@posthog/wizard 2.82.0 → 2.83.0

package/dist/{subagent-BBfETG17.js → subagent-BdDWA8j5.js}

@@ -1,5 +1,5 @@
-import { o as logToFile } from "./debug-BvEbemym.js";
-import { a as gatewayTerminalFailure } from "./gateway-CWoYlPz7.js";
+import { o as logToFile } from "./debug-BTUMatFI.js";
+import { a as gatewayTerminalFailure, s as AgentSignals, u as policyAbortReason } from "./gateway-CJ8Jqbll.js";
 import { Type } from "typebox";
 import { defineTool } from "@earendil-works/pi-coding-agent";
 //#region src/agent/runner/harness/pi/subagent.ts
@@ -87,16 +87,24 @@ function createDispatchAgentTool(ctx) {
 			});
 			let result = "";
 			let finalTurn;
+			let refusal;
 			const unsub = child.subscribe((e) => {
 				if (e.type === "message_end") {
-					if (e.message?.role === "assistant") finalTurn = e.message;
+					const assistant = e.message?.role === "assistant";
+					if (assistant) finalTurn = e.message;
 					const t = extractText(e.message).trim();
 					if (t) result = t;
+					const reason = assistant && !refusal && policyAbortReason(t);
+					if (reason) {
+						refusal = `${AgentSignals.POLICY_ABORT} ${reason}`;
+						child.abort();
+					}
 				}
 			});
 			logToFile(`[pi] subagent dispatch: ${args.description}`);
 			try {
 				await child.prompt(args.prompt);
+				if (refusal) return text(refusal);
 				const failure = gatewayTerminalFailure(finalTurn);
 				if (failure) throw new Error(`Subagent failed: ${failure.message}`);
 			} finally {
@@ -110,4 +118,4 @@ function createDispatchAgentTool(ctx) {
 //#endregion
 export { createDispatchAgentTool };
 
-//# sourceMappingURL=subagent-BBfETG17.js.map
+//# sourceMappingURL=subagent-BdDWA8j5.js.map

package/dist/subagent-BdDWA8j5.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent-BdDWA8j5.js","names":[],"sources":["../src/agent/runner/harness/pi/subagent.ts"],"sourcesContent":["/**\n * Controlled subagent dispatch for pi (#526). pi has no native subagent\n * mechanism, so a subagent is a nested `createAgentSession` we construct — which\n * means WE decide its powers, closing the leak the claude-agent-sdk path warns\n * about (it can't propagate the parent's disallowedTools into subagents).\n *\n * Controls on every child:\n *  - the parent's subagent security gate (canUseTool + YARA, fail-closed, no\n *    `rm`) — shared state, so the child shares the tool-call cap and latch;\n *  - a read-only built-in toolset (read/grep/find/ls) plus allowlisted bash —\n *    no write/edit tools;\n *  - no custom tools — no .env writes, and crucially no `dispatch_agent`, so a\n *    child cannot recurse (depth is hard-capped at 1).\n */\n\nimport { Type } from 'typebox';\nimport { defineTool } from '@earendil-works/pi-coding-agent';\nimport type { ToolDefinition } from '@earendil-works/pi-coding-agent';\nimport { logToFile } from '@utils/debug';\nimport { AgentSignals, policyAbortReason } from '../../../signals';\nimport { gatewayTerminalFailure } from './gateway';\nimport type { SubagentSecurityFactory } from './security';\n\n/**\n * Read-only built-ins a subagent may use. bash is supplied separately as the\n * parent's env-scrubbed tool (below), not the built-in, so a subagent's\n * subprocesses are locked down too.\n */\nconst SUBAGENT_TOOLS = ['read', 'grep', 'find', 'ls'];\n\nconst SUBAGENT_SYSTEM_PROMPT = [\n  'You are a read-only research subagent for the PostHog wizard.',\n  'You can read and search files and run safe build/inspect shell commands.',\n  'You cannot edit files, modify .env, or dispatch further subagents.',\n  'Investigate the task you are given and report concise findings as your final message.',\n].join('\\n');\n\nfunction text(s: string): {\n  content: [{ type: 'text'; text: string }];\n  details: unknown;\n} {\n  return { content: [{ type: 'text', text: s }], details: {} };\n}\n\nfunction extractText(message: unknown): string {\n  const content = (message as { content?: unknown })?.content;\n  if (typeof content === 'string') return content;\n  if (Array.isArray(content)) {\n    return content\n      .filter((c): c is { type: string; text: string } => {\n        const b = c as { type?: string; text?: unknown };\n        return b?.type === 'text' && typeof b.text === 'string';\n      })\n      .map((c) => c.text)\n      .join('');\n  }\n  return '';\n}\n\nexport interface SubagentContext {\n  /** Resolved gateway model (same as the parent). */\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  model: import('@earendil-works/pi-ai').Model<any>;\n  /** Registry holding the gateway provider. */\n  modelRegistry: import('@earendil-works/pi-coding-agent').ModelRegistry;\n  cwd: string;\n  agentDir: string;\n  /** The parent's subagent gate: the same fence and shared state, with no rm. */\n  securityFactory: SubagentSecurityFactory;\n  /** The parent's env-scrubbed bash, so a subagent's subprocesses are locked down too. */\n  bashTool: ToolDefinition;\n  /** pi SDK entrypoints, already imported by the backend. */\n  sdk: {\n    createAgentSession: typeof import('@earendil-works/pi-coding-agent')['createAgentSession'];\n    DefaultResourceLoader: typeof import('@earendil-works/pi-coding-agent')['DefaultResourceLoader'];\n    SessionManager: typeof import('@earendil-works/pi-coding-agent')['SessionManager'];\n  };\n}\n\nexport function createDispatchAgentTool(ctx: SubagentContext): ToolDefinition {\n  return defineTool({\n    name: 'dispatch_agent',\n    label: 'Dispatch subagent',\n    description:\n      'Delegate a focused, read-only research subtask to a subagent (e.g. \"find where events are captured\"). The subagent can read/search files and run safe shell, but CANNOT edit files, change .env, or dispatch further subagents. Returns its findings.',\n    promptSnippet:\n      'dispatch_agent(description, prompt) — delegate a read-only research subtask',\n    parameters: Type.Object({\n      description: Type.String({ description: 'Short label for the subtask' }),\n      prompt: Type.String({ description: 'Full instruction for the subagent' }),\n    }),\n    // eslint-disable-next-line @typescript-eslint/require-await -- pi tool contract returns a Promise\n    async execute(_id, args) {\n      const { createAgentSession, DefaultResourceLoader, SessionManager } =\n        ctx.sdk;\n\n      const loader = new DefaultResourceLoader({\n        cwd: ctx.cwd,\n        agentDir: ctx.agentDir,\n        systemPrompt: SUBAGENT_SYSTEM_PROMPT,\n        noExtensions: true,\n        noSkills: true,\n        noContextFiles: true,\n        noPromptTemplates: true,\n        noThemes: true,\n        extensionFactories: [ctx.securityFactory as (pi: unknown) => void],\n      });\n      await loader.reload();\n\n      const { session: child } = await createAgentSession({\n        model: ctx.model,\n        modelRegistry: ctx.modelRegistry,\n        cwd: ctx.cwd,\n        sessionManager: SessionManager.inMemory(ctx.cwd),\n        resourceLoader: loader,\n        tools: SUBAGENT_TOOLS, // read-only built-ins; no write/edit, no dispatch_agent\n        customTools: [ctx.bashTool], // env-scrubbed bash only (still allowlist-fenced)\n      });\n\n      let result = '';\n      let finalTurn:\n        | {\n            stopReason?: string;\n            errorMessage?: string;\n            diagnostics?: {\n              error?: { name?: string; code?: string | number };\n            }[];\n          }\n        | undefined;\n      // A refusal on any turn ends the child, since a later reply would overwrite it.\n      let refusal: string | undefined;\n      const unsub = child.subscribe((e) => {\n        if (e.type === 'message_end') {\n          const assistant =\n            (e.message as { role?: string })?.role === 'assistant';\n          if (assistant) finalTurn = e.message as typeof finalTurn;\n          const t = extractText(e.message).trim();\n          if (t) result = t;\n          const reason = assistant && !refusal && policyAbortReason(t);\n          if (reason) {\n            refusal = `${AgentSignals.POLICY_ABORT} ${reason}`;\n            void child.abort();\n          }\n        }\n      });\n      logToFile(`[pi] subagent dispatch: ${args.description}`);\n      try {\n        await child.prompt(args.prompt);\n        if (refusal) return text(refusal);\n        const failure = gatewayTerminalFailure(finalTurn);\n        if (failure) throw new Error(`Subagent failed: ${failure.message}`);\n      } finally {\n        unsub();\n      }\n      logToFile(`[pi] subagent \"${args.description}\" → ${result.length} chars`);\n      return text(result || 'Subagent completed with no textual result.');\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA4BA,MAAM,iBAAiB;CAAC;CAAQ;CAAQ;CAAQ;CAAK;AAErD,MAAM,yBAAyB;CAC7B;CACA;CACA;CACA;CACD,CAAC,KAAK,KAAK;AAEZ,SAAS,KAAK,GAGZ;AACA,QAAO;EAAE,SAAS,CAAC;GAAE,MAAM;GAAQ,MAAM;GAAG,CAAC;EAAE,SAAS,EAAE;EAAE;;AAG9D,SAAS,YAAY,SAA0B;CAC7C,MAAM,UAAW,SAAmC;AACpD,KAAI,OAAO,YAAY,SAAU,QAAO;AACxC,KAAI,MAAM,QAAQ,QAAQ,CACxB,QAAO,QACJ,QAAQ,MAA2C;EAClD,MAAM,IAAI;AACV,SAAO,GAAG,SAAS,UAAU,OAAO,EAAE,SAAS;GAC/C,CACD,KAAK,MAAM,EAAE,KAAK,CAClB,KAAK,GAAG;AAEb,QAAO;;AAuBT,SAAgB,wBAAwB,KAAsC;AAC5E,QAAO,WAAW;EAChB,MAAM;EACN,OAAO;EACP,aACE;EACF,eACE;EACF,YAAY,KAAK,OAAO;GACtB,aAAa,KAAK,OAAO,EAAE,aAAa,+BAA+B,CAAC;GACxE,QAAQ,KAAK,OAAO,EAAE,aAAa,qCAAqC,CAAC;GAC1E,CAAC;EAEF,MAAM,QAAQ,KAAK,MAAM;GACvB,MAAM,EAAE,oBAAoB,uBAAuB,mBACjD,IAAI;GAEN,MAAM,SAAS,IAAI,sBAAsB;IACvC,KAAK,IAAI;IACT,UAAU,IAAI;IACd,cAAc;IACd,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,UAAU;IACV,oBAAoB,CAAC,IAAI,gBAAyC;IACnE,CAAC;AACF,SAAM,OAAO,QAAQ;GAErB,MAAM,EAAE,SAAS,UAAU,MAAM,mBAAmB;IAClD,OAAO,IAAI;IACX,eAAe,IAAI;IACnB,KAAK,IAAI;IACT,gBAAgB,eAAe,SAAS,IAAI,IAAI;IAChD,gBAAgB;IAChB,OAAO;IACP,aAAa,CAAC,IAAI,SAAS;IAC5B,CAAC;GAEF,IAAI,SAAS;GACb,IAAI;GAUJ,IAAI;GACJ,MAAM,QAAQ,MAAM,WAAW,MAAM;AACnC,QAAI,EAAE,SAAS,eAAe;KAC5B,MAAM,YACH,EAAE,SAA+B,SAAS;AAC7C,SAAI,UAAW,aAAY,EAAE;KAC7B,MAAM,IAAI,YAAY,EAAE,QAAQ,CAAC,MAAM;AACvC,SAAI,EAAG,UAAS;KAChB,MAAM,SAAS,aAAa,CAAC,WAAW,kBAAkB,EAAE;AAC5D,SAAI,QAAQ;AACV,gBAAU,GAAG,aAAa,aAAa,GAAG;AACrC,YAAM,OAAO;;;KAGtB;AACF,aAAU,2BAA2B,KAAK,cAAc;AACxD,OAAI;AACF,UAAM,MAAM,OAAO,KAAK,OAAO;AAC/B,QAAI,QAAS,QAAO,KAAK,QAAQ;IACjC,MAAM,UAAU,uBAAuB,UAAU;AACjD,QAAI,QAAS,OAAM,IAAI,MAAM,oBAAoB,QAAQ,UAAU;aAC3D;AACR,WAAO;;AAET,aAAU,kBAAkB,KAAK,YAAY,MAAM,OAAO,OAAO,QAAQ;AACzE,UAAO,KAAK,UAAU,6CAA6C;;EAEtE,CAAC"}

package/dist/{task-CmNe3xeg.js → task-Y8lWoDE7.js}

@@ -1,13 +1,13 @@
 import { n as ErrorCodes } from "./emit-BqLCdV8Y.js";
-import { o as logToFile } from "./debug-BvEbemym.js";
-import { $ as WIZARD_REMARK_EVENT_NAME, it as wizardUserAgentForProgram, n as analytics } from "./analytics-B_xFshPY.js";
+import { o as logToFile } from "./debug-BTUMatFI.js";
+import { at as wizardUserAgentForProgram, et as WIZARD_REMARK_EVENT_NAME, n as analytics } from "./analytics-GQv--mQm.js";
 import { t as classifyRunFailure } from "./errors-DhFeR8Sp.js";
-import { n as currentAccessToken } from "./oauth-session-Bi1MLRCC.js";
-import { c as REMARK_INSTRUCTION, d as gatewayAuth, o as withGatewayRemint, r as buildGatewayProvider, t as GATEWAY_PROVIDER } from "./gateway-CWoYlPz7.js";
-import { g as assembleCommandments, h as AgentOutputSignals } from "./agent-interface-3YfIWZmY.js";
-import { c as runErrorType, i as lastStatusLine, l as setupSignalFailure, n as buildScrubbedEnv, o as withMode, r as extractText, s as bindPiCancellation, t as applyOutroMarkers, u as createAioCapture } from "./pi-DTj1hsJe.js";
-import { g as TaskStatus } from "./queue-tools-BoIITT7w.js";
-import { c as queueTools, l as renderToolInventory, r as allowsPostHogMcp } from "./agent-prompt-loader-hOHONY7u.js";
+import { n as currentAccessToken } from "./oauth-session-CfkZ339p.js";
+import { c as REMARK_INSTRUCTION, f as gatewayAuth, o as withGatewayRemint, r as buildGatewayProvider, t as GATEWAY_PROVIDER, u as policyAbortReason } from "./gateway-CJ8Jqbll.js";
+import { g as assembleCommandments, h as AgentOutputSignals } from "./agent-interface-fcDXqb-_.js";
+import { c as runErrorType, i as lastStatusLine, l as setupSignalFailure, n as buildScrubbedEnv, o as withMode, r as extractText, s as bindPiCancellation, t as applyOutroMarkers, u as createAioCapture } from "./pi-2pYz2OY3.js";
+import { d as taskReported } from "./queue-tools-10w8lhEs.js";
+import { c as queueTools, l as renderToolInventory, r as allowsPostHogMcp } from "./agent-prompt-loader-F9gGPMt0.js";
 //#region src/agent/runner/harness/pi/task.ts
 /**
 * Orchestrator-mode execution on pi: one fresh pi session per unit of work —
@@ -98,8 +98,7 @@ const SEED_NUDGE = "The queue is still empty. Seed it now with enqueue_task call
 /** Whether this unit of work has reached its terminal state. */
 function isSettled(ctx) {
 	if (!ctx.currentTaskId) return ctx.store.list().length > 0;
-	const task = ctx.store.get(ctx.currentTaskId);
-	return !!task && (task.status === TaskStatus.Done || task.status === TaskStatus.Failed || task.status === TaskStatus.Skipped);
+	return taskReported(ctx);
 }
 async function runPiTask(inputs) {
 	if (inputs.signal?.aborted) return {
@@ -125,8 +124,9 @@ async function runPiTask(inputs) {
 			duration_seconds: Math.round(durationMs / 1e3)
 		};
 	};
-	const captureAborted = (failureMode) => analytics.wizardCapture("agent aborted", {
+	const captureAborted = (failureMode, source) => analytics.wizardCapture("agent aborted", {
 		failure_mode: failureMode,
+		...source && { source },
 		...runDurations(),
 		model: modelId,
 		...analyticsProperties
@@ -134,6 +134,8 @@ async function runPiTask(inputs) {
 	let mcpCleanup;
 	let aioFailed = true;
 	let cancellation;
+	let abortReason;
+	let remarkTurn = false;
 	try {
 		const { createAgentSession, DefaultResourceLoader, SessionManager, AuthStorage, ModelRegistry, getAgentDir, createLsToolDefinition, createFindToolDefinition, createGrepToolDefinition, createBashToolDefinition, createReadToolDefinition, createEditToolDefinition, createWriteToolDefinition } = await import("@earendil-works/pi-coding-agent");
 		const refreshAuth = async () => gatewayAuth(boot.credentials.host, await currentAccessToken(boot.credentials), boot.programId);
@@ -157,19 +159,19 @@ async function runPiTask(inputs) {
 			message: "pi: gateway model could not be resolved"
 		};
 		const askState = { pending: false };
-		const { createSecurityExtension } = await import("./security-Cz3a-d7r.js");
+		const { createSecurityExtension } = await import("./security-ppK2MwCn.js");
 		const security = createSecurityExtension({
 			disallowedTools: fenceDisallowList(disallowedTools),
 			triageProvider: boot.triageProvider,
 			getWizardAskPending: () => askState.pending,
 			workingDirectory: input.installDir
 		});
-		const { prewarmYaraScanner } = await import("./yara-hooks-CxksH-GZ.js");
+		const { prewarmYaraScanner } = await import("./yara-hooks-BwhEDXIt.js");
 		prewarmYaraScanner();
 		const extensionFactories = [security.factory];
 		let posthogMcp = false;
 		if (allowsPostHogMcp(allowedTools)) try {
-			const { setupPostHogMcp } = await import("./mcp-Buf9sfFm.js");
+			const { setupPostHogMcp } = await import("./mcp-D73aCOHK.js");
 			const mcp = await setupPostHogMcp({
 				mcpUrl: boot.credentials.host.mcpUrl,
 				accessToken: await currentAccessToken(boot.credentials),
@@ -225,7 +227,7 @@ async function runPiTask(inputs) {
 			find: () => withMode(createFindToolDefinition(dir), "parallel"),
 			grep: () => withMode(createGrepToolDefinition(dir), "parallel")
 		}).filter(([name]) => codingTools.has(name)).map(([, make]) => make());
-		const { createWizardPiTools } = await import("./tools-Bm0FDT6f.js");
+		const { createWizardPiTools } = await import("./tools-g42e5kJz.js");
 		const wizardToolNames = allowedPiWizardTools(allowedTools);
 		const wizardTools = createWizardPiTools({
 			workingDirectory: dir,
@@ -240,7 +242,7 @@ async function runPiTask(inputs) {
 				askState.pending = pending;
 			}
 		}).filter((t) => wizardToolNames.has(t.name));
-		const { createPiOrchestratorTools } = await import("./orchestrator-tools-DyKws92o.js");
+		const { createPiOrchestratorTools } = await import("./orchestrator-tools-lvNVQhzs.js");
 		const queueTools = createPiOrchestratorTools(orchestrator).filter((t) => orchestratorTools.has(t.name));
 		const customTools = [
 			...codingToolDefs,
@@ -285,6 +287,8 @@ async function runPiTask(inputs) {
 					assistantTurns += 1;
 					turns.noteAssistantTurn(event.message);
 					const assistant = extractText(event.message).trim();
+					if (!remarkTurn && !taskReported(orchestrator)) abortReason ??= policyAbortReason(assistant);
+					if (abortReason) cancellation?.abort();
 					if (assistant) {
 						logToFile(`[pi-task] assistant: ${assistant.slice(0, 1e3)}`);
 						applyOutroMarkers(assistant, emit);
@@ -325,16 +329,19 @@ async function runPiTask(inputs) {
 			await turns.prompt(taskPrompt);
 			terminal = turns.terminalFailure();
 			let nudges = 0;
-			while (nudges < MAX_TASK_NUDGES && !security.state.criticalViolation && !inputs.signal?.aborted && !terminal && !setupSignalFailure(signals) && !isSettled(orchestrator)) {
+			while (nudges < MAX_TASK_NUDGES && !security.state.criticalViolation && !inputs.signal?.aborted && !terminal && !abortReason && !setupSignalFailure(signals) && !isSettled(orchestrator)) {
 				nudges += 1;
 				logToFile(`[pi-task] completion guard: not settled, nudge ${nudges}/${MAX_TASK_NUDGES}`);
 				await turns.prompt(orchestrator.currentTaskId ? TASK_NUDGE : SEED_NUDGE);
 				terminal = turns.terminalFailure();
 			}
-			if (requestRemark && !security.state.criticalViolation && !terminal && !setupSignalFailure(signals) && !inputs.signal?.aborted) try {
-				await agentSession.prompt(REMARK_INSTRUCTION);
-			} catch (err) {
-				logToFile(`[pi-task] remark request failed: ${String(err)}`);
+			if (requestRemark && !security.state.criticalViolation && !terminal && !abortReason && !setupSignalFailure(signals) && !inputs.signal?.aborted) {
+				remarkTurn = true;
+				try {
+					await agentSession.prompt(REMARK_INSTRUCTION);
+				} catch (err) {
+					logToFile(`[pi-task] remark request failed: ${String(err)}`);
+				}
 			}
 		} finally {
 			try {
@@ -346,9 +353,13 @@ async function runPiTask(inputs) {
 			classification: "WIZARD_ABORT",
 			message: "Agent run cancelled"
 		};
+		if (abortReason) terminal = {
+			classification: "WIZARD_ABORT",
+			message: abortReason
+		};
 		if (terminal && !security.state.criticalViolation) {
 			if (errorMessage || spinnerMessage) spinner.stop(errorMessage ?? "Task failed");
-			captureAborted(terminal.classification);
+			captureAborted(terminal.classification, abortReason ? "gateway_policy" : void 0);
 			if (terminal.status === 401) return {
 				kind: "decided_failure",
 				failure: {
@@ -446,4 +457,4 @@ async function runPiTask(inputs) {
 //#endregion
 export { runPiTask };
 
-//# sourceMappingURL=task-CmNe3xeg.js.map
+//# sourceMappingURL=task-Y8lWoDE7.js.map

package/dist/task-Y8lWoDE7.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-Y8lWoDE7.js","names":[],"sources":["../src/agent/runner/harness/pi/task.ts"],"sourcesContent":["/**\n * Orchestrator-mode execution on pi: one fresh pi session per unit of work —\n * the seed plan, or one drained task. The linear pipeline's concerns (skill\n * menu, todo panel, event-plan cleanup) stay in `index.ts`; this module builds\n * the leaner per-task session: gateway model, security fence, the task's\n * allowed coding tools, the wizard env tools, and the in-process orchestrator\n * queue tools.\n *\n * The task's `allowedTools` / `disallowedTools` arrive in the wizard's tool\n * vocabulary (`Read`, `Edit`, `Glob`, …, plus MCP-qualified orchestrator names\n * from `agentRunTools`). pi is where they become real: allowed names decide\n * which pi tool definitions get registered at all, and the disallow list is\n * ALSO handed to the security fence, so a name that never got registered stays\n * blocked even if the model hallucinates it.\n *\n * Loaded lazily from `index.ts` (typebox/ESM constraint, same as tools.ts).\n */\n\nimport { logToFile } from '@utils/debug';\nimport { analytics } from '@utils/analytics';\nimport {\n  Harness,\n  Sequence,\n  WIZARD_REMARK_EVENT_NAME,\n  wizardUserAgentForProgram,\n} from '@shared/constants';\nimport {\n  allowsPostHogMcp,\n  queueTools,\n  renderToolInventory,\n} from '../../../agent-prompt-loader';\nimport { AgentErrorType } from '../../../agent-interface';\nimport { REMARK_INSTRUCTION, policyAbortReason } from '../../../signals';\nimport { AgentOutputSignals } from '../../../output-signals';\nimport {\n  taskReported,\n  type OrchestratorToolsContext,\n} from '../../sequence/orchestrator/queue-tools';\nimport type { AgentResult, TaskRunInputs } from '../types';\nimport { gatewayAuth, type GatewayAuth } from '../../../gateway-session';\nimport { currentAccessToken } from '@shared/oauth-session';\nimport {\n  buildGatewayProvider,\n  GATEWAY_PROVIDER,\n  withGatewayRemint,\n} from './gateway';\nimport { runErrorType, setupSignalFailure } from './completion';\nimport { bindPiCancellation } from './cancellation';\nimport { classifyRunFailure, ErrorCodes } from '@shared/errors';\nimport { assembleCommandments } from '../../switchboard/commandments';\nimport {\n  applyOutroMarkers,\n  buildScrubbedEnv,\n  extractText,\n  lastStatusLine,\n  withMode,\n} from './index';\nimport { createAioCapture } from '../../../aio-capture';\n\n/** wizard tool vocabulary → the pi tool definitions it unlocks. */\nconst CODING_TOOL_MAP: Record<string, readonly string[]> = {\n  Read: ['read'],\n  Edit: ['edit'],\n  Write: ['write'],\n  Bash: ['bash'],\n  Glob: ['find', 'ls'],\n  Grep: ['grep'],\n};\n\n/** `mcp__wizard-tools__wizard_ask` → `wizard_ask`; native names pass through. */\nfunction shortToolName(name: string): string {\n  return name.replace(/^mcp__.+?__/, '');\n}\n\n/**\n * The pi coding tools a task may use. An empty allow list means \"no\n * restriction\" (mirrors the SDK), so every coding tool registers.\n */\nexport function allowedPiCodingTools(\n  allowedTools: readonly string[] | undefined,\n): Set<string> {\n  const allowed = (allowedTools ?? []).map(shortToolName);\n  const names = allowed.length\n    ? allowed.flatMap((name) => CODING_TOOL_MAP[name] ?? [])\n    : Object.values(CODING_TOOL_MAP).flat();\n  return new Set(names);\n}\n\n/**\n * The orchestrator queue tools this agent gets. Everything not disallowed:\n * the seed's frontmatter disallows `complete_task` (it is not a task), a\n * task's disallows `enqueue_task` (the seed owns the graph).\n */\nexport function allowedOrchestratorTools(\n  disallowedTools: readonly string[] | undefined,\n): Set<string> {\n  return new Set(queueTools(disallowedTools ?? []));\n}\n\n/**\n * The wizard tools a task gets. Four are always on — their handlers are fenced\n * and the coding tasks depend on them. The rest are opt-in per task through\n * its frontmatter: `wizard_ask` stops the run until a person answers, and the\n * skill-menu pair (`load_skill_menu`, `install_skill`) lets a task pull its\n * own skill variant.\n */\nconst ALWAYS_ON_WIZARD_TOOLS = [\n  'check_env_keys',\n  'set_env_values',\n  'detect_package_manager',\n  'publish_handoff',\n];\n\nconst OPT_IN_WIZARD_TOOLS = [\n  'wizard_ask',\n  'load_skill_menu',\n  'install_skill',\n  // Audit programs only: they declare the ledger tools on `allowedTools`.\n  'audit_seed_checks',\n  'audit_add_checks',\n  'audit_resolve_checks',\n];\n\nexport function allowedPiWizardTools(\n  allowedTools: readonly string[] | undefined,\n): Set<string> {\n  const allowed = (allowedTools ?? []).map(shortToolName);\n  return new Set([\n    ...ALWAYS_ON_WIZARD_TOOLS,\n    ...OPT_IN_WIZARD_TOOLS.filter((tool) => allowed.includes(tool)),\n  ]);\n}\n\n/**\n * The disallow list for the security fence: the wizard-vocabulary names as\n * given (the fence translates pi built-ins to the same vocabulary) plus the\n * short names, so a disallowed orchestrator tool is blocked under the name pi\n * would call it by.\n */\nexport function fenceDisallowList(\n  disallowedTools: readonly string[] | undefined,\n): string[] {\n  const names = disallowedTools ?? [];\n  return [...new Set([...names, ...names.map(shortToolName)])];\n}\n\n/** Nudges when the session returns without the work reaching a terminal state. */\nconst MAX_TASK_NUDGES = 3;\n\nconst TASK_NUDGE =\n  'You have not called complete_task yet. Finish your task now: if the work is done, call complete_task with your handoff; if it cannot be done, call it with status \"failed\" or \"not needed\" and say why.';\n\nconst SEED_NUDGE =\n  'The queue is still empty. Seed it now with enqueue_task calls for the task graph you planned.';\n\n/** Whether this unit of work has reached its terminal state. */\nfunction isSettled(ctx: OrchestratorToolsContext): boolean {\n  if (!ctx.currentTaskId) {\n    // The seed's job is a seeded queue, not a complete_task call.\n    return ctx.store.list().length > 0;\n  }\n  return taskReported(ctx);\n}\n\nexport async function runPiTask(inputs: TaskRunInputs): Promise<AgentResult> {\n  if (inputs.signal?.aborted) {\n    return {\n      kind: 'abort',\n      classification: AgentErrorType.ABORT,\n      message: 'Agent run cancelled',\n    };\n  }\n  const {\n    config,\n    input,\n    boot,\n    emit,\n    prompt,\n    spinner,\n    model: modelId,\n    effort,\n    allowedTools,\n    disallowedTools,\n    askBridge,\n    orchestrator,\n    spinnerMessage,\n    successMessage,\n    errorMessage,\n    requestRemark,\n    analyticsProperties,\n  } = inputs;\n\n  if (spinnerMessage) spinner.start(spinnerMessage);\n\n  const capture = createAioCapture({\n    enabled: input.flags.captureAio,\n    projectApiKey: boot.credentials.projectApiKey,\n    apiHost: boot.credentials.host.apiHost,\n    runTags: boot.wizardMetadata,\n  });\n\n  const startTime = Date.now();\n  const signals = new AgentOutputSignals();\n  let assistantTurns = 0;\n  const runDurations = () => {\n    const durationMs = Date.now() - startTime;\n    return {\n      duration_ms: durationMs,\n      duration_seconds: Math.round(durationMs / 1000),\n    };\n  };\n  // How this task run failed: the closed AgentErrorType it is about to return.\n  // Without it every terminal path below — a security termination, a rate\n  // limit, a gateway error — arrived as the same unlabelled event, so a task\n  // agent that died could be counted but not diagnosed. A security stop is not\n  // an error, hence \"failure mode\" over \"error\".\n  //\n  // Not `reason`: the linear sequence emits this same event with a `reason`\n  // holding the agent's free-text [ABORT] string, and one property cannot be\n  // both a closed enum and unbounded prose without making either unreadable.\n  // `source` tells a gateway policy refusal apart from a program's [ABORT].\n  const captureAborted = (\n    failureMode: AgentErrorType,\n    source?: 'gateway_policy',\n  ) =>\n    analytics.wizardCapture('agent aborted', {\n      failure_mode: failureMode,\n      ...(source && { source }),\n      ...runDurations(),\n      model: modelId,\n      ...analyticsProperties,\n    });\n\n  let mcpCleanup: (() => void) | undefined;\n  let aioFailed = true;\n  let cancellation: ReturnType<typeof bindPiCancellation> | undefined;\n  let abortReason: string | undefined;\n  let remarkTurn = false;\n  try {\n    const sdk = await import('@earendil-works/pi-coding-agent');\n    const {\n      createAgentSession,\n      DefaultResourceLoader,\n      SessionManager,\n      AuthStorage,\n      ModelRegistry,\n      getAgentDir,\n      createLsToolDefinition,\n      createFindToolDefinition,\n      createGrepToolDefinition,\n      createBashToolDefinition,\n      createReadToolDefinition,\n      createEditToolDefinition,\n      createWriteToolDefinition,\n    } = sdk;\n\n    // Reads the live OAuth token, so a mid-run rotation re-mints on the new one.\n    const refreshAuth = async () =>\n      gatewayAuth(\n        boot.credentials.host,\n        await currentAccessToken(boot.credentials),\n        boot.programId,\n      );\n    const auth = await refreshAuth();\n    const providerInputs = (current: GatewayAuth) => ({\n      gatewayUrl: current.gatewayUrl,\n      accessToken: current.token,\n      teamId: current.teamId,\n      wizardMetadata: boot.wizardMetadata,\n      wizardFlags: boot.wizardFlags,\n      modelId,\n      // Per-task agents own their effort via the prompt frontmatter, falling\n      // back to the model table.\n      effort,\n    });\n    const { provider, caps } = buildGatewayProvider(providerInputs(auth));\n    const registry = ModelRegistry.inMemory(AuthStorage.create());\n    registry.registerProvider(GATEWAY_PROVIDER, provider as never);\n    const model = registry.find(GATEWAY_PROVIDER, modelId);\n    if (!model) {\n      return {\n        kind: 'failure',\n        classification: AgentErrorType.API_ERROR,\n        message: 'pi: gateway model could not be resolved',\n      };\n    }\n\n    // Shared flag: true while a wizard_ask overlay is open. The ask tool sets\n    // it (onAskPendingChange, below); the security fence reads it to pause\n    // Write/Edit until the answer comes back. Wired the same way as the linear\n    // pi run — without it the warehouse task could mutate files while its\n    // credential prompt sits open (up to LONGER_ASK_TIMEOUT_MS).\n    const askState = { pending: false };\n\n    // The same fail-closed fence as the linear run, with the task's disallow\n    // list layered in (both the wizard-vocabulary and pi-short names).\n    const { createSecurityExtension } = await import('./security');\n    const security = createSecurityExtension({\n      disallowedTools: fenceDisallowList(disallowedTools),\n      triageProvider: boot.triageProvider,\n      getWizardAskPending: () => askState.pending,\n      workingDirectory: input.installDir,\n    });\n    const { prewarmYaraScanner } = await import('../../../yara-hooks');\n    void prewarmYaraScanner();\n\n    // PostHog MCP, for the tasks whose prompt requests it. Tasks that never\n    // asked skip the handshake and never see a posthog tool.\n    const extensionFactories = [security.factory] as Array<\n      (pi: unknown) => void\n    >;\n    let posthogMcp = false;\n    if (allowsPostHogMcp(allowedTools)) {\n      try {\n        const { setupPostHogMcp } = await import('./mcp');\n        const mcp = await setupPostHogMcp({\n          mcpUrl: boot.credentials.host.mcpUrl,\n          accessToken: await currentAccessToken(boot.credentials),\n          // Same `program:` marker as the linear run, so a task's MCP writes are\n          // attributed to the program that queued it. `anthropic/index.ts` uses\n          // `programId` as the label on the task path too.\n          userAgent: wizardUserAgentForProgram(config.programId),\n        });\n        extensionFactories.push(mcp.extensionFactory);\n        mcpCleanup = mcp.cleanup;\n        posthogMcp = true;\n      } catch (err) {\n        try {\n          mcpCleanup?.();\n        } catch {\n          /* Setup cleanup is best effort. */\n        }\n        mcpCleanup = undefined;\n        // Silent here reads as a task failure minutes later: a task that asked\n        // for this tool can only skip or fail without it.\n        logToFile(`[pi-task] PostHog MCP setup skipped: ${String(err)}`);\n        analytics.wizardCapture('mcp setup failed', {\n          harness: 'pi',\n          scope: 'task',\n          error: String(err).slice(0, 300),\n        });\n      }\n    }\n\n    const codingTools = allowedPiCodingTools(allowedTools);\n    const orchestratorTools = allowedOrchestratorTools(disallowedTools);\n\n    const resourceLoader = new DefaultResourceLoader({\n      cwd: input.installDir,\n      agentDir: getAgentDir(),\n      systemPrompt: assembleCommandments({\n        program: config.programId,\n        sequence: Sequence.orchestrator,\n        harness: Harness.pi,\n        caps: { bash: codingTools.has('bash'), posthogMcp },\n      }),\n      noExtensions: true,\n      noSkills: true,\n      noContextFiles: true,\n      noPromptTemplates: true,\n      noThemes: true,\n      extensionFactories,\n    });\n    await resourceLoader.reload();\n\n    // The task's coding tools, gated by its allow list. Reads and searches run\n    // in parallel; mutating tools stay sequential. Bash subprocesses get the\n    // scrubbed env, same as the linear run.\n    const dir = input.installDir;\n    const codingToolFactories = {\n      read: () => withMode(createReadToolDefinition(dir), 'parallel'),\n      edit: () => withMode(createEditToolDefinition(dir), 'sequential'),\n      write: () => withMode(createWriteToolDefinition(dir), 'sequential'),\n      bash: () =>\n        withMode(\n          createBashToolDefinition(dir, {\n            spawnHook: (ctx) => ({ ...ctx, env: buildScrubbedEnv() }),\n          }),\n          'sequential',\n        ),\n      ls: () => withMode(createLsToolDefinition(dir), 'parallel'),\n      find: () => withMode(createFindToolDefinition(dir), 'parallel'),\n      grep: () => withMode(createGrepToolDefinition(dir), 'parallel'),\n    } as const;\n    const codingToolDefs = Object.entries(codingToolFactories)\n      .filter(([name]) => codingTools.has(name))\n      .map(([, make]) => make());\n\n    // Wizard env + package-manager tools are always on — their handlers are\n    // fenced, and init/build tasks depend on them. publish_handoff rides\n    // along (it only emits) so the report task can publish the handoff; every\n    // other task is told, on the call, that it still owes a complete_task.\n    const { createWizardPiTools } = await import('./tools');\n    const wizardToolNames = allowedPiWizardTools(allowedTools);\n    const wizardTools = createWizardPiTools({\n      workingDirectory: dir,\n      skillsBaseUrl: boot.skillsBaseUrl,\n      triageProvider: boot.triageProvider,\n      emit,\n      taskAgent: orchestrator.currentTaskId !== undefined,\n      programId: boot.programId,\n      handoffNotebook: boot.handoffNotebook,\n      // Present only for a task allowed to ask; without it wizard_ask errors\n      // instead of hanging on a prompt nobody will ever see.\n      askBridge,\n      // Pause Write/Edit while the ask overlay is open (see askState above).\n      onAskPendingChange: (pending) => {\n        askState.pending = pending;\n      },\n    }).filter((t) => wizardToolNames.has(t.name));\n\n    const { createPiOrchestratorTools } = await import('./orchestrator-tools');\n    const queueTools = createPiOrchestratorTools(orchestrator).filter((t) =>\n      orchestratorTools.has(t.name),\n    );\n\n    const customTools = [...codingToolDefs, ...wizardTools, ...queueTools];\n    const { session: agentSession } = await createAgentSession({\n      model,\n      modelRegistry: registry,\n      thinkingLevel: caps.thinkingLevel,\n      cwd: dir,\n      sessionManager: SessionManager.inMemory(dir),\n      resourceLoader,\n      noTools: 'builtin',\n      customTools,\n    });\n    cancellation = bindPiCancellation(inputs.signal, agentSession, (error) => {\n      logToFile(`[pi-task] abort failed: ${String(error)}`);\n    });\n    await agentSession.bindExtensions({});\n\n    // A turn that ends on a 401 from an aged bearer re-mints once and\n    // continues with the nudge the task would get anyway.\n    const turns = withGatewayRemint({\n      signal: inputs.signal,\n      session: agentSession,\n      registry,\n      auth,\n      refreshAuth,\n      providerInputs,\n      continueText: () =>\n        orchestrator.currentTaskId ? TASK_NUDGE : SEED_NUDGE,\n      onRemint: () => {\n        logToFile('[pi-task] gateway token renewed after a 401; continuing');\n        analytics.wizardCapture('gateway token reminted', { harness: 'pi' });\n      },\n    });\n\n    // The one complete list: exactly the tools registered on this session, in\n    // the names the agent will call them by. posthog_exec binds as an extension.\n    const toolNames = [\n      ...customTools.map((t) => t.name),\n      ...(posthogMcp ? ['posthog_exec'] : []),\n    ];\n    logToFile(`[pi-task] tools passed to model: ${toolNames.join(', ')}`);\n    const taskPrompt = `${prompt}\\n\\n${renderToolInventory(toolNames)}`;\n\n    const unsubscribe = agentSession.subscribe((event) => {\n      // Mirror the turn into AIO. No-op when --capture-aio is off. Runs\n      // before the role guard so the module's own filter is authoritative.\n      capture.captureFromPiMessageEndEvent(event);\n\n      switch (event.type) {\n        case 'message_end': {\n          // User prompts also emit message_end; only assistant turns count.\n          if ((event.message as { role?: string })?.role !== 'assistant') {\n            break;\n          }\n          assistantTurns += 1;\n          turns.noteAssistantTurn(event.message);\n          const assistant = extractText(event.message).trim();\n          // The refusal marker ends the run from a work turn, not the remark or a turn after complete_task.\n          if (!remarkTurn && !taskReported(orchestrator))\n            abortReason ??= policyAbortReason(assistant);\n          if (abortReason) cancellation?.abort();\n          if (assistant) {\n            logToFile(`[pi-task] assistant: ${assistant.slice(0, 1000)}`);\n            applyOutroMarkers(assistant, emit);\n            const statusText = lastStatusLine(assistant);\n            if (statusText) {\n              emit({ kind: 'status', message: statusText });\n              spinner.message(statusText);\n            }\n            for (const line of assistant.split('\\n')) signals.push(line);\n          }\n          break;\n        }\n        case 'tool_execution_start': {\n          const args = JSON.stringify(event.args ?? {}).slice(0, 200);\n          logToFile(`[pi-task] → ${event.toolName} ${args}`);\n          break;\n        }\n        case 'tool_execution_end': {\n          if (event.isError) {\n            const detail =\n              typeof event.result === 'string'\n                ? event.result\n                : JSON.stringify(event.result ?? '');\n            logToFile(`[pi-task] ✗ ${event.toolName}: ${detail.slice(0, 300)}`);\n          }\n          break;\n        }\n        default:\n          break;\n      }\n    });\n\n    // Seed AIO capture with this task's prompt — includes any handoff data\n    // from prior tasks (the orchestrator bakes it into the prompt string\n    // before it reaches this call site).\n    capture.setInitialPrompt(taskPrompt);\n\n    let terminal = turns.terminalFailure();\n    try {\n      if (inputs.signal?.aborted)\n        return {\n          kind: 'abort',\n          classification: AgentErrorType.ABORT,\n          message: 'Agent run cancelled',\n        };\n      await turns.prompt(taskPrompt);\n      terminal = turns.terminalFailure();\n\n      // pi's prompt() resolves the moment a turn carries no tool call — which\n      // an agent mid-plan does emit. While the work has not reached its\n      // terminal state (task not reported, seed queue still empty), nudge.\n      let nudges = 0;\n      while (\n        nudges < MAX_TASK_NUDGES &&\n        !security.state.criticalViolation &&\n        !inputs.signal?.aborted &&\n        !terminal &&\n        !abortReason &&\n        !setupSignalFailure(signals) &&\n        !isSettled(orchestrator)\n      ) {\n        nudges += 1;\n        logToFile(\n          `[pi-task] completion guard: not settled, nudge ${nudges}/${MAX_TASK_NUDGES}`,\n        );\n        await turns.prompt(\n          orchestrator.currentTaskId ? TASK_NUDGE : SEED_NUDGE,\n        );\n        terminal = turns.terminalFailure();\n      }\n\n      if (\n        requestRemark &&\n        !security.state.criticalViolation &&\n        !terminal &&\n        !abortReason &&\n        !setupSignalFailure(signals) &&\n        !inputs.signal?.aborted\n      ) {\n        remarkTurn = true;\n        try {\n          await agentSession.prompt(REMARK_INSTRUCTION);\n        } catch (err) {\n          logToFile(`[pi-task] remark request failed: ${String(err)}`);\n        }\n      }\n    } finally {\n      try {\n        unsubscribe();\n      } catch {\n        /* Keep the terminal result. */\n      }\n    }\n\n    if (inputs.signal?.aborted) {\n      return {\n        kind: 'abort',\n        classification: AgentErrorType.ABORT,\n        message: 'Agent run cancelled',\n      };\n    }\n\n    if (abortReason)\n      terminal = { classification: AgentErrorType.ABORT, message: abortReason };\n    if (terminal && !security.state.criticalViolation) {\n      if (errorMessage || spinnerMessage)\n        spinner.stop(errorMessage ?? 'Task failed');\n      captureAborted(\n        terminal.classification,\n        abortReason ? 'gateway_policy' : undefined,\n      );\n      if (terminal.status === 401) {\n        return {\n          kind: 'decided_failure',\n          failure: {\n            code: ErrorCodes.AuthInvalidOrExpired,\n            message: 'Authentication failed (401)',\n            detail: { providerMessage: terminal.message },\n          },\n        };\n      }\n      return terminal.classification === AgentErrorType.ABORT\n        ? {\n            kind: 'abort',\n            classification: AgentErrorType.ABORT,\n            message: terminal.message,\n          }\n        : {\n            kind: 'failure',\n            classification: terminal.classification,\n            message: terminal.message,\n          };\n    }\n\n    if (security.state.criticalViolation) {\n      spinner.stop('Security violation detected');\n      logToFile(\n        `[pi-task] terminated: YARA violation (blocked ${security.state.blockedCount} call(s))`,\n      );\n      captureAborted(AgentErrorType.YARA_VIOLATION);\n      return { kind: 'failure', classification: AgentErrorType.YARA_VIOLATION };\n    }\n\n    const setupFailure = setupSignalFailure(signals);\n    if (setupFailure) {\n      spinner.stop('Agent could not access setup instructions');\n      logToFile(`[pi-task] setup failed: ${setupFailure}`);\n      captureAborted(setupFailure);\n      return { kind: 'failure', classification: setupFailure };\n    }\n\n    const remark = signals.remark();\n    if (remark) {\n      analytics.capture(WIZARD_REMARK_EVENT_NAME, { remark });\n    }\n\n    const stats = agentSession.getSessionStats();\n    const durations = runDurations();\n    analytics.wizardCapture('agent completed', {\n      ...durations,\n      model: modelId,\n      num_turns: assistantTurns,\n      input_tokens: stats.tokens.input,\n      output_tokens: stats.tokens.output,\n      cache_creation_input_tokens: stats.tokens.cacheWrite,\n      cache_read_input_tokens: stats.tokens.cacheRead,\n      ...analyticsProperties,\n    });\n    // Per-task usage on one parseable line so a run's per-task time and cost are\n    // observable from the log, not only from analytics.\n    const taskType =\n      typeof (analyticsProperties as { task_type?: unknown })?.task_type ===\n      'string'\n        ? (analyticsProperties as { task_type: string }).task_type\n        : modelId;\n    logToFile(\n      `[pi-task] usage task=${taskType} model=${modelId} effort=${caps.thinkingLevel} dur=${durations.duration_seconds}s turns=${assistantTurns} in=${stats.tokens.input} out=${stats.tokens.output} cacheR=${stats.tokens.cacheRead} cacheW=${stats.tokens.cacheWrite}`,\n    );\n    if (successMessage) spinner.stop(successMessage);\n    aioFailed = false;\n    return { kind: 'success' };\n  } catch (err) {\n    if (inputs.signal?.aborted) {\n      return {\n        kind: 'abort',\n        classification: AgentErrorType.ABORT,\n        message: 'Agent run cancelled',\n      };\n    }\n    const message = err instanceof Error ? err.message : String(err);\n    logToFile(`[pi-task] run error: ${message}`);\n    if (errorMessage || spinnerMessage) {\n      spinner.stop(errorMessage ?? 'Task failed');\n    }\n    const coded = classifyRunFailure(err);\n    if (coded.coded && err instanceof Error) {\n      captureAborted(AgentErrorType.API_ERROR);\n      return {\n        kind: 'decided_failure',\n        failure: { code: coded.code, message: coded.message, error: err },\n      };\n    }\n    const classification = runErrorType(message);\n    captureAborted(classification);\n    return {\n      kind: 'failure',\n      classification,\n      message,\n      error: err instanceof Error ? err : undefined,\n    };\n  } finally {\n    await cancellation?.settle();\n    try {\n      mcpCleanup?.();\n    } catch {\n      /* Keep the terminal result. */\n    }\n    try {\n      capture.finishPiRun(aioFailed);\n    } catch {\n      /* Telemetry is best effort. */\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4DA,MAAM,kBAAqD;CACzD,MAAM,CAAC,OAAO;CACd,MAAM,CAAC,OAAO;CACd,OAAO,CAAC,QAAQ;CAChB,MAAM,CAAC,OAAO;CACd,MAAM,CAAC,QAAQ,KAAK;CACpB,MAAM,CAAC,OAAO;CACf;;AAGD,SAAS,cAAc,MAAsB;AAC3C,QAAO,KAAK,QAAQ,eAAe,GAAG;;;;;;AAOxC,SAAgB,qBACd,cACa;CACb,MAAM,WAAW,gBAAgB,EAAE,EAAE,IAAI,cAAc;CACvD,MAAM,QAAQ,QAAQ,SAClB,QAAQ,SAAS,SAAS,gBAAgB,SAAS,EAAE,CAAC,GACtD,OAAO,OAAO,gBAAgB,CAAC,MAAM;AACzC,QAAO,IAAI,IAAI,MAAM;;;;;;;AAQvB,SAAgB,yBACd,iBACa;AACb,QAAO,IAAI,IAAI,WAAW,mBAAmB,EAAE,CAAC,CAAC;;;;;;;;;AAUnD,MAAM,yBAAyB;CAC7B;CACA;CACA;CACA;CACD;AAED,MAAM,sBAAsB;CAC1B;CACA;CACA;CAEA;CACA;CACA;CACD;AAED,SAAgB,qBACd,cACa;CACb,MAAM,WAAW,gBAAgB,EAAE,EAAE,IAAI,cAAc;AACvD,QAAO,IAAI,IAAI,CACb,GAAG,wBACH,GAAG,oBAAoB,QAAQ,SAAS,QAAQ,SAAS,KAAK,CAAC,CAChE,CAAC;;;;;;;;AASJ,SAAgB,kBACd,iBACU;CACV,MAAM,QAAQ,mBAAmB,EAAE;AACnC,QAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,OAAO,GAAG,MAAM,IAAI,cAAc,CAAC,CAAC,CAAC;;;AAI9D,MAAM,kBAAkB;AAExB,MAAM,aACJ;AAEF,MAAM,aACJ;;AAGF,SAAS,UAAU,KAAwC;AACzD,KAAI,CAAC,IAAI,cAEP,QAAO,IAAI,MAAM,MAAM,CAAC,SAAS;AAEnC,QAAO,aAAa,IAAI;;AAG1B,eAAsB,UAAU,QAA6C;AAC3E,KAAI,OAAO,QAAQ,QACjB,QAAO;EACL,MAAM;EACN,gBAAA;EACA,SAAS;EACV;CAEH,MAAM,EACJ,QACA,OACA,MACA,MACA,QACA,SACA,OAAO,SACP,QACA,cACA,iBACA,WACA,cACA,gBACA,gBACA,cACA,eACA,wBACE;AAEJ,KAAI,eAAgB,SAAQ,MAAM,eAAe;CAEjD,MAAM,UAAU,iBAAiB;EAC/B,SAAS,MAAM,MAAM;EACrB,eAAe,KAAK,YAAY;EAChC,SAAS,KAAK,YAAY,KAAK;EAC/B,SAAS,KAAK;EACf,CAAC;CAEF,MAAM,YAAY,KAAK,KAAK;CAC5B,MAAM,UAAU,IAAI,oBAAoB;CACxC,IAAI,iBAAiB;CACrB,MAAM,qBAAqB;EACzB,MAAM,aAAa,KAAK,KAAK,GAAG;AAChC,SAAO;GACL,aAAa;GACb,kBAAkB,KAAK,MAAM,aAAa,IAAK;GAChD;;CAYH,MAAM,kBACJ,aACA,WAEA,UAAU,cAAc,iBAAiB;EACvC,cAAc;EACd,GAAI,UAAU,EAAE,QAAQ;EACxB,GAAG,cAAc;EACjB,OAAO;EACP,GAAG;EACJ,CAAC;CAEJ,IAAI;CACJ,IAAI,YAAY;CAChB,IAAI;CACJ,IAAI;CACJ,IAAI,aAAa;AACjB,KAAI;EAEF,MAAM,EACJ,oBACA,uBACA,gBACA,aACA,eACA,aACA,wBACA,0BACA,0BACA,0BACA,0BACA,0BACA,8BAdU,MAAM,OAAO;EAkBzB,MAAM,cAAc,YAClB,YACE,KAAK,YAAY,MACjB,MAAM,mBAAmB,KAAK,YAAY,EAC1C,KAAK,UACN;EACH,MAAM,OAAO,MAAM,aAAa;EAChC,MAAM,kBAAkB,aAA0B;GAChD,YAAY,QAAQ;GACpB,aAAa,QAAQ;GACrB,QAAQ,QAAQ;GAChB,gBAAgB,KAAK;GACrB,aAAa,KAAK;GAClB;GAGA;GACD;EACD,MAAM,EAAE,UAAU,SAAS,qBAAqB,eAAe,KAAK,CAAC;EACrE,MAAM,WAAW,cAAc,SAAS,YAAY,QAAQ,CAAC;AAC7D,WAAS,iBAAiB,kBAAkB,SAAkB;EAC9D,MAAM,QAAQ,SAAS,KAAK,kBAAkB,QAAQ;AACtD,MAAI,CAAC,MACH,QAAO;GACL,MAAM;GACN,gBAAA;GACA,SAAS;GACV;EAQH,MAAM,WAAW,EAAE,SAAS,OAAO;EAInC,MAAM,EAAE,4BAA4B,MAAM,OAAO;EACjD,MAAM,WAAW,wBAAwB;GACvC,iBAAiB,kBAAkB,gBAAgB;GACnD,gBAAgB,KAAK;GACrB,2BAA2B,SAAS;GACpC,kBAAkB,MAAM;GACzB,CAAC;EACF,MAAM,EAAE,uBAAuB,MAAM,OAAO;AACvC,sBAAoB;EAIzB,MAAM,qBAAqB,CAAC,SAAS,QAAQ;EAG7C,IAAI,aAAa;AACjB,MAAI,iBAAiB,aAAa,CAChC,KAAI;GACF,MAAM,EAAE,oBAAoB,MAAM,OAAO;GACzC,MAAM,MAAM,MAAM,gBAAgB;IAChC,QAAQ,KAAK,YAAY,KAAK;IAC9B,aAAa,MAAM,mBAAmB,KAAK,YAAY;IAIvD,WAAW,0BAA0B,OAAO,UAAU;IACvD,CAAC;AACF,sBAAmB,KAAK,IAAI,iBAAiB;AAC7C,gBAAa,IAAI;AACjB,gBAAa;WACN,KAAK;AACZ,OAAI;AACF,kBAAc;WACR;AAGR,gBAAa,KAAA;AAGb,aAAU,wCAAwC,OAAO,IAAI,GAAG;AAChE,aAAU,cAAc,oBAAoB;IAC1C,SAAS;IACT,OAAO;IACP,OAAO,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI;IACjC,CAAC;;EAIN,MAAM,cAAc,qBAAqB,aAAa;EACtD,MAAM,oBAAoB,yBAAyB,gBAAgB;EAEnE,MAAM,iBAAiB,IAAI,sBAAsB;GAC/C,KAAK,MAAM;GACX,UAAU,aAAa;GACvB,cAAc,qBAAqB;IACjC,SAAS,OAAO;IAChB,UAAA;IACA,SAAA;IACA,MAAM;KAAE,MAAM,YAAY,IAAI,OAAO;KAAE;KAAY;IACpD,CAAC;GACF,cAAc;GACd,UAAU;GACV,gBAAgB;GAChB,mBAAmB;GACnB,UAAU;GACV;GACD,CAAC;AACF,QAAM,eAAe,QAAQ;EAK7B,MAAM,MAAM,MAAM;EAgBlB,MAAM,iBAAiB,OAAO,QAfF;GAC1B,YAAY,SAAS,yBAAyB,IAAI,EAAE,WAAW;GAC/D,YAAY,SAAS,yBAAyB,IAAI,EAAE,aAAa;GACjE,aAAa,SAAS,0BAA0B,IAAI,EAAE,aAAa;GACnE,YACE,SACE,yBAAyB,KAAK,EAC5B,YAAY,SAAS;IAAE,GAAG;IAAK,KAAK,kBAAkB;IAAE,GACzD,CAAC,EACF,aACD;GACH,UAAU,SAAS,uBAAuB,IAAI,EAAE,WAAW;GAC3D,YAAY,SAAS,yBAAyB,IAAI,EAAE,WAAW;GAC/D,YAAY,SAAS,yBAAyB,IAAI,EAAE,WAAW;GAChE,CACyD,CACvD,QAAQ,CAAC,UAAU,YAAY,IAAI,KAAK,CAAC,CACzC,KAAK,GAAG,UAAU,MAAM,CAAC;EAM5B,MAAM,EAAE,wBAAwB,MAAM,OAAO;EAC7C,MAAM,kBAAkB,qBAAqB,aAAa;EAC1D,MAAM,cAAc,oBAAoB;GACtC,kBAAkB;GAClB,eAAe,KAAK;GACpB,gBAAgB,KAAK;GACrB;GACA,WAAW,aAAa,kBAAkB,KAAA;GAC1C,WAAW,KAAK;GAChB,iBAAiB,KAAK;GAGtB;GAEA,qBAAqB,YAAY;AAC/B,aAAS,UAAU;;GAEtB,CAAC,CAAC,QAAQ,MAAM,gBAAgB,IAAI,EAAE,KAAK,CAAC;EAE7C,MAAM,EAAE,8BAA8B,MAAM,OAAO;EACnD,MAAM,aAAa,0BAA0B,aAAa,CAAC,QAAQ,MACjE,kBAAkB,IAAI,EAAE,KAAK,CAC9B;EAED,MAAM,cAAc;GAAC,GAAG;GAAgB,GAAG;GAAa,GAAG;GAAW;EACtE,MAAM,EAAE,SAAS,iBAAiB,MAAM,mBAAmB;GACzD;GACA,eAAe;GACf,eAAe,KAAK;GACpB,KAAK;GACL,gBAAgB,eAAe,SAAS,IAAI;GAC5C;GACA,SAAS;GACT;GACD,CAAC;AACF,iBAAe,mBAAmB,OAAO,QAAQ,eAAe,UAAU;AACxE,aAAU,2BAA2B,OAAO,MAAM,GAAG;IACrD;AACF,QAAM,aAAa,eAAe,EAAE,CAAC;EAIrC,MAAM,QAAQ,kBAAkB;GAC9B,QAAQ,OAAO;GACf,SAAS;GACT;GACA;GACA;GACA;GACA,oBACE,aAAa,gBAAgB,aAAa;GAC5C,gBAAgB;AACd,cAAU,0DAA0D;AACpE,cAAU,cAAc,0BAA0B,EAAE,SAAS,MAAM,CAAC;;GAEvE,CAAC;EAIF,MAAM,YAAY,CAChB,GAAG,YAAY,KAAK,MAAM,EAAE,KAAK,EACjC,GAAI,aAAa,CAAC,eAAe,GAAG,EAAE,CACvC;AACD,YAAU,oCAAoC,UAAU,KAAK,KAAK,GAAG;EACrE,MAAM,aAAa,GAAG,OAAO,MAAM,oBAAoB,UAAU;EAEjE,MAAM,cAAc,aAAa,WAAW,UAAU;AAGpD,WAAQ,6BAA6B,MAAM;AAE3C,WAAQ,MAAM,MAAd;IACE,KAAK,eAAe;AAElB,SAAK,MAAM,SAA+B,SAAS,YACjD;AAEF,uBAAkB;AAClB,WAAM,kBAAkB,MAAM,QAAQ;KACtC,MAAM,YAAY,YAAY,MAAM,QAAQ,CAAC,MAAM;AAEnD,SAAI,CAAC,cAAc,CAAC,aAAa,aAAa,CAC5C,iBAAgB,kBAAkB,UAAU;AAC9C,SAAI,YAAa,eAAc,OAAO;AACtC,SAAI,WAAW;AACb,gBAAU,wBAAwB,UAAU,MAAM,GAAG,IAAK,GAAG;AAC7D,wBAAkB,WAAW,KAAK;MAClC,MAAM,aAAa,eAAe,UAAU;AAC5C,UAAI,YAAY;AACd,YAAK;QAAE,MAAM;QAAU,SAAS;QAAY,CAAC;AAC7C,eAAQ,QAAQ,WAAW;;AAE7B,WAAK,MAAM,QAAQ,UAAU,MAAM,KAAK,CAAE,SAAQ,KAAK,KAAK;;AAE9D;;IAEF,KAAK,wBAAwB;KAC3B,MAAM,OAAO,KAAK,UAAU,MAAM,QAAQ,EAAE,CAAC,CAAC,MAAM,GAAG,IAAI;AAC3D,eAAU,eAAe,MAAM,SAAS,GAAG,OAAO;AAClD;;IAEF,KAAK;AACH,SAAI,MAAM,SAAS;MACjB,MAAM,SACJ,OAAO,MAAM,WAAW,WACpB,MAAM,SACN,KAAK,UAAU,MAAM,UAAU,GAAG;AACxC,gBAAU,eAAe,MAAM,SAAS,IAAI,OAAO,MAAM,GAAG,IAAI,GAAG;;AAErE;IAEF,QACE;;IAEJ;AAKF,UAAQ,iBAAiB,WAAW;EAEpC,IAAI,WAAW,MAAM,iBAAiB;AACtC,MAAI;AACF,OAAI,OAAO,QAAQ,QACjB,QAAO;IACL,MAAM;IACN,gBAAA;IACA,SAAS;IACV;AACH,SAAM,MAAM,OAAO,WAAW;AAC9B,cAAW,MAAM,iBAAiB;GAKlC,IAAI,SAAS;AACb,UACE,SAAS,mBACT,CAAC,SAAS,MAAM,qBAChB,CAAC,OAAO,QAAQ,WAChB,CAAC,YACD,CAAC,eACD,CAAC,mBAAmB,QAAQ,IAC5B,CAAC,UAAU,aAAa,EACxB;AACA,cAAU;AACV,cACE,kDAAkD,OAAO,GAAG,kBAC7D;AACD,UAAM,MAAM,OACV,aAAa,gBAAgB,aAAa,WAC3C;AACD,eAAW,MAAM,iBAAiB;;AAGpC,OACE,iBACA,CAAC,SAAS,MAAM,qBAChB,CAAC,YACD,CAAC,eACD,CAAC,mBAAmB,QAAQ,IAC5B,CAAC,OAAO,QAAQ,SAChB;AACA,iBAAa;AACb,QAAI;AACF,WAAM,aAAa,OAAO,mBAAmB;aACtC,KAAK;AACZ,eAAU,oCAAoC,OAAO,IAAI,GAAG;;;YAGxD;AACR,OAAI;AACF,iBAAa;WACP;;AAKV,MAAI,OAAO,QAAQ,QACjB,QAAO;GACL,MAAM;GACN,gBAAA;GACA,SAAS;GACV;AAGH,MAAI,YACF,YAAW;GAAE,gBAAA;GAAsC,SAAS;GAAa;AAC3E,MAAI,YAAY,CAAC,SAAS,MAAM,mBAAmB;AACjD,OAAI,gBAAgB,eAClB,SAAQ,KAAK,gBAAgB,cAAc;AAC7C,kBACE,SAAS,gBACT,cAAc,mBAAmB,KAAA,EAClC;AACD,OAAI,SAAS,WAAW,IACtB,QAAO;IACL,MAAM;IACN,SAAS;KACP,MAAM,WAAW;KACjB,SAAS;KACT,QAAQ,EAAE,iBAAiB,SAAS,SAAS;KAC9C;IACF;AAEH,UAAO,SAAS,mBAAA,iBACZ;IACE,MAAM;IACN,gBAAA;IACA,SAAS,SAAS;IACnB,GACD;IACE,MAAM;IACN,gBAAgB,SAAS;IACzB,SAAS,SAAS;IACnB;;AAGP,MAAI,SAAS,MAAM,mBAAmB;AACpC,WAAQ,KAAK,8BAA8B;AAC3C,aACE,iDAAiD,SAAS,MAAM,aAAa,WAC9E;AACD,kBAAA,wBAA6C;AAC7C,UAAO;IAAE,MAAM;IAAW,gBAAA;IAA+C;;EAG3E,MAAM,eAAe,mBAAmB,QAAQ;AAChD,MAAI,cAAc;AAChB,WAAQ,KAAK,4CAA4C;AACzD,aAAU,2BAA2B,eAAe;AACpD,kBAAe,aAAa;AAC5B,UAAO;IAAE,MAAM;IAAW,gBAAgB;IAAc;;EAG1D,MAAM,SAAS,QAAQ,QAAQ;AAC/B,MAAI,OACF,WAAU,QAAQ,0BAA0B,EAAE,QAAQ,CAAC;EAGzD,MAAM,QAAQ,aAAa,iBAAiB;EAC5C,MAAM,YAAY,cAAc;AAChC,YAAU,cAAc,mBAAmB;GACzC,GAAG;GACH,OAAO;GACP,WAAW;GACX,cAAc,MAAM,OAAO;GAC3B,eAAe,MAAM,OAAO;GAC5B,6BAA6B,MAAM,OAAO;GAC1C,yBAAyB,MAAM,OAAO;GACtC,GAAG;GACJ,CAAC;AAQF,YACE,wBALA,OAAQ,qBAAiD,cACzD,WACK,oBAA8C,YAC/C,QAE6B,SAAS,QAAQ,UAAU,KAAK,cAAc,OAAO,UAAU,iBAAiB,UAAU,eAAe,MAAM,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,OAAO,UAAU,MAAM,OAAO,UAAU,UAAU,MAAM,OAAO,aACvP;AACD,MAAI,eAAgB,SAAQ,KAAK,eAAe;AAChD,cAAY;AACZ,SAAO,EAAE,MAAM,WAAW;UACnB,KAAK;AACZ,MAAI,OAAO,QAAQ,QACjB,QAAO;GACL,MAAM;GACN,gBAAA;GACA,SAAS;GACV;EAEH,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,YAAU,wBAAwB,UAAU;AAC5C,MAAI,gBAAgB,eAClB,SAAQ,KAAK,gBAAgB,cAAc;EAE7C,MAAM,QAAQ,mBAAmB,IAAI;AACrC,MAAI,MAAM,SAAS,eAAe,OAAO;AACvC,kBAAA,mBAAwC;AACxC,UAAO;IACL,MAAM;IACN,SAAS;KAAE,MAAM,MAAM;KAAM,SAAS,MAAM;KAAS,OAAO;KAAK;IAClE;;EAEH,MAAM,iBAAiB,aAAa,QAAQ;AAC5C,iBAAe,eAAe;AAC9B,SAAO;GACL,MAAM;GACN;GACA;GACA,OAAO,eAAe,QAAQ,MAAM,KAAA;GACrC;WACO;AACR,QAAM,cAAc,QAAQ;AAC5B,MAAI;AACF,iBAAc;UACR;AAGR,MAAI;AACF,WAAQ,YAAY,UAAU;UACxB"}

package/dist/{telemetry-DKM7VGuJ.js → telemetry-Cwqf0iur.js}

@@ -1,4 +1,4 @@
-import { n as analytics } from "./analytics-B_xFshPY.js";
+import { n as analytics } from "./analytics-GQv--mQm.js";
 //#region src/shared/utils/telemetry.ts
 function withProgress(step, callback) {
 	updateProgress(step);
@@ -10,4 +10,4 @@ function updateProgress(step) {
 //#endregion
 export { withProgress as t };
 
-//# sourceMappingURL=telemetry-DKM7VGuJ.js.map
+//# sourceMappingURL=telemetry-Cwqf0iur.js.map

package/dist/{telemetry-DKM7VGuJ.js.map → telemetry-Cwqf0iur.js.map}

@@ -1 +1 @@
-{"version":3,"file":"telemetry-DKM7VGuJ.js","names":[],"sources":["../src/shared/utils/telemetry.ts"],"sourcesContent":["import { analytics } from './analytics';\n\nexport function withProgress<T>(step: string, callback: () => T): T {\n  updateProgress(step);\n  return callback();\n}\n\nexport function updateProgress(step: string) {\n  analytics.setTag('progress', step);\n}\n"],"mappings":";;AAEA,SAAgB,aAAgB,MAAc,UAAsB;AAClE,gBAAe,KAAK;AACpB,QAAO,UAAU;;AAGnB,SAAgB,eAAe,MAAc;AAC3C,WAAU,OAAO,YAAY,KAAK"}
+{"version":3,"file":"telemetry-Cwqf0iur.js","names":[],"sources":["../src/shared/utils/telemetry.ts"],"sourcesContent":["import { analytics } from './analytics';\n\nexport function withProgress<T>(step: string, callback: () => T): T {\n  updateProgress(step);\n  return callback();\n}\n\nexport function updateProgress(step: string) {\n  analytics.setTag('progress', step);\n}\n"],"mappings":";;AAEA,SAAgB,aAAgB,MAAc,UAAsB;AAClE,gBAAe,KAAK;AACpB,QAAO,UAAU;;AAGnB,SAAgB,eAAe,MAAc;AAC3C,WAAU,OAAO,YAAY,KAAK"}