@posthog/wizard 2.82.0 → 2.83.0

package/dist/{agent-interface-3YfIWZmY.js → agent-interface-fcDXqb-_.js}

@@ -1,15 +1,15 @@
-import { a as initLogFile, i as getLogFilePath, o as logToFile, r as formatLogLine, v as runtimeEnv } from "./debug-BvEbemym.js";
-import { $ as WIZARD_REMARK_EVENT_NAME, it as wizardUserAgentForProgram, l as AWS_SKILLS_BASE_URL, n as analytics } from "./analytics-B_xFshPY.js";
+import { a as initLogFile, i as getLogFilePath, o as logToFile, r as formatLogLine, v as runtimeEnv } from "./debug-BTUMatFI.js";
+import { at as wizardUserAgentForProgram, et as WIZARD_REMARK_EVENT_NAME, l as AWS_SKILLS_BASE_URL, n as analytics } from "./analytics-GQv--mQm.js";
 import { i as classifyAuthFailure } from "./errors-DhFeR8Sp.js";
-import { a as safeReadFile, i as readProjectFile, o as walkProjectFiles } from "./bounded-fs-iRaQcKYL.js";
-import { c as isGrantRevoked, i as oauthCredentials, s as rotateAfterUnauthorized } from "./oauth-session-Bi1MLRCC.js";
-import { c as REMARK_INSTRUCTION, d as gatewayAuth, f as isPastRefresh, i as gatewayApiFor, l as RESUME_INSTRUCTION, n as buildGatewayModel, s as AgentSignals, u as buildWizardPropertiesBlob } from "./gateway-CWoYlPz7.js";
-import { i as modelCapabilities, o as triageModelFor } from "./models-C9rjXPZ6.js";
-import { _ as makeMutex, l as buildOrchestratorTools, v as writeJsonAtomic } from "./queue-tools-BoIITT7w.js";
-import { C as coerceAuditChecks, _ as downloadSkill, l as prewarmYaraScanner, n as createPostToolUseYaraHooks, p as scanInstalledSkill, r as createPreToolUseYaraHooks, x as AUDIT_CHECKS_FILE, y as fetchSkillMenu } from "./yara-hooks-BS0n3ekf.js";
-import { a as createMarkdownNotebook, f as updateMarkdownNotebook, s as fetchMarkdownNotebook } from "./api-C_9KsN-7.js";
+import { a as safeReadFile, i as readProjectFile, o as walkProjectFiles } from "./bounded-fs-B31zq2ir.js";
+import { c as isGrantRevoked, i as oauthCredentials, s as rotateAfterUnauthorized } from "./oauth-session-CfkZ339p.js";
+import { c as REMARK_INSTRUCTION, d as buildWizardPropertiesBlob, f as gatewayAuth, i as gatewayApiFor, l as RESUME_INSTRUCTION, n as buildGatewayModel, p as isPastRefresh, s as AgentSignals, u as policyAbortReason } from "./gateway-CJ8Jqbll.js";
+import { i as modelCapabilities, o as triageModelFor } from "./models-CLTglHFZ.js";
+import { d as taskReported, l as buildOrchestratorTools, v as makeMutex, y as writeJsonAtomic } from "./queue-tools-10w8lhEs.js";
+import { C as coerceAuditChecks, _ as downloadSkill, l as prewarmYaraScanner, n as createPostToolUseYaraHooks, p as scanInstalledSkill, r as createPreToolUseYaraHooks, x as AUDIT_CHECKS_FILE, y as fetchSkillMenu } from "./yara-hooks-BPYhN9WM.js";
+import { a as createMarkdownNotebook, f as updateMarkdownNotebook, s as fetchMarkdownNotebook } from "./api-WUOSLXPJ.js";
 import { createRequire } from "node:module";
-import * as fs$1 from "fs";
+import * as fs$2 from "fs";
 import fs from "fs";
 import path from "path";
 import path$1 from "node:path";
@@ -18,6 +18,7 @@ import { closeSync, constants, fchmodSync, lstatSync, openSync, renameSync, unli
 import axios from "axios";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import * as os from "os";
+import { readFile } from "fs/promises";
 import { minimatch } from "minimatch";
 import { randomUUID as randomUUID$1 } from "crypto";
 import { z } from "zod";
@@ -65,6 +66,11 @@ function createTriageLLMProvider(auth, harness) {
 			});
 			const text = message.content.filter((c) => c.type === "text").map((c) => c.text).join("");
 			if (message.stopReason === "error") logToFile(`[YARA] triage call failed on ${model.id}: ${message.errorMessage ?? "unknown"} — every flagged match will be acted on`);
+			const refusal = policyAbortReason(text);
+			if (refusal) {
+				logToFile(`[YARA] gateway policy refused the triage call: ${refusal}`);
+				throw new Error("AI gateway refused the triage call");
+			}
 			return text;
 		} finally {
 			clearTimeout(timer);
@@ -2709,7 +2715,7 @@ const BLOCKING_SETTINGS_KEYS = ["apiKeyHelper"];
 */
 function checkSettingsFile(filePath) {
 	try {
-		const raw = fs$1.readFileSync(filePath, "utf-8");
+		const raw = fs$2.readFileSync(filePath, "utf-8");
 		const parsed = JSON.parse(raw);
 		const matched = [];
 		const envBlock = parsed?.env;
@@ -2810,10 +2816,10 @@ function ensureBackupGitignored(claudeDir) {
 	const gitignorePath = path.join(claudeDir, ".gitignore");
 	const entry = `*${BACKUP_SUFFIX}`;
 	try {
-		const existing = fs$1.existsSync(gitignorePath) ? fs$1.readFileSync(gitignorePath, "utf-8") : "";
+		const existing = fs$2.existsSync(gitignorePath) ? fs$2.readFileSync(gitignorePath, "utf-8") : "";
 		if (existing.split("\n").map((l) => l.trim()).includes(entry)) return;
 		const sep = existing && !existing.endsWith("\n") ? "\n" : "";
-		fs$1.writeFileSync(gitignorePath, `${existing}${sep}${entry}\n`);
+		fs$2.writeFileSync(gitignorePath, `${existing}${sep}${entry}\n`);
 	} catch (error) {
 		analytics.captureException(error);
 	}
@@ -2825,15 +2831,15 @@ function ensureBackupGitignored(claudeDir) {
 */
 function backupAndFixClaudeSettings(workingDirectory) {
 	for (const { claudeDir, original, backup } of settingsBackupTargets(workingDirectory)) {
-		if (!fs$1.existsSync(original)) continue;
+		if (!fs$2.existsSync(original)) continue;
 		try {
-			if (!fs$1.existsSync(backup)) {
-				fs$1.copyFileSync(original, backup);
-				const mode = fs$1.statSync(original).mode & 511;
-				fs$1.chmodSync(backup, mode);
+			if (!fs$2.existsSync(backup)) {
+				fs$2.copyFileSync(original, backup);
+				const mode = fs$2.statSync(original).mode & 511;
+				fs$2.chmodSync(backup, mode);
 			}
 			ensureBackupGitignored(claudeDir);
-			fs$1.unlinkSync(original);
+			fs$2.unlinkSync(original);
 			analytics.wizardCapture("backedup-claude-settings");
 			registerCleanup(() => {
 				try {
@@ -2860,10 +2866,10 @@ function backupAndFixClaudeSettings(workingDirectory) {
 */
 function restoreClaudeSettings(workingDirectory) {
 	for (const { original, backup } of settingsBackupTargets(workingDirectory)) {
-		if (!fs$1.existsSync(backup)) continue;
+		if (!fs$2.existsSync(backup)) continue;
 		try {
-			fs$1.copyFileSync(backup, original);
-			fs$1.rmSync(backup, { force: true });
+			fs$2.copyFileSync(backup, original);
+			fs$2.rmSync(backup, { force: true });
 			analytics.wizardCapture("restored-claude-settings");
 			return;
 		} catch (error) {
@@ -2887,10 +2893,10 @@ function restoreClaudeSettings(workingDirectory) {
 */
 function recoverOrphanedSettingsBackups(workingDirectory) {
 	for (const { original, backup } of settingsBackupTargets(workingDirectory)) {
-		if (!fs$1.existsSync(backup) || fs$1.existsSync(original)) continue;
+		if (!fs$2.existsSync(backup) || fs$2.existsSync(original)) continue;
 		try {
-			fs$1.copyFileSync(backup, original);
-			fs$1.rmSync(backup, { force: true });
+			fs$2.copyFileSync(backup, original);
+			fs$2.rmSync(backup, { force: true });
 			analytics.wizardCapture("recovered-orphaned-settings");
 		} catch (error) {
 			analytics.captureException(error);
@@ -2943,7 +2949,7 @@ const claudeConfigDir = (homeDir = os.homedir()) => process.env.CLAUDE_CONFIG_DI
 */
 function createIsolatedAgentConfigDir() {
 	const base = process.platform === "win32" ? os.tmpdir() : "/tmp";
-	return fs$1.mkdtempSync(path.join(base, "posthog-wizard-claude-"));
+	return fs$2.mkdtempSync(path.join(base, "posthog-wizard-claude-"));
 }
 /**
 * Look for a stored Claude login. `homeDir` / `platform` are injectable for
@@ -2953,7 +2959,7 @@ function detectStoredClaudeLogin(homeDir = os.homedir(), platform = process.plat
 	const credentialsPath = path.join(claudeConfigDir(homeDir), ".credentials.json");
 	let credentialsFile = false;
 	try {
-		credentialsFile = fs$1.existsSync(credentialsPath);
+		credentialsFile = fs$2.existsSync(credentialsPath);
 	} catch (error) {
 		logToFile(`[stored-login] checked ${credentialsPath} — unreadable (${error instanceof Error ? error.message : String(error)}), treating as absent`);
 		analytics.wizardCapture("stored login check failed", { step: "credentials-file" });
@@ -3033,7 +3039,7 @@ function buildAuthErrorContext(workingDirectory, gatewayUrl, homeDir = os.homedi
 *   Phase 1 — collect remark (once): block with remark prompt
 *   Phase 2 — allow stop: return {}
 */
-function createStopHook(signals, requestRemark = true) {
+function createStopHook(signals, requestRemark = true, onRemark) {
 	let remarkRequested = false;
 	return (input) => {
 		logToFile("Stop hook triggered", {
@@ -3046,6 +3052,7 @@ function createStopHook(signals, requestRemark = true) {
 		}
 		if (requestRemark && !remarkRequested) {
 			remarkRequested = true;
+			onRemark?.(input.last_assistant_message);
 			logToFile("Stop hook: requesting reflection");
 			return {
 				decision: "block",
@@ -3269,6 +3276,7 @@ async function initializeAgent(config, options) {
 			handoffNotebook: config.handoffNotebook
 		});
 		const model = config.modelOverride ?? "claude-sonnet-5";
+		const queue = config.orchestrator;
 		const agentRunConfig = {
 			workingDirectory: config.workingDirectory,
 			mcpServers,
@@ -3283,6 +3291,7 @@ async function initializeAgent(config, options) {
 			disallowedTools: config.disallowedTools,
 			getPendingQuestion: config.getPendingQuestion,
 			suppressTaskRender: !!config.orchestrator,
+			taskReported: queue && (() => taskReported(queue)),
 			capture: config.capture,
 			triageProvider,
 			gatewayAuth: auth,
@@ -3437,6 +3446,18 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 	};
 	let timedOut = false;
 	let abortReason = null;
+	let policyAborted = false;
+	const subagentCallIds = /* @__PURE__ */ new Set();
+	let remarkTurn = false;
+	const policyAbort = (reply) => {
+		const reason = typeof reply === "string" ? policyAbortReason(reply) : void 0;
+		if (!reason || abortReason || remarkTurn || agentConfig.taskReported?.()) return;
+		abortReason = reason;
+		policyAborted = true;
+		logToFile(`Agent emitted [posthog:abort]: ${reason}`);
+		abortController.abort();
+		signalDone();
+	};
 	let yaraViolationReason = null;
 	let sessionId;
 	let reminted = false;
@@ -3540,6 +3561,7 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 						CLAUDE_CODE_OAUTH_TOKEN: agentConfig.gatewayAuth.token,
 						CLAUDE_CONFIG_DIR: agentConfigDir,
 						CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS: "true",
+						CLAUDE_CODE_DISABLE_BACKGROUND_TASKS: "1",
 						POSTHOG_MCP_TOKEN: await agentConfig.currentPosthogApiKey?.() ?? agentConfig.posthogApiKey,
 						MCP_CONNECTION_NONBLOCKING: "0",
 						ANTHROPIC_CUSTOM_HEADERS: buildAgentEnv(agentConfig.wizardMetadata ?? {}, agentConfig.wizardFlags ?? {}, agentConfig.gatewayAuth.teamId)
@@ -3579,7 +3601,17 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 						PreToolUse: warlockDisabled ? [] : createPreToolUseYaraHooks(triageProvider, onYaraTerminate),
 						PostToolUse: warlockDisabled ? [] : createPostToolUseYaraHooks(triageProvider, onYaraTerminate),
 						Stop: [{
-							hooks: [createStopHook(signals, config?.requestRemark ?? true)],
+							hooks: [createStopHook(signals, config?.requestRemark ?? true, (lastReply) => {
+								policyAbort(lastReply);
+								remarkTurn = true;
+							})],
+							timeout: 30
+						}],
+						SubagentStop: [{
+							hooks: [async (input) => {
+								policyAbort(await transcriptRefusal(input.agent_transcript_path));
+								return {};
+							}],
 							timeout: 30
 						}]
 					}
@@ -3623,6 +3655,10 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 							}
 						}
 					}
+					const blocks = message.message?.content;
+					for (const block of Array.isArray(blocks) ? blocks : []) if (block.type === "tool_use" && block.name === "Agent") subagentCallIds.add(block.id);
+					else if (message.type === "assistant" && block.type === "text") policyAbort(block.text);
+					else if (message.type === "user" && block.type === "tool_result" && subagentCallIds.has(block.tool_use_id)) policyAbort(contentText(block.content));
 					if (message.type === "assistant" && sdkErrorStatus(message.error) === 401 || message.type === "result" && (sdkErrorStatus(message.api_error_status) === 401 || sdkErrorStatus(message.status) === 401) || message.type === "result" && Array.isArray(message.errors) && message.errors.some((error) => sdkErrorStatus(error) === 401)) {
 						signalDone();
 						if (agentConfig.refreshGatewayAuth && !reminted && isPastRefresh(agentConfig.gatewayAuth) && !agentConfig.signal?.aborted) {
@@ -3886,6 +3922,7 @@ async function runAgent(agentConfig, prompt, options, spinner, config, middlewar
 					duration_ms: durationMs,
 					duration_seconds: Math.round(durationMs / 1e3),
 					model: agentConfig.model,
+					...policyAborted ? { source: "gateway_policy" } : {},
 					...config?.analyticsProperties
 				});
 			} catch {}
@@ -4012,6 +4049,23 @@ function extractTaskIdFromToolResult(result) {
 	if (typeof obj.taskId === "string") return obj.taskId;
 	if (typeof obj.id === "string") return obj.id;
 }
+/** A message's or tool_result's text, whether its content is a string or blocks. */
+function contentText(content) {
+	if (!Array.isArray(content)) return typeof content === "string" ? content : "";
+	return content.map((b) => b.text ?? "").join("\n");
+}
+/** The first assistant reply in a subagent transcript that starts with the policy abort marker. */
+async function transcriptRefusal(transcriptPath) {
+	const raw = transcriptPath ? await readFile(transcriptPath, "utf8").catch(() => "") : "";
+	for (const line of raw.split("\n")) {
+		if (!line.includes(AgentSignals.POLICY_ABORT)) continue;
+		try {
+			const entry = JSON.parse(line);
+			const text = contentText(entry.message?.content);
+			if (entry.type === "assistant" && policyAbortReason(text)) return text;
+		} catch {}
+	}
+}
 /**
 * Fallback id extractor for the inner tool_result block.content — used only
 * when message.tool_use_result is absent. In current SDK versions the inner
@@ -4219,4 +4273,4 @@ function handleSDKMessage(message, options, spinner, signals, emit, receivedSucc
 //#endregion
 export { vaultSensitiveAnswers as $, AUDIT_STATUSES as A, checkEnvKeys as B, readNeedsAttention as C, AUDIT_RESOLVE_CHECKS_PARAM_DESCRIPTION as D, AUDIT_RESOLVE_CHECKS_DESCRIPTION as E, WIZARD_ASK_SENSITIVE_DESCRIPTION as F, mergeEnvValues as G, describeAskCancellation as H, WIZARD_ASK_SUBJECT_DESCRIPTION as I, resolveAuditChecks as J, normaliseAskSubject as K, WIZARD_ASK_TOOL_DESCRIPTION as L, CHECK_ENV_KEYS_FILE_PATH_DESCRIPTION as M, ENV_FILE_PATH_DESCRIPTION as N, AUDIT_SEED_CHECKS_DESCRIPTION as O, WIZARD_ASK_KIND_DESCRIPTION as P, templateEnvWriteRefusal as Q, WIZARD_TOOL_NAMES as R, NEEDS_ATTENTION_HEADING as S, AUDIT_ADD_CHECKS_PARAM_DESCRIPTION as T, ensureGitignoreCoverage as U, createAskAccounting as V, legacyKeyNameRefusal as W, resolveEnvSecretRefs as X, resolveEnvPath as Y, seedAuditChecks as Z, createSecretVault as _, wizardCanUseTool as a, isEnvFileName as at, PUBLISH_HANDOFF_TOOL_NAME as b, checkAllSettingsConflicts as c, createTriageLLMProvider as ct, restoreClaudeSettings as d, createWizardAskBridge as et, sanitizeAgentSubprocessEnv as f, assembleCommandments as g, AgentOutputSignals as h, runAgent as i, MAX_ENV_KEY_SET as it, CHECK_ENV_KEYS_DESCRIPTION as j, AUDIT_SEED_CHECKS_PARAM_DESCRIPTION as k, classifySettingsConflicts as l, runCleanups as m, buildRunTags as n, LONGER_ASK_TIMEOUT_MS as nt, createIsolatedAgentConfigDir as o, parseEnvKeyNames as ot, registerCleanup as p, resolveAskQuestionKinds as q, initializeAgent as r, shouldDisableAsk as rt, backupAndFixClaudeSettings as s, toPromptSafeRelativePath as st, buildAgentEnv as t, isFullyCancelled as tt, recoverOrphanedSettingsBackups as u, PUBLISH_HANDOFF_CONTENT_DESCRIPTION as v, AUDIT_ADD_CHECKS_DESCRIPTION as w, publishHandoff as x, PUBLISH_HANDOFF_DESCRIPTION as y, addAuditChecks as z };
 
-//# sourceMappingURL=agent-interface-3YfIWZmY.js.map
+//# sourceMappingURL=agent-interface-fcDXqb-_.js.map