@posthog/wizard 2.9.0 → 2.10.0

package/dist/src/lib/agent/agent-interface.js

@@ -1,1082 +0,0 @@
-"use strict";
-/**
- * Shared agent interface for PostHog wizards
- * Uses Claude Agent SDK directly with PostHog LLM gateway
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.isSkillInstallCommand = exports.AgentErrorType = exports.AgentSignals = void 0;
-exports.checkClaudeSettingsOverrides = checkClaudeSettingsOverrides;
-exports.checkAllSettingsConflicts = checkAllSettingsConflicts;
-exports.backupAndFixClaudeSettings = backupAndFixClaudeSettings;
-exports.restoreClaudeSettings = restoreClaudeSettings;
-exports.createStopHook = createStopHook;
-exports.buildWizardMetadata = buildWizardMetadata;
-exports.wizardCanUseTool = wizardCanUseTool;
-exports.initializeAgent = initializeAgent;
-exports.runAgent = runAgent;
-const path_1 = __importDefault(require("path"));
-const fs = __importStar(require("fs"));
-const ui_1 = require("../../ui");
-const debug_1 = require("../../utils/debug");
-const analytics_1 = require("../../utils/analytics");
-const constants_1 = require("../constants");
-const wizard_session_1 = require("../wizard-session");
-const wizard_abort_1 = require("../../utils/wizard-abort");
-const custom_headers_1 = require("../../utils/custom-headers");
-const urls_1 = require("../../utils/urls");
-const safe_tools_1 = require("../safe-tools");
-const wizard_tools_1 = require("../wizard-tools");
-const yara_hooks_1 = require("../yara-hooks");
-const commandments_1 = require("./commandments");
-// Dynamic import cache for ESM module
-let _sdkModule = null;
-async function getSDKModule() {
-    if (!_sdkModule) {
-        _sdkModule = await import('@anthropic-ai/claude-agent-sdk');
-    }
-    return _sdkModule;
-}
-/**
- * Get the path to the bundled Claude Code CLI from the SDK package.
- * This ensures we use the SDK's bundled version rather than the user's installed Claude Code.
- */
-function getClaudeCodeExecutablePath() {
-    // require.resolve finds the package's main entry, then we get cli.js from same dir
-    const sdkPackagePath = require.resolve('@anthropic-ai/claude-agent-sdk');
-    return path_1.default.join(path_1.default.dirname(sdkPackagePath), 'cli.js');
-}
-exports.AgentSignals = {
-    /** Signal emitted when the agent reports progress to the user */
-    STATUS: '[STATUS]',
-    /** Signal emitted when the agent cannot access the PostHog MCP server */
-    ERROR_MCP_MISSING: '[ERROR-MCP-MISSING]',
-    /** Signal emitted when the agent cannot access the setup resource */
-    ERROR_RESOURCE_MISSING: '[ERROR-RESOURCE-MISSING]',
-    /**
-     * Signal emitted when the agent cannot complete the workflow and is
-     * aborting intentionally (distinct from errors). Format: "[ABORT] <reason>".
-     * Workflows can declare an onAbort handler to render a custom screen.
-     */
-    ABORT: '[ABORT]',
-    /** Signal emitted when the agent provides a remark about its run */
-    WIZARD_REMARK: '[WIZARD-REMARK]',
-    /** Signal prefix for benchmark logging */
-    BENCHMARK: '[BENCHMARK]',
-};
-/**
- * Error types that can be returned from agent execution.
- * These correspond to the error signals that the agent emits.
- */
-var AgentErrorType;
-(function (AgentErrorType) {
-    /** Agent could not access the PostHog MCP server */
-    AgentErrorType["MCP_MISSING"] = "WIZARD_MCP_MISSING";
-    /** Agent could not access the setup resource */
-    AgentErrorType["RESOURCE_MISSING"] = "WIZARD_RESOURCE_MISSING";
-    /** API rate limit exceeded */
-    AgentErrorType["RATE_LIMIT"] = "WIZARD_RATE_LIMIT";
-    /** Generic API error */
-    AgentErrorType["API_ERROR"] = "WIZARD_API_ERROR";
-    /** YARA scanner detected a security violation */
-    AgentErrorType["YARA_VIOLATION"] = "WIZARD_YARA_VIOLATION";
-    /** Agent intentionally aborted the workflow (emitted [ABORT] <reason>) */
-    AgentErrorType["ABORT"] = "WIZARD_ABORT";
-})(AgentErrorType || (exports.AgentErrorType = AgentErrorType = {}));
-const BLOCKING_ENV_KEYS = [
-    'ANTHROPIC_API_KEY',
-    'ANTHROPIC_BASE_URL',
-    'ANTHROPIC_AUTH_TOKEN',
-];
-const BLOCKING_SETTINGS_KEYS = ['apiKeyHelper'];
-/**
- * Check a single settings file for blocking env keys and top-level settings keys.
- * Returns matched key names, or an empty array if none found.
- */
-function checkSettingsFile(filePath) {
-    try {
-        const raw = fs.readFileSync(filePath, 'utf-8');
-        const parsed = JSON.parse(raw);
-        const matched = [];
-        // Check env block for blocking env keys
-        const envBlock = parsed?.env;
-        if (envBlock && typeof envBlock === 'object') {
-            matched.push(...BLOCKING_ENV_KEYS.filter((key) => key in envBlock));
-        }
-        // Check top-level settings keys
-        matched.push(...BLOCKING_SETTINGS_KEYS.filter((key) => key in parsed && parsed[key] !== '' && parsed[key] != null));
-        return matched;
-    }
-    catch {
-        // File doesn't exist or isn't valid JSON — skip
-        return [];
-    }
-}
-/**
- * Check if .claude/settings.json in the project directory contains env
- * overrides or apiKeyHelper that block the Wizard from accessing the PostHog LLM Gateway.
- * Returns the list of matched key names, or an empty array if none found.
- *
- * @deprecated Use {@link checkAllSettingsConflicts} for comprehensive detection.
- */
-function checkClaudeSettingsOverrides(workingDirectory) {
-    const candidates = [
-        path_1.default.join(workingDirectory, '.claude', 'settings.json'),
-        path_1.default.join(workingDirectory, '.claude', 'settings'),
-    ];
-    for (const filePath of candidates) {
-        const matched = checkSettingsFile(filePath);
-        if (matched.length > 0)
-            return matched;
-    }
-    return [];
-}
-/**
- * Managed settings path on macOS.
- * IT/MDM-deployed settings — readable by all users, writable only by root.
- */
-const MANAGED_SETTINGS_PATH = '/Library/Application Support/ClaudeCode/managed-settings.json';
-/**
- * Check project and org-managed settings for blocking keys that conflict
- * with the wizard's proxy auth.
- */
-function checkAllSettingsConflicts(workingDirectory) {
-    const conflicts = [];
-    const sources = [
-        {
-            source: 'managed',
-            paths: [MANAGED_SETTINGS_PATH],
-            writable: false,
-        },
-        {
-            source: 'project',
-            paths: [
-                path_1.default.join(workingDirectory, '.claude', 'settings.json'),
-                path_1.default.join(workingDirectory, '.claude', 'settings'),
-            ],
-            writable: true,
-        },
-    ];
-    for (const { source, paths, writable } of sources) {
-        for (const filePath of paths) {
-            const keys = checkSettingsFile(filePath);
-            if (keys.length > 0) {
-                conflicts.push({ source, keys, writable });
-                break; // Only one conflict per source (settings.json vs settings fallback)
-            }
-        }
-    }
-    return conflicts;
-}
-/**
- * Copy .claude/settings.json to .wizard-backup (overwriting if it exists),
- * then remove the original so the SDK doesn't load the blocking overrides.
- */
-function backupAndFixClaudeSettings(workingDirectory) {
-    for (const name of ['settings.json', 'settings']) {
-        const filePath = path_1.default.join(workingDirectory, '.claude', name);
-        const backupPath = `${filePath}.wizard-backup`;
-        analytics_1.analytics.wizardCapture('backedup-claude-settings');
-        try {
-            fs.copyFileSync(filePath, backupPath);
-            fs.unlinkSync(filePath);
-            (0, wizard_abort_1.registerCleanup)(() => {
-                try {
-                    restoreClaudeSettings(workingDirectory);
-                }
-                catch (error) {
-                    analytics_1.analytics.captureException(error);
-                }
-            });
-            return true;
-        }
-        catch {
-            // File doesn't exist — try next candidate
-        }
-    }
-    return false;
-}
-/**
- * Restore .claude/settings.json from .wizard-backup.
- * Copies (not moves) so the backup is preserved.
- */
-function restoreClaudeSettings(workingDirectory) {
-    for (const name of ['settings.json', 'settings']) {
-        const backup = path_1.default.join(workingDirectory, '.claude', `${name}.wizard-backup`);
-        try {
-            fs.copyFileSync(backup, path_1.default.join(workingDirectory, '.claude', name));
-            analytics_1.analytics.wizardCapture('restored-claude-settings');
-            return;
-        }
-        catch (error) {
-            analytics_1.analytics.captureException(error);
-        }
-    }
-}
-/**
- * Create a stop hook callback that drains the additional feature queue,
- * then collects a remark, then allows stop.
- *
- * Three-phase logic using closure state:
- *   Phase 1 — drain queue: block with each feature prompt in order
- *   Phase 2 — collect remark (once): block with remark prompt
- *   Phase 3 — allow stop: return {}
- */
-function createStopHook(featureQueue, collectedText) {
-    let featureIndex = 0;
-    let remarkRequested = false;
-    return (input) => {
-        (0, debug_1.logToFile)('Stop hook triggered', {
-            stop_hook_active: input.stop_hook_active,
-            featureIndex,
-            remarkRequested,
-            queueLength: featureQueue.length,
-        });
-        // On API errors, allow stop immediately — blocking with remark/feature
-        // prompts would just fail again. The auth error screen is shown separately.
-        if (collectedText) {
-            const text = collectedText.join('\n');
-            if (text.includes('API Error:')) {
-                (0, debug_1.logToFile)('Stop hook: API error detected, allowing immediate stop');
-                return {};
-            }
-        }
-        // Phase 1: drain feature queue
-        if (featureIndex < featureQueue.length) {
-            const feature = featureQueue[featureIndex++];
-            const prompt = wizard_session_1.ADDITIONAL_FEATURE_PROMPTS[feature];
-            (0, debug_1.logToFile)(`Stop hook: injecting feature prompt for ${feature}`);
-            return { decision: 'block', reason: prompt };
-        }
-        // Phase 2: collect remark (once)
-        if (!remarkRequested) {
-            remarkRequested = true;
-            (0, debug_1.logToFile)('Stop hook: requesting reflection');
-            return {
-                decision: 'block',
-                reason: `Before concluding, provide a brief remark about what information or guidance would have been useful to have in the integration prompt or documentation for this run. Specifically cite anything that would have prevented tool failures, erroneous edits, or other wasted turns. Format your response exactly as: ${exports.AgentSignals.WIZARD_REMARK} Your remark here`,
-            };
-        }
-        // Phase 3: allow stop
-        (0, debug_1.logToFile)('Stop hook: allowing stop');
-        return {};
-    };
-}
-/**
- * Select wizard metadata from WIZARD_VARIANTS using the variant feature flag.
- * If the flag is missing or the value is not in config, returns the "base" variant (VARIANT: "base").
- */
-function buildWizardMetadata(flags = {}) {
-    const variantKey = flags[constants_1.WIZARD_VARIANT_FLAG_KEY];
-    const variant = (variantKey && constants_1.WIZARD_VARIANTS[variantKey]) ?? constants_1.WIZARD_VARIANTS['base'];
-    return { ...variant };
-}
-/**
- * Build env for the SDK subprocess: process.env plus ANTHROPIC_CUSTOM_HEADERS from wizard metadata/flags.
- */
-function buildAgentEnv(wizardMetadata, wizardFlags) {
-    const headers = (0, custom_headers_1.createCustomHeaders)();
-    for (const [key, value] of Object.entries(wizardMetadata)) {
-        headers.add(key.startsWith(constants_1.POSTHOG_PROPERTY_HEADER_PREFIX)
-            ? key
-            : `${constants_1.POSTHOG_PROPERTY_HEADER_PREFIX}${key}`, value);
-    }
-    for (const [flagKey, variant] of Object.entries(wizardFlags)) {
-        if (!flagKey.toLowerCase().startsWith('wizard'))
-            continue;
-        headers.addFlag(flagKey, variant);
-    }
-    const encoded = headers.encode();
-    (0, debug_1.logToFile)('ANTHROPIC_CUSTOM_HEADERS', encoded);
-    return encoded;
-}
-/**
- * Package managers that can be used to run commands.
- */
-const PACKAGE_MANAGERS = [
-    // JavaScript
-    'npm',
-    'pnpm',
-    'yarn',
-    'bun',
-    'npx',
-    // Python
-    'pip',
-    'pip3',
-    'poetry',
-    'pipenv',
-    'uv',
-];
-/**
- * Safe scripts/commands that can be run with any package manager.
- * Uses startsWith matching, so 'build' matches 'build', 'build:prod', etc.
- * Note: Linting tools are in LINTING_TOOLS and checked separately.
- */
-const SAFE_SCRIPTS = [
-    // Package installation
-    'install',
-    'add',
-    'ci',
-    // Build
-    'build',
-    // Type checking (various naming conventions)
-    'tsc',
-    'typecheck',
-    'type-check',
-    'check-types',
-    'types',
-    // Linting/formatting script names (actual tools are in LINTING_TOOLS)
-    'lint',
-    'format',
-];
-/**
- * Dangerous shell operators that could allow command injection.
- * Note: We handle `2>&1` and `| tail/head` separately as safe patterns.
- */
-const DANGEROUS_OPERATORS = /[;`$()]/;
-// Re-export for backwards compatibility — canonical source is skill-install.ts
-var skill_install_1 = require("../skill-install");
-Object.defineProperty(exports, "isSkillInstallCommand", { enumerable: true, get: function () { return skill_install_1.isSkillInstallCommand; } });
-/**
- * Check if command is an allowed package manager command.
- * Matches: <pkg-manager> [run|exec] <safe-script> [args...]
- */
-function matchesAllowedPrefix(command) {
-    const parts = command.split(/\s+/);
-    if (parts.length === 0 || !PACKAGE_MANAGERS.includes(parts[0])) {
-        return false;
-    }
-    // Skip 'run' or 'exec' if present
-    let scriptIndex = 1;
-    if (parts[scriptIndex] === 'run' || parts[scriptIndex] === 'exec') {
-        scriptIndex++;
-    }
-    // Get the script/command portion (may include args)
-    const scriptPart = parts.slice(scriptIndex).join(' ');
-    // Check if script starts with any safe script name or linting tool
-    return (SAFE_SCRIPTS.some((safe) => scriptPart.startsWith(safe)) ||
-        safe_tools_1.LINTING_TOOLS.some((tool) => scriptPart.startsWith(tool)));
-}
-/**
- * Permission hook that allows only safe commands.
- * - Package manager install commands
- * - Build/typecheck/lint commands for verification
- * - Piping to tail/head for output limiting is allowed
- * - Stderr redirection (2>&1) is allowed
- */
-function wizardCanUseTool(toolName, input) {
-    // Block direct reads/writes of .env files — use wizard-tools MCP instead
-    if (toolName === 'Read' || toolName === 'Write' || toolName === 'Edit') {
-        const filePath = typeof input.file_path === 'string' ? input.file_path : '';
-        const basename = path_1.default.basename(filePath);
-        if (basename.startsWith('.env')) {
-            (0, debug_1.logToFile)(`Denying ${toolName} on env file: ${filePath}`);
-            return {
-                behavior: 'deny',
-                message: `Direct ${toolName} of ${basename} is not allowed. Use the wizard-tools MCP server (check_env_keys / set_env_values) to read or modify environment variables.`,
-            };
-        }
-        return { behavior: 'allow', updatedInput: input };
-    }
-    // Block Grep when it directly targets a .env file.
-    // Note: ripgrep skips dotfiles (like .env*) by default during directory traversal,
-    // so broad searches like `Grep { path: "." }` are already safe.
-    if (toolName === 'Grep') {
-        const grepPath = typeof input.path === 'string' ? input.path : '';
-        if (grepPath && path_1.default.basename(grepPath).startsWith('.env')) {
-            (0, debug_1.logToFile)(`Denying Grep on env file: ${grepPath}`);
-            return {
-                behavior: 'deny',
-                message: `Grep on ${path_1.default.basename(grepPath)} is not allowed. Use the wizard-tools MCP server (check_env_keys) to check environment variables.`,
-            };
-        }
-        return { behavior: 'allow', updatedInput: input };
-    }
-    // Allow all other non-Bash tools
-    if (toolName !== 'Bash') {
-        return { behavior: 'allow', updatedInput: input };
-    }
-    const command = (typeof input.command === 'string' ? input.command : '').trim();
-    // Block definitely dangerous operators: ; ` $ ( )
-    if (DANGEROUS_OPERATORS.test(command)) {
-        (0, debug_1.logToFile)(`Denying bash command with dangerous operators: ${command}`);
-        (0, debug_1.debug)(`Denying bash command with dangerous operators: ${command}`);
-        analytics_1.analytics.wizardCapture('bash denied', {
-            reason: 'dangerous operators',
-            command,
-        });
-        return {
-            behavior: 'deny',
-            message: `Bash command not allowed. Shell operators like ; \` $ ( ) are not permitted.`,
-        };
-    }
-    // Normalize: remove safe stderr redirection (2>&1, 2>&2, etc.)
-    const normalized = command.replace(/\s*\d*>&\d+\s*/g, ' ').trim();
-    // Check for pipe to tail/head (safe output limiting)
-    const pipeMatch = normalized.match(/^(.+?)\s*\|\s*(tail|head)(\s+\S+)*\s*$/);
-    if (pipeMatch) {
-        const baseCommand = pipeMatch[1].trim();
-        // Block if base command has pipes or & (multiple chaining)
-        if (/[|&]/.test(baseCommand)) {
-            (0, debug_1.logToFile)(`Denying bash command with multiple pipes: ${command}`);
-            (0, debug_1.debug)(`Denying bash command with multiple pipes: ${command}`);
-            analytics_1.analytics.wizardCapture('bash denied', {
-                reason: 'multiple pipes',
-                command,
-            });
-            return {
-                behavior: 'deny',
-                message: `Bash command not allowed. Only single pipe to tail/head is permitted.`,
-            };
-        }
-        if (matchesAllowedPrefix(baseCommand)) {
-            (0, debug_1.logToFile)(`Allowing bash command with output limiter: ${command}`);
-            (0, debug_1.debug)(`Allowing bash command with output limiter: ${command}`);
-            return { behavior: 'allow', updatedInput: input };
-        }
-    }
-    // Block remaining pipes and & (not covered by tail/head case above)
-    if (/[|&]/.test(normalized)) {
-        (0, debug_1.logToFile)(`Denying bash command with pipe/&: ${command}`);
-        (0, debug_1.debug)(`Denying bash command with pipe/&: ${command}`);
-        analytics_1.analytics.wizardCapture('bash denied', {
-            reason: 'disallowed pipe',
-            command,
-        });
-        return {
-            behavior: 'deny',
-            message: `Bash command not allowed. Pipes are only permitted with tail/head for output limiting.`,
-        };
-    }
-    // Check if command starts with any allowed prefix (package manager commands)
-    if (matchesAllowedPrefix(normalized)) {
-        (0, debug_1.logToFile)(`Allowing bash command: ${command}`);
-        (0, debug_1.debug)(`Allowing bash command: ${command}`);
-        return { behavior: 'allow', updatedInput: input };
-    }
-    (0, debug_1.logToFile)(`Denying bash command: ${command}`);
-    (0, debug_1.debug)(`Denying bash command: ${command}`);
-    analytics_1.analytics.wizardCapture('bash denied', {
-        reason: 'not in allowlist',
-        command,
-    });
-    return {
-        behavior: 'deny',
-        message: `Bash command not allowed. Only install, build, typecheck, lint, and formatting commands are permitted.`,
-    };
-}
-/**
- * Initialize agent configuration for the LLM gateway
- */
-async function initializeAgent(config, options) {
-    // Initialize log file for this run
-    (0, debug_1.initLogFile)();
-    (0, debug_1.logToFile)('Agent initialization starting');
-    (0, debug_1.logToFile)('Install directory:', options.installDir);
-    (0, ui_1.getUI)().log.step('Initializing Claude agent...');
-    try {
-        // Configure LLM gateway environment variables (inherited by SDK subprocess)
-        const gatewayUrl = (0, urls_1.getLlmGatewayUrlFromHost)(config.posthogApiHost);
-        process.env.ANTHROPIC_BASE_URL = gatewayUrl;
-        process.env.ANTHROPIC_AUTH_TOKEN = config.posthogApiKey;
-        // Use CLAUDE_CODE_OAUTH_TOKEN to override any stored /login credentials
-        process.env.CLAUDE_CODE_OAUTH_TOKEN = config.posthogApiKey;
-        // Disable experimental betas (like input_examples) that the LLM gateway doesn't support
-        process.env.CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS = 'true';
-        (0, debug_1.logToFile)('Configured LLM gateway:', gatewayUrl);
-        // Configure MCP server with PostHog authentication
-        const mcpServers = {
-            'posthog-wizard': {
-                type: 'http',
-                url: config.posthogMcpUrl,
-                headers: {
-                    Authorization: `Bearer ${config.posthogApiKey}`,
-                    'User-Agent': constants_1.WIZARD_USER_AGENT,
-                },
-            },
-            ...Object.fromEntries(Object.entries(config.additionalMcpServers ?? {}).map(([name, { url }]) => [name, { type: 'http', url }])),
-        };
-        // Add in-process wizard tools (env files, package manager detection, skill loading)
-        const wizardToolsServer = await (0, wizard_tools_1.createWizardToolsServer)({
-            workingDirectory: config.workingDirectory,
-            detectPackageManager: config.detectPackageManager,
-            skillsBaseUrl: config.skillsBaseUrl,
-        });
-        mcpServers['wizard-tools'] = wizardToolsServer;
-        const agentRunConfig = {
-            workingDirectory: config.workingDirectory,
-            mcpServers,
-            model: 'anthropic/claude-sonnet-4-6',
-            wizardFlags: config.wizardFlags,
-            wizardMetadata: config.wizardMetadata,
-        };
-        (0, debug_1.logToFile)('Agent config:', {
-            workingDirectory: agentRunConfig.workingDirectory,
-            posthogMcpUrl: config.posthogMcpUrl,
-            gatewayUrl,
-            apiKeyPresent: !!config.posthogApiKey,
-        });
-        if (options.debug) {
-            (0, debug_1.debug)('Agent config:', {
-                workingDirectory: agentRunConfig.workingDirectory,
-                posthogMcpUrl: config.posthogMcpUrl,
-                gatewayUrl,
-                apiKeyPresent: !!config.posthogApiKey,
-            });
-        }
-        (0, ui_1.getUI)().log.step(`Verbose logs: ${(0, debug_1.getLogFilePath)()}`);
-        (0, ui_1.getUI)().log.success("Agent initialized. Let's get cooking!");
-        return agentRunConfig;
-    }
-    catch (error) {
-        (0, ui_1.getUI)().log.error(`Failed to initialize agent: ${error.message}`);
-        (0, debug_1.logToFile)('Agent initialization error:', error);
-        (0, debug_1.debug)('Agent initialization error:', error);
-        throw error;
-    }
-}
-/**
- * Check agent output for YARA scanner violations.
- * Used in both the success and catch paths of runAgent.
- */
-function checkYaraViolation(outputText, spinner) {
-    if (outputText.includes('[YARA CRITICAL]') ||
-        outputText.includes('[YARA] Scanner error')) {
-        (0, debug_1.logToFile)('Agent error: YARA_VIOLATION');
-        spinner.stop('Security violation detected');
-        return { error: AgentErrorType.YARA_VIOLATION };
-    }
-    return null;
-}
-/**
- * Execute an agent with the provided prompt and options
- * Handles the full lifecycle: spinner, execution, error handling
- *
- * @returns An object containing any error detected in the agent's output
- */
-async function runAgent(agentConfig, prompt, options, spinner, config, middleware) {
-    const { spinnerMessage = 'Customizing your PostHog setup...', successMessage = 'PostHog integration complete', errorMessage = 'Integration failed', abortCases = [], } = config ?? {};
-    const { query } = await getSDKModule();
-    spinner.start(spinnerMessage);
-    const cliPath = getClaudeCodeExecutablePath();
-    (0, debug_1.logToFile)('Starting agent run');
-    (0, debug_1.logToFile)('Claude Code executable:', cliPath);
-    (0, debug_1.logToFile)('Prompt:', prompt);
-    const startTime = Date.now();
-    const collectedText = [];
-    // Track if we received a successful result (before any cleanup errors)
-    let receivedSuccessResult = false;
-    let loggedInitialContext = false;
-    let lastResultMessage = null;
-    // Workaround for SDK bug: stdin closes before canUseTool responses can be sent.
-    // The fix is to use an async generator for the prompt that stays open until
-    // the result is received, keeping the stdin stream alive for permission responses.
-    // See: https://github.com/anthropics/claude-code/issues/4775
-    // See: https://github.com/anthropics/claude-agent-sdk-typescript/issues/41
-    let signalDone;
-    const resultReceived = new Promise((resolve) => {
-        signalDone = resolve;
-    });
-    const createPromptStream = async function* () {
-        yield {
-            type: 'user',
-            session_id: '',
-            message: { role: 'user', content: prompt },
-            parent_tool_use_id: null,
-        };
-        await resultReceived;
-    };
-    // Helper to handle successful completion (used in normal path and race condition recovery)
-    const completeWithSuccess = (suppressedError) => {
-        const durationMs = Date.now() - startTime;
-        const durationSeconds = Math.round(durationMs / 1000);
-        if (suppressedError) {
-            (0, debug_1.logToFile)(`Ignoring post-completion error, agent completed successfully in ${durationSeconds}s`);
-            (0, debug_1.logToFile)('Suppressed error:', suppressedError.message);
-        }
-        else {
-            (0, debug_1.logToFile)(`Agent run completed in ${durationSeconds}s`);
-        }
-        // Extract and capture the agent's reflection on the run
-        const outputText = collectedText.join('\n');
-        const remarkRegex = new RegExp(`${exports.AgentSignals.WIZARD_REMARK.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}\\s*(.+?)(?:\\n|$)`, 's');
-        const remarkMatch = outputText.match(remarkRegex);
-        if (remarkMatch && remarkMatch[1]) {
-            const remark = remarkMatch[1].trim();
-            if (remark) {
-                analytics_1.analytics.capture(constants_1.WIZARD_REMARK_EVENT_NAME, { remark });
-            }
-        }
-        analytics_1.analytics.wizardCapture('agent completed', {
-            duration_ms: durationMs,
-            duration_seconds: durationSeconds,
-        });
-        try {
-            middleware?.finalize(lastResultMessage, durationMs);
-        }
-        catch (e) {
-            (0, debug_1.logToFile)(`${exports.AgentSignals.BENCHMARK} Middleware finalize error:`, e);
-        }
-        spinner.stop(successMessage);
-        return {};
-    };
-    // Event plan file watcher — cleaned up in finally block
-    let eventPlanWatcher;
-    let eventPlanInterval;
-    // Abort controller — lets us force-kill the SDK query when we detect an
-    // [ABORT] signal in the agent's output. Also stashes the reason so the
-    // runner can surface it via outroData after we unwind.
-    const abortController = new AbortController();
-    let abortReason = null;
-    try {
-        // Tools needed for the wizard:
-        // - File operations: Read, Write, Edit
-        // - Search: Glob, Grep
-        // - Commands: Bash (with restrictions via canUseTool)
-        // - MCP discovery: ListMcpResourcesTool (to find available skills)
-        // - Skills: Skill (to load installed PostHog skills)
-        // MCP tools (PostHog) come from mcpServers, not allowedTools
-        const allowedTools = [
-            'Read',
-            'Write',
-            'Edit',
-            'Glob',
-            'Grep',
-            'Bash',
-            'ListMcpResourcesTool',
-            'Skill',
-            ...wizard_tools_1.WIZARD_TOOL_NAMES,
-        ];
-        const response = query({
-            prompt: createPromptStream(),
-            options: {
-                abortController,
-                model: agentConfig.model,
-                cwd: agentConfig.workingDirectory,
-                permissionMode: 'acceptEdits',
-                betas: ['context-1m-2025-08-07'],
-                mcpServers: agentConfig.mcpServers,
-                // Load skills from project's .claude/skills/ directory
-                settingSources: ['project'],
-                // Explicitly enable required tools including Skill
-                allowedTools,
-                sandbox: {
-                    enabled: true,
-                    allowUnsandboxedCommands: false,
-                    filesystem: {
-                        allowWrite: [
-                            '/' + agentConfig.workingDirectory,
-                            '/' + agentConfig.workingDirectory + '/**',
-                            '//tmp',
-                            '//tmp/**',
-                            '//private/tmp',
-                            '//private/tmp/**',
-                            // Package manager stores — allow writes so pnpm/npm can
-                            // install packages without breaking the user's existing setup
-                            '~/Library/pnpm/store/**', // pnpm global store (macOS)
-                            '~/.local/share/pnpm/store/**', // pnpm global store (Linux)
-                            '~/.pnpm-store/**', // pnpm alternate store
-                            '~/.npm/**', // npm cache
-                            '~/.yarn/**', // yarn classic cache
-                            '~/.yarn/berry/**', // yarn berry cache
-                        ],
-                    },
-                    network: {
-                        allowedDomains: [
-                            'github.com',
-                            'api.github.com',
-                            'raw.githubusercontent.com',
-                            'release-assets.githubusercontent.com',
-                            'objects.githubusercontent.com',
-                        ],
-                    },
-                },
-                env: {
-                    ...process.env,
-                    // Prevent user's Anthropic API key from overriding the wizard's OAuth token
-                    ANTHROPIC_API_KEY: undefined,
-                    // Defer MCP tool schemas to avoid bloating the system prompt.
-                    // The posthog-wizard MCP exposes many query tools with large schemas;
-                    // without deferral these consume ~113k tokens upfront, leaving
-                    // almost no room in Sonnet's 200k context window.
-                    ENABLE_TOOL_SEARCH: 'auto:0',
-                    ANTHROPIC_CUSTOM_HEADERS: buildAgentEnv(agentConfig.wizardMetadata ?? {}, agentConfig.wizardFlags ?? {}),
-                },
-                canUseTool: (toolName, input) => {
-                    (0, debug_1.logToFile)('canUseTool called:', { toolName, input });
-                    const result = wizardCanUseTool(toolName, input);
-                    (0, debug_1.logToFile)('canUseTool result:', result);
-                    return Promise.resolve(result);
-                },
-                systemPrompt: {
-                    type: 'preset',
-                    preset: 'claude_code',
-                    // Append wizard-wide commandments rather than replacing
-                    // the preset so we keep default Claude Code behaviors.
-                    append: (0, commandments_1.getWizardCommandments)(),
-                },
-                tools: { type: 'preset', preset: 'claude_code' },
-                // Capture stderr from CLI subprocess for debugging
-                stderr: (data) => {
-                    (0, debug_1.logToFile)('CLI stderr:', data);
-                    if (options.debug) {
-                        (0, debug_1.debug)('CLI stderr:', data);
-                    }
-                },
-                // Stop hook: drain additional feature queue, then collect remark, then allow stop
-                hooks: {
-                    PreToolUse: (0, yara_hooks_1.createPreToolUseYaraHooks)(),
-                    PostToolUse: (0, yara_hooks_1.createPostToolUseYaraHooks)(),
-                    Stop: [
-                        {
-                            hooks: [
-                                createStopHook(config?.additionalFeatureQueue ?? [], collectedText),
-                            ],
-                            timeout: 30,
-                        },
-                    ],
-                },
-            },
-        });
-        // Watch for .posthog-events.json and feed into the store
-        const eventPlanPath = path_1.default.join(agentConfig.workingDirectory, '.posthog-events.json');
-        const readEventPlan = () => {
-            try {
-                const content = fs.readFileSync(eventPlanPath, 'utf-8');
-                const parsed = JSON.parse(content);
-                if (Array.isArray(parsed)) {
-                    (0, ui_1.getUI)().setEventPlan(parsed.map((e) => ({
-                        name: (e.name ?? e.event ?? ''),
-                        description: (e.description ?? ''),
-                    })));
-                }
-            }
-            catch {
-                // File doesn't exist or isn't valid JSON yet
-            }
-        };
-        try {
-            eventPlanWatcher = fs.watch(eventPlanPath, () => readEventPlan());
-            readEventPlan();
-        }
-        catch {
-            // File doesn't exist yet — poll until it appears
-            eventPlanInterval = setInterval(() => {
-                try {
-                    fs.accessSync(eventPlanPath);
-                    readEventPlan();
-                    clearInterval(eventPlanInterval);
-                    eventPlanInterval = undefined;
-                    eventPlanWatcher = fs.watch(eventPlanPath, () => readEventPlan());
-                }
-                catch {
-                    // Still waiting
-                }
-            }, 1000);
-        }
-        // Process the async generator
-        for await (const message of response) {
-            // Log initial context size on the first assistant response so we can
-            // detect sudden shifts in starting context (e.g. MCP schema bloat).
-            if (!loggedInitialContext && message.type === 'assistant') {
-                const usage = message.message?.usage;
-                if (usage) {
-                    const input = usage.input_tokens ?? 0;
-                    const cacheCreation = usage.cache_creation_input_tokens ?? 0;
-                    const cacheRead = usage.cache_read_input_tokens ?? 0;
-                    const initialTokens = input + cacheCreation + cacheRead;
-                    (0, debug_1.logToFile)(`Initial context: ${initialTokens} tokens (input=${input}, cache_creation=${cacheCreation}, cache_read=${cacheRead})`);
-                    analytics_1.analytics.wizardCapture('agent initial context', {
-                        initial_tokens: initialTokens,
-                        input_tokens: input,
-                        cache_creation_input_tokens: cacheCreation,
-                        cache_read_input_tokens: cacheRead,
-                    });
-                }
-                loggedInitialContext = true;
-            }
-            // Pass receivedSuccessResult so handleSDKMessage can suppress user-facing error
-            // output for post-success cleanup errors while still logging them to file
-            handleSDKMessage(message, options, spinner, collectedText, receivedSuccessResult);
-            // [ABORT] detection: the skill emits "[ABORT] <reason>" when it
-            // cannot complete the workflow. Kill the SDK query immediately —
-            // the prompt doesn't need to cooperate with "and exit" because the
-            // abort is enforced here. The reason is surfaced via the returned
-            // AgentErrorType.ABORT so the runner can render a custom screen.
-            if (abortCases.length > 0 &&
-                !abortReason &&
-                message.type === 'assistant') {
-                const content = message.message?.content;
-                if (Array.isArray(content)) {
-                    for (const block of content) {
-                        if (block.type === 'text' && typeof block.text === 'string') {
-                            const match = block.text.match(/\[ABORT\]\s*(.+?)(?:\n|$)/);
-                            if (match) {
-                                abortReason = match[1].trim();
-                                (0, debug_1.logToFile)(`Agent emitted [ABORT]: ${abortReason}`);
-                                abortController.abort();
-                                signalDone();
-                                break;
-                            }
-                        }
-                    }
-                }
-            }
-            // 401: show auth error screen and exit immediately
-            if (message.type === 'assistant' &&
-                collectedText.join('\n').includes('API Error: 401')) {
-                signalDone();
-                spinner.stop('Authentication failed');
-                (0, debug_1.logToFile)('Agent error: 401, showing auth error screen');
-                (0, ui_1.getUI)().showAuthError();
-                await (0, wizard_abort_1.wizardAbort)({
-                    message: 'Authentication failed (401)',
-                    error: new wizard_abort_1.WizardError('Authentication failed'),
-                });
-            }
-            try {
-                middleware?.onMessage(message);
-            }
-            catch (e) {
-                (0, debug_1.logToFile)(`${exports.AgentSignals.BENCHMARK} Middleware onMessage error:`, e);
-            }
-            // Signal completion when result received
-            if (message.type === 'result') {
-                // Track successful results before any potential cleanup errors
-                // The SDK may emit a second error result during cleanup due to a race condition
-                if (message.subtype === 'success' && !message.is_error) {
-                    receivedSuccessResult = true;
-                    lastResultMessage = message;
-                }
-                signalDone();
-            }
-        }
-        // If the middleware caught an [ABORT] and aborted the SDK query, surface
-        // it as a structured error before checking other signals.
-        if (abortReason) {
-            spinner.stop('Wizard aborted');
-            return { error: AgentErrorType.ABORT, message: abortReason };
-        }
-        const outputText = collectedText.join('\n');
-        // Check for YARA scanner violations
-        const yaraResult = checkYaraViolation(outputText, spinner);
-        if (yaraResult)
-            return yaraResult;
-        // Check for error markers in the agent's output
-        if (outputText.includes(exports.AgentSignals.ERROR_MCP_MISSING)) {
-            (0, debug_1.logToFile)('Agent error: MCP_MISSING');
-            spinner.stop('Agent could not access PostHog MCP');
-            return { error: AgentErrorType.MCP_MISSING };
-        }
-        if (outputText.includes(exports.AgentSignals.ERROR_RESOURCE_MISSING)) {
-            (0, debug_1.logToFile)('Agent error: RESOURCE_MISSING');
-            spinner.stop('Agent could not access setup resource');
-            return { error: AgentErrorType.RESOURCE_MISSING };
-        }
-        // Check for API errors (rate limits, etc.)
-        // Extract just the API error line(s), not the entire output
-        const apiErrorMatch = outputText.match(/API Error: [^\n]+/g);
-        const apiErrorMessage = apiErrorMatch
-            ? apiErrorMatch.join('\n')
-            : 'Unknown API error';
-        if (outputText.includes('API Error: 429')) {
-            (0, debug_1.logToFile)('Agent error: RATE_LIMIT');
-            spinner.stop('Rate limit exceeded');
-            return { error: AgentErrorType.RATE_LIMIT, message: apiErrorMessage };
-        }
-        if (outputText.includes('API Error:')) {
-            (0, debug_1.logToFile)('Agent error: API_ERROR');
-            spinner.stop('API error occurred');
-            return { error: AgentErrorType.API_ERROR, message: apiErrorMessage };
-        }
-        return completeWithSuccess();
-    }
-    catch (error) {
-        // Signal done to unblock the async generator
-        signalDone();
-        // If the middleware caught an [ABORT] and triggered abortController.abort(),
-        // the SDK will throw an AbortError — surface it as a clean abort result.
-        if (abortReason) {
-            spinner.stop('Wizard aborted');
-            return { error: AgentErrorType.ABORT, message: abortReason };
-        }
-        // If we already received a successful result, the error is from SDK cleanup
-        // This happens due to a race condition: the SDK tries to send a cleanup command
-        // after the prompt stream closes, but streaming mode is still active.
-        // See: https://github.com/anthropics/claude-agent-sdk-typescript/issues/41
-        if (receivedSuccessResult) {
-            return completeWithSuccess(error);
-        }
-        // Check if we collected an error before the exception was thrown
-        const outputText = collectedText.join('\n');
-        // Check for YARA scanner violations
-        const yaraResult = checkYaraViolation(outputText, spinner);
-        if (yaraResult)
-            return yaraResult;
-        // Extract just the API error line(s), not the entire output
-        const apiErrorMatch = outputText.match(/API Error: [^\n]+/g);
-        const apiErrorMessage = apiErrorMatch
-            ? apiErrorMatch.join('\n')
-            : 'Unknown API error';
-        if (outputText.includes('API Error: 429')) {
-            (0, debug_1.logToFile)('Agent error (caught): RATE_LIMIT');
-            spinner.stop('Rate limit exceeded');
-            return { error: AgentErrorType.RATE_LIMIT, message: apiErrorMessage };
-        }
-        if (outputText.includes('API Error:')) {
-            (0, debug_1.logToFile)('Agent error (caught): API_ERROR');
-            spinner.stop('API error occurred');
-            return { error: AgentErrorType.API_ERROR, message: apiErrorMessage };
-        }
-        // No API error found, re-throw the original exception
-        spinner.stop(errorMessage);
-        (0, ui_1.getUI)().log.error(`Error: ${error.message}`);
-        (0, debug_1.logToFile)('Agent run failed:', error);
-        (0, debug_1.debug)('Full error:', error);
-        throw error;
-    }
-    finally {
-        eventPlanWatcher?.close();
-        if (eventPlanInterval)
-            clearInterval(eventPlanInterval);
-        // Always capture run duration, even on abort/error, so we can alert on
-        // long runs where the user gave up before completion.
-        if (!receivedSuccessResult) {
-            const durationMs = Date.now() - startTime;
-            analytics_1.analytics.wizardCapture('agent aborted', {
-                duration_ms: durationMs,
-                duration_seconds: Math.round(durationMs / 1000),
-            });
-        }
-    }
-}
-/**
- * Handle SDK messages and provide user feedback
- *
- * @param receivedSuccessResult - If true, suppress user-facing error output for cleanup errors
- *                          while still logging to file. The SDK may emit a second error
- *                          result after success due to cleanup race conditions.
- */
-function handleSDKMessage(message, options, spinner, collectedText, receivedSuccessResult = false) {
-    (0, debug_1.logToFile)(`SDK Message: ${message.type}`, JSON.stringify(message, null, 2));
-    if (options.debug) {
-        (0, debug_1.debug)(`SDK Message type: ${message.type}`);
-    }
-    switch (message.type) {
-        case 'assistant': {
-            // Extract text content from assistant messages
-            const content = message.message?.content;
-            if (Array.isArray(content)) {
-                for (const block of content) {
-                    if (block.type === 'text' && typeof block.text === 'string') {
-                        collectedText.push(block.text);
-                        // Check for [STATUS] markers
-                        const statusRegex = new RegExp(`^.*${exports.AgentSignals.STATUS.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}\\s*(.+?)$`, 'm');
-                        const statusMatch = block.text.match(statusRegex);
-                        if (statusMatch) {
-                            const statusText = statusMatch[1].trim();
-                            (0, ui_1.getUI)().pushStatus(statusText);
-                            spinner.message(statusText);
-                        }
-                    }
-                    // Intercept TodoWrite tool_use blocks for task progression
-                    if (block.type === 'tool_use' &&
-                        block.name === 'TodoWrite' &&
-                        block.input?.todos &&
-                        Array.isArray(block.input.todos)) {
-                        (0, ui_1.getUI)().syncTodos(block.input.todos);
-                    }
-                }
-            }
-            break;
-        }
-        case 'result': {
-            // Check is_error flag - can be true even when subtype is 'success'
-            if (message.is_error) {
-                (0, debug_1.logToFile)('Agent result with error:', message.result);
-                if (typeof message.result === 'string') {
-                    collectedText.push(message.result);
-                }
-                // Only show errors to user if we haven't already succeeded.
-                // Post-success errors are SDK cleanup noise (telemetry failures, streaming
-                // mode race conditions). Full message already logged above via JSON dump.
-                if (message.errors && !receivedSuccessResult) {
-                    for (const err of message.errors) {
-                        (0, ui_1.getUI)().log.error(`Error: ${err}`);
-                        (0, debug_1.logToFile)('ERROR:', err);
-                    }
-                }
-            }
-            else if (message.subtype === 'success') {
-                (0, debug_1.logToFile)('Agent completed successfully');
-                if (typeof message.result === 'string') {
-                    collectedText.push(message.result);
-                }
-            }
-            else {
-                (0, debug_1.logToFile)('Agent result with error:', message.result);
-                // Error result - only show to user if we haven't already succeeded.
-                // Full message already logged above via JSON dump.
-                if (message.errors && !receivedSuccessResult) {
-                    for (const err of message.errors) {
-                        (0, ui_1.getUI)().log.error(`Error: ${err}`);
-                        (0, debug_1.logToFile)('ERROR:', err);
-                    }
-                }
-            }
-            break;
-        }
-        case 'system': {
-            if (message.subtype === 'init') {
-                (0, debug_1.logToFile)('Agent session initialized', {
-                    model: message.model,
-                    tools: message.tools?.length,
-                    mcpServers: message.mcp_servers,
-                });
-            }
-            break;
-        }
-        default:
-            // Log other message types for debugging
-            if (options.debug) {
-                (0, debug_1.debug)(`Unhandled message type: ${message.type}`);
-            }
-            break;
-    }
-}
-//# sourceMappingURL=agent-interface.js.map