currentTaskId ? TASK_NUDGE : SEED_NUDGE,\n      onRemint: () => {\n        logToFile('[pi-task] gateway token renewed after a 401; continuing');\n        analytics.wizardCapture('gateway token reminted', { harness: 'pi' });\n      },\n    });\n\n    // The one complete list: exactly the tools registered on this session, in\n    // the names the agent will call them by. posthog_exec binds as an extension.\n    const toolNames = [\n      ...customTools.map((t) => t.name),\n      ...(posthogMcp ? ['posthog_exec'] : []),\n    ];\n    logToFile(`[pi-task] tools passed to model: ${toolNames.join(', ')}`);\n    const taskPrompt = `${prompt}\\n\\n${renderToolInventory(toolNames)}`;\n\n    const unsubscribe = agentSession.subscribe((event) => {\n      // Mirror the turn into AIO. No-op when --capture-aio is off. Runs\n      // before the role guard so the module's own filter is authoritative.\n      capture.captureFromPiMessageEndEvent(event);\n\n      switch (event.type) {\n        case 'message_end': {\n          // User prompts also emit message_end; only assistant turns count.\n          if ((event.message as { role?: string })?.role !== 'assistant') {\n            break;\n          }\n          assistantTurns += 1;\n          turns.noteAssistantTurn(event.message);\n          const assistant = extractText(event.message).trim();\n          if (assistant) {\n            logToFile(`[pi-task] assistant: ${assistant.slice(0, 1000)}`);\n            applyOutroMarkers(assistant, emit);\n            const statusText = lastStatusLine(assistant);\n            if (statusText) {\n              emit({ kind: 'status', message: statusText });\n              spinner.message(statusText);\n            }\n            for (const line of assistant.split('\\n')) signals.push(line);\n          }\n          break;\n        }\n        case 'tool_execution_start': {\n          const args = JSON.stringify(event.args ?? {}).slice(0, 200);\n          logToFile(`[pi-task] → ${event.toolName} ${args}`);\n          break;\n        }\n        case 'tool_execution_end': {\n          if (event.isError) {\n            const detail =\n              typeof event.result === 'string'\n                ? event.result\n                : JSON.stringify(event.result ?? '');\n            logToFile(`[pi-task] ✗ ${event.toolName}: ${detail.slice(0, 300)}`);\n          }\n          break;\n        }\n        default:\n          break;\n      }\n    });\n\n    // Seed AIO capture with this task's prompt — includes any handoff data\n    // from prior tasks (the orchestrator bakes it into the prompt string\n    // before it reaches this call site).\n    capture.setInitialPrompt(taskPrompt);\n\n    let terminal = turns.terminalFailure();\n    try {\n      if (inputs.signal?.aborted)\n        return {\n          kind: 'abort',\n          classification: AgentErrorType.ABORT,\n          message: 'Agent run cancelled',\n        };\n      await turns.prompt(taskPrompt);\n      terminal = turns.terminalFailure();\n\n      // pi's prompt() resolves the moment a turn carries no tool call — which\n      // an agent mid-plan does emit. While the work has not reached its\n      // terminal state (task not reported, seed queue still empty), nudge.\n      let nudges = 0;\n      while (\n        nudges < MAX_TASK_NUDGES &&\n        !security.state.criticalViolation &&\n        !inputs.signal?.aborted &&\n        !terminal &&\n        !isSettled(orchestrator)\n      ) {\n        nudges += 1;\n        logToFile(\n          `[pi-task] completion guard: not settled, nudge ${nudges}/${MAX_TASK_NUDGES}`,\n        );\n        await turns.prompt(\n          orchestrator.currentTaskId ? TASK_NUDGE : SEED_NUDGE,\n        );\n        terminal = turns.terminalFailure();\n      }\n\n      if (\n        requestRemark &&\n        !security.state.criticalViolation &&\n        !terminal &&\n        !inputs.signal?.aborted\n      ) {\n        try {\n          await agentSession.prompt(REMARK_INSTRUCTION);\n        } catch (err) {\n          logToFile(`[pi-task] remark request failed: ${String(err)}`);\n        }\n      }\n    } finally {\n      try {\n        unsubscribe();\n      } catch {\n        /* Keep the terminal result. */\n      }\n    }\n\n    if (inputs.signal?.aborted) {\n      return {\n        kind: 'abort',\n        classification: AgentErrorType.ABORT,\n        message: 'Agent run cancelled',\n      };\n    }\n\n    if (terminal && !security.state.criticalViolation) {\n      if (errorMessage || spinnerMessage)\n        spinner.stop(errorMessage ?? 'Task failed');\n      captureAborted(terminal.classification);\n      if (terminal.status === 401) {\n        return {\n          kind: 'decided_failure',\n          failure: {\n            code: ErrorCodes.AuthInvalidOrExpired,\n            message: 'Authentication failed (401)',\n            detail: { providerMessage: terminal.message },\n          },\n        };\n      }\n      return terminal.classification === AgentErrorType.ABORT\n        ? {\n            kind: 'abort',\n            classification: AgentErrorType.ABORT,\n            message: terminal.message,\n          }\n        : {\n            kind: 'failure',\n            classification: terminal.classification,\n            message: terminal.message,\n          };\n    }\n\n    if (security.state.criticalViolation) {\n      spinner.stop('Security violation detected');\n      logToFile(\n        `[pi-task] terminated: YARA violation (blocked ${security.state.blockedCount} call(s))`,\n      );\n      captureAborted(AgentErrorType.YARA_VIOLATION);\n      return { kind: 'failure', classification: AgentErrorType.YARA_VIOLATION };\n    }\n\n    const remark = signals.remark();\n    if (remark) {\n      analytics.capture(WIZARD_REMARK_EVENT_NAME, { remark });\n    }\n\n    const stats = agentSession.getSessionStats();\n    const durations = runDurations();\n    analytics.wizardCapture('agent completed', {\n      ...durations,\n      model: modelId,\n      num_turns: assistantTurns,\n      input_tokens: stats.tokens.input,\n      output_tokens: stats.tokens.output,\n      cache_creation_input_tokens: stats.tokens.cacheWrite,\n      cache_read_input_tokens: stats.tokens.cacheRead,\n      ...analyticsProperties,\n    });\n    // Per-task usage on one parseable line so a run's per-task time and cost are\n    // observable from the log, not only from analytics.\n    const taskType =\n      typeof (analyticsProperties as { task_type?: unknown })?.task_type ===\n      'string'\n        ? (analyticsProperties as { task_type: string }).task_type\n        : modelId;\n    logToFile(\n      `[pi-task] usage task=${taskType} model=${modelId} effort=${caps.thinkingLevel} dur=${durations.duration_seconds}s turns=${assistantTurns} in=${stats.tokens.input} out=${stats.tokens.output} cacheR=${stats.tokens.cacheRead} cacheW=${stats.tokens.cacheWrite}`,\n    );\n    if (successMessage) spinner.stop(successMessage);\n    aioFailed = false;\n    return { kind: 'success' };\n  } catch (err) {\n    if (inputs.signal?.aborted) {\n      return {\n        kind: 'abort',\n        classification: AgentErrorType.ABORT,\n        message: 'Agent run cancelled',\n      };\n    }\n    const message = err instanceof Error ? err.message : String(err);\n    logToFile(`[pi-task] run error: ${message}`);\n    if (errorMessage || spinnerMessage) {\n      spinner.stop(errorMessage ?? 'Task failed');\n    }\n    const coded = classifyRunFailure(err);\n    if (coded.coded && err instanceof Error) {\n      captureAborted(AgentErrorType.API_ERROR);\n      return {\n        kind: 'decided_failure',\n        failure: { code: coded.code, message: coded.message, error: err },\n      };\n    }\n    const classification = runErrorType(message);\n    captureAborted(classification);\n    return {\n      kind: 'failure',\n      classification,\n      message,\n      error: err instanceof Error ? err : undefined,\n    };\n  } finally {\n    await cancellation?.settle();\n    try {\n      mcpCleanup?.();\n    } catch {\n      /* Keep the terminal result. */\n    }\n    try {\n      capture.finishPiRun(aioFailed);\n    } catch {\n      /* Telemetry is best effort. */\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0DA,MAAM,kBAAqD;CACzD,MAAM,CAAC,OAAO;CACd,MAAM,CAAC,OAAO;CACd,OAAO,CAAC,QAAQ;CAChB,MAAM,CAAC,OAAO;CACd,MAAM,CAAC,QAAQ,KAAK;CACpB,MAAM,CAAC,OAAO;CACf;;AAGD,SAAS,cAAc,MAAsB;AAC3C,QAAO,KAAK,QAAQ,eAAe,GAAG;;;;;;AAOxC,SAAgB,qBACd,cACa;CACb,MAAM,WAAW,gBAAgB,EAAE,EAAE,IAAI,cAAc;CACvD,MAAM,QAAQ,QAAQ,SAClB,QAAQ,SAAS,SAAS,gBAAgB,SAAS,EAAE,CAAC,GACtD,OAAO,OAAO,gBAAgB,CAAC,MAAM;AACzC,QAAO,IAAI,IAAI,MAAM;;;;;;;AAQvB,SAAgB,yBACd,iBACa;AACb,QAAO,IAAI,IAAI,WAAW,mBAAmB,EAAE,CAAC,CAAC;;;;;;;;;AAUnD,MAAM,yBAAyB;CAC7B;CACA;CACA;CACA;CACD;AAED,MAAM,sBAAsB;CAC1B;CACA;CACA;CAEA;CACA;CACA;CACD;AAED,SAAgB,qBACd,cACa;CACb,MAAM,WAAW,gBAAgB,EAAE,EAAE,IAAI,cAAc;AACvD,QAAO,IAAI,IAAI,CACb,GAAG,wBACH,GAAG,oBAAoB,QAAQ,SAAS,QAAQ,SAAS,KAAK,CAAC,CAChE,CAAC;;;;;;;;AASJ,SAAgB,kBACd,iBACU;CACV,MAAM,QAAQ,mBAAmB,EAAE;AACnC,QAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,OAAO,GAAG,MAAM,IAAI,cAAc,CAAC,CAAC,CAAC;;;AAI9D,MAAM,kBAAkB;AAExB,MAAM,aACJ;AAEF,MAAM,aACJ;;AAGF,SAAS,UAAU,KAAwC;AACzD,KAAI,CAAC,IAAI,cAEP,QAAO,IAAI,MAAM,MAAM,CAAC,SAAS;CAEnC,MAAM,OAAO,IAAI,MAAM,IAAI,IAAI,cAAc;AAC7C,QACE,CAAC,CAAC,SACD,KAAK,WAAW,WAAW,QAC1B,KAAK,WAAW,WAAW,UAC3B,KAAK,WAAW,WAAW;;AAIjC,eAAsB,UAAU,QAA6C;AAC3E,KAAI,OAAO,QAAQ,QACjB,QAAO;EACL,MAAM;EACN,gBAAA;EACA,SAAS;EACV;CAEH,MAAM,EACJ,QACA,OACA,MACA,MACA,QACA,SACA,OAAO,SACP,QACA,cACA,iBACA,WACA,cACA,gBACA,gBACA,cACA,eACA,wBACE;AAEJ,KAAI,eAAgB,SAAQ,MAAM,eAAe;CAEjD,MAAM,UAAU,iBAAiB;EAC/B,SAAS,MAAM,MAAM;EACrB,eAAe,KAAK,YAAY;EAChC,SAAS,KAAK,YAAY,KAAK;EAC/B,SAAS,KAAK;EACf,CAAC;CAEF,MAAM,YAAY,KAAK,KAAK;CAC5B,MAAM,UAAU,IAAI,oBAAoB;CACxC,IAAI,iBAAiB;CACrB,MAAM,qBAAqB;EACzB,MAAM,aAAa,KAAK,KAAK,GAAG;AAChC,SAAO;GACL,aAAa;GACb,kBAAkB,KAAK,MAAM,aAAa,IAAK;GAChD;;CAWH,MAAM,kBAAkB,gBACtB,UAAU,cAAc,iBAAiB;EACvC,cAAc;EACd,GAAG,cAAc;EACjB,OAAO;EACP,GAAG;EACJ,CAAC;CAEJ,IAAI;CACJ,IAAI,YAAY;CAChB,IAAI;AACJ,KAAI;EAEF,MAAM,EACJ,oBACA,uBACA,gBACA,aACA,eACA,aACA,wBACA,0BACA,0BACA,0BACA,0BACA,0BACA,8BAdU,MAAM,OAAO;EAkBzB,MAAM,cAAc,YAClB,YACE,KAAK,YAAY,MACjB,MAAM,mBAAmB,KAAK,YAAY,EAC1C,KAAK,UACN;EACH,MAAM,OAAO,MAAM,aAAa;EAChC,MAAM,kBAAkB,aAA0B;GAChD,YAAY,QAAQ;GACpB,aAAa,QAAQ;GACrB,QAAQ,QAAQ;GAChB,gBAAgB,KAAK;GACrB,aAAa,KAAK;GAClB;GAGA;GACD;EACD,MAAM,EAAE,UAAU,SAAS,qBAAqB,eAAe,KAAK,CAAC;EACrE,MAAM,WAAW,cAAc,SAAS,YAAY,QAAQ,CAAC;AAC7D,WAAS,iBAAiB,kBAAkB,SAAkB;EAC9D,MAAM,QAAQ,SAAS,KAAK,kBAAkB,QAAQ;AACtD,MAAI,CAAC,MACH,QAAO;GACL,MAAM;GACN,gBAAA;GACA,SAAS;GACV;EAQH,MAAM,WAAW,EAAE,SAAS,OAAO;EAInC,MAAM,EAAE,4BAA4B,MAAM,OAAO;EACjD,MAAM,WAAW,wBAAwB;GACvC,iBAAiB,kBAAkB,gBAAgB;GACnD,gBAAgB,KAAK;GACrB,2BAA2B,SAAS;GACpC,kBAAkB,MAAM;GACzB,CAAC;EACF,MAAM,EAAE,uBAAuB,MAAM,OAAO;AACvC,sBAAoB;EAIzB,MAAM,qBAAqB,CAAC,SAAS,QAAQ;EAG7C,IAAI,aAAa;AACjB,MAAI,iBAAiB,aAAa,CAChC,KAAI;GACF,MAAM,EAAE,oBAAoB,MAAM,OAAO;GACzC,MAAM,MAAM,MAAM,gBAAgB;IAChC,QAAQ,KAAK,YAAY,KAAK;IAC9B,aAAa,MAAM,mBAAmB,KAAK,YAAY;IAIvD,WAAW,0BAA0B,OAAO,UAAU;IACvD,CAAC;AACF,sBAAmB,KAAK,IAAI,iBAAiB;AAC7C,gBAAa,IAAI;AACjB,gBAAa;WACN,KAAK;AACZ,OAAI;AACF,kBAAc;WACR;AAGR,gBAAa,KAAA;AAGb,aAAU,wCAAwC,OAAO,IAAI,GAAG;AAChE,aAAU,cAAc,oBAAoB;IAC1C,SAAS;IACT,OAAO;IACP,OAAO,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI;IACjC,CAAC;;EAIN,MAAM,cAAc,qBAAqB,aAAa;EACtD,MAAM,oBAAoB,yBAAyB,gBAAgB;EAEnE,MAAM,iBAAiB,IAAI,sBAAsB;GAC/C,KAAK,MAAM;GACX,UAAU,aAAa;GACvB,cAAc,qBAAqB;IACjC,SAAS,OAAO;IAChB,UAAA;IACA,SAAA;IACA,MAAM;KAAE,MAAM,YAAY,IAAI,OAAO;KAAE;KAAY;IACpD,CAAC;GACF,cAAc;GACd,UAAU;GACV,gBAAgB;GAChB,mBAAmB;GACnB,UAAU;GACV;GACD,CAAC;AACF,QAAM,eAAe,QAAQ;EAK7B,MAAM,MAAM,MAAM;EAgBlB,MAAM,iBAAiB,OAAO,QAfF;GAC1B,YAAY,SAAS,yBAAyB,IAAI,EAAE,WAAW;GAC/D,YAAY,SAAS,yBAAyB,IAAI,EAAE,aAAa;GACjE,aAAa,SAAS,0BAA0B,IAAI,EAAE,aAAa;GACnE,YACE,SACE,yBAAyB,KAAK,EAC5B,YAAY,SAAS;IAAE,GAAG;IAAK,KAAK,kBAAkB;IAAE,GACzD,CAAC,EACF,aACD;GACH,UAAU,SAAS,uBAAuB,IAAI,EAAE,WAAW;GAC3D,YAAY,SAAS,yBAAyB,IAAI,EAAE,WAAW;GAC/D,YAAY,SAAS,yBAAyB,IAAI,EAAE,WAAW;GAChE,CACyD,CACvD,QAAQ,CAAC,UAAU,YAAY,IAAI,KAAK,CAAC,CACzC,KAAK,GAAG,UAAU,MAAM,CAAC;EAM5B,MAAM,EAAE,wBAAwB,MAAM,OAAO;EAC7C,MAAM,kBAAkB,qBAAqB,aAAa;EAC1D,MAAM,cAAc,oBAAoB;GACtC,kBAAkB;GAClB,eAAe,KAAK;GACpB,gBAAgB,KAAK;GACrB;GACA,WAAW,aAAa,kBAAkB,KAAA;GAG1C;GAEA,qBAAqB,YAAY;AAC/B,aAAS,UAAU;;GAEtB,CAAC,CAAC,QAAQ,MAAM,gBAAgB,IAAI,EAAE,KAAK,CAAC;EAE7C,MAAM,EAAE,8BAA8B,MAAM,OAAO;EACnD,MAAM,aAAa,0BAA0B,aAAa,CAAC,QAAQ,MACjE,kBAAkB,IAAI,EAAE,KAAK,CAC9B;EAED,MAAM,cAAc;GAAC,GAAG;GAAgB,GAAG;GAAa,GAAG;GAAW;EACtE,MAAM,EAAE,SAAS,iBAAiB,MAAM,mBAAmB;GACzD;GACA,eAAe;GACf,eAAe,KAAK;GACpB,KAAK;GACL,gBAAgB,eAAe,SAAS,IAAI;GAC5C;GACA,SAAS;GACT;GACD,CAAC;AACF,iBAAe,mBAAmB,OAAO,QAAQ,eAAe,UAAU;AACxE,aAAU,2BAA2B,OAAO,MAAM,GAAG;IACrD;AACF,QAAM,aAAa,eAAe,EAAE,CAAC;EAIrC,MAAM,QAAQ,kBAAkB;GAC9B,QAAQ,OAAO;GACf,SAAS;GACT;GACA;GACA;GACA;GACA,oBACE,aAAa,gBAAgB,aAAa;GAC5C,gBAAgB;AACd,cAAU,0DAA0D;AACpE,cAAU,cAAc,0BAA0B,EAAE,SAAS,MAAM,CAAC;;GAEvE,CAAC;EAIF,MAAM,YAAY,CAChB,GAAG,YAAY,KAAK,MAAM,EAAE,KAAK,EACjC,GAAI,aAAa,CAAC,eAAe,GAAG,EAAE,CACvC;AACD,YAAU,oCAAoC,UAAU,KAAK,KAAK,GAAG;EACrE,MAAM,aAAa,GAAG,OAAO,MAAM,oBAAoB,UAAU;EAEjE,MAAM,cAAc,aAAa,WAAW,UAAU;AAGpD,WAAQ,6BAA6B,MAAM;AAE3C,WAAQ,MAAM,MAAd;IACE,KAAK,eAAe;AAElB,SAAK,MAAM,SAA+B,SAAS,YACjD;AAEF,uBAAkB;AAClB,WAAM,kBAAkB,MAAM,QAAQ;KACtC,MAAM,YAAY,YAAY,MAAM,QAAQ,CAAC,MAAM;AACnD,SAAI,WAAW;AACb,gBAAU,wBAAwB,UAAU,MAAM,GAAG,IAAK,GAAG;AAC7D,wBAAkB,WAAW,KAAK;MAClC,MAAM,aAAa,eAAe,UAAU;AAC5C,UAAI,YAAY;AACd,YAAK;QAAE,MAAM;QAAU,SAAS;QAAY,CAAC;AAC7C,eAAQ,QAAQ,WAAW;;AAE7B,WAAK,MAAM,QAAQ,UAAU,MAAM,KAAK,CAAE,SAAQ,KAAK,KAAK;;AAE9D;;IAEF,KAAK,wBAAwB;KAC3B,MAAM,OAAO,KAAK,UAAU,MAAM,QAAQ,EAAE,CAAC,CAAC,MAAM,GAAG,IAAI;AAC3D,eAAU,eAAe,MAAM,SAAS,GAAG,OAAO;AAClD;;IAEF,KAAK;AACH,SAAI,MAAM,SAAS;MACjB,MAAM,SACJ,OAAO,MAAM,WAAW,WACpB,MAAM,SACN,KAAK,UAAU,MAAM,UAAU,GAAG;AACxC,gBAAU,eAAe,MAAM,SAAS,IAAI,OAAO,MAAM,GAAG,IAAI,GAAG;;AAErE;IAEF,QACE;;IAEJ;AAKF,UAAQ,iBAAiB,WAAW;EAEpC,IAAI,WAAW,MAAM,iBAAiB;AACtC,MAAI;AACF,OAAI,OAAO,QAAQ,QACjB,QAAO;IACL,MAAM;IACN,gBAAA;IACA,SAAS;IACV;AACH,SAAM,MAAM,OAAO,WAAW;AAC9B,cAAW,MAAM,iBAAiB;GAKlC,IAAI,SAAS;AACb,UACE,SAAS,mBACT,CAAC,SAAS,MAAM,qBAChB,CAAC,OAAO,QAAQ,WAChB,CAAC,YACD,CAAC,UAAU,aAAa,EACxB;AACA,cAAU;AACV,cACE,kDAAkD,OAAO,GAAG,kBAC7D;AACD,UAAM,MAAM,OACV,aAAa,gBAAgB,aAAa,WAC3C;AACD,eAAW,MAAM,iBAAiB;;AAGpC,OACE,iBACA,CAAC,SAAS,MAAM,qBAChB,CAAC,YACD,CAAC,OAAO,QAAQ,QAEhB,KAAI;AACF,UAAM,aAAa,OAAO,mBAAmB;YACtC,KAAK;AACZ,cAAU,oCAAoC,OAAO,IAAI,GAAG;;YAGxD;AACR,OAAI;AACF,iBAAa;WACP;;AAKV,MAAI,OAAO,QAAQ,QACjB,QAAO;GACL,MAAM;GACN,gBAAA;GACA,SAAS;GACV;AAGH,MAAI,YAAY,CAAC,SAAS,MAAM,mBAAmB;AACjD,OAAI,gBAAgB,eAClB,SAAQ,KAAK,gBAAgB,cAAc;AAC7C,kBAAe,SAAS,eAAe;AACvC,OAAI,SAAS,WAAW,IACtB,QAAO;IACL,MAAM;IACN,SAAS;KACP,MAAM,WAAW;KACjB,SAAS;KACT,QAAQ,EAAE,iBAAiB,SAAS,SAAS;KAC9C;IACF;AAEH,UAAO,SAAS,mBAAA,iBACZ;IACE,MAAM;IACN,gBAAA;IACA,SAAS,SAAS;IACnB,GACD;IACE,MAAM;IACN,gBAAgB,SAAS;IACzB,SAAS,SAAS;IACnB;;AAGP,MAAI,SAAS,MAAM,mBAAmB;AACpC,WAAQ,KAAK,8BAA8B;AAC3C,aACE,iDAAiD,SAAS,MAAM,aAAa,WAC9E;AACD,kBAAA,wBAA6C;AAC7C,UAAO;IAAE,MAAM;IAAW,gBAAA;IAA+C;;EAG3E,MAAM,SAAS,QAAQ,QAAQ;AAC/B,MAAI,OACF,WAAU,QAAQ,0BAA0B,EAAE,QAAQ,CAAC;EAGzD,MAAM,QAAQ,aAAa,iBAAiB;EAC5C,MAAM,YAAY,cAAc;AAChC,YAAU,cAAc,mBAAmB;GACzC,GAAG;GACH,OAAO;GACP,WAAW;GACX,cAAc,MAAM,OAAO;GAC3B,eAAe,MAAM,OAAO;GAC5B,6BAA6B,MAAM,OAAO;GAC1C,yBAAyB,MAAM,OAAO;GACtC,GAAG;GACJ,CAAC;AAQF,YACE,wBALA,OAAQ,qBAAiD,cACzD,WACK,oBAA8C,YAC/C,QAE6B,SAAS,QAAQ,UAAU,KAAK,cAAc,OAAO,UAAU,iBAAiB,UAAU,eAAe,MAAM,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,OAAO,UAAU,MAAM,OAAO,UAAU,UAAU,MAAM,OAAO,aACvP;AACD,MAAI,eAAgB,SAAQ,KAAK,eAAe;AAChD,cAAY;AACZ,SAAO,EAAE,MAAM,WAAW;UACnB,KAAK;AACZ,MAAI,OAAO,QAAQ,QACjB,QAAO;GACL,MAAM;GACN,gBAAA;GACA,SAAS;GACV;EAEH,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,YAAU,wBAAwB,UAAU;AAC5C,MAAI,gBAAgB,eAClB,SAAQ,KAAK,gBAAgB,cAAc;EAE7C,MAAM,QAAQ,mBAAmB,IAAI;AACrC,MAAI,MAAM,SAAS,eAAe,OAAO;AACvC,kBAAA,mBAAwC;AACxC,UAAO;IACL,MAAM;IACN,SAAS;KAAE,MAAM,MAAM;KAAM,SAAS,MAAM;KAAS,OAAO;KAAK;IAClE;;EAEH,MAAM,iBAAiB,aAAa,QAAQ;AAC5C,iBAAe,eAAe;AAC9B,SAAO;GACL,MAAM;GACN;GACA;GACA,OAAO,eAAe,QAAQ,MAAM,KAAA;GACrC;WACO;AACR,QAAM,cAAc,QAAQ;AAC5B,MAAI;AACF,iBAAc;UACR;AAGR,MAAI;AACF,WAAQ,YAAY,UAAU;UACxB"}

package/dist/{telemetry-CP4rGicd.js → telemetry-Ch9ZJvm7.js}

@@ -1,4 +1,4 @@
-import { n as analytics } from "./analytics-D21z3E5l.js";
+import { n as analytics } from "./analytics-CGGE7OSa.js";
 //#region src/shared/utils/telemetry.ts
 function withProgress(step, callback) {
 	updateProgress(step);
@@ -10,4 +10,4 @@ function updateProgress(step) {
 //#endregion
 export { withProgress as t };
 
-//# sourceMappingURL=telemetry-CP4rGicd.js.map
+//# sourceMappingURL=telemetry-Ch9ZJvm7.js.map

package/dist/{telemetry-CP4rGicd.js.map → telemetry-Ch9ZJvm7.js.map}

@@ -1 +1 @@
-{"version":3,"file":"telemetry-CP4rGicd.js","names":[],"sources":["../src/shared/utils/telemetry.ts"],"sourcesContent":["import { analytics } from './analytics';\n\nexport function withProgress<T>(step: string, callback: () => T): T {\n  updateProgress(step);\n  return callback();\n}\n\nexport function updateProgress(step: string) {\n  analytics.setTag('progress', step);\n}\n"],"mappings":";;AAEA,SAAgB,aAAgB,MAAc,UAAsB;AAClE,gBAAe,KAAK;AACpB,QAAO,UAAU;;AAGnB,SAAgB,eAAe,MAAc;AAC3C,WAAU,OAAO,YAAY,KAAK"}
+{"version":3,"file":"telemetry-Ch9ZJvm7.js","names":[],"sources":["../src/shared/utils/telemetry.ts"],"sourcesContent":["import { analytics } from './analytics';\n\nexport function withProgress<T>(step: string, callback: () => T): T {\n  updateProgress(step);\n  return callback();\n}\n\nexport function updateProgress(step: string) {\n  analytics.setTag('progress', step);\n}\n"],"mappings":";;AAEA,SAAgB,aAAgB,MAAc,UAAsB;AAClE,gBAAe,KAAK;AACpB,QAAO,UAAU;;AAGnB,SAAgB,eAAe,MAAc;AAC3C,WAAU,OAAO,YAAY,KAAK"}

package/dist/{terminal-J3OD3dN0.js → terminal-D20JFN3J.js}

@@ -1,19 +1,23 @@
-import { d as relativeToInstallDir, i as getLogFilePath, o as logToFile } from "./debug-BfQPD2Hg.js";
-import { A as POSTHOG_APP_URL, B as REPLAY_VISION_SUPPORTED, D as Integration, E as ISSUES_URL, F as POSTHOG_PRIVACY_URL, J as WIZARD_OAUTH_SCOPES, M as POSTHOG_DOCS_URL, O as OAUTH_PORTS, P as POSTHOG_ORG_AI_SETTINGS_URL, Q as WIZARD_PROVISIONING_SCOPES, R as POSTHOG_TERMS_URL, V as SETUP_REPORT_FILE, i as sessionProperties, k as OAUTH_TIMEOUT_MS, m as DUMMY_PROJECT_API_KEY, n as analytics, nt as WIZARD_USER_AGENT, rt as getSkillsBaseUrl } from "./analytics-D21z3E5l.js";
-import { A as getProvisioningScopesForProgram, B as SOURCE_MAPS_CONTEXT_KEYS, C as oauthErrorFromTokenBody, D as getCommandPath, E as findProgramConfig, F as detectErrorTrackingProjects, G as detectSelfDrivingIntegrationProjects, H as NO_DEFAULT_LIMIT, J as POSTHOG_PRESENT_KEY, K as GITHUB_REQUIRED_BODY, L as detectSourceMapsProjects, O as getOAuthScopesForProgram, P as ERROR_TRACKING_PROJECT_PATH_KEY, R as DISPLAY_NAME, S as oauthErrorFromCallbackParams, T as Program, U as PRICING_LONG, W as PRICING_SHORT, Y as SELF_DRIVING_INTEGRATE_PATH_KEY, _ as missingOAuthScopes, b as buildCallbackErrorHtml, c as buildSession, d as SessionStore, et as getAuditChecks, f as applyAgentProgress, g as getOAuthClientId, h as OAuthTokenResponseSchema, it as getBlockingServiceKeys, j as getSubcommandPrograms, k as getProgramConfig, nt as SIGNUP_WIZARD_READINESS_CONFIG, q as GITHUB_REQUIRED_MESSAGE, rt as evaluateWizardReadiness, tt as SERVICE_LABELS, v as parseOAuthScopes, x as buildOAuthFailureMessage, y as OAuthError, z as MANUAL_SDK_VARIANTS } from "./programs-SeT1qNik.js";
-import { r as withUtm, t as openTrackedLink } from "./links-Cyj6v8kg.js";
-import { t as withProgress } from "./telemetry-CP4rGicd.js";
-import { t as detectOrgAndProject } from "./setup-utils-C5-WM-hS.js";
-import { a as getOAuthUrl, i as getIntegrationAuthorizeUrl, s as resolveBaseUrl } from "./urls-BDELGZHq.js";
-import { t as HostResolution } from "./host-resolution-D8GhEVoX.js";
-import { A as computeTokenCostUsd, D as streamMcpPrompt, M as formatTokenCount, i as withScopeAdditions, j as formatCostUsd, l as POSTHOG_SDKS, m as getDetectedWarehouseSources, r as CONNECT_SLACK_SCOPE_ADDITIONS, u as STRIPE_SDKS, w as FRAMEWORK_REGISTRY } from "./posthog-integration-bwHwE87a.js";
-import { y as fetchSkillMenu } from "./yara-hooks-D8YDyX7o.js";
-import { n as isOk, o as summarizeFailure, r as namesWithStatus } from "./results-DtKICAdz.js";
-import { f as getKindMeta, l as MCP_TUTORIAL_SCOPE_ADDITIONS, n as getTool, p as fetchHealthIssues, t as Tool } from "./tools-CCMV3DmB.js";
-import { a as fetchGithubConnected, c as fetchUserData, n as ApiError, o as fetchProjectData, s as fetchSlackConnected } from "./api-DtGIqQ2U.js";
+import { n as ErrorCodes } from "./emit-BqLCdV8Y.js";
+import { d as relativeToInstallDir, i as getLogFilePath, o as logToFile } from "./debug-sB20p-Ek.js";
+import { A as POSTHOG_APP_URL, B as REPLAY_VISION_SUPPORTED, D as Integration, E as ISSUES_URL, F as POSTHOG_PRIVACY_URL, J as WIZARD_OAUTH_SCOPES, M as POSTHOG_DOCS_URL, O as OAUTH_PORTS, P as POSTHOG_ORG_AI_SETTINGS_URL, Q as WIZARD_PROVISIONING_SCOPES, R as POSTHOG_TERMS_URL, V as SETUP_REPORT_FILE, i as sessionProperties, k as OAUTH_TIMEOUT_MS, m as DUMMY_PROJECT_API_KEY, n as analytics, nt as WIZARD_USER_AGENT, rt as getSkillsBaseUrl } from "./analytics-CGGE7OSa.js";
+import { A as getProvisioningScopesForProgram, B as SOURCE_MAPS_CONTEXT_KEYS, C as oauthErrorFromTokenBody, D as getCommandPath, E as findProgramConfig, F as detectErrorTrackingProjects, G as detectSelfDrivingIntegrationProjects, H as NO_DEFAULT_LIMIT, J as POSTHOG_PRESENT_KEY, K as GITHUB_REQUIRED_BODY, L as detectSourceMapsProjects, O as getOAuthScopesForProgram, P as ERROR_TRACKING_PROJECT_PATH_KEY, R as DISPLAY_NAME, S as oauthErrorFromCallbackParams, T as Program, U as PRICING_LONG, W as PRICING_SHORT, Y as SELF_DRIVING_INTEGRATE_PATH_KEY, _ as missingOAuthScopes, at as evaluateWizardReadiness, b as buildCallbackErrorHtml, c as buildSession, d as SessionStore, et as CONNECT_SLACK_SCOPE_ADDITIONS, f as applyAgentProgress, g as getOAuthClientId, h as OAuthTokenResponseSchema, it as SIGNUP_WIZARD_READINESS_CONFIG, j as getSubcommandPrograms, k as getProgramConfig, nt as getAuditChecks, ot as getBlockingServiceKeys, q as GITHUB_REQUIRED_MESSAGE, rt as SERVICE_LABELS, tt as withScopeAdditions, v as parseOAuthScopes, x as buildOAuthFailureMessage, y as OAuthError, z as MANUAL_SDK_VARIANTS } from "./programs-Ml6OLybj.js";
+import "./errors-DhFeR8Sp.js";
+import { r as withUtm, t as openTrackedLink } from "./links-rMot83W2.js";
+import { t as withProgress } from "./telemetry-Ch9ZJvm7.js";
+import { t as detectOrgAndProject } from "./setup-utils-Dfgse6pY.js";
+import { r as currentCredentials } from "./oauth-session-C2fVSGfr.js";
+import { g as isGrantRevoked } from "./agent-interface-BFzBnz10.js";
+import { a as getOAuthUrl, i as getIntegrationAuthorizeUrl, s as resolveBaseUrl } from "./urls-eFaChZ9d.js";
+import { t as HostResolution } from "./host-resolution-DDYJXiAQ.js";
+import { A as formatCostUsd, C as FRAMEWORK_REGISTRY, E as streamMcpPrompt, c as POSTHOG_SDKS, j as formatTokenCount, k as computeTokenCostUsd, l as STRIPE_SDKS, p as getDetectedWarehouseSources } from "./posthog-integration-FAWfClH3.js";
+import { y as fetchSkillMenu } from "./yara-hooks-C4HOysrM.js";
+import { n as namesWithStatus, o as summarizeFailure, t as isOk } from "./results-ycm_Tf31.js";
+import { f as getKindMeta, l as MCP_TUTORIAL_SCOPE_ADDITIONS, n as getTool, p as fetchHealthIssues, t as Tool } from "./tools-BZseGChD.js";
+import { a as fetchGithubConnected, c as fetchUserData, n as ApiError, o as fetchProjectData, s as fetchSlackConnected } from "./api-ZZhiRtbb.js";
 import { n as AVAILABLE_FEATURES, o as isAllFeaturesSelected, t as ALL_FEATURE_VALUES } from "./defaults-DDVl3tKN.js";
-import { n as provisionNewAccount, r as requestDeepLink, t as ProvisionedAccountUnreadableError } from "./provisioning-JbJtq7hq.js";
-import { r as wizardAbort } from "./wizard-abort-D3-75KyV.js";
+import { n as provisionNewAccount, r as requestDeepLink, t as ProvisionedAccountUnreadableError } from "./provisioning-BTVL49jD.js";
+import { r as wizardAbort } from "./wizard-abort-BX3O4Hg4.js";
 import { a as useStdoutDimensions, c as wrapAndTruncate, d as isObjectBlock, f as ConfirmButton, h as Icons, i as useKeyboardHintsContext, l as isClearBlock, m as Colors, n as useKeyBindings, o as computeVisibleRange, p as PromptLabel, r as KeyboardHintsProvider, s as wordWrap, t as PickerMenu, u as isLinesBlock } from "./PickerMenu-BGGeYqd-.js";
 import * as fs$1 from "fs";
 import path from "path";
@@ -6541,12 +6545,6 @@ const POSTHOG_INTEGRATION_FLOW = [
 		screenId: "mcp",
 		isComplete: (tui) => tui.mcpComplete
 	},
-	{
-		id: "slack-connect",
-		label: "Connect Slack",
-		screenId: "slack-connect",
-		isComplete: (tui) => tui.slackStepDismissed
-	},
 	{
 		id: "keep-skills",
 		label: "Keep Skills",
@@ -7056,7 +7054,7 @@ const FrameworkPicker = ({ store, onComplete }) => {
 		})),
 		onSelect: (value) => {
 			const integration = Array.isArray(value) ? value[0] : value;
-			import("./programs-BhtyA3lE.js").then(({ FRAMEWORK_REGISTRY }) => {
+			import("./programs-DjCmEcxb.js").then(({ FRAMEWORK_REGISTRY }) => {
 				const config = FRAMEWORK_REGISTRY[integration];
 				store.setFrameworkConfig(integration, config);
 				store.setDetectedFramework(config.metadata.name);
@@ -8831,17 +8829,37 @@ const SelfDrivingHandoffScreen = ({ store }) => {
 * Installing the App is a manual browser step, so polling is what flips the
 * gate once the user comes back. The first tick also resolves the session's
 * unknown (`null`) state.
+*
+* Each tick reads the token through the login's OAuth session, since the gate
+* can open, or sit, past the token's 1-hour life. A stale token 401s every
+* tick, and the gate then asks for an install the project already has.
 */
 const POLL_INTERVAL_MS$1 = 3e3;
 async function fetchLoginUrl(session) {
 	if (!session.signup || !session.credentials) return null;
 	return await requestDeepLink(session.credentials.accessToken, session.credentials.host) ?? `${session.credentials.host.appHost}/login`;
 }
+const isUnauthorized = (err) => axios.isAxiosError(err) && err.response?.status === 401;
+/** One check. A 401 rotates the token once and retries before it counts as a failure. */
+async function checkGithubConnected(store, signal) {
+	const held = store.session.credentials;
+	if (!held) return false;
+	const check = (credentials) => fetchGithubConnected(credentials.accessToken, credentials.projectId, credentials.host.apiHost, signal);
+	const credentials = await currentCredentials(held);
+	try {
+		return await check(credentials);
+	} catch (err) {
+		if (!isUnauthorized(err) || !credentials.refreshToken || isGrantRevoked()) throw err;
+		const rotated = await currentCredentials(credentials, true);
+		if (rotated.accessToken === credentials.accessToken) throw err;
+		return check(rotated);
+	}
+}
 function useGithubConnection(store) {
-	const credentials = store.session.credentials;
+	const loggedIn = store.session.credentials !== null;
 	const connected = store.githubConnected === true;
 	useEffect(() => {
-		if (!credentials || connected) return;
+		if (!loggedIn || connected) return;
 		const controller = new AbortController();
 		let stopped = false;
 		let timer;
@@ -8856,7 +8874,7 @@ function useGithubConnection(store) {
 		(async () => {
 			while (!stopped) {
 				try {
-					const isConnected = await fetchGithubConnected(credentials.accessToken, credentials.projectId, credentials.host.apiHost, controller.signal);
+					const isConnected = await checkGithubConnected(store, controller.signal);
 					if (stopped) return;
 					if (isConnected) {
 						if (store.githubConnected === false) analytics.wizardCapture("github connect completed");
@@ -8881,7 +8899,7 @@ function useGithubConnection(store) {
 			controller.abort();
 		};
 	}, [
-		credentials,
+		loggedIn,
 		connected,
 		store
 	]);
@@ -9665,6 +9683,11 @@ const TUI_TOOLS$3 = { "posthog-doctor": {
 const markDone = (store, outcome, clients = [], featuresSelected, loginCommands = []) => {
 	store.setMcpComplete(outcome, clients, featuresSelected, loginCommands);
 };
+/** Report the outcome as the results show, and complete the step on Enter. */
+const doneOnEnter = (store, outcome, clients = [], featuresSelected, loginCommands = []) => {
+	store.reportMcpOutcome(outcome, clients, featuresSelected);
+	return () => markDone(store, outcome, clients, featuresSelected, loginCommands);
+};
 /**
 * The editor-owned login commands still to run after this install: fresh
 * config entries use the client's own server name, plugin-provided servers
@@ -9772,7 +9795,7 @@ const McpScreen = ({ store, installer, mode = "install" }) => {
 				}
 			} catch (err) {
 				setDetectError(errorText(err));
-				finishFlow.current = () => markDone(store, "failed");
+				finishFlow.current = doneOnEnter(store, "failed");
 				setPhase("none");
 			}
 		})();
@@ -9826,7 +9849,7 @@ const McpScreen = ({ store, installer, mode = "install" }) => {
 		const outcome = ready.length > 0 ? "installed" : "failed";
 		const featuresReport = reportFeatures(features ?? [...ALL_FEATURE_VALUES]);
 		const logins = oauthFlow ? pendingLoginCommands(clients, mcpResult, pluginResult) : [];
-		finishFlow.current = () => markDone(store, outcome, ready.map((r) => r.name), featuresReport, logins);
+		finishFlow.current = doneOnEnter(store, outcome, ready.map((r) => r.name), featuresReport, logins);
 		setPhase("done");
 	};
 	const doRemove = async () => {
@@ -9839,8 +9862,7 @@ const McpScreen = ({ store, installer, mode = "install" }) => {
 		}
 		setMcpResults(result);
 		const removed = result.filter(isOk);
-		const outcome = removed.length > 0 ? "installed" : "failed";
-		finishFlow.current = () => markDone(store, outcome, removed.map((r) => r.name));
+		finishFlow.current = doneOnEnter(store, removed.length > 0 ? "installed" : "failed", removed.map((r) => r.name));
 		setPhase("done");
 	};
 	const installValueBullets = [
@@ -10072,29 +10094,19 @@ const McpScreen = ({ store, installer, mode = "install" }) => {
 };
 //#endregion
 //#region src/tui/tools/mcp/flow.ts
-const MCP_ADD_FLOW = [
-	{
-		id: "mcp-add",
-		label: "Add MCP server",
-		screenId: "mcp-add",
-		isComplete: (s) => s.mcpComplete
-	},
-	{
-		id: "slack-connect",
-		label: "Connect Slack",
-		screenId: "slack-connect",
-		show: (s) => s.mcpOutcome === "installed",
-		isComplete: (s) => s.slackStepDismissed
-	},
-	{
-		id: "mcp-suggested-prompts",
-		label: "Suggested prompts",
-		screenId: "mcp-suggested-prompts",
-		show: (s) => s.mcpOutcome === "installed",
-		isComplete: (s) => s.mcpSuggestedPromptsDismissed,
-		reportsAsProgramId: "mcp-tutorial"
-	}
-];
+const MCP_ADD_FLOW = [{
+	id: "mcp-add",
+	label: "Add MCP server",
+	screenId: "mcp-add",
+	isComplete: (s) => s.mcpComplete
+}, {
+	id: "mcp-suggested-prompts",
+	label: "Suggested prompts",
+	screenId: "mcp-suggested-prompts",
+	show: (s) => s.mcpOutcome === "installed",
+	isComplete: (s) => s.mcpSuggestedPromptsDismissed,
+	reportsAsProgramId: "mcp-tutorial"
+}];
 /**
 * `wizard mcp remove` — single-step uninstall flow.
 *
@@ -10130,11 +10142,6 @@ const MCP_TUTORIAL_FLOW = [{
 	label: "MCP tutorial",
 	screenId: "mcp-suggested-prompts",
 	isComplete: (s) => s.mcpSuggestedPromptsDismissed
-}, {
-	id: "slack-connect",
-	label: "Connect Slack",
-	screenId: "slack-connect",
-	isComplete: (s) => s.slackStepDismissed
 }];
 //#endregion
 //#region src/tui/tools/mcp/services/mcp-role-prompts.copy.ts
@@ -13384,7 +13391,7 @@ const MINT_FAILURE_CONTACT = "Email wizard@posthog.com and tell us what happened
 /** The agent run ended in an error, whatever the reason. Login failures also
 *  set an error outro but never had credentials, so they stay on the outro. */
 function isRunFailure(session) {
-	return session.outroData?.kind === "error" && session.credentials !== null;
+	return session.outroData?.kind === "error" && session.credentials !== null && session.outroData.errorCode !== ErrorCodes.AgentYaraViolation;
 }
 //#endregion
 //#region src/tui/flow.ts
@@ -13489,10 +13496,6 @@ const MINT_HANDOFF_SEQUENCE = [
 		id: "mcp",
 		isComplete: (s) => s.mcpComplete
 	},
-	{
-		id: "slack-connect",
-		isComplete: (s) => s.slackStepDismissed
-	},
 	{
 		id: "keep-skills",
 		isComplete: (s) => s.skillsComplete
@@ -13529,11 +13532,11 @@ var WizardRouter = class {
 		if (runFailed && view.mintHandoff === "exit") return "exit";
 		if (runFailed && !view.mintHandoff) return "mint-failure";
 		if (this.overlays.length > 0) return this.overlays[this.overlays.length - 1];
+		if (!runFailed && session.runPhase === "error" && session.outroData?.kind === "error") return view.outroDismissed ? "exit" : "outro";
 		const sequence = runFailed ? MINT_HANDOFF_SEQUENCE : this.sequence;
 		for (const entry of sequence) {
 			if (entry.show && !entry.show(view)) continue;
 			if (entry.isComplete && entry.isComplete(view)) continue;
-			if (entry.id === "auth" && session.runPhase === "error" && session.outroData) return "outro";
 			return entry.id;
 		}
 		return sequence[sequence.length - 1].id;
@@ -15220,8 +15223,12 @@ const OutroScreen = ({ store }) => {
 						bold: true,
 						children: ["✘ ", outroData.message || "An error occurred"]
 					}),
-					outroData.body && /* @__PURE__ */ jsx(Box, {
+					outroData.instruction && /* @__PURE__ */ jsx(Box, {
 						marginTop: 1,
+						children: /* @__PURE__ */ jsx(Text, { children: outroData.instruction })
+					}),
+					outroData.body && /* @__PURE__ */ jsx(Box, {
+						marginTop: outroData.instruction ? 0 : 1,
 						children: /* @__PURE__ */ jsx(Text, {
 							dimColor: true,
 							children: outroData.body
@@ -15229,7 +15236,14 @@ const OutroScreen = ({ store }) => {
 					}),
 					outroData.docsUrl && /* @__PURE__ */ jsx(Box, {
 						marginTop: 1,
-						children: /* @__PURE__ */ jsxs(Text, { children: ["Docs: ", /* @__PURE__ */ jsx(Text, {
+						flexDirection: "column",
+						children: outroData.docsLabel ? /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(Text, {
+							dimColor: true,
+							children: outroData.docsLabel
+						}), /* @__PURE__ */ jsx(Text, {
+							color: "cyan",
+							children: outroData.docsUrl
+						})] }) : /* @__PURE__ */ jsxs(Text, { children: ["Docs: ", /* @__PURE__ */ jsx(Text, {
 							color: "cyan",
 							children: outroData.docsUrl
 						})] })
@@ -15244,10 +15258,14 @@ const OutroScreen = ({ store }) => {
 				})
 			}),
 			/* @__PURE__ */ jsx(Box, {
-				marginTop: 1,
-				children: /* @__PURE__ */ jsx(Text, {
+				marginTop: outroData.kind === "error" ? 2 : 1,
+				children: /* @__PURE__ */ jsxs(Text, {
 					color: Colors.muted,
-					children: "Press any key to continue"
+					children: [
+						"Press any key to",
+						" ",
+						outroData.kind === "error" ? "exit" : "continue"
+					]
 				})
 			})
 		]
@@ -15329,6 +15347,7 @@ var WizardStore = class {
 	_enterScreenHooks = /* @__PURE__ */ new Map();
 	/** Gate promises derived from program step definitions. */
 	_gates = /* @__PURE__ */ new Map();
+	_mcpOutcomeReported = false;
 	version = "";
 	/** Navigation router — resolves active screen from session state. */
 	router;
@@ -15851,7 +15870,10 @@ var WizardStore = class {
 	addDiscoveredFeature(feature) {
 		this.sessions.addDiscoveredFeature(feature);
 	}
-	setMcpComplete(outcome = "skipped", installedClients = [], featuresSelected, loginCommands = []) {
+	/** Capture the MCP step's outcome once; the screen reports it as the results show, before Enter. */
+	reportMcpOutcome(outcome, installedClients = [], featuresSelected) {
+		if (this._mcpOutcomeReported) return;
+		this._mcpOutcomeReported = true;
 		const featuresPayload = outcome === "installed" && featuresSelected !== void 0 ? { mcp_features_selected: featuresSelected } : {};
 		analytics.wizardCapture("mcp complete", {
 			mcp_outcome: outcome,
@@ -15859,6 +15881,10 @@ var WizardStore = class {
 			...featuresPayload,
 			...sessionProperties(this.session)
 		});
+	}
+	/** Complete the MCP step; its `mcp complete` capture goes through `reportMcpOutcome`, so once per store. */
+	setMcpComplete(outcome = "skipped", installedClients = [], featuresSelected, loginCommands = []) {
+		this.reportMcpOutcome(outcome, installedClients, featuresSelected);
 		this._write({
 			mcpComplete: true,
 			mcpOutcome: outcome,
@@ -16159,4 +16185,4 @@ function releaseTerminal() {
 //#endregion
 export { AUDIT_AREA_SLIDES as A, totalTokenCount as B, assembleProfile as C, getTuiProgram as D, IssueTable as E, ContentSequencer as F, ModalOverlay as G, LogViewer as H, HNViewer as I, ProgressList as J, ConfirmationInput as K, TabContainer as L, IntroScreenLayout as M, PRIVACY_PANEL_LABEL as N, displayProgress as O, PrivacyPanel as P, getContentBlocks$5 as Q, ScreenContainer as R, McpSuggestedPromptsScreen as S, McpScreen as T, LinkText as U, EventPlanViewer as V, extractUrls as W, SplitView as X, LoadingBox as Y, CardLayout as Z, getTuiTool as _, SlackConnectScreen as a, extractOAuthCode as b, LearnCard as c, MINT_FAILURE_BODY as d, MINT_FAILURE_CONTACT as f, listFlowOwners as g, flowOwner as h, OutroScreen as i, AuditChecksViewer as j, useDismissOnAnyKey as k, AiOptInRequiredScreen as l, isRunFailure as m, releaseTerminal as n, TipsCard as o, MINT_FAILURE_MESSAGE as p, GroupedPickerMenu as q, WizardStore as r, VisualizerTab as s, enterDarkTerminal as t, ServiceHealthList as u, seededProfile as v, TAILORED_ROLES as w, abortOnScreens as x, getOrAskForProjectData as y, ViewportTooSmall as z };
 
-//# sourceMappingURL=terminal-J3OD3dN0.js.map
+//# sourceMappingURL=terminal-D20JFN3J.js.map